[SpamCop-List] Re: Translation of URL, please?

[Brian (SnSR)]

Dar wrote:
> Can anyone interpret this for me, please?
> 
> When I run the following through spamcop, this resolves:
> http://64656272614064617273627964657369676e2e636f6d.house204.houseandhomeimprovement.com
> 
> So does this:
> http://house204.houseandhomeimprovement.com
> 
> But not this:
> http://houseandhomeimprovement.com
> 
> ...even though that domain is a valid domain with a whois lookup.
> 
> Do all the characters at the beginning mean anything?
> 
> Dar
> 
> 
> 
> 

Using FireFox:

http://64656272614064617273627964657369676e2e636f6d.house204.houseandhomeimprovement.com
resolves to:
There is no website configured at this address.


You are seeing this page because there is nothing configured for the 
site you have requested. If you think you are seeing this page in error, 
please contact the site administrator or datacenter responsible for this 
site.

Whois:

Address lookup
canonical name 
64656272614064617273627964657369676e2e636f6d.house204.houseandhomeimprovement.com.
aliases 	
addresses 	38.116.138.206

Domain Name: HOUSEANDHOMEIMPROVEMENT.COM
    Registrar: COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
    Whois Server: whois.joker.com
    Referral URL: http://www.joker.com
    Name Server: NS1.HOUSEANDHOMEIMPROVEMENT.COM
    Name Server: NS2.HOUSEANDHOMEIMPROVEMENT.COM
    Status: REGISTRAR-LOCK
    Updated Date: 05-jan-2005
    Creation Date: 23-sep-2004
    Expiration Date: 23-sep-2005

domain:       houseandhomeimprovement.com
status:       lock
organization: houseandhomeimprovement.com
email:        houseandhomeimprovement at yahoo.com
address:      5701 Old Bullard Road
address:      #37
city:         Tyler
state:        TX
postal-code:  75703
country:      US
admin-c:      houseandhomeimprovement at yahoo.com#0
tech-c:       houseandhomeimprovement at yahoo.com#0
billing-c:    houseandhomeimprovement at yahoo.com#0
nserver:      ns1.houseandhomeimprovement.com 38.116.138.2
nserver:      ns2.houseandhomeimprovement.com 38.116.138.2
registrar:    JORE-1
created:      2004-09-23 19:08:05 UTC JORE-1
modified:     2004-10-19 17:22:21 UTC JORE-1
expires:      2005-09-23 15:08:04 UTC
source:       joker.com

Network Whois record

Queried whois.arin.net with "!NET-38-112-0-0-1"...

OrgName:    Performance Systems International Inc.
OrgID:      PSI
Address:    1015 31st Street, NW
City:       Washington
StateProv:  DC
PostalCode: 20007
Country:    US

NetRange:   38.112.0.0 - 38.119.255.255
CIDR:       38.112.0.0/13
NetName:    COGENT-NB-0002
NetHandle:  NET-38-112-0-0-1
Parent:     NET-38-0-0-0-1
NetType:    Reallocated
NameServer: AUTH1.DNS.COGENTCO.COM
NameServer: AUTH2.DNS.COGENTCO.COM
Comment:    ReferralServer: rwhois://rwhois.cogentco.com:4321/
RegDate:    2003-08-20
Updated:    2004-03-11

OrgAbuseHandle: COGEN-ARIN
OrgAbuseName:   Cogent Abuse
OrgAbusePhone:  +1-877-875-4311
OrgAbuseEmail:  abuse at cogentco.com

OrgNOCHandle: ZC108-ARIN
OrgNOCName:   Cogent Communications
OrgNOCPhone:  +1-877-875-4311
OrgNOCEmail:  noc at cogentco.com


houseandhomeimprovement at yahoo.com was created at the same time this 
domain was.
---------------

house204.houseandhomeimprovement.com resolves to:
There is no website configured at this address.


You are seeing this page because there is nothing configured for the 
site you have requested. If you think you are seeing this page in error, 
please contact the site administrator or datacenter responsible for this 
site.

Whois:
Address lookup
canonical name 	house204.houseandhomeimprovement.com.
aliases 	
addresses 	38.116.138.206

the rest is same as above.
-----------------

Address lookup
lookup failed 	houseandhomeimprovement.com
   	Could not find an IP address for this domain name.
Domain Whois record

houseandhomeimprovement.com does not resolve

Whois is same except no Network.

What appears to be happening is the spam run is happening/has happened 
and the website is waiting to go live or has already been pulled. Since 
you stated that the web sites resolved, it looks like the latter has 
happened.

They have set it up so the house204.houseandhomeimprovement.com 
resolves, but not the TLD of houseandhomeimprovement.com. Others, more 
knowledgeable than myself can fill you in on how they are accomplishing 
this.

You could report to Yahoo abuse about the email address being created 
for this spammy domain, including the spam with full headers, and once 
you receive notice from Yahoo that they have taken appropriate action, 
you can check to see if the account has been closed and then file a 
Whois Data Problem Report with ICANN.

To check on the yahoo account, go to 
profiles/yahoo.com/houseandhomeimprovement and you will know if it is 
valid or not.

This may seem futile if they have abandoned the domain already, but 
possibly not. They may attempt to use it again in the future.

You could also report to abuse at cogentco dot com as well.