From: loclhst Date: May 1, 2006 11:01 PM Subject: URGENT WARNING!!! MY SPACE SCAM! PLEASE READ ASAP! Body: Allright people, not sure if youve seen this around yet, but evidently there is a MYspace spoofing site going around called "r n yspace.com" I submitted the information to theplanet.com which appears to be the hosting provider. For those geeks out there, here is some info for you if you want to have fun. Domain name: rnyspace.com Registrant: Michael Chandler None 1124 W Nopal Pl Chandler Phoenix, 85224 AZ US domainregistar@gmail.com IP Address: 70.86.228.167 Hosting Provider: theplanet.com/awardspace.com Abuse contact: abuse@theplanet.com / abuse@awardspace.com I have submitted information to both abuse contacts as well as reported this to myspace support. ------- Also in the mean time, if you do not want to accidently run into this site, for most windows users... Click on START, then click on RUN, and type in "notepad.exe c:..windows..system32..drivers..etc..hosts" without the quotes, and click OK In the file, add in the following: 127.0.0.1 *.rnyspace.com .. make sure its RNyspace 127.0.0.1 rnyspace.com .. make sure its RNyspace Safe the file and you should be good. For those out there who dot know what this does, all it goes is "map" RNyspace.com and *.RNyspace (any other RNyspace.com address) to 127.0.0.1. Which for about 99% of the people out there, will not load at all Message me if you have any problems with this. -Dr D. ******************** Orig post below ******************** Hello Everyone! This is very scary. PLEASE PASS THIS BULLETIN ON TO YOUR FRIENDS LIST ASAP! There is a web site called www. r n y space.com Look at how it looks below when all the letters are together. Can you pick out the FAKE? www.rnyspace.com www.myspace.com The FAKE is the first one! RNyspace.com has completely stolen the myspace layout. When you click on the link it asks you to re-sign in. When you do, RNyspace.com steals your email address and password and hacks your account. Please repost this bulletin to help spread the word about RNyspace.com - People need to be aware of this site. Also, make sure that if you get an inbox message asking you to login in to your account DON'T DO IT! REPOST!!!!!!! ********************************************************************* If you think you've filled out your login credentials on the invalid page, Please change your password and possibly your email. Afterwards, let the Admins at the real myspace.com know what happened. If you need help setting up a unix/windows machine to use your local hosts file to stop yourself from visiting the invalid site, or if you simply have any questions, please message me on myspace at http://www.myspace.com/d127001 thank you - loclhst [aka Dan] ******************************************************** Tech Details below WHOIS information for rnyspace.com: [whois.theplanet.com] The data in WHOIS database of ThePlanet.com Internet Services, Inc. ("ThePlanet") is provided to you by ThePlanet for information purposes only. ThePlanet makes this information available only on an "as is" basis and does not guarantee its accuracy. By submitting a WHOIS query, you agree that you will use this data only for lawful purposes and that under no circumstance will you use this data to (1) allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations via direct mail, electronic mail, or by telephone or (2) enable high volume, automated, electronic processes that apply to ThePlanet (or its systems and network). The direct or indirect compilation, repackaging, distribution, dissemination or other use of this data is expressly prohibited without the prior written consent of ThePlanet. ThePlanet reserves the right to terminate your access to the WHOIS database at any time in its sole discretion, including without limitation, for excessive querying of the WHOIS database or for failure to otherwise abide by this policy. The Planet reserves the right to modify these terms at any time. By submitting this query, you agree to abide by these terms. Registrant: Michael Chandler None 1124 W Nopal Pl Chandler Phoenix, 85224 AZ US domainregistar@gmail.com Domain name: rnyspace.com Administrative Contact: Michael Chandler None 1124 W Nopal Pl Chandler Phoenix, 85224 AZ US domainregistar@gmail.com Technical Contact: Michael Chandler None 1124 W Nopal Pl Chandler Phoenix, 85224 AZ US domainregistar@gmail.com Registrar of Record: The Planet Internet Services, Inc. Record last updated on 24-Feb-2006. Record expires on 29-Sep-2006. Record created on 29-Sep-2005. Domain servers in listed order: NS1.AWARDSPACE.COM NS2.AWARDSPACE.COM NS3.AWARDSPACE.COM NS4.AWARDSPACE.COM Domain status: active loclhst_com@ganon ~/loclhst_com/htdocs $ dig rnyspace.com ; <<>> DiG 9.3.2 <<>> rnyspace.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25006 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;rnyspace.com. IN A ;; ANSWER SECTION: rnyspace.com. 3600 IN A 70.86.228.167 ;; Query time: 102 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Mon May 1 23:37:49 2006 ;; MSG SIZE rcvd: 46 loclhst_com@ganon ~/loclhst_com/htdocs $ dig SOA rnyspace.com ; <<>> DiG 9.3.2 <<>> SOA rnyspace.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5548 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;rnyspace.com. IN SOA ;; ANSWER SECTION: rnyspace.com. 3600 IN SOA ns1.awardspace.com. hostmaster.awardspace.com. 2006043001 10800 3600 1209600 7200 ;; Query time: 31 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Mon May 1 23:38:00 2006 ;; MSG SIZE rcvd: 92 loclhst_com@ganon ~/loclhst_com/htdocs $ whois 70.86.228.167 OrgName: ThePlanet.com Internet Services, Inc. OrgID: TPCM Address: 1333 North Stemmons Freeway Address: Suite 110 City: Dallas StateProv: TX PostalCode: 75207 Country: US ReferralServer: rwhois://rwhois.theplanet.com:4321 NetRange: 70.84.0.0 - 70.87.255.255 CIDR: 70.84.0.0/14 NetName: NETBLK-THEPLANET-BLK-13 NetHandle: NET-70-84-0-0-1 Parent: NET-70-0-0-0-0 NetType: Direct Allocation NameServer: NS1.THEPLANET.COM NameServer: NS2.THEPLANET.COM Comment: RegDate: 2004-07-29 Updated: 2006-02-17 RTechHandle: PP46-ARIN RTechName: Pathos, Peter RTechPhone: +1-214-782-7800 RTechEmail: admins@theplanet.com OrgAbuseHandle: ABUSE271-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-214-782-7802 OrgAbuseEmail: abuse@theplanet.com OrgNOCHandle: TECHN33-ARIN OrgNOCName: Technical Support OrgNOCPhone: +1-214-782-7800 OrgNOCEmail: admins@theplanet.com OrgTechHandle: TECHN33-ARIN OrgTechName: Technical Support OrgTechPhone: +1-214-782-7800 OrgTechEmail: admins@theplanet.com # ARIN WHOIS database, last updated 2006-05-01 19:10 # Enter ? for additional hints on searching ARIN's WHOIS database. Found a referral to rwhois.theplanet.com:4321. %rwhois V-1.5:003eff:00 whois.theplanet.com (by Network Solutions, Inc. V-1.5.9.5) network:Class-Name:network network:ID:THEPLANET-BLK-13 network:Auth-Area:70.84.0.0/14 network:Network-Name:TPIS-BLK-70-86-228-0 network:IP-Network:70.86.228.160/28 network:IP-Network-Block:70.86.228.160 - 70.86.228.175 network:Organization-Name:zetta hosting solutions ltd. network:Organization-City:Kiel network:Organization-Zip:24148 network:Organization-Country:DE network:Description-Usage:customer network:Server-Pri:ns1.theplanet.com network:Server-Sec:ns2.theplanet.com network:Tech-Contact;I:abuse@theplanet.com network:Admin-Contact;I:abuse@theplanet.com network:Created:20051128 network:Updated:20051128 %referral rwhois://root.rwhois.net:4321/auth-area=. %ok loclhst_com@ganon ~/loclhst_com/htdocs $ whois awardspace.com Whois Server Version 2.0 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. Domain Name: AWARDSPACE.COM Registrar: TUCOWS INC. Whois Server: whois.opensrs.net Referral URL: http://domainhelp.tucows.com Name Server: NS1.AWARDSPACE.COM Name Server: NS2.AWARDSPACE.COM Name Server: NS3.AWARDSPACE.COM Name Server: NS4.AWARDSPACE.COM Status: REGISTRAR-LOCK EPP Status: clientDeleteProhibited EPP Status: clientTransferProhibited EPP Status: clientUpdateProhibited Updated Date: 08-Feb-2006 Creation Date: 16-Sep-2004 Expiration Date: 16-Sep-2006 >>> Last update of whois database: Tue, 02 May 2006 00:38:15 EDT <<< NOTICE: The expiration date displayed in this record is the date the registrar's sponsorship of the domain name registration in the registry is currently set to expire. This date does not necessarily reflect the expiration date of the domain name registrant's agreement with the sponsoring registrar. Users may consult the sponsoring registrar's Whois database to view the registrar's reported date of expiration for this registration. TERMS OF USE: You are not authorized to access or query our Whois database through the use of electronic processes that are high-volume and automated except as reasonably necessary to register domain names or modify existing registrations; the Data in VeriSign Global Registry Services' ("VeriSign") Whois database is provided by VeriSign for information purposes only, and to assist persons in obtaining information about or related to a domain name registration record. VeriSign does not guarantee its accuracy. By submitting a Whois query, you agree to abide by the following terms of use: You agree that you may use this Data only for lawful purposes and that under no circumstances will you use this Data to: (1) allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations via e-mail, telephone, or facsimile; or (2) enable high volume, automated, electronic processes that apply to VeriSign (or its computer systems). The compilation, repackaging, dissemination or other use of this Data is expressly prohibited without the prior written consent of VeriSign. You agree not to use electronic processes that are automated and high-volume to access or query the Whois database except as reasonably necessary to register domain names or modify existing registrations. VeriSign reserves the right to restrict your access to the Whois database in its sole discretion to ensure operational stability. VeriSign may restrict or terminate your access to the Whois database for failure to abide by these terms of use. VeriSign reserves the right to modify these terms at any time. The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars. Registrant: AwardSpace.com Steenbeker Weg 26b 2624 Kiel, 24106 DE Domain name: AWARDSPACE.COM Administrative Contact: Service, Customer abuse@awardspace.com Steenbeker Weg 26b 2624 Kiel, 24106 DE +49.17621629750 Technical Contact: Service, Customer abuse@awardspace.com Steenbeker Weg 26b 2624 Kiel, 24106 DE +49.17621629750 Registrar of Record: TUCOWS, INC. Record last updated on 04-Mar-2006. Record expires on 16-Sep-2006. Record created on 16-Sep-2004. Domain servers in listed order: NS2.AWARDSPACE.COM 70.86.252.176 NS1.AWARDSPACE.COM 70.86.228.147 NS3.AWARDSPACE.COM 70.86.228.148 NS4.AWARDSPACE.COM 70.86.228.164 Domain status: REGISTRAR-LOCK The Data in the Tucows Registrar WHOIS database is provided to you by Tucows for information purposes only, and may be used to assist you in obtaining information about or related to a domain name's registration record. Tucows makes this information available "as is," and does not guarantee its accuracy. By submitting a WHOIS query, you agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to: a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass, unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of any Registry Operator or ICANN-Accredited registrar, except as reasonably necessary to register domain names or modify existing registrations. The compilation, repackaging, dissemination or other use of this Data is expressly prohibited without the prior written consent of Tucows. Tucows reserves the right to terminate your access to the Tucows WHOIS database in its sole discretion, including without limitation, for excessive querying of the WHOIS database or for failure to otherwise abide by this policy. Tucows reserves the right to modify these terms at any time. By submitting this query, you agree to abide by these terms. NOTE: THE WHOIS DATABASE IS A CONTACT DATABASE ONLY. LACK OF A DOMAIN RECORD DOES NOT SIGNIFY DOMAIN AVAILABILITY.