The spam (which appears further down) is using a Naviant domain name for the envelope sender (email-info.net), but is originating from a Market Knowledge IP address block. However, the postal address in the spam matches the Naviant postal address from their whois record (the whois record for Naviant is below the whois record for Market Knowledge.)
[root@krusty-motorsports lib]# whois 198.212.180.32@whois.arin.net [whois.arin.net] OrgName: Market Knowledge, Inc. OrgID: MARKET-21 Address: 747 East 22nd Street City: Lombard StateProv: IL PostalCode: 60148 Country: US NetRange: 198.212.180.0 - 198.212.180.255 CIDR: 198.212.180.0/24 NetName: MKINET NetHandle: NET-198-212-180-0-1 Parent: NET-198-0-0-0-0 NetType: Direct Assignment Comment: RegDate: 1994-06-08 Updated: 1998-05-18 TechHandle: JLT-ARIN TechName: Thomas, John L. TechPhone: +1-708-629-8200 TechEmail: # ARIN WHOIS database, last updated 2003-03-11 20:00 # Enter ? for additional hints on searching ARIN's WHOIS database.
[root@krusty-motorsports lib]# whois email-info.net
[whois.networksolutions.com]
Registrant:
Naviant, Inc. (EMAIL-INFO2-DOM)
999 Yamato Rd
Boca Raton, FL 33431
US
Domain Name: EMAIL-INFO.NET
Administrative Contact:
Administration, Naviant (RIRDYXGGHI) administration@naviant.com
Naviant
999 Yamato Road
Boca Raton, FL 33431
US
561-893-8200
Technical Contact:
Hostmaster, Naviant (BTKEALVGSI) hostmaster@naviant.com
Naviant
999 Yamato Road
Boca Raton, FL 33431
US
561-893-8200 561-893-8250
Record expires on 06-Dec-2003.
Record created on 06-Dec-1999.
Database last updated on 12-Mar-2003 15:30:01 EST.
Domain servers in listed order:
NS.ENAMESERV.COM 209.213.220.194
NS1.NAVIANTNETWORK.NET 66.115.47.83
NS3.NAVIANTNETWORK.NET 66.115.47.84
Received: from localhost (127.0.0.1) by skipper.averillpark.net with POP3 for
<postmaster@skipper.averillpark.net>; 12 Mar 2003 12:20:04 -0000
Return-path: <BMG_Music_Service@mtsbp219.email-info.net>
Envelope-to: RWELTY@KRUSTY-MOTORSPORTS.COM
Delivery-date: Wed, 12 Mar 2003 13:14:51 +0000
Received: from [198.212.180.32] (helo=mtsbp219.email-info.net)
by krusty1.krusty-motorsports.com with smtp (Exim 4.10)
id 18t64J-0000eB-00
for RWELTY@KRUSTY-MOTORSPORTS.COM; Wed, 12 Mar 2003 13:14:51 +0000
Received: (qmail 5022 invoked by uid 500); 12 Mar 2003 11:59:37 -0000
Date: 12 Mar 2003 11:59:37 -0000
From: "BMG Music Service" <BMG_Music_Service@mtsbp219.email-info.net>
To: RWELTY@KRUSTY-MOTORSPORTS.COM
Message-ID: MID-42262-3493201
Subject: Get 12 CDs for the price of 1
Mime-Version: 1.0
Content-Type: text/html; charset="us-ascii"
<!--
------------------------------------------------------------------------
The following message was sent to you as an opt-in subscriber to
sweetoffers.net. We will continue to bring you valuable offers on
the products and services that interest you most. If you wish to
unsubscribe please copy and paste the following link into your web
browser or click here:
http://ct01.edirectmessage.com/cgi-bin/optout2.cgi?email=RWELTY@KRUSTY-MOTORSPORTS.COM&eid=30-2-61W-jqez
------------------------------------------------------------------------
Act Immediately!
Kick up your CD collection at BMG Music Service!
12 CDs for the Price of 1
Nothing More to Buy!
http://ct01.edirectmessage.com/fcgi-bin/eclick.cgi?cm=17460&link=80504&em=3781166&eid=30-2-61W-jqez
A shipping and handling charge will be added to each selection.
Get your favorite music.
Click here for membership details.
http://ct01.edirectmessage.com/fcgi-bin/eclick.cgi?cm=17460&link=80504&em=3781166&eid=30-2-61W-jqez
P.S. Forward this e-mail to your friends so everyone can enjoy
this unbeatable offer on CDs!
AOL Members
<a href="http://ct01.edirectmessage.com/fcgi-bin/eclick.cgi?cm=17460&link=80504&em=3781166&eid=30-2-61W-jqez"> Click Here </a>
------------------------------------------------------------------------
To unsubscribe by postal mail, please send your request to:
999 Yamato Road, Suite 300
Boca Raton, Florida 33431
Attn: Fulfillment Department
This email message may be a recurring mailing.
Ref# 30-2-61W-jqez
17460
------------------------------------------------------------------------
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
<TITLE>Untitled</TITLE>
<META NAME="generator" CONTENT="BBEdit 5.1.1">
</HEAD>
<BODY><center>
<div align="center">
<table border="0" width="600">
<tr>
<td><table width=100%>
<tr>
<td>
<hr noshade>
</td>
</tr>
<tr>
<td>
<font size=2>
The following message was sent to you as an opt-in subscriber to
sweetoffers.net. We will continue to bring you valuable offers on
the products and services that interest you most. If you wish to
unsubscribe please click here:
<a href="http://ct01.edirectmessage.com/cgi-bin/optout2.cgi?email=RWELTY@KRUSTY-MOTORSPORTS.COM&eid=30-2-61W-jqez">Unsubscribe</a><img src="http://ct01.edirectmessage.com/icons/blank.gif?ref=30-2-61W-jqez" height=1 width=1>
</font>
</td>
</tr>
<tr>
<td>
<hr noshade>
</td>
</tr>
</table>
</td>
</tr>
</table>
</div>
<a href="http://ct01.edirectmessage.com/fcgi-bin/eclick.cgi?cm=17460&link=80505&em=3781166&eid=30-2-61W-jqez"><IMG SRC="http://content.naviantnetwork.net/optshare/27bmg/cheeze.gif" WIDTH="417" HEIGHT="391" BORDER="0"><br>
<hr size="1" width="380">
<IMG SRC="http://content.naviantnetwork.net/optshare/27bmg/Logo_Horiz_125.gif" WIDTH="125" HEIGHT="54" BORDER="0"><br></a>
<font face="verdana,helvetica,arial,sans-serif" size="1"><b>P.S. Forward this e-mail to your friends
so everyone can enjoy<br> this unbeatable offer on CDs!<br>
<hr size="1" width="380">
</BODY>
<div align="center">
<table border="0" width="600">
<tr>
<td><table width=100%>
<tr><td><hr noshade></td></tr>
<tr><td align=left><font size=2>To unsubscribe by postal mail, please send your request to:</font></td></tr>
<tr><td align=left><font size=2>999 Yamato Road, Suite 300</font></td></tr>
<tr><td align=Left><font size=2>Boca Raton, Florida 33431</font></td></tr>
<tr><td align=Left><font size=2>Attn: Fulfillment Department</font></td></tr>
<tr>
<td><hr noshade></td>
</tr>
</table>
<!--
Ref# 30-2-61W-jqez
17460
-->
</td>
</tr>
</table>
</div>
</HTML>