Yes. SpamCheck log comes through: Got it. Same guy.
____________________________________________________________________
amberalertsonline.com Back-order this name
Registrant:
Ride Marketing Group, LLC (XTPGAGISMD)
9850 S Maryland Pkwy.
Suite 5-420
Las Vegas, NV 89123
US
Domain Name: AMBERALERTSONLINE.COM
Administrative Contact:
Friesner, Ryan (34602192I) [EMAIL PROTECTED]
Ride Marketing Group
9850 S Maryland Pkwy.
Suite 5-420
Las Vegas, NV 89123
US
425.465.5752
Technical Contact:
Network Solutions, Inc. (HOST-ORG) [EMAIL PROTECTED]
13200 Woodland Park Drive
Herndon, VA 20171-3025
US
1-888-642-9675 fax: 571-434-4620
Record expires on 23-Jun-2004.
Record created on 23-Jun-2003.
Database last updated on 10-Jan-2004 01:48:53 EST.
Domain servers in listed order:
NS1.WISOL.NET 66.199.191.31
NS2.WISOL.NET 66.199.191.32
____________________________________________________________________________
shysterbob.com Back-order this name
Registrant:
Ride Marketing Group, LLC (WWGMFHBAVD)
9850 S Maryland Pkwy.
Suite 5-420
Las Vegas, NV 89123
US
Domain Name: SHYSTERBOB.COM
Administrative Contact:
Friesner, Ryan (34602192I) [EMAIL PROTECTED]
Ride Marketing Group
9850 S Maryland Pkwy.
Suite 5-420
Las Vegas, NV 89123
US
425.465.5752
Technical Contact:
Network Solutions, Inc. (HOST-ORG) [EMAIL PROTECTED]
13200 Woodland Park Drive
Herndon, VA 20171-3025
US
1-888-642-9675 fax: 571-434-4620
Record expires on 05-Nov-2004.
Record created on 05-Nov-2003.
Database last updated on 10-Jan-2004 01:49:56 EST.
Domain servers in listed order:
NS1.SHYSTERBOB.COM 64.191.36.192
NS2.SHYSTERBOB.COM 64.191.36.193
___________________________________________________________________________
01/09/2004 00:03:42, file g:\IMail\spool\D35de029301dce427.SMD, Result 16H
6L 2K 4R, total 28
From:"AmberAlertsOnline"
<[EMAIL PROTECTED]>
To:<[EMAIL PROTECTED]>
Subject:MISSING: Three Georgia Girls - Amber Alert -
0.20 Filename is g:\IMail\spool\D35de029301dce427.SMD
0.20 Read 12164 bytes from file g:\IMail\spool\D35de029301dce427.SMD
0.20 Header is 1067 bytes, body is 10880 bytes
0.20 Mail is HTML only (2 points)
0.20 X-Mailer: MIME-tools 5.411 (Entity 5.404)
0.20 Mail HTML only AND quoted printable encoded (4 points)
0.20 Keywords girl found in subject (2 points)
0.20 Sender contains a code ("AmberAlertsOnline"
<[EMAIL PROTECTED]>) (4 points)
0.20 sender contains 1 maybe unreadable sequences
([EMAIL PROTECTED]) (2 points)
0.21 X-Mailer: contains the keyword MIME-tools(2 points)
0.76 Link
found:http://img.shysterbob.com:8080/images/01/7379.874671519.116746.0.10736
24491.gif
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj0bbgheg2bafdae00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj2bbgheg6bafdaf00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj6bbgheg1bafdag00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj1bbgheg1bafdah00
0.76 Link found:http://www.amberalertsonline.com/images/header1.gif
0.76 Link found:http://www.amberalertsonline.com/images/helping.gif
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj2bbgheg6bafdai00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj2bbgheg4bafdaj00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj7bbgheg7bafdba00
0.76 Link
found:http://www.amberalertsonline.com/images/alerts/phelps/phelps_perp.jpg
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj0bbgheg7bafdbb00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj4bbgheg3bafdbc00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj3bbgheg0bafdbd00
0.76 Link found:http://www.amberalertsonline.com/images/states1.gif
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj4bbgheg1bafdbe00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj0bbgheg0bafdbf00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj5bbgheg8bafdbg00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj0bbgheg5bafdbh00
0.76 Link found:http://www.shysterbob.com/s_uns.php?id
0.76 mail text contains links to external images
(http://img.shysterbob.com:8080/images/01/7379.874671519.116746.0.1073624491
.gif) (2 points)
0.76 mail text contains a script call
(http://www.shysterbob.com/link.php?iheghbfbj0bbgheg2bafdae00) (4 points)
0.79 Number of words:486, 20 bytes per word
0.79 Longest word is 18 bytes long
1.09 checkword test lasted 0.30 seconds
1.09 Checkword . found 29 times (0 points)
1.09 Checkword adv found 2 times (4 points)
1.09 Checkword weather found 1 times (-2 points)
1.09 Checkwords found: . adv weather
1.09 Raw checkword <center> found 6 times (3 points)
1.09 Raw checkword <! found 1 times (1 points)
1.09 Raw checkwords found: <center> <!
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Burzin Sumariwalla
> Sent: Friday, January 09, 2004 7:06 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Spammer sending a community service alert
> alert alert alert
>
> Now that doesn't make any sense. Why would you sign up with a local
> provider and not your state or local law enforcement agency?
> It does seem like an effective, but extremely underhanded and immoral
> technique for harvesting addresses. More research to do...
>
> Burzin
>
> At 08:46 PM 1/9/2004, you wrote:
> >It then prompted the reader to go to a legit Amber Alert list service and
> >sign up for such lists. Oh s**t! I should check if that was a valid list
> or
> >a hidden way of address harvesting. D**b!
> >
> ><KNOCKING HEAD ON DESK>
> >
> >Forgot to save one.
> >
> >John Tolmachoff
> >Engineer/Consultant/Owner
> >eServices For You
>
> ------
> Burzin Sumariwalla Phone: (314) 994-9411 x291
> [EMAIL PROTECTED] Fax: (314) 997-7615
> Pager: (314) 407-3345
>
> Networking and Telecommunications Manager
> Information Technology Services
> St. Louis County Library District
> 1640 S. Lindbergh Blvd.
> St. Louis, MO 63131
>
> ---
> [This E-mail scanned for viruses by Declude Virus]
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
