> Ride Marketing Group, LLC (XTPGAGISMD) > 9850 S Maryland Pkwy. > Suite 5-420 > Las Vegas, NV 89123 > US
Now, if we could figure out all IPs used by this company... John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) > Sent: Friday, January 09, 2004 10:59 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Spammer sending a community service alert > > Yes. SpamCheck log comes through: Got it. Same guy. > ____________________________________________________________________ > amberalertsonline.com Back-order this name > > > Registrant: > Ride Marketing Group, LLC (XTPGAGISMD) > 9850 S Maryland Pkwy. > Suite 5-420 > Las Vegas, NV 89123 > US > > Domain Name: AMBERALERTSONLINE.COM > > Administrative Contact: > Friesner, Ryan (34602192I) [EMAIL PROTECTED] > Ride Marketing Group > 9850 S Maryland Pkwy. > Suite 5-420 > Las Vegas, NV 89123 > US > 425.465.5752 > > Technical Contact: > Network Solutions, Inc. (HOST-ORG) [EMAIL PROTECTED] > 13200 Woodland Park Drive > Herndon, VA 20171-3025 > US > 1-888-642-9675 fax: 571-434-4620 > > Record expires on 23-Jun-2004. > Record created on 23-Jun-2003. > Database last updated on 10-Jan-2004 01:48:53 EST. > > Domain servers in listed order: > > NS1.WISOL.NET 66.199.191.31 > NS2.WISOL.NET 66.199.191.32 > __________________________________________________________________________ > __ > > shysterbob.com Back-order this name > > > Registrant: > Ride Marketing Group, LLC (WWGMFHBAVD) > 9850 S Maryland Pkwy. > Suite 5-420 > Las Vegas, NV 89123 > US > > Domain Name: SHYSTERBOB.COM > > Administrative Contact: > Friesner, Ryan (34602192I) [EMAIL PROTECTED] > Ride Marketing Group > 9850 S Maryland Pkwy. > Suite 5-420 > Las Vegas, NV 89123 > US > 425.465.5752 > > Technical Contact: > Network Solutions, Inc. (HOST-ORG) [EMAIL PROTECTED] > 13200 Woodland Park Drive > Herndon, VA 20171-3025 > US > 1-888-642-9675 fax: 571-434-4620 > > Record expires on 05-Nov-2004. > Record created on 05-Nov-2003. > Database last updated on 10-Jan-2004 01:49:56 EST. > > Domain servers in listed order: > > NS1.SHYSTERBOB.COM 64.191.36.192 > NS2.SHYSTERBOB.COM 64.191.36.193 > __________________________________________________________________________ > _ > > 01/09/2004 00:03:42, file g:\IMail\spool\D35de029301dce427.SMD, Result 16H > 6L 2K 4R, total 28 > From:"AmberAlertsOnline" > <[EMAIL PROTECTED]> > To:<[EMAIL PROTECTED]> > Subject:MISSING: Three Georgia Girls - Amber Alert - > 0.20 Filename is g:\IMail\spool\D35de029301dce427.SMD > 0.20 Read 12164 bytes from file g:\IMail\spool\D35de029301dce427.SMD > 0.20 Header is 1067 bytes, body is 10880 bytes > 0.20 Mail is HTML only (2 points) > 0.20 X-Mailer: MIME-tools 5.411 (Entity 5.404) > 0.20 Mail HTML only AND quoted printable encoded (4 points) > 0.20 Keywords girl found in subject (2 points) > 0.20 Sender contains a code ("AmberAlertsOnline" > <[EMAIL PROTECTED]>) (4 > points) > 0.20 sender contains 1 maybe unreadable sequences > ([EMAIL PROTECTED]) (2 points) > 0.21 X-Mailer: contains the keyword MIME-tools(2 points) > 0.76 Link > found:http://img.shysterbob.com:8080/images/01/7379.874671519.116746.0.107 > 36 > 24491.gif > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj0bbgheg2bafdae00 > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj2bbgheg6bafdaf00 > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj6bbgheg1bafdag00 > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj1bbgheg1bafdah00 > 0.76 Link found:http://www.amberalertsonline.com/images/header1.gif > 0.76 Link found:http://www.amberalertsonline.com/images/helping.gif > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj2bbgheg6bafdai00 > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj2bbgheg4bafdaj00 > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj7bbgheg7bafdba00 > 0.76 Link > found:http://www.amberalertsonline.com/images/alerts/phelps/phelps_perp.jp > g > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj0bbgheg7bafdbb00 > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj4bbgheg3bafdbc00 > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj3bbgheg0bafdbd00 > 0.76 Link found:http://www.amberalertsonline.com/images/states1.gif > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj4bbgheg1bafdbe00 > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj0bbgheg0bafdbf00 > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj5bbgheg8bafdbg00 > 0.76 Link > found:http://www.shysterbob.com/link.php?iheghbfbj0bbgheg5bafdbh00 > 0.76 Link found:http://www.shysterbob.com/s_uns.php?id > 0.76 mail text contains links to external images > (http://img.shysterbob.com:8080/images/01/7379.874671519.116746.0.10736244 > 91 > .gif) (2 points) > 0.76 mail text contains a script call > (http://www.shysterbob.com/link.php?iheghbfbj0bbgheg2bafdae00) (4 points) > 0.79 Number of words:486, 20 bytes per word > 0.79 Longest word is 18 bytes long > 1.09 checkword test lasted 0.30 seconds > 1.09 Checkword . found 29 times (0 points) > 1.09 Checkword adv found 2 times (4 points) > 1.09 Checkword weather found 1 times (-2 points) > 1.09 Checkwords found: . adv weather > 1.09 Raw checkword <center> found 6 times (3 points) > 1.09 Raw checkword <! found 1 times (1 points) > 1.09 Raw checkwords found: <center> <! > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of Burzin Sumariwalla > > Sent: Friday, January 09, 2004 7:06 PM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.JunkMail] Spammer sending a community service > alert > > alert alert alert > > > > Now that doesn't make any sense. Why would you sign up with a local > > provider and not your state or local law enforcement agency? > > It does seem like an effective, but extremely underhanded and immoral > > technique for harvesting addresses. More research to do... > > > > Burzin > > > > At 08:46 PM 1/9/2004, you wrote: > > >It then prompted the reader to go to a legit Amber Alert list service > and > > >sign up for such lists. Oh s**t! I should check if that was a valid > list > > or > > >a hidden way of address harvesting. D**b! > > > > > ><KNOCKING HEAD ON DESK> > > > > > >Forgot to save one. > > > > > >John Tolmachoff > > >Engineer/Consultant/Owner > > >eServices For You > > > > ------ > > Burzin Sumariwalla Phone: (314) 994-9411 x291 > > [EMAIL PROTECTED] Fax: (314) 997-7615 > > Pager: (314) 407-3345 > > > > Networking and Telecommunications Manager > > Information Technology Services > > St. Louis County Library District > > 1640 S. Lindbergh Blvd. > > St. Louis, MO 63131 > > > > --- > > [This E-mail scanned for viruses by Declude Virus] > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
