Ummmm....
Has anybody called in the FBI on this one?
What he's doing HAS to be illegal in some major way if it's happening the
way it appears.
Spoofing an Amber Alert to harvest email addresses has to be a new low.
-Dave Doherty
Skywaves, Inc.
----- Original Message -----
From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, January 10, 2004 1:58 AM
Subject: RE: [Declude.JunkMail] Spammer sending a community service alert
Yes. SpamCheck log comes through: Got it. Same guy.
____________________________________________________________________
amberalertsonline.com Back-order this name
Registrant:
Ride Marketing Group, LLC (XTPGAGISMD)
9850 S Maryland Pkwy.
Suite 5-420
Las Vegas, NV 89123
US
Domain Name: AMBERALERTSONLINE.COM
Administrative Contact:
Friesner, Ryan (34602192I) [EMAIL PROTECTED]
Ride Marketing Group
9850 S Maryland Pkwy.
Suite 5-420
Las Vegas, NV 89123
US
425.465.5752
Technical Contact:
Network Solutions, Inc. (HOST-ORG) [EMAIL PROTECTED]
13200 Woodland Park Drive
Herndon, VA 20171-3025
US
1-888-642-9675 fax: 571-434-4620
Record expires on 23-Jun-2004.
Record created on 23-Jun-2003.
Database last updated on 10-Jan-2004 01:48:53 EST.
Domain servers in listed order:
NS1.WISOL.NET 66.199.191.31
NS2.WISOL.NET 66.199.191.32
____________________________________________________________________________
shysterbob.com Back-order this name
Registrant:
Ride Marketing Group, LLC (WWGMFHBAVD)
9850 S Maryland Pkwy.
Suite 5-420
Las Vegas, NV 89123
US
Domain Name: SHYSTERBOB.COM
Administrative Contact:
Friesner, Ryan (34602192I) [EMAIL PROTECTED]
Ride Marketing Group
9850 S Maryland Pkwy.
Suite 5-420
Las Vegas, NV 89123
US
425.465.5752
Technical Contact:
Network Solutions, Inc. (HOST-ORG) [EMAIL PROTECTED]
13200 Woodland Park Drive
Herndon, VA 20171-3025
US
1-888-642-9675 fax: 571-434-4620
Record expires on 05-Nov-2004.
Record created on 05-Nov-2003.
Database last updated on 10-Jan-2004 01:49:56 EST.
Domain servers in listed order:
NS1.SHYSTERBOB.COM 64.191.36.192
NS2.SHYSTERBOB.COM 64.191.36.193
___________________________________________________________________________
01/09/2004 00:03:42, file g:\IMail\spool\D35de029301dce427.SMD, Result 16H
6L 2K 4R, total 28
From:"AmberAlertsOnline"
<[EMAIL PROTECTED]>
To:<[EMAIL PROTECTED]>
Subject:MISSING: Three Georgia Girls - Amber Alert -
0.20 Filename is g:\IMail\spool\D35de029301dce427.SMD
0.20 Read 12164 bytes from file g:\IMail\spool\D35de029301dce427.SMD
0.20 Header is 1067 bytes, body is 10880 bytes
0.20 Mail is HTML only (2 points)
0.20 X-Mailer: MIME-tools 5.411 (Entity 5.404)
0.20 Mail HTML only AND quoted printable encoded (4 points)
0.20 Keywords girl found in subject (2 points)
0.20 Sender contains a code ("AmberAlertsOnline"
<[EMAIL PROTECTED]>) (4 points)
0.20 sender contains 1 maybe unreadable sequences
([EMAIL PROTECTED]) (2 points)
0.21 X-Mailer: contains the keyword MIME-tools(2 points)
0.76 Link
found:http://img.shysterbob.com:8080/images/01/7379.874671519.116746.0.10736
24491.gif
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj0bbgheg2bafdae00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj2bbgheg6bafdaf00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj6bbgheg1bafdag00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj1bbgheg1bafdah00
0.76 Link found:http://www.amberalertsonline.com/images/header1.gif
0.76 Link found:http://www.amberalertsonline.com/images/helping.gif
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj2bbgheg6bafdai00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj2bbgheg4bafdaj00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj7bbgheg7bafdba00
0.76 Link
found:http://www.amberalertsonline.com/images/alerts/phelps/phelps_perp.jpg
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj0bbgheg7bafdbb00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj4bbgheg3bafdbc00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj3bbgheg0bafdbd00
0.76 Link found:http://www.amberalertsonline.com/images/states1.gif
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj4bbgheg1bafdbe00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj0bbgheg0bafdbf00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj5bbgheg8bafdbg00
0.76 Link
found:http://www.shysterbob.com/link.php?iheghbfbj0bbgheg5bafdbh00
0.76 Link found:http://www.shysterbob.com/s_uns.php?id
0.76 mail text contains links to external images
(http://img.shysterbob.com:8080/images/01/7379.874671519.116746.0.1073624491
.gif) (2 points)
0.76 mail text contains a script call
(http://www.shysterbob.com/link.php?iheghbfbj0bbgheg2bafdae00) (4 points)
0.79 Number of words:486, 20 bytes per word
0.79 Longest word is 18 bytes long
1.09 checkword test lasted 0.30 seconds
1.09 Checkword . found 29 times (0 points)
1.09 Checkword adv found 2 times (4 points)
1.09 Checkword weather found 1 times (-2 points)
1.09 Checkwords found: . adv weather
1.09 Raw checkword <center> found 6 times (3 points)
1.09 Raw checkword <! found 1 times (1 points)
1.09 Raw checkwords found: <center> <!
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Burzin Sumariwalla
> Sent: Friday, January 09, 2004 7:06 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Spammer sending a community service alert
> alert alert alert
>
> Now that doesn't make any sense. Why would you sign up with a local
> provider and not your state or local law enforcement agency?
> It does seem like an effective, but extremely underhanded and immoral
> technique for harvesting addresses. More research to do...
>
> Burzin
>
> At 08:46 PM 1/9/2004, you wrote:
> >It then prompted the reader to go to a legit Amber Alert list service and
> >sign up for such lists. Oh s**t! I should check if that was a valid list
> or
> >a hidden way of address harvesting. D**b!
> >
> ><KNOCKING HEAD ON DESK>
> >
> >Forgot to save one.
> >
> >John Tolmachoff
> >Engineer/Consultant/Owner
> >eServices For You
>
> ------
> Burzin Sumariwalla Phone: (314) 994-9411 x291
> [EMAIL PROTECTED] Fax: (314) 997-7615
> Pager: (314) 407-3345
>
> Networking and Telecommunications Manager
> Information Technology Services
> St. Louis County Library District
> 1640 S. Lindbergh Blvd.
> St. Louis, MO 63131
>
> ---
> [This E-mail scanned for viruses by Declude Virus]
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
