|
|
Back to UserFriendly Strip Comments Index
| who wants to help me nail a spammer? |
by deadweasle |
2006-11-19 12:55:59 |
Here's the pertinate details:
X-Originating-IP: [80.98.219.123]
Return-Path: <joeyrnb441104@hotmail.com>
Received: from 80.98.219.123 (HELO 212.183.217.4) (80.98.219.123) by mta208.mail.scd.yahoo.com with SMTP; Wed, 22 Sep 2004 06:22:05 -0700
Received: from mxpool01.netaddress.usa.net (mxpool01.netaddress.usa.net [165.212.8.32]) by mail-qcy.glenayre.com with SMTP; Sep, 22 2004 9:00:15 AM +0100
Received: from btmx3.sun.com (btmx3.sun.com [192.12.251.34]) by ALUM-2.mit.edu with esmtp; Sep, 22 2004 8:06:16 AM +0100
From: "Joe" <joeyrnb441104@hotmail.com>
To: Undisclosed@,
Subject: Make money from home
Sender: Joe <joeyrnb441104@hotmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Date: Wed, 22 Sep 2004 09:22:24 -0500
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-Priority: 1
Content-Length:958
To kallistikim@yahoo.com ,
Learn how to make money from home! make up to $1000 per week from home.
The information booklet is provided FREE of charge, All we ask is that
you make a small payment just to
cover the shipping costs.
You may send us $5 If you wish to receive the booklet by regular mail
"delivery time is 1-2 weeks".
Or you may send us $15 If you wish to receive the booklet by courier
express mail "delivery time is 1-2
days".
Please send the payment to the address below, the payment has to be
made by Cash.
9251-8 Yonge St.
Suite# 968
Richmond Hill, ON.
L4C 9T3
CANADA
Please provide us with your mailing address, contact phone number and
your email address on a blank
sheet of paper along with your payment.
And we will then contact you as soon as your payment is received.
***This is a limited time offer, payments must be received within 30
days from the time of this email***
qgcw
uomwxcfwrfpxnpnkahcrnpeywitnmgyx
Now the fun part, a quick google on that address yields these people the astute will notice they do have a very nice toll free # on their website, with which one could call and complain and thusly run up phone bills. A quick whois on said domain reveals it's the same as rapidadvertising.ca all contact details for rapidadvertising.com point to the .ca addresses, all contact details for the .ca site point to the .com. Though the .com & .ca addresses resolve to different IP's.
Either way peeking at the details of the .ca registry we find the domain is registered to one Karam Jabri of
Rapid Advertising, 1250B Reid St. Unit# 10B, Richmond Hill, ON L4B 1G3. The contact phone# it lists is the same as the one on the website. Googling his name yields spam tools, he markets rapid advertiser which boasts, "Super fast delivery of messages - 1000s of messages per hour". I'd say it's safe say this is our owner.
Digging a little deeper we find that the registration for rapid advertising was provided by Rapid Internet Services of Canada risoc.com. There's that rapid name again... Pull up the whois information on risoc.com and we find that same address of 9251-8 Yonge St. and a suite # of 960, so same spot as our spammer. Their homepage also boasts a giant our top client graphic who happens to be rapid advertising. I'd say they are one in the same.
So what do we have, a spammer requesting cash only, to be sent to an address maintained by an advertising company & and a hosting company. So how to nail them...? Go upstream, risoc.com is actually located on empiredatatech.com but looking over Empire's site I couldn't find a TOS or any sort of AUP in their sign-up. So that might be pointless. Looking at the IP's in the headers doesn't help much, a relay at sun, usa.net (aka throwaway account) and a cable provider in hungary none of which are likely to get me anywhere. So who's got suggestions?
-DW |
|
[ Reply ] |
|
If you really want to nail him | by EvilPsychoI3oy | 2006-11-19 12:55:59 |
|
my thought exactly | by Matthewdba | 2004-09-24 12:50:29 |
|
doh, apparently you can't link to individual items | by EvilPsychoI3oy | 2006-11-19 12:55:59 |
|
as cathartic as that would be... | by deadweasle | 2004-09-24 13:05:04 |
|
It wasn't mine. | by Naruki | 2004-09-24 13:49:20 |
|
Why *call* and complain. Why not.... | by thread_killer | 2004-09-24 13:07:50 |
|
no no | by Myke | 2004-09-24 13:11:13 |
|
That's good too =) (n/t) | by thread_killer | 2004-09-24 13:27:09 |
|
Fun idea, but... | by sofaspud | 2004-09-24 15:03:51 |
|
It's not so much tieing up the line | by thread_killer | 2004-09-24 17:46:37 |
|
attn: spam fighters. | by Scirocco | 2006-11-19 12:55:59 |
|
Nevermind. Site disappeared since yesterday. :( | by Scirocco | 2004-09-24 13:34:35 |
|
No worries! | by Morely | 2004-09-24 15:18:08 |
|
Well, this was a site for spamfighters... | by Scirocco | 2004-09-24 21:26:26 |
|
|
[Todays Cartoon Discussion]
[News Index]
|
|
