Return-Path: Received: from hotmail.com (216.33.240.165) by studio42.com with ESMTP (Eudora Internet Mail Server 3.0) for ; Fri, 12 Jan 2001 11:42:23 -0800 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Fri, 12 Jan 2001 11:30:00 -0800 Received: from 207.3.70.240 by lw8fd.law8.hotmail.msn.com with HTTP; Fri, 12 Jan 2001 19:30:00 GMT X-Originating-IP: [207.3.70.240] From: "dean davis" To: chris@studio42.com Subject: Re: complainant filed with Inter-linc.net.abuse Date: Fri, 12 Jan 2001 19:30:00 Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: X-OriginalArrivalTime: 12 Jan 2001 19:30:00.0751 (UTC) FILETIME=[0E1183F0:01C07CCE] Chris, Here is the info you requested, Det. Dean Davis, Badge #132, Phone Number 417-357-6117 you my contact me M-F, 8AM to 4PM. >On 1/8/2001 20:47, dean davis sent the following ASCII stream: > > > Dear Mr. Pickett > > My name is Dean Davis and I am a Detective with the Stone County >Sheriff's > >Department in Galena, Mo. On December 15th, 2000 you e-mailed >Inter-linc.net > >in reference to a spam e-mail you received. I have been assigned to this > >case and need to speak with you, please call me at 417-357-6116. > >_________________________________________________________________ > >Get your FREE download of MSN Explorer at http://explorer.msn.com > > > >Please provide a badge number and your supervisor's name and phone >number. I will confirm your identity and then proceed should it be >necessary. There are too many people using identity fraud and I confirm >everything. I'm also going to want a LOT more details in regards to what >this exactly is in regards to. I find it very odd that a police >department would have to resort to using Hotmail for their email rather >than a domain of their own. Please be aware, I am now extremely >suspicious of this entire situation as a lot of things do not ring well >with me. Based on the originating IP from your Hotmail headers: > >$ nslookup 207.3.70.235 >Server: ns2.host4u.net >Address: 209.150.128.15 > >*** ns2.host4u.net can't find 207.3.70.235: Non-existent host/domain >$ whois 207.3.70.235@whois.arin.net >[whois.arin.net] >Cable & Wireless USA (NETBLK-CW-08BLK) CW-08BLK 207.0.0.0 - >207.3.255.255 >Tri-Lakes Net, Inc. (NETBLK-CW-207-3-70) CW-207-3-70 207.3.70.0 - >207.3.70.255 > >To single out one record, look it up with "!xxx", where xxx is the >handle, shown in parenthesis following the name, which comes first. > >$ whois NETBLK-CW-207-3-70@whois.arin.net >[whois.arin.net] >Tri-Lakes Net, Inc. (NETBLK-CW-207-3-70) > 703 S. COMMERCIAL ST. > BRANSON, MO 65616 > US > > Netname: CW-207-3-70 > Netblock: 207.3.70.0 - 207.3.70.255 > Maintainer: TLAK > > Coordinator: > Arend, Robert (RA1138-ARIN) arend@TRI-LAKES.NET > 417-335-7889 (FAX) 417-337-7084 > > Record last updated on 18-Feb-1999. > Database last updated on 8-Jan-2001 06:20:22 EDT. > >No reverse DNS, Cable and Wireless(a known spam-friendly upstream). Not >sounding very good to me. I see lots of irresponsibility. Nothing to >warrant any trust whatsoever. I hope this is not an attempt of >impersonating a law officer as if this is, I will be immediately filing >the appropriate complaints there as well as I know law enfocement >agencies strongly frown on this behavior, and I totally agree with that. > >However, hased on inter-linc.net's behavior in this situation, I have no >cause for forther complaint or concern as they handled the situation >appropriately by removing their abusive user. I consider the matter >closed. > >Let me see if I can find appropriate proof of their response. There have >been no further problems from that ISP since then so as I've said, I >consider the matter resolved and I don't have the time to continue >dealing with this issue. The case is closed. > >Note: >The actual number of inappropriate entries is 75. All documented 100% >online. >http://www.studio42.com/kill-the-spam/interactive/guestbookabuse/ >See the bottom section in regards to the "Guestbook Flooder". >The only editing that is done(none this time) would be the less than and >greater than symbols used for HTML mark-up being turned into raw ASCI >calls for presentability. These have been saved as text files to save >time and are as a result 100% unedited. Oddly enough, they are in reverse >order too. I'm not sure how that happened, but hey, I'm only human. > >Just to be safe, I'll be posting any of our conversations to the same >page as above as well. Might as well have an online transcript. I'll >start on that beginning with my original complaint this evening, followed >by Inter-linc's response, your email and this reply. > > >Return-Path: >Received: from mail.inter-linc.net (12.10.101.4) by studio42.com with >ESMTP (Eudora Internet Mail Server 3.0) for ; Mon, 18 >Dec 2000 15:18:59 -0800 >Received: from richslaptop (unverified [12.10.101.31]) by >mail.inter-linc.net (Vircom SMTPRS 4.2.181) with SMTP id > for ; Mon, 18 Dec >2000 17:11:06 -0600 >Message-ID: <05d801c06947$626d5220$1f650a0c@interlinc.net> >From: "Inter-linc.net" >To: "Chris Pickett" >References: <1235180121-11689317@studio42.com> >Subject: Re: Blatant abuse: Entry to the Anti-Spam Guestbook >Date: Mon, 18 Dec 2000 17:08:07 -0600 >MIME-Version: 1.0 >Content-Type: text/plain; charset="iso-8859-1" >Content-Transfer-Encoding: 7bit >X-Priority: 3 >X-MSMail-Priority: Normal >X-Mailer: Microsoft Outlook Express 5.50.4133.2400 >X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 > >This issue has been addressed. Please let me know if you have any further >problems. > >Inter-linc.net Support > >----- Original Message ----- >From: "Chris Pickett" >To: >Sent: Friday, December 15, 2000 10:39 PM >Subject: Blatant abuse: Entry to the Anti-Spam Guestbook > > > > Please terminate your lovely little user. I sure have enjoyed playing > > with them, but I've negated their damage with ease. If you see that this > > behavior is acceptable, I'll be more than happy to ensure that your > > domain and network is easily removed from the internet. > > > > This is one of at least 50. If you would like them all, please let me > > know and I'll send them as file attachments. This little pest was rather > > active, going "back" and re-submitting, of course. > > > > > > Return-Path: > > Received: from dfw-smtpin2.email.verio.net ([129.250.38.52]) by > > dfw-spool1.email.verio.net (Netscape Messaging Server 4.15) with > > ESMTP id G5N0YP04.3FL for ; Sat, 16 Dec 2000 > > 01:47:14 +0000 > > Received: from [216.71.64.59] (helo=persipina.host4u.net) by > > dfw-smtpin2.email.verio.net with esmtp id 1476RM-0006Ua-00 for > > cpicket@ns.net; Sat, 16 Dec 2000 01:47:13 +0000 > > Received: (from studio42@localhost) by persipina.host4u.net >(8.8.5/8.8.5) > > id TAA21662 for cpicket@ns.net; Fri, 15 Dec 2000 19:41:59 -0600 > > Date: Fri, 15 Dec 2000 19:41:59 -0600 > > Message-Id: <200012160141.TAA21662@persipina.host4u.net> > > Reply-to: Your_Mom@My_House.cum (FuckerNuts) > > From: Your_Mom@My_House.cum (FuckerNuts) > > Subject: Entry to the Anti-Spam Guestbook > > > > You have a new entry in your guestbook: > > > > # Entered from 1079145.inter-linc.com (12.10.79.145) with HTTP/1.1. > > ------------------------------------------------------ > > You have been spamed hehehehehehehe.!!!!spam spam spam jam spam flam bam > > >cunningham.......fartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > >arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar > > > >tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > >arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar > > > >tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > >arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar > > > >tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > >arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar > > > >tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > >arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar > > > >tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > >arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar > > > tinajarfartinajarf! > > >artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin > > > >ajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarf > > > >artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin > > > >ajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarf > > > >artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin > > > >ajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarf > > > >artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin > > > >ajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarf > > > >artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin > > > >ajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarf > > > >artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin > > > >ajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarf > > > >artinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartin > > > ajarfartinajarfa! > > >rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina > > > >jarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfa > > > >rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina > > > >jarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfa > > > >rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina > > > >jarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfa > > > >rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina > > > >jarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfa > > > >rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina > > > >jarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfa > > > >rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina > > > >jarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfa > > > >rtinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartina > > > jarfartinajarfar! > > >tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > >arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar > > > >tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > >arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar > > > >tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > >arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar > > > >tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > >arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar > > > >tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > >arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar > > > >tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > >arfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfar > > > >tinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaj > > > arfartinajarfart! > > >inajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaja > > > >rfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfart > > > >inajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaja > > > >rfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfart > > > >inajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaja > > > >rfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfart > > > >inajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaja > > > >rfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfart > > > >inajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinajarfartinaja > > > rfartinajar FART IN A JAR!!! > > FuckerNuts > > - Friday, December 15, 2000 at 19:41:58 (CST) > > ------------------------------------------------------ > _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com