🚀 go-pugleaf

Here's a copy of an abuse forgery alert that I've posted to the
CIRA Certified Registrar mailing list, and copied to appropriate
people and aliases within CIRA, and to abuse@bellnexxia.net .

	----
Please examine the examples below of SPAM forgeries apparantly
falsely implicating various CIRA certified Registrars, and CIRA
itself.  These are what I've received copies of so far - there
may well be many more related forgeries circulating out there,
with yet other Registrar addresses forged as the senders.

Thus far, the apparantly forged "From:" addresses are:
} From: service <service@internic.ca>
} From: registrar <registrar@edomains.ca>
} From: cadomains <cadomains@lweb.net>
} From: info <info@groupeiweb.com>
} From: webmaster <webmaster@cira.ca>

I suggest that CIRA may wish to issue an appropriate alert and
I strongly recommend that since CIRA continues to relay their
critical email correspondence through the facilitator of this
abuse (bellnexxia), that CIRA either insists that bellnexxia
finally deal with their problem or that CIRA switch to a more
responsible service provider.

Individual Registrars who's reputations are falsely and adversly
impuned may want to take their own remedial and punitive actions.

Regards,
		--ed	(Ed Hew)
--
   CA Registry, CIRA Certified Registrar
   http://www.registry.ca/
   <registry@cs.utoronto.ca>,<registrar@registry.ca>
----
 [ Re: Correspondence from: service <service@internic.ca> ]
 [ Date: Apr 26, 11:28  2002 -0400 ]
 [ Message-ID: <20020426152834.CNLH12321.tomts21-srv.bellnexxia.net@Sln> ]

} From powercircuits.on.ca!quality Fri Apr 26 11:29:35 2002
} Received: from tomts21.bellnexxia.net(209.226.175.183), claiming to be "tomts21-srv.bellnexxia.net"
}  via SMTP by enigma.xenitec.on.ca, id smtpdAAAa16822; Fri Apr 26 11:29:02 2002
} Received: from Sln ([216.208.60.94]) by tomts21-srv.bellnexxia.net
}           (InterMail vM.5.01.04.05 201-253-122-122-105-20011231) with SMTP
}           id <20020426152834.CNLH12321.tomts21-srv.bellnexxia.net@Sln>
}           for <edhew@registry.ca>; Fri, 26 Apr 2002 11:28:34 -0400
} From: service <service@internic.ca>
} To: edhew@registry.ca
} Subject: Look,my beautiful girl friend
} MIME-Version: 1.0
} Content-Type: multipart/alternative;
} 	boundary=YMud5656F8gMX8Pl
} Message-Id: <20020426152834.CNLH12321.tomts21-srv.bellnexxia.net@Sln>
} Date: Fri, 26 Apr 2002 11:28:59 -0400
} Status: OR
} 
} --YMud5656F8gMX8Pl
} Content-Type: text/html;
} Content-Transfer-Encoding: quoted-printable
} 
} <HTML><HEAD></HEAD><BODY>
} <iframe src=3Dcid:B66Dc887h77xH6200 height=3D0 width=3D0>
} </iframe>
} <FONT></FONT></BODY></HTML>
} 
} --YMud5656F8gMX8Pl
} Content-Type: audio/x-wav;
} 	name=read or.exe
} Content-Transfer-Encoding: base64
} Content-ID: <B66Dc887h77xH6200>
} 
} TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
	[...]
}-- End of excerpt from service <service@internic.ca>


 [ Re: Correspondence from: registrar <registrar@edomains.ca> ]
 [ Date: Apr 24, 11:23  2002 -0400 ]
 [ Message-ID: <20020424152240.OSEH5480.tomts17-srv.bellnexxia.net@Jcdqeneou> ]

} Received: from tomts17.bellnexxia.net(209.226.175.71), claiming to be "tomts17-srv.bellnexxia.net"
}  via SMTP by enigma.xenitec.on.ca, id smtpdAAAa21059; Wed Apr 24 11:23:11 2002
} Received: from Jcdqeneou ([206.172.134.1]) by tomts17-srv.bellnexxia.net
}           (InterMail vM.5.01.04.05 201-253-122-122-105-20011231) with SMTP
}           id <20020424152240.OSEH5480.tomts17-srv.bellnexxia.net@Jcdqeneou>
}           for <edhew@registry.ca>; Wed, 24 Apr 2002 11:22:40 -0400
} From: registrar <registrar@edomains.ca>
} To: edhew@enigma.xenitec.on.ca
} Subject: Re:edhew,spice girls' vocal concert
} MIME-Version: 1.0
} Content-Type: multipart/alternative;
} 	boundary=Cp7b2yet57XH09I59fXw3vn522RX145u07vPH
} Message-Id: <20020424152240.OSEH5480.tomts17-srv.bellnexxia.net@Jcdqeneou>
} Date: Wed, 24 Apr 2002 11:23:09 -0400
} Status: OR
} 
} --Cp7b2yet57XH09I59fXw3vn522RX145u07vPH
} Content-Type: text/html;
} Content-Transfer-Encoding: quoted-printable
} 
} <HTML><HEAD></HEAD><BODY>
} <iframe src=3Dcid:MO3C3VVhfp46I height=3D0 width=3D0>
} </iframe>
} <FONT></FONT></BODY></HTML>
} 
} --Cp7b2yet57XH09I59fXw3vn522RX145u07vPH
} Content-Type: audio/x-midi;
} 	name=(URL.bat
} Content-Transfer-Encoding: base64
} Content-ID: <MO3C3VVhfp46I>
} 
} TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
	[...]
}-- End of excerpt from registrar <registrar@edomains.ca>


 [ Re: Correspondence from: cadomains <cadomains@lweb.net> ]
 [ Date: Apr 24, 15:53  2002 -0400 ]
 [ Message-ID: <20020424195304.CXOW12976.tomts10-srv.bellnexxia.net@Kjh> ]

} From powercircuits.on.ca!quality Wed Apr 24 15:54:00 2002
} Received: from tomts10.bellnexxia.net(209.226.175.54), claiming to be "tomts10-srv.bellnexxia.net"
}  via SMTP by enigma.xenitec.on.ca, id smtpdAAAa19313; Wed Apr 24 15:53:39 2002
} Received: from Kjh ([206.172.134.44]) by tomts10-srv.bellnexxia.net
}           (InterMail vM.5.01.04.05 201-253-122-122-105-20011231) with SMTP
}           id <20020424195304.CXOW12976.tomts10-srv.bellnexxia.net@Kjh>
}           for <edhew@registry.ca>; Wed, 24 Apr 2002 15:53:04 -0400
} From: cadomains <cadomains@lweb.net>
} To: edhew@registry.ca
} Subject: HTML ad MediaList (URL for cacheproxy)
} MIME-Version: 1.0
} Content-Type: multipart/alternative;
} 	boundary=DS42E91PDESp15M1
} Message-Id: <20020424195304.CXOW12976.tomts10-srv.bellnexxia.net@Kjh>
} Date: Wed, 24 Apr 2002 15:53:33 -0400
} Status: OR
} 
} --DS42E91PDESp15M1
} Content-Type: text/html;
} Content-Transfer-Encoding: quoted-printable
} 
} <HTML><HEAD></HEAD><BODY>
} <iframe src=3Dcid:N5Iub0zQ3 height=3D0 width=3D0>
} </iframe>
} <FONT></FONT></BODY></HTML>
} 
} --DS42E91PDESp15M1
} Content-Type: audio/x-wav;
} 	name=(URL.scr
} Content-Transfer-Encoding: base64
} Content-ID: <N5Iub0zQ3>
} 
} TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
	[...]
}-- End of excerpt from cadomains <cadomains@lweb.net>


 [ Re: Correspondence from: info <info@groupeiweb.com> ]
 [ Date: Apr 25, 13:10  2002 -0400 ]
 [ Message-ID: <20020425171019.DHDZ12976.tomts10-srv.bellnexxia.net@Yvfqp> ]

} From powercircuits.on.ca!quality Thu Apr 25 13:11:15 2002
} Received: from tomts10.bellnexxia.net(209.226.175.54), claiming to be "tomts10-srv.bellnexxia.net"
}  via SMTP by enigma.xenitec.on.ca, id smtpdAAAa26773; Thu Apr 25 13:10:45 2002
} Received: from Yvfqp ([216.208.60.78]) by tomts10-srv.bellnexxia.net
}           (InterMail vM.5.01.04.05 201-253-122-122-105-20011231) with SMTP
}           id <20020425171019.DHDZ12976.tomts10-srv.bellnexxia.net@Yvfqp>
}           for <edhew@registry.ca>; Thu, 25 Apr 2002 13:10:19 -0400
} From: info <info@groupeiweb.com>
} To: edhew@registry.ca
} Subject: Eager to see you
} MIME-Version: 1.0
} Content-Type: multipart/alternative;
} 	boundary=S127z3I20DrasnY21
} Message-Id: <20020425171019.DHDZ12976.tomts10-srv.bellnexxia.net@Yvfqp>
} Date: Thu, 25 Apr 2002 13:10:43 -0400
} Status: OR
} 
} --S127z3I20DrasnY21
} Content-Type: text/html;
} Content-Transfer-Encoding: quoted-printable
} 
} <HTML><HEAD></HEAD><BODY>
} <iframe src=3Dcid:GQ06E4o28 height=3D0 width=3D0>
} </iframe>
} <FONT></FONT></BODY></HTML>
} 
} --S127z3I20DrasnY21
} Content-Type: audio/x-midi;
} 	name=its use.bat
} Content-Transfer-Encoding: base64
} Content-ID: <GQ06E4o28>
} 
} TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
	[...]
}-- End of excerpt from info <info@groupeiweb.com>


[ Re: Correspondence from: webmaster <webmaster@cira.ca> ... ]
  Message-ID: <20020425155400.ZPPX22599.tomts13-srv.bellnexxia.net@Hexkehjsi>
  Subject: Questionnaire

} From powercircuits.on.ca!quality Thu Apr 25 11:56:46 2002
} Received: from tomts13.bellnexxia.net(209.226.175.34), claiming to be "tomts13-srv.bellnexxia.net"
}  via SMTP by enigma.xenitec.on.ca, id smtpdAAAa17925; Thu Apr 25 11:55:39 2002
} Received: from Hexkehjsi ([216.208.60.101]) by tomts13-srv.bellnexxia.net
}           (InterMail vM.5.01.04.05 201-253-122-122-105-20011231) with SMTP
}           id <20020425155400.ZPPX22599.tomts13-srv.bellnexxia.net@Hexkehjsi>
}           for <edhew@xenitec.on.ca>; Thu, 25 Apr 2002 11:54:00 -0400
} From: webmaster <webmaster@cira.ca>
} To: edhew@xenitec.on.ca
} Subject: Questionnaire
} MIME-Version: 1.0
} Content-Type: multipart/alternative;
} 	boundary=Uxo89y6544Huk11k0827
} Message-Id: <20020425155400.ZPPX22599.tomts13-srv.bellnexxia.net@Hexkehjsi>
} Date: Thu, 25 Apr 2002 11:54:26 -0400
} Status: O
}
} --Uxo89y6544Huk11k0827
} Content-Type: text/html;
} Content-Transfer-Encoding: quoted-printable
}
} <HTML><HEAD></HEAD><BODY>
} <iframe src=3Dcid:H04H544E3w6 height=3D0 width=3D0>
} </iframe>
} <FONT></FONT></BODY></HTML>
}
} --Uxo89y6544Huk11k0827
} Content-Type: audio/x-wav;
} 	name=Hqm.scr
} Content-Transfer-Encoding: base64
} Content-ID: <H04H544E3w6>
}
} TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
	[...]
}-- End of excerpt from webmaster <webmaster@cira.ca>