Article View: oh
Article #2EE.NET harbors a thief!
From: Joel Rubin
Date: Thu, 13 Mar 1997 00:00
Date: Thu, 13 Mar 1997 00:00
76 lines
3298 bytes
3298 bytes
I keep on getting junk email from the spammers Inetcomm.net and other
associated domains despite numerous "remove" requests.
Look at the following header:
========================================================
Return-Path: <PleaseCall@Or.Fax.Us>
Received: from finland.it.earthlink.net (finland-c.it.earthlink.net
[204.250.46.29]) by ixmail6.ix.netcom.com (8.7.5/SMI-4.1/Netcom)
id VAA17749; Wed, 12 Mar 1997 21:32:35 -0800 (PST)
From: PleaseCall@Or.Fax.Us
Received: from smtp.earthlink.net ([206.31.38.150])
by finland.it.earthlink.net (8.8.5/8.8.5) with SMTP id
VAA13160;
Wed, 12 Mar 1997 21:31:22 -0800 (PST)
Message-Id: <199703130531.VAA13160@finland.it.earthlink.net>
To: UArtison@aol.com
Date: Thu, 13 Mar 97 00:04:51 EST
Subject: *** 8 MILLION E-MAIL ADDRESSES ***
*********** MAKE MONEY ON-LINE NOW! ***********
********* 8 MILLION E-MAIL ADDRERSSES! *********
=====================================================
You are not included in this database you were randomly selected to
receive this message. Because our sources have indicated that you may
have interest in this product. There is no need to reply to be removed
because this is a "ONE-TIME MESSAGE". You will receive no further
mailings from us.
=====================================================
[snip]
Internet Communications
30628 Detroit Ave. Suite 295
Westlake, Ohio 44145
\\\|///
\\ ~ ~ //
( @ @ ) Don't Delay Place Your Order Within 10 Days....
-oOOo-(_)-oOOo------------------------------------------------------------------------------
The entire contents of this message are copyrighted and protected by
both
United States copyright laws and international treaty provisions. None
of
the text in this message may ever be reproduced, in original or
modified
form, for commercial purposes, without express written permission by
Internet
Communications Inc.. We do authorize and encourage the forwarding of
this message to interested parties, for the purpose of informing them
of
Internet Communications Inc. services.
==============================================================
Now, you will notice that they CLAIM to be posting from
SMTP.EARTHLINK.NET.
But, 206.31.38.150 is REALLY part of EE.NET.
Authority Records Section:
Name=38.31.206.in-addr.arpa
Type=SOA, Class=1, TTL=86400, RDLENGTH=46
Name Server=dns2.ee.net, Mailbox=hostmaster.ee.net
Serial=9703122, Refresh=21600, Retry=3600
Expire=604800, Minimum=86400
---
So, in other words, to hide their REAL address, they are using
Earthlink's SMTP servers for bulk email which, I believe, is theft of
service.
Technical Details
Message-ID:
<33279c55.961368@nntp.best.ix.netcom.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 108bc6,85728f5ccab3d2e6,start X-Google-Attributes: gid108bc6,public X-Google-Thread: feb0e,85728f5ccab3d2e6,start X-Google-Attributes: gidfeb0e,public From: jmrubin@ix.netcom.com (Joel Rubin) Subject: EE.NET harbors a thief! Date: 1997/03/13 Message-ID: <33279c55.961368@nntp.best.ix.netcom.com> X-Deja-AN: 225127342 Organization: Nattering Nabobs of Negativism X-NETCOM-Date: Thu Mar 13 12:34:20 AM CST 1997 Newsgroups: oh,general,cle.general,cle.internet