[ncc-services-wg] Spammers using RIPE DB again ?
Denesh Bhabuta denesh at cyberstrider.net
Thu Oct 23 17:45:31 CEST 2003
--On Thursday, October 23, 2003 15:05:19 +0100 Peter Galbavy <peter.galbavy at knowtion.net> wrote: > I got a couple of these today, to hostmaster at knowledge.com and > hostmaster at knowtion.net. The only place I *think* these are commonly used > are my RIPE DB records. Anyone else got spam like this that may be traced > back to abuse of the RIPE DB ? > If not there, other places I should look to alerting ? Cambridgeshire police maybe? He has been arrested a few times in the past few weeks. The guy who runs the domain registering company, given as the link in the body of the message has already been arrested a few times by the police. He is a known spammer (also a known scammer in the words of the police) and various other things. I have been complaining about him to Trading Standards for about 2.5 years now, in conjunction with another guy, whose web site will give you more details - www.ninet.co.uk Generally, the 'from' addresses are not the spammers.. Peter Francis-Mcrae (the spammer) is the one responsible and he is basically using the domain names of those people who have complained against him, or he does not like. Anyway - www.ninet.co.uk will gove you some info.. and just typing in things like 'francis-macrae' into google will brin up loads of information. Regards Denesh > -- > Peter > > > Return-path: <help at internetdrive.com> > Envelope-to: hostmaster at knowledge.com > Delivery-date: Thu, 23 Oct 2003 14:07:41 +0100 > Received: from exim by mailstore-1.mail.knowledge.com with spam-scanned > (Exim 3.36 #1) > id 1ACfBQ-0008T1-00 > for hostmaster at knowledge.com; Thu, 23 Oct 2003 14:07:41 +0100 > Received: from [188.8.131.52] (helo=abn147-143.interaktif.net.tr) > by mailstore-1.mail.knowledge.com with smtp (Exim 3.36 #1) > id 1ACfBN-0001q8-00 > for hostmaster at knowledge.com; Thu, 23 Oct 2003 14:07:19 +0100 > Received: from [184.108.40.206] by abn147-143.interaktif.net.tr; Thu, 23 > Oct 2003 10:59:18 -0300 > Message-ID: <2$08-38qd-wa78w84$ten53l at 488ap9c> > From: "Dot EU" <help at internetdrive.com> > Reply-To: "Dot EU" <help at internetdrive.com> > To: hostmaster at knowledge.com > Subject: Domain Newsletter - Oct 22 > Date: Thu, 23 Oct 03 10:59:18 GMT > X-Mailer: Microsoft Outlook Express 5.00.2615.200 > MIME-Version: 1.0 > Content-Type: multipart/alternative; > boundary="6BCB1CE1A456E.4372E" > X-Priority: 3 > X-MSMail-Priority: Normal > X-Spam-Status: No, hits=2.3 required=5.0 > tests=FORGED_MUA_OUTLOOK,MISSING_MIMEOLE > version=2.55 > X-Spam-Level: ** > X-Spam-Checker-Version: SpamAssassin 2.55 (220.127.116.11-2003-05-19-exp) > > > --6BCB1CE1A456E.4372E > Content-Type: text/plain; > Content-Transfer-Encoding: quoted-printable > > -------------- > Domain Name News > October 21st 2003 > -------------- > > The European Union has approved the > launch of .eu domain names, which > are expected to go live in late 2003 > or early 2004. > > We are now accepting orders for the > new .eu domains. > > http://www.registereu.com > > See our web site for contact information. > Do not reply to this email - the address > is not monitored. > > --6BCB1CE1A456E.4372E-- >