Spamhunter's Resource

[ Clear Some Space For Action! ]

Benchmark Print Supply

This is one of many of complaints regarding spam email received from Benchmark Print Supply. The U. S. District Court of Georgia, North District, has established an order that any spam received by ANY Internet user from Benchmark is unlawful. Remedy: $1,000.00 payable to each recipient of the spam. Effective date: On or about March 30, 2000.


Bitter Net 9/03/2000

Quick Index

Note: [ Removed For Brevity ] represents editing that occurred during the creation of this web page. The complete email message has been preserved intact offline for future reference. Quoted text from the previous message(s) -- common in email -- is not necessary, since the preceding text appears in full on this page already. Enough of the quoted text is retained to demonstrate the nature of the quotation.

Complaint To Bitter Net

Received: from rainstorm (ppp37.tmisnet.com [209.218.174.37])
	by thunder.tmisnet.com (8.9.3/8.9.0.Beta5) with ESMTP id IAA16984;
	Mon, 4 Sep 2000 08:47:29 -0700 (PDT)
Message-Id: <200009041547.IAA16984@thunder.tmisnet.com>
From: "George Crissman" <strads@tmisnet.com>
To: <abuse@bitter.net>
Cc: <strads@tmisnet.com>
Subject: Spam Received, VIOLATES COURT ORDER!!  Was: your imaging supplies
Date: Mon, 4 Sep 2000 08:37:50 -0700
X-MSMail-Priority: Normal
X-Priority: 3
X-Mailer: Microsoft Internet Mail 4.70.1155
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-UIDL: 78e29b61e01acc4540e08da122577d7c

Attn: Bitter Net

> Received: from unknown (lemon.bitter.net [209.208.45.34])

The attached unsolicited advertising email apparently entered the Internet on one of your computers. Please investigate and take the necessary action to prevent future email from your customer to me. In addition, please verify that "Sam Khuri" aka "Benchmark Print Supply" aka "Benchmark Supply" is actually involved in this spam effort, since he is subject to a court order prohibiting him from sending spam email. He is required to reimburse all recipients of his spam email $1,000.00 per message sent, in accordance with the court order.

If Sam Khurt / Benchmark Supply was indeed the sender of this spam, please advise and assist in the collection of the court-ordered amount due.

Details are available online at: http://www.tmisnet.com/~strads/spamhunt/benchmark/index.html

Thank you.

George Crissman
strads@tmisnet.com

--------- Message Header --------
Received: from unknown (lemon.bitter.net [209.208.45.34])
	by thunder.tmisnet.com (8.9.3/8.9.0.Beta5) with SMTP id NAA16051;
	Sun, 3 Sep 2000 13:31:19 -0700 (PDT)
From: bench1@techspot.com
Subject: your imaging supplies
Date: Sun, 3 Sep 2000 00:55:19
Message-Id: <0.407768.322051@>
X-UIDL: 978d90f4f956d0429cd1725d805cff4e

---------- Message Body ----------
> From: bench1@techspot.com
> To: 
> Subject: your imaging supplies
> Date: Saturday, September 02, 2000 5:55 PM
> 
> 
> 
> 
> 
> 
> STATIC SYSTEMS
> 5334 LAKE VIEW CLUB
> ATLANTA GA 30338
> 770-399-0953
> 
> ***LASER PRINTER TONER CARTRIDGES***
> ***FAX AND COPIER TONER***
> 
> 
>  
> WE ACCEPT GOVERNMENT, SCHOOL,UNIVERSITY AND LARGE CORPORATE
> PURCHASE ORDERS. JUST LEAVE YOUR PO # WITH CORRECT BILLING 
> AND SHIPPING ADDRESS.
> 
> WHY PAY MORE FOR YOUR LASER PRINTER CARTRIDGES?
> SAVE FROM 20-40% BY PURCHASING FROM STATIC SYSTEMS. 
> 
> ALL CARTRIDGES COME WITH A 90 DAY WARRANTY. WE WILL
> IMMEDIATELY REPLACE YOUR CARTRIDGE (NO QUESTIONS ASKED)
> IF IT GOES BAD WITHIN 90 DAYS FROM THE DATE OF PURCHASE.
> 
> CHECK OUT OUR NEW CARTRIDGE PRICES FOR THE FOLLOWING PRINTERS:
> 
> 
> APPLE 
>  
>   LASER WRITER  PRO 600 OR 16/600         $69
>   LASER WRITER SELECT 300,310.360         $69
>   LASER WRITER 300, 320                   $54 
>   LASER WRITER LS,NT,2NTX,2F,2G & 2SC     $54 
>   LASER WRITER 12/640                     $79 
> 
> HEWLETT PACKARD 
> 
>   LASERJET SERIES 2,3 & 3D (95A)          $49 
>   LASERJET SERIES  2P AND 3P (75A)        $54 
>   LASERJET SERIES 3SI AND 4SI (91A)       $75 
>   LASERJET SERIES 4L AND 4P               $49 
>   LASERJET SERIES 4, 4M, 5, 5M, 4+ (98A)  $59 
>   LASERJET SERIES 4000 HIGH YIELD  (27X)  $89 
>   LASERJET SERIES 4V                      $95 
>   LASERJET SERIES 5SI , 8000              $95 
>   LASERJET SERIES 5L AND 6L               $49 
>   LASERJET SERIES 5P, 5MP, 6P, 6MP        $59 
>   LASERJET SERIES 5000 (29A)             $135
>   LASERJET SERIES 1100 (92A)              $49 
>   LASERJET SERIES 2100 (96A)              $79
>   LASERJET SERIES 8100 (82X)		 $145
> 
> 
> HP LASERFAX 
> 
>   LASERFAX 500, 700, FX1,                 $59 
>   LASERFAX 5000, 7000, FX2,               $59 
>   LASERFAX  FX3                           $69 
>   LASERFAX  FX4                           $79 
>  
> 
> LEXMARK 
> 
>   OPTRA  4019, 4029  HIGH YIELD          $135 
>   OPTRA R, 4039, 4049 HIGH YIELD         $135 
>   OPTRA S 4059 HIGH YIELD                $135 
>   OPTRA E                                 $59 
>   OPTRA  N                               $115 
>  
> 
> EPSON 
> 
>   EPL-7000, 8000                         $105 
>   EPL-1000, 1500                         $105 
>  
> 
> CANON 
> 
>   LBP-430                                 $49 
>   LBP-460, 465                            $59 
>   LBP-8 II                                $54 
>   LBP-LX                                  $54 
>   LBP-MX                                  $95 
>   LBP-AX                                  $49 
>   LBP-EX                                  $59 
>   LBP-SX                                  $49 
>   LBP-BX                                  $95 
>   LBP-PX                                  $49 
>   LBP-WX                                  $95 
>   LBP-VX                                  $59 
>   CANON FAX L700 THRU L790 FX1            $59 
>   CANONFAX L5000 L70000  FX2              $59 
>  
> 
> CANON COPIERS 
> 
>   PC 20, 25 ETC....                       $89 
>   PC 3, 6RE, 7, 11  (A30)                 $69 
>   PC 320 THRU 780  (E40)                  $89 
>  
> 
> NEC 
> 
>   SERIES 2 LASER MODEL 90,95             $105
> 
> 
> PLEASE NOTE:
> 
> 1) ALL OUR CARTRIDGES ARE OEM COMPATABILE.
> 2) WE DO NOT SEND OUT CATALOGS OR PRICE LISTS 
> 3) WE DO NOT FAX QUOTES OR PRICE LISTS.  
> 5) WE DO NOT CARRY: BROTHER-MINOLTA-KYOSERA-PANASONIC PRODUCTS
> 6) WE DO NOT CARRY: XEROX-FUJITSU-OKIDATA OR SHARP PRODUCTS
> 7) WE DO NOT CARRY ANY COLOR PRINTER SUPPLIES    
> 8) WE DO NOT CARRY DESKJET/INKJET OR BUBBLEJET SUPPLIES
> 
> 
> ****OUR  ORDER LINE IS 770-399-0953 ****
> 
> 
> ****PLACE YOUR ORDER AS FOLLOWS**** :
> 
> BY PHONE   770-399-0953 
> 
> BY FAX:    770-698-9700 
> BY MAIL:   STATIC SYSTEMS
>            5334 LAKE VIEW CLUB
>            ATLANTA GA 30338
> 
> MAKE SURE YOU INCLUDE THE FOLLOWING INFORMATION IN YOUR ORDER: 
> 
>              1)  YOUR PHONE NUMBER 
>              2)  COMPANY NAME 
>              3)  SHIPPING ADDRESS 
>              4)  YOUR NAME 
>              5)  ITEMS NEEDED WITH QUANTITIES 
>              6)  METHOD OF PAYMENT. 
> 
> N0TE: (PRINTER TRADEMARK NAMES ARE USED ABOVE FOR REFERENCE 
>        ONLY AND ARE NOT INTENDED TO INFRINGE ON THOSE TRADEMARKS)
> 
>  
> 
> 
> 
> 
> 
> 
> 
>  
>  
>  
>  
>  
>  
>

Bounce Notice From Bitter Net

It looks like <bitter.net> does not support the standard <abuse@bitter.net> email address for reporting network abuse.

   
Received: from mail.daemons.net ([207.153.108.53])
	by thunder.tmisnet.com (8.9.3/8.9.0.Beta5) with SMTP id IAA17002
	for <strads@tmisnet.com>; Mon, 4 Sep 2000 08:48:28 -0700 (PDT)
Message-Id: <200009041548.IAA17002@thunder.tmisnet.com>
Received: (qmail 1121 invoked for bounce); 4 Sep 2000 15:30:49 -0000
Date: 4 Sep 2000 15:30:49 -0000
From: MAILER-DAEMON@mail.daemons.net
To: strads@tmisnet.com
Subject: failure notice
X-UIDL: 122f8626b15f881f5d98177da35755c9


Hi. This is the qmail-send program at mail.daemons.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<abuse@bitter.net>:
Sorry, no mailbox here by that name. (#5.1.1)

--- Below this line is a copy of the message.

Return-Path: <strads@tmisnet.com>
Received: (qmail 1118 invoked from network); 4 Sep 2000 15:30:48 -0000
Received: from softdnserror (HELO thunder.tmisnet.com) (root@209.218.174.5)
  by evil.daemons.net with SMTP; 4 Sep 2000 15:30:48 -0000
Received: from rainstorm (ppp37.tmisnet.com [209.218.174.37])
	by thunder.tmisnet.com (8.9.3/8.9.0.Beta5) with ESMTP id IAA16984;
	Mon, 4 Sep 2000 08:47:29 -0700 (PDT)
Message-Id: <200009041547.IAA16984@thunder.tmisnet.com>
From: "George Crissman" <strads@tmisnet.com>
To: <abuse@bitter.net>
Cc: <strads@tmisnet.com>
Subject: Spam Received, VIOLATES COURT ORDER!!  Was: your imaging supplies
Date: Mon, 4 Sep 2000 08:37:50 -0700
X-MSMail-Priority: Normal
X-Priority: 3
X-Mailer: Microsoft Internet Mail 4.70.1155
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Attn:  Bitter Net
> Received: from unknown (lemon.bitter.net [209.208.45.34])
The attached unsolicited advertising email apparently entered
the Internet on one of your computers. Please investigate and
take the necessary action to prevent future email from your customer
to me.  In addition, please verify that "Sam Khuri" aka "Benchmark
Print Supply" aka "Benchmark Supply" is actually involved in this spam
effort, since he is subject to a court order prohibiting him from sending 
spam email.  He is required to reimburse all recipients of his spam
email $1,000.00 per message sent, in accordance with the court order.

If Sam Khurt / Benchmark Supply was indeed the sender of this
spam, please advise and assist in the collection of the court-ordered
amount due.

Details are available online at:
http://www.tmisnet.com/~strads/spamhunt/benchmark/index.html

Thank you.

George Crissman
strads@tmisnet.com

--------- Message Header --------
Received: from unknown (lemon.bitter.net [209.208.45.34])
	by thunder.tmisnet.com (8.9.3/8.9.0.Beta5) with SMTP id NAA16051;
	Sun, 3 Sep 2000 13:31:19 -0700 (PDT)
From: bench1@techspot.com
Subject: your imaging supplies
Date: Sun, 3 Sep 2000 00:55:19
Message-Id: <0.407768.322051@>
X-UIDL: 978d90f4f956d0429cd1725d805cff4e

---------- Message Body ----------
> From: bench1@techspot.com
> To: 
> Subject: your imaging supplies
> Date: Saturday, September 02, 2000 5:55 PM
[ Removed For Brevity ]

Resubmission To Upstream Provider

Time to notify the upstream provider(s): Roadrunner, the Technical Contact, and the <abuse> address of the technical contact's domain.

Received: from rainstorm (ppp31.tmisnet.com [209.218.174.31])
	by thunder.tmisnet.com (8.9.3/8.9.0.Beta5) with ESMTP id JAA18192;
	Mon, 4 Sep 2000 09:46:30 -0700 (PDT)
Message-Id: <200009041646.JAA18192@thunder.tmisnet.com>
From: "George Crissman" <strads@tmisnet.com>
To: <abuse@rr.com>, <chrisbw@MINDSPRING.COM>, <abuse@MINDSPRING.COM>
Cc: <strads@tmisnet.com>
Subject: Spam Received, VIOLATES COURT ORDER!!  Was: failure notice
Date: Mon, 4 Sep 2000 09:36:55 -0700
X-MSMail-Priority: Normal
X-Priority: 3
X-Mailer: Microsoft Internet Mail 4.70.1155
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-UIDL: 0500b785f9b55accb87b116682cd3728

Attn:  Road Runner
> whois -h whois.arin.net 24.31.99.38
> TimeWarnerCable-Road-Runner-Atlanta-D4-March21-FiberNodes-24-31-98-0-to- 
>     (NETBLK-RRATLNTA98-99)RRATLNTA98-99        24.31.98.0 - 24.31.99.255 

The attached spam complaint concerns one of your subnet customers.
Please assist your customer in addressing and resolving this issue of
unsolicited advertising email.  As noted in the attached complaint, the
sender of this spam is violating a specific court order prohibiting this
activity.  Thank you.

Attn:  Bitter Net, Christopher B  Wilson, Technical Contact, and Mindspring Com
> Received: from unknown (lemon.bitter.net [209.208.45.34])
> Domain Name: BITTER.NET    
> Administrative Contact, Technical Contact, Zone Contact, Billing Contact:
>     Wilson, Christopher B  (CW40)  chrisbw@MINDSPRING.COM

The attached spam complaint bounced from the <abuse@bitter.net>
mailbox, an address required by RFC 2142 for email abuse issues.
Please implement <abuse@bitter.net>.

In addition, please address the attached spam complaint, since the
perpetrator is violating a court order prohibiting spamming.  Thank you.

George Crissman
strads@tmisnet.com




-------- Registry Information -----------
Official name: bitter.net
Addresses: 24.31.99.38

Whois for bitter.net
whois -h whois.crsnic.net bitter.net

Registrant:
Bitter Network (BITTER7-DOM)
   1001 Garden View Drive Suite 901
   Atlanta, GA 30319
   US    Domain Name: BITTER.NET    Administrative Contact, Technical Contact, Zone
Contact, Billing Contact:
      Wilson, Christopher B  (CW40)  chrisbw@MINDSPRING.COM
      Wilson Consulting
      120 Ralph McGill Blvd NE
      Suite 506
      Atlanta, GA 30308
      404-876-4471 (FAX) 352-375-2702    Record last updated on 23-Aug-2000.
   Record expires on 27-May-2001.
   Record created on 27-May-1998.
   Database last updated on 3-Sep-2000 14:54:03 EDT.    Domain servers in listed order:  
 NS1.DAEMONS.NET207.153.108.53
   NS2.DAEMONS.NET209.44.114.97

IP block lookup for 24.31.99.38
whois -h whois.arin.net 24.31.99.38
ServiceCo LLC - Road Runner (NET-ROAD-RUNNER-1)ROAD-RUNNER-1
     24.24.0.0 - 24.31.255.255
TimeWarnerCable-Road-Runner-Atlanta-D4-March21-FiberNodes-24-31-98-0-to-
(NETBLK-RRATLNTA98-99)RRATLNTA98-99
     24.31.98.0 - 24.31.99.255 



----------
> From: MAILER-DAEMON@mail.daemons.net
> To: strads@tmisnet.com
> Subject: failure notice
> Date: Monday, September 04, 2000 8:30 AM
> 
> Hi. This is the qmail-send program at mail.daemons.net.
> I'm afraid I wasn't able to deliver your message to the following addresses.
> This is a permanent error; I've given up. Sorry it didn't work out.
> 
> <abuse@bitter.net>:
> Sorry, no mailbox here by that name. (#5.1.1)
> 
> --- Below this line is a copy of the message.

[ Edited For Brevity ]

Autoacknowledgement From Road Runner

Received: from mail.sec.rr.com (mail.sec.rr.com [24.30.218.62])
	by thunder.tmisnet.com (8.9.3/8.9.0.Beta5) with ESMTP id JAA18225
	for <strads@tmisnet.com>; Mon, 4 Sep 2000 09:47:32 -0700 (PDT)
Received: (from twabuse@localhost)
	by mail.sec.rr.com (8.10.0/8.10.0) id e84GfGW21536;
	Mon, 4 Sep 2000 12:41:16 -0400
Date: Mon, 4 Sep 2000 12:41:16 -0400
Message-Id: <200009041641.e84GfGW21536@mail.sec.rr.com>
To: strads@tmisnet.com
In-Reply-To: <200009041646.JAA18192@thunder.tmisnet.com>
From: abuse@rr.com
Reply-To: please_do_not_reply@rr.com
Precedence: junk
Subject:    [Automatic Reply] Spam Received, VIOLATES COURT ORDER!!  Was: failure notice 
X-Loop:     abuse@rr.com
X-UIDL: 454c77444ea3c760f9184ac6b60e7134


          ==DO NOT REPLY DIRECTLY TO THIS MESSAGE==
 ==ROAD RUNNER WILL NOT SEE ANY REPLY SENT TO THIS MESSAGE==

Hello,

This is an automatic reply to confirm that your message has been 
received by Road Runner Security (abuse@rr.com) describing an 
incident of alleged service abuse. You will only receive this 
message once per day.

If you sent your message to an address other than 
abuse/security/fraud@rr.com, please be aware that your message 
was automatically forwarded to our centralized location at the 
address abuse@rr.com. You may wish to use abuse@rr.com, 
security@rr.com, or fraud@rr.com for all future issues. 

Road Runner is dedicated to ensuring that its service is used 
in a manner that is consistent with the policies set forth in 
its Terms of Service Agreement and Acceptable Use Policy. 
Road Runner takes all reported abuse complaints seriously, 
and will handle them in accordance with the above policies 
in a timely and efficient manner. Should we require further 
information regarding your complaint, we will contact you. 

Please note, although it is not always possible for us to 
provide a direct human response to your complaint, we do 
investigate *all* complaints. As such, please do not 
interpret a lack of response as a lack of action taken. 
If we find that a customer is in violation of our policies, 
we will take the necessary action to stop the activity in question.
 
Thank you for taking the time to contact Road Runner.

---Your Original Message Is Below---


Attn:  Road Runner
> whois -h whois.arin.net 24.31.99.38
> TimeWarnerCable-Road-Runner-Atlanta-D4-March21-FiberNodes-24-31-98-0-to- 
>     (NETBLK-RRATLNTA98-99)RRATLNTA98-99        24.31.98.0 - 24.31.99.255 

The attached spam complaint concerns one of your subnet customers.
Please assist your customer in addressing and resolving this issue of
unsolicited advertising email.  As noted in the attached complaint, the
sender of this spam is violating a specific court order prohibiting this
activity.  Thank you.

Attn:  Bitter Net, Christopher B  Wilson, Technical Contact, and Mindspring Com
> Received: from unknown (lemon.bitter.net [209.208.45.34])
> Domain Name: BITTER.NET    
> Administrative Contact, Technical Contact, Zone Contact, Billing Contact:
>     Wilson, Christopher B  (CW40)  chrisbw@MINDSPRING.COM

The attached spam complaint bounced from the <abuse@bitter.net>
mailbox, an address required by RFC 2142 for email abuse issues.
Please implement <abuse@bitter.net>.

In addition, please address the attached spam complaint, since the
perpetrator is violating a court order prohibiting spamming.  Thank you.

George Crissman
strads@tmisnet.com




-------- Registry Information -----------
Official name: bitter.net
Addresses: 24.31.99.38

Whois for bitter.net
whois -h whois.crsnic.net bitter.net

Registrant:
Bitter Network (BITTER7-DOM)
   1001 Garden View Drive Suite 901
   Atlanta, GA 30319
   US    Domain Name: BITTER.NET    Administrative Contact, Technical Contact, Zone
Contact, Billing Contact:
      Wilson, Christopher B  (CW40)  chrisbw@MINDSPRING.COM
      Wilson Consulting
      120 Ralph McGill Blvd NE
      Suite 506
      Atlanta, GA 30308
      404-876-4471 (FAX) 352-375-2702    Record last updated on 23-Aug-2000.
   Record expires on 27-May-2001.
   Record created on 27-May-1998.
   Database last updated on 3-Sep-2000 14:54:03 EDT.    Domain servers in listed order:  
 NS1.DAEMONS.NET207.153.108.53
   NS2.DAEMONS.NET209.44.114.97

IP block lookup for 24.31.99.38
whois -h whois.arin.net 24.31.99.38
ServiceCo LLC - Road Runner (NET-ROAD-RUNNER-1)ROAD-RUNNER-1
     24.24.0.0 - 24.31.255.255
TimeWarnerCable-Road-Runner-Atlanta-D4-March21-FiberNodes-24-31-98-0-to-
(NETBLK-RRATLNTA98-99)RRATLNTA98-99
     24.31.98.0 - 24.31.99.255 



----------
> From: MAILER-DAEMON@mail.daemons.net
> To: strads@tmisnet.com
> Subject: failure notice
> Date: Monday, September 04, 2000 8:30 AM
> 
> Hi. This is the qmail-send program at mail.daemons.net.
> I'm afraid I wasn't able to deliver your message to the following addresses.
> This is a permanent error; I've given up. Sorry it didn't work out.
> 
> <abuse@bitter.net>:
> Sorry, no mailbox here by that name. (#5.1.1)
> 
> --- Below this line is a copy of the message.
> 
> Return-Path: <strads@tmisnet.com>
> Received: (qmail 1118 invoked from network); 4 Sep 2000 15:30:48 -0000
> Received: from softdnserror (HELO thunder.tmisnet.com) (root@209.218.174.5)
>   by evil.daemons.net with SMTP; 4 Sep 2000 15:30:48 -0000
> Received: from rainstorm (ppp37.tmisnet.com [209.218.174.37])
> 	by thunder.tmisnet.com (8.9.3/8.9.0.Beta5) with ESMTP id IAA16984;
> 	Mon, 4 Sep 2000 08:47:29 -0700 (PDT)
> Message-Id: <200009041547.IAA16984@thunder.tmisnet.com>
> From: "George Crissman" <strads@tmisnet.com>
> To: <abuse@bitter.net>
> Cc: <strads@tmisnet.com>
> Subject: Spam Received, VIOLATES COURT ORDER!!  Was: your imaging supplies
> Date: Mon, 4 Sep 2000 08:37:50 -0700
> X-MSMail-Priority: Normal
> X-Priority: 3
> X-Mailer: Microsoft Internet Mail 4.70.1155
> MIME-Version: 1.0
> Content-Type: text/plain; charset=ISO-8859-1
> Content-Transfer-Encoding: 7bit
> 
> Attn:  Bitter Net
> > Received: from unknown (lemon.bitter.net [209.208.45.34])
> The attached unsolicited advertising email apparently entered
> the Internet on one of your computers. Please investigate and
> take the necessary action to prevent future email from your customer
> to me.  In addition, please verify that "Sam Khuri" aka "Benchmark
> Print Supply" aka "Benchmark Supply" is actually involved in this spam
> effort, since he is subject to a court order prohibiting him from sending 
> spam email.  He is required to reimburse all recipients of his spam
> email $1,000.00 per message sent, in accordance with the court order.
> 
> If Sam Khurt / Benchmark Supply was indeed the sender of this
> spam, please advise and assist in the collection of the court-ordered
> amount due.
> 
> Details are available online at:
> http://www.tmisnet.com/~strads/spamhunt/benchmark/index.html
> 
> Thank you.
> 
> George Crissman
> strads@tmisnet.com
> 
> --------- Message Header --------
> Received: from unknown (lemon.bitter.net [209.208.45.34])
> 	by thunder.tmisnet.com (8.9.3/8.9.0.Beta5) with SMTP id NAA16051;
> 	Sun, 3 Sep 2000 13:31:19 -0700 (PDT)
> From: bench1@techspot.com
> Subject: your imaging supplies
> Date: Sun, 3 Sep 2000 00:55:19
> Message-Id: <0.407768.322051@>
> X-UIDL: 978d90f4f956d0429cd1725d805cff4e
> 
> ---------- Message Body ----------
> > From: bench1@techspot.com
> > To: 
> > Subject: your imaging supplies
> > Date: Saturday, September 02, 2000 5:55 PM
> > 
> > 
> > 
> > 
> > 
> > 
> > STATIC SYSTEMS
> > 5334 LAKE VIEW CLUB
> > ATLANTA GA 30338
> > 770-399-0953
> > 
> > ***LASER PRINTER TONER CARTRIDGES***
> > ***FAX AND COPIER TONER***

[ Edited For Brevity ]

Autoacknowledgement From Mindspring Says "Not From Us!"

Mindspring has a program that reviews all abuse reports, looking for an IP number that matches their assigned address space. When no match is found between the IP numbers in the report and their address space, the following message is generated:

Received: from arkham.mindspring.com (arkham.mindspring.com [207.69.200.91])
	by thunder.tmisnet.com (8.9.3/8.9.0.Beta5) with ESMTP id JAA18213
	for <strads@tmisnet.com>; Mon, 4 Sep 2000 09:46:57 -0700 (PDT)
Received: (from abuse@localhost)
	by arkham.mindspring.com (8.9.0/8.9.0) id MAA26886;
	Mon, 4 Sep 2000 12:46:54 -0400 (EDT)
Date: Mon, 4 Sep 2000 12:46:54 -0400 (EDT)
From: Mindspring TOS <abuse@mindspring.com>
Message-Id: <200009041646.MAA26886@arkham.mindspring.com>
To: strads@tmisnet.com
References: <200009041646.JAA18192@thunder.tmisnet.com>
In-Reply-To: <200009041646.JAA18192@thunder.tmisnet.com>
Subject: Re:  Spam Received, VIOLATES COURT ORDER!!  Was: failure notice
X-UIDL: 477f2276e00f90a093c180baf04c733d

Hello,

You are receiving this message in follow-up to a report received by
the MindSpring AUP Abuse Department.  You may have submitted this
report to a number of addresses including but not limited to
abuse@netcom.com, abuse@mindspring.com, or abuse@sprynet.com.

It would appear from an automated check of your message that the
mail you are reporting did not originate from Mindspring.  Junk
emailers will often attempt to hide their true identities behind
false email addresses and other types of forgeries.  In general,
the numeric IP addresses within the reported mail's headers are
a much better indication of the mail's true origins. 
 
This report is being returned to you because there appear to be
no numeric IP addresses in the headers of the reported mail that
match IP addresses within our network.  This means that the mail
likely did not originate with us, and therefore we cannot
enforce our policies on the junk emailer. 

Advertising a Mindspring-hosted website via junk email is also
a violation of our policies, but our ticketing system sometimes
has difficulty in recognizing such reports.  If you are
reporting such a website, please read the remainder of this
message for resubmission instructions.

If you find that we have correctly identified this junk email as
coming from a non-Mindspring IP address, you may wish to visit
the following link to determine to whom your report should be
sent:

<http://www.abuse.net>

Further, the following links may help you identify future forgeries:

To learn how to interpret email headers: 
<http://help.mindspring.com/features/emailheaders/index.htm>

To investigate the owners of a numeric IP address:
<http://whois.arin.net>

To investigate the owners of a domain name:
<http://www.internic.net>

[ Arin.net, internic.net, and abuse.net are not directly affiliated
with MindSpring, they are external resources with which we
believe any internet citizen concerned about junk email should be
familiar. ]


If, upon review of your mail, you believe that your report should 
be personally reviewed by an abuse staff member, please reply to 
this message . Include this entire text and your original message
located below.  When resubmitting reports, please include a brief 
explanation as to why resubmission was necessary.  When we receive 
your resubmission with this message included, we'll investigate 
the matter and use it to further refine our filters.

Thanks for your report, 

MindSpring AUP Abuse Staff 

The MindSpring Appropriate Use Policy, Users Agreement, and Privacy
Policy can be found at: 
    <http://www.mindspring.com/aboutms/policy.html>
    <http://www.mindspring.net/prod-svc/users.html>
    <http://www.mindspring.net/prod-svc/privacy.htm>
>Attn:  Road Runner
>> whois -h whois.arin.net 24.31.99.38
>> TimeWarnerCable-Road-Runner-Atlanta-D4-March21-FiberNodes-24-31-98-0-to- 
>>     (NETBLK-RRATLNTA98-99)RRATLNTA98-99        24.31.98.0 - 24.31.99.255 

>The attached spam complaint concerns one of your subnet customers.
>Please assist your customer in addressing and resolving this issue of
>unsolicited advertising email.  As noted in the attached complaint, the
>sender of this spam is violating a specific court order prohibiting this
>activity.  Thank you.

>Attn:  Bitter Net, Christopher B  Wilson, Technical Contact, and Mindspring Com
>> Received: from unknown (lemon.bitter.net [209.208.45.34])
>> Domain Name: BITTER.NET    
>> Administrative Contact, Technical Contact, Zone Contact, Billing Contact:
>>     Wilson, Christopher B  (CW40)  chrisbw@MINDSPRING.COM

>The attached spam complaint bounced from the <abuse@bitter.net>
>mailbox, an address required by RFC 2142 for email abuse issues.
>Please implement <abuse@bitter.net>.

>In addition, please address the attached spam complaint, since the
>perpetrator is violating a court order prohibiting spamming.  Thank you.

>George Crissman
>strads@tmisnet.com

[ Edit for brevity ]

Resubmission To Mindspring With Clarification

Received: from rainstorm (ppp31.tmisnet.com [209.218.174.31])
	by thunder.tmisnet.com (8.9.3/8.9.0.Beta5) with ESMTP id KAA20017;
	Mon, 4 Sep 2000 10:59:28 -0700 (PDT)
Message-Id: <200009041759.KAA20017@thunder.tmisnet.com>
From: "George Crissman" <strads@tmisnet.com>
To: "Mindspring TOS" <abuse@mindspring.com>
Cc: <strads@tmisnet.com>
Subject: Re: Spam Received, VIOLATES COURT ORDER!!  Was: failure notice
Date: Mon, 4 Sep 2000 10:48:49 -0700
X-MSMail-Priority: Normal
X-Priority: 3
X-Mailer: Microsoft Internet Mail 4.70.1155
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-UIDL: a7e3cb8eb8baa1c5896186402771790a

Hello, Mindspring!

I am resubmitting this spam complaint to you because a member
of your staff, 
> >>     Wilson, Christopher B  (CW40)  chrisbw@MINDSPRING.COM
is the recognized administrative and technical contact for bitter.net.
Spam is originating at bitter.net, but it does not have an <abuse> 
email address for receiving complaints.  In addition to addressing your
staff member directly, I am sending this complaint to the Mindspring
<abuse> address to ensure this complaint is properly handled.

If Mr. Wilson is not a member of your staff, please investigate the
connection that exists between your customer and bitter.net to
determine if he is providing a spam support service.  Please advise me
of the results of your investigation.

Thank you.

George Crissman
strads@tmisnet.com

----------
> From: Mindspring TOS <abuse@mindspring.com>
> To: strads@tmisnet.com
> Subject: Re:  Spam Received, VIOLATES COURT ORDER!!  Was: failure notice
> Date: Monday, September 04, 2000 9:46 AM
> 
> Hello,
> 
> You are receiving this message in follow-up to a report received by
> the MindSpring AUP Abuse Department.  You may have submitted this
> report to a number of addresses including but not limited to
> abuse@netcom.com, abuse@mindspring.com, or abuse@sprynet.com.
> 
> It would appear from an automated check of your message that the
> mail you are reporting did not originate from Mindspring.  Junk
> emailers will often attempt to hide their true identities behind
> false email addresses and other types of forgeries.  In general,
> the numeric IP addresses within the reported mail's headers are
> a much better indication of the mail's true origins. 
>  
> This report is being returned to you because there appear to be
> no numeric IP addresses in the headers of the reported mail that
> match IP addresses within our network.  This means that the mail
> likely did not originate with us, and therefore we cannot
> enforce our policies on the junk emailer. 
> 
> Advertising a Mindspring-hosted website via junk email is also
> a violation of our policies, but our ticketing system sometimes
> has difficulty in recognizing such reports.  If you are
> reporting such a website, please read the remainder of this
> message for resubmission instructions.
> 
> If you find that we have correctly identified this junk email as
> coming from a non-Mindspring IP address, you may wish to visit
> the following link to determine to whom your report should be
> sent:

[ Edited For Brevity ]

Followup Autoacknowledgement From Mindspring

Received: from granger.mail.mindspring.net (granger.mail.mindspring.net [207.69.200.148])
	by thunder.tmisnet.com (8.9.3/8.9.0.Beta5) with ESMTP id MAA21776
	for <strads@tmisnet.com>; Mon, 4 Sep 2000 12:33:06 -0700 (PDT)
From: abuse@mindspring.net
Received: from mail.mindspring.com (bronx-yz.fw.mindspring.net [207.69.192.4])
	by granger.mail.mindspring.net (8.9.3/8.8.5) with ESMTP id PAA28092
	for <strads@tmisnet.com>; Mon, 4 Sep 2000 15:33:05 -0400 (EDT)
Received: (from dba@localhost)
	by mail.mindspring.com (8.9.1b+Sun/8.8.5) id OAA14605;
	Mon, 4 Sep 2000 14:19:25 -0400 (EDT)
Date: Mon, 4 Sep 2000 14:19:25 -0400 (EDT)
Message-Id: <200009041819.OAA14605@mail.mindspring.com>
To: strads@tmisnet.com
Precedence: Bulk
Subject: Re: MSHOSTED -  Re:  Spam Received, VIOLATES COURT ORDER!!  Was: failure notice 000904-15790089
X-UIDL: 8f467008379f94054443f5eb23536572

*****************************************************
To assist internal tracking, your report has been assigned the following 
issue identification number: 000904-15790089.  Please include this number in the 
"Subject:" of any subsequent e-mail regarding this issue.
*****************************************************

PLEASE READ!!! This is an AUTO-REPLY message in  response
to an email appearing to have originated from your address
and delivered to one of the email administration addresses,
most likely concerning a net-abuse issue.  This message 
is _not_ intended as a response to your report, but it does 
contain a wealth of information regarding net-abuse issues 
and other common e-mail problems.

Due to the volume of email that can sometimes occur, we
may not be able to respond individually to each message 
sent to this address, and will likely only do so when additional 
information is required.

EarthLink/Mindspring does not condone and will not permit abusive 
behavior by its users. Though no summary judgments are made, 
all reports we receive are investigated and action is taken
when and where it is appropriate.  The EarthLink/Mindspring AUP can 
be found at:

    http://www.mindspring.com/aboutms/aup.html

Now on to the good stuff...

Thanks for writing in!  For future reference, here are
items that will help us help you better: 

	- Complete Header information...
	- How to Complain to Providers about Spam...
	- IRC issues and complaints...
	- USENET issues and complaints...
	- Useful links to other web sites...

o       WE NEED *COMPLETE* HEADERS!!!  When sending in complaints
        regarding email and news reports please make sure that 
        you include *complete* header information.  Abbreviated headers 
        are often bogus and provide us with little information to 
        work with. You can learn more about viewing and interpreting 
        email headers at the following web page(s):

	http://help.mindspring.com/features/emailheaders/index.htm	
	http://help.mindspring.com/features/emailheaders/extended.htm


o	We primarily deal with SPAM that originated from within the
	Mindspring network.  If you received some SPAM that did not 
                originate from Mindspring or our associated domains, please 
                send your report/complaint to the originating ISP or network. 
                A good tutorial on "How to Complain to Providers about Spam" 
                to another ISP is avialble from:

	http://spam.abuse.net/spam/howtocomplain.html


o	If you have an issue or complaint with another user(s)
	behavior on the IRC network, we need the following information 
	before ANY action can be taken: 

		1.)  The /whois information for the user.*
		2.)  Logs of the activity. (Forged logs will be
		     ignored)
		3.)  A valid timestamp and what time-zone you are in.
		     * If the /whois information indicates that the
		     offender IS NOT a Mindspring customer, please
		     direct your complaints to the originating network
		     or ISP.	


o	When reporting newsgroup abuse, please remember that newsgroups are a
	public forum, and you have to choose to read a particular post.  We
	encourage you NOT to read the posts of anyone with whom you know
	you will disagree. To this end, we recommend the use of a
	newsreader that supports kill-filters. This will allow you to
	filter your newsreading so that you need never see a post from a
	particular author or with a particular subject, etc. 

	This does not mean that SPAM and other news group abuse should not be
	reported, only that MindSpring will not involve itself in personal
	disputes and differences of opinion. 

	You may wish to visit the following URL's: 
	
	        http://www.firelily.com/support/depression/trolls.html
                        http://www.firelily.com/support/recovery/flame.retardant.html

	While these were written with the newsgroup alt.support.depression
	in mind, they contain some _very_ useful suggestions for dealing
	with flames & trolls.


o	Here are some other handy links for you:
	

	"Figuring Out Fake E-mail & News Posts" (AKA "The Spam FAQ")
	Information on deciphering the origins of unwanted e-mail... 
	http://www.faqs.org/faqs/net-abuse-faq/spam-faq/index.html

	Spam: Where to Complain About Frauds & Scams:
                http://www.elsop.com/wrc/complain.htm

	Support FREE
	The Forum for Responsible and Ethical E-mail
	http://www.spamfree.org

Please note that our ticketing system does not process attachments.  Please 
include all portions of your complaint/report as plain text within the body of
your message.

-- 
EarthLink/Mindspring AUP Abuse Staff               <abuse@mindspring.net>
[ Restart ] Back to the Top
[ Main Hyperlink Page ] Main Page for Spamhunter's Resource.

Internet Data Mining Contents Copyright © 1998, 1999, 2000 by George Crissman. All rights reserved worldwide. Page design by George Crissman, strads@tmisnet.com, updated 9/04/2000.