🚀 go-pugleaf

In article <332395d8...@news.structured.net>,
cg <c...@spamstop.nightly.com> wrote:
>  I had a IP who refused to stop net spams..so I contacted his feed
>source,in this case it was Sprintnet..their security,after checking
>the facts..killed his net feed. It was a very high price to pay so you
>can bet that 99.9% of IP
>owners will stop spammers by simply killing their accounts. 
>  One tip..always get the full header of a spam message..in it is
>the source. From that info..do a whois and locate who actually owns
>the IP and where the IP is getting its feed. There are several great
>hunting tools around..I like ws_watch for one.  Good hunting

Ok...  so let's take an example.  (I would just like to make sure I (and
probably a fair number of other non-spam-lovers on the net) understand).  I am
taking Pizza Hut as an example, *not* because of Pizza Hut sending me spam, but
because it's the first thing I pulled off the top of my head:

********************************************************************************

Pizza Hut, Inc. (PIZZAHUT-DOM)
   9111 East Douglas
   Wichita, KS 67207
   US

   Domain Name: PIZZAHUT.COM

   Administrative Contact:
      Morgan, Gary  (GM2074)  gary....@PIZZAHUT.COM
      (316) 687-8482 (FAX) (316) 681-9168
   Technical Contact, Zone Contact:
      Lovgren, Chuck  (CL1600)  chuck....@PIZZAHUT.COM
      (316) 687-8803 (FAX) (316) 681-9168
   Billing Contact:
      Morgan, Gary  (GM2074)  gary....@PIZZAHUT.COM
      (316) 687-8482 (FAX) (316) 681-9168

   Record last updated on 21-Jan-97.
   Record created on 07-Dec-93.

   Domain servers in listed order:

   NS1.PIZZAHUT.COM             192.112.170.242
   NS.UU.NET                    137.39.1.3


The InterNIC Registration Services Host contains ONLY Internet Information
(Networks, ASN's, Domains, and POC's).
Please use the whois server at nic.ddn.mil for MILNET Information.

********************************************************************************

Does this mean that uunet is their ISP?  (That would strike me as odd...  I
know this was n+1 years ago, uunet was associated with uucp rather than inet...
my apologies if I'm just dating myself.)  If I had received spam from
pizzahut.com (or if it were some domain with a random user sending me spam),
would I contact uunet?

Or would I get the netfeed information from contacting their administrative or
technical zone contact?

Related question:  Frequently, spam (at least the spam I get) is roughly of the
following form:

********************************************************************************

From: lu...@foo.net
Subject: The best Dojigger(tm) you'll find anywhere on the planet!

Try out our Dojiggers!  They must be seen to believed!  blah blah blah blah
blah blah blah blah If you would like to be removed from our list, simply send
a message to this e-mail address with the words "[UNSUBSCRIBE|REGURGITATE|SPEW]
SPAM" in the subject, and we will not send you any more spam.  blah blah blah
blah  Or come check us out at http://www.dojigger.com/

********************************************************************************

Note that the spam is sent from a different domain than the commercial site.

I'm guessing that this is a bit of strategy/padding for the backside: they send
their spammers to e-mail out from other domains, so that they don't get
mailbombed and/or have their feed immediately yanked...  When you get spam
that clearly indicates that the business/whatever is using multiple sites
(one which sent the spam, one which you send orders or inquiries to, perhaps
another to serve as the web site...), is it possible (fruitful) to contact
the ISP for all of the domains (not just the one that does the dirty work
of actually sending out the spam)?  Or is it just that a dime-a-dozen
lu...@foo.net account gets yanked to be replaced by another one?


	-Jonathan