Warning: Achievewealth and marketing tips
Caroline Carlsten
Just a note to warn everyone about a guy called Morris L. Clopton posting
his so-called "marketing tips" from www.achievewealth.com. I've been
trying to get rid of him for months and he still sends me his crap.
The achievewealth domain is connected to texas.net, and I've even been
in touch with the abuse group over there - but they haven't been able to
help.
If anyone has any ideas of what to do next, I'd appreciate it. I read my
email with Pine, so it's no easy task to filter out creeps like this.
/caroline
--
carl...@astro.uio.no | http://www.uio.no/~carlsten/
Telenor 4tel AS / MIS | $HOME is where you hang your @
Morely Dotes
>
>Just a note to warn everyone about a guy called Morris L. Clopton posting
>his so-called "marketing tips" from www.achievewealth.com. I've been
>trying to get rid of him for months and he still sends me his crap.
>
>The achievewealth domain is connected to texas.net, and I've even been
>in touch with the abuse group over there - but they haven't been able to
>help.
>
>If anyone has any ideas of what to do next, I'd appreciate it. I read my
>email with Pine, so it's no easy task to filter out creeps like this.
OK, this is going to be a multi-stage process:
STEP 1. Know the enemy:
com is a domain of USA & International Commercial
Searches for .com can be run at http://rs.internic.net/cgi-bin/whois
whois -h whois.internic.net achievewealth.com ...
Registrant:
Seven "C's" (ACHIEVEWEALTH-DOM)
2653 Midway Street
Kissimmee, FL 34744-1954
US
Domain Name: ACHIEVEWEALTH.COM
Administrative Contact, Technical Contact, Zone Contact:
Kosch, George (GK191) webm...@INCOR.COM
+1 (403)459 4746 (FAX) +1 (403)459-2829
Billing Contact:
Clopton, Morris L (MLC120) mls...@MAGICNET.NET
(407) 847-8499 (FAX) (407) 847-8453
Record last updated on 31-Aug-98.
Database last updated on 28-Feb-99 14:55:00 EST.
Domain servers in listed order:
NS1.INCOR.COM 207.153.23.2
NS2.INCOR.COM 207.153.23.3
whois -h whois.arin.net !netblk-incor-3 ...
Incor Enterprises (NETBLK-INCOR-3)
35-26106 TWP Rd 532A
Spruce Grove, AB T7Y 1A3
CA
Netname: INCOR-3
Netblock: 207.153.30.0 - 207.153.30.255
Coordinator:
OANET Network Operations Center (ONO-ORG-ARIN) n...@OANET.COM
+1 (403) 425-5151
Fax- +1 (403) 425-3852
Record last updated on 22-Jan-98.
Database last updated on 2-Mar-99 16:12:49 EDT.
So, you're dealing with a Florida spammer who is provided DNS by a Canadian
outfit.
Traceroute supports that theory:
Trace achievewealth.com (207.153.30.205) ...
..
204.50.251.210 379ms 1132ms 1454ms TTL: 0
(core-spc-cal-1-hssi1-0.Sprint-Canada.Net probable bogus rDNS: host
not found [non-authoritative])
204.50.251.165 425ms 1089ms 1792ms TTL: 0
(spc-cal-4-fddi8-0.Sprint-Canada.Net probable bogus rDNS: host not
found [non-authoritative])
207.107.204.34 774ms 1063ms 1725ms TTL: 0 (core2-h4-0.edm.oa.net
probable bogus rDNS: host not found [non-authoritative])
204.209.13.5 704ms 973ms 1682ms TTL: 0 (d6-f0.edm.oa.net ok)
207.153.30.205 710ms 882ms 1642ms TTL:110 (achievewealth.com ok)
STEP 2: Document the problem:
Complain to ab...@ACHIEVEWEALTH.COM and send a CC: to ab...@INCOR.COM and BCC:
to yourself. If you get any response at all, save it. The next time you get
spammed, complain again and add ab...@SPRINT.NET and ma...@vix.com to the CC:
list, and be sure to mention that this is a repeat spammer.
STEP 3: File an RBL request.
After the spammer and his upstream have either blown you off or told you to
take a hike, bundle up all your documentation and send it to the BOFH at the
RBL, Nick Nicholas.
Also, if any of the headers indicate relay rape or forgery, that info should
go to the RBL team and ORBS immediately.
Keep us posted!
--
"Opt-out is a cop-out." - Jerry Bookter
[ Please don't post *and* e-mail. If your software inserts newsgroups header, don't email. ]
This message was tested on small, cute, furry animals
who cried piteously while it was being read to them.
Andrew Franz
& insert a rule which detects spam from the specific originator &
auto-forwards it to the abuse address of the spammers ISP.
Alternatively, if you change your client to Netscape, you can implement
a similar client-based rule. Unfortunately Netscape's standard rules
don't include 'forward', so you'll have to do it in JavaScript yourself.
Alternatively, just complain to the upstream provider of the
recalcitrant ISP.
Caroline Carlsten wrote:
>
> Just a note to warn everyone about a guy called Morris L. Clopton posting
> his so-called "marketing tips" from www.achievewealth.com. I've been
> trying to get rid of him for months and he still sends me his crap.
>
> The achievewealth domain is connected to texas.net, and I've even been
> in touch with the abuse group over there - but they haven't been able to
> help.
>
> If anyone has any ideas of what to do next, I'd appreciate it. I read my
> email with Pine, so it's no easy task to filter out creeps like this.
>
> /caroline
>
> --
> carl...@astro.uio.no | http://www.uio.no/~carlsten/
> Telenor 4tel AS / MIS | $HOME is where you hang your @
--
Andrew Franz
Spambait:
mailto:webmaster@localhost, mailto:abuse@localhost,
mailto:postmaster@localhost, mailto:ab...@aol.com,
mailto:ab...@demon.co.uk, mailto:ab...@flash.net,
mailto:ab...@alter.net, mailto:ab...@ee.net, mailto:postm...@pond.net,
mailto:commerc...@murkowski.senate.gov,
mailto:frau...@psinet.com, mailto:u...@ftc.gov