letter to domain mx0.daemonmail

Hello Everyone,

When I came on-line last week, I was so upset about the e-amils you were receiving. When I logged off and checked my mail... I had the messages in not one but, two e-mail addresses. This was almost impossible for me to beleive. I had registered 3 addresses. Just in case the servers were down at one or two.

We are Gardeners... for goodness sake. Doesn't this happen on the "other" sites about relationships and "such". Well, I just couldn't stand it. I wrote Dave. Told him I was upset; and then came by to read... but, not post. I spent 4 nights without sleep. Night before last I crashed for 14 hours. I was determined to learn some things about all this. I am sooo.... computer impaired.

In the process I have neglected about 4 trades waiting. I am sorry. But, I make up a very nice "guilt" package when I do send out your seeds. Please, everybody... I will make it up to each of you. Right after I make it up to my Ol Blue Eyes.... *wink*. He slammed the bedroom door at 2am three nights ago. Today he has the homemade soup on... and all is fine.

I had to download new software and tighten up security. Then I jumped into days of research. First, let me tell you our Webmaster Dave... has quite a following. Dave... I sure enjoyed learning all about you. Don't worry...just business stuff. Why, on-line your almost as well known as Elvis. And members... we are one lucky bunch. Which we all knew anyway. *smile*.

So, to cut myself off at just the right time here... I did the research about all the e-mails. If the person who said their firewall at college would not let you into GardenWeb because of some sensored issue revolving around plant id... NO... I found the posting... and it has nothing to do with gardening. It didn't bother me, as such things are apart of life.

It is most amazing what a search engine will find with the correct wording. I have 2 therories at this time. One looks very possible. Considering both e-mails from GardenWeb were hit. And, I only registered one here.

So, this is a copy of the e-mail I just sent out to the Domain that served the e-mail we received from mx0.daemonmail.net. Tierranet at DomainDiscover.com. I spoke to both parties this morning. And, this letter is a follow-up to that conversation.

Below are my thoughts regarding where all this might have started and how our addresses got into the hands of "horro".
It may be a dead-end; but... I tried for myself and all my garden friends.

When I get an answer from them... about my questions; I will post it back here. For those of you who know me ... just write to my regular e-mail address, if you wish. Please put in something catchy... in the subject line. I have plenty to screen right out.

I hope this may let some of you know how much I care for my friends here... Yes, even the ones waiting for seeds. I have done over 300 trades + with the best folks I've ever known.

Give your shovel a hug for me... I'll have many more seeds next month.

A member of the first "Baby Boomer" graduation class.

Baby Bloomer




To DomainDiscover Support,

Thank you for your help to direct me to the correct person to speak to regarding the porn e-mail many on-line community
members have received.

The FBI, private individuals and many ISP's are involved in tracking down the person who sent this x-rated e-mail as
part of your routing system. We would like to know the name of the person who sent this Harrasing/Porn/Spam e-mail.
Please notify me when that information becomes available.

At this time, I would also like to know what is the "-gw" in the address listed below? :

as number 10 in the tracking record....

10 tierranet-gw.sndgca02.verio.net (207.67.240.42) 10.254 ms 9.671 ms
************

Please be advised if this above information is changed in anyway...I have saved the Tracker Information to a burned CD.
And, I will be happy to share it with any legal resources; in the event this "tierranet-gw"... routing address is
deleted or changed in any way.

Please reply today as there may be over one thousand people who are getting these e-mails on a daily basis. Many homes
have children with access to the computer. Some of the e-mails contained very x rated sites.

Not to mention the numbers of people who are members of GardenWeb.com and DavesGarden.com who have gotten porn e-mail on
a daily basis. These members do not feel safe opening their mail; and many have had to stop mail from many Web sites
they enjoyed; because this person has used false e-mail addresses to send these messages.

This person or parties are in violation of false representation of a number of well known Websites... including...
AOL.COM, YAHOO.COM, ABC.COM, AND DISNEY.COM.

Please let us know if the "Member/Visitor E-mail List for GardenWeb.com members or vistiors" was harvested by someone
and sold, bartered, given, rented, or leased to any third party. The "tierranet-gw" looks like an address that is
connected to ... GardenWeb(gw).com. Is this an address that was written off of a harvested list for or by a third party?
What exactly does "-gw" stand for?

Recently there have been many articles regarding this form of theft being looked into. I am referring to the present
litigation between Verio, Inc. (verio.net,com,org) and Register.com. Below is a small part of an article from
www.verio.com Web site.

"Verio Announces Actions in Response to Register.com Preliminary Injunction

ENGLEWOOD, Colo., January 3, 2001 - Verio Inc. has filed an appeal with the U.S. Court of Appeals for the Second Circuit
with respect to a December 8 ruling by the U.S. District Court for the Southern District of New York enjoining Verio
from using Register.com's WHOIS database for marketing purposes.

The company has also filed a petition ....."

The full article is posted at this Web site Address below:

http://www.home.verio.net/company/newsroom/2001/in_01_03_01.cfm
-----------------------------------------------------------------
Considering you have a working relationship with Verio.net and considering GARDENWEB.COM (The Virtual Mirror,
Inc./VirtualMirror.com/Vmirror.com) use the servers of Verio,Inc.(Verio.net)this makes the connection to the issue of
illegal/improper use of GARDENWEB.COM'S member lists even more relevant.

Vmirror.com has listed NBN.COM and BEST.COM as contacts. The Web site Vmirror.com has VMIRROR.COM AND DN.NET listed as
their domain servers.

www.VirtualMirror.com. has listed NBN.NBN.COM,MOON.NBN.COM,AND DNS.MSEN.COM as the 3 main servers for domain servers.

The bottom line is... the members of GardenWeb.com, DavesGarden.com, and possibly other garden sites; are receiving porn
and harrasement e-mail.

It is clearly know that there is a connection with the people who are/were members or visited as a guest to
www.GardenWeb.com. Whatever lists they use on their various Domains could be vulnerable to theft and then misuse by an
outside party.

We want to know who has done this, and if you or anyone you deal with in the remarks above; have willingly opened up our
private information to other sources.

Thank you for your help. We are taking this as a very serious threat to our families and the internet community at
large.

On behalf of a very large internet gardening community and myself.

Thank you,

Betty

--------------------------------------------------------------------
BELOW IS A COPY OF THE TRACKER INFORMATION YOU REQUESTED IN ORDER TO
ANSWER WHAT THE "-gw" IS IN LINE 10. of tracerouting for
mx0.daemonmail.com.
--------------------------------------------------------------------

Important - do not complain to ln.net on the grounds of anything you see here.

Address Digger Results
(Version 3.1beta)


-------------------------------------------------------------

Let's go!
Official name: mx0.daemonmail.net

Addresses: 209.75.4.101


--------------------------------------------------------------

Whois for mx0.daemonmail.net
.net is the global domain of Network services

(Whois queries for .net domains can be performed at http://rs.internic.net/cgi-bin/whois)

whois -h whois.crsnic.net daemonmail.net

Redirecting to TIERRANET, INC.

This WHOIS database is provided for information purposes only. We do
not guarantee the accuracy of this data. The following uses of this
system are expressly prohibited: (1) use of this system for unlawful
purposes; (2) use of this system to collect information used in the
mass transmission of unsolicited commercial messages in any medium;
(3) use of high volume, automated, electronic processes against this
database. By submitting this query, you agree to abide by this
policy.

Registrant:
DomainDiscover
P.O. BOX 502010
San Diego, CA 92150-2010
US

Domain Name: DAEMONMAIL.NET

Administrative Contact, Technical Contact, Zone Contact:
DomainDiscover
P.O. BOX 502010
San Diego, CA 92150-2010
US
877-518-4965
hostmaster@domaindiscover.com

Domain created on 28-Feb-2000
Domain expires on 28-Feb-2001
Last updated on 28-Oct-2000

Domain servers in listed order:

NS1.DAEMONMAIL.NET 209.240.132.120
NS2.DAEMONMAIL.NET 209.240.132.121

Register your domain today at http://www.domaindiscover.com


--------------------------------------------------------------------------------

IP block lookup for 209.75.4.101
whois -h whois.arin.net 209.75.4.101

Verio, Inc. (NET-VRIO-209-075)
8005 South Chester Street
Englewood, CO 80112
US

Netname: VRIO-209-075
Netblock: 209.75.0.0 - 209.75.255.255
Maintainer: VRIO

Coordinator:
Verio, Inc. (VIA4-ORG-ARIN) vipar@verio.net
303.645.1900

Domain System inverse mapping provided by:

NS0.VERIO.NET 129.250.15.61
NS1.VERIO.NET 204.91.99.140
NS2.VERIO.NET 129.250.31.190

Reassignment information for this block is
available at rwhois.verio.net port 4321

Record last updated on 29-Nov-2000.
Database last updated on 12-Mar-2001 06:31:58 EDT.

The ARIN Registration Services Host contains ONLY Internet
Network Information: Networks, ASN's, and related POC's.
Please use the whois server at rs.internic.net for DOMAIN related
Information and whois.nic.mil for NIPRNET Information.
Traceroute 209.75.4.101
This end is where samspade.org lives

1 206.117.161.1 (206.117.161.1) 0.600 ms 0.900 ms
2 isi-acg.ln.net (130.152.136.1) 331.68 ms 8.42 ms
3 usc-isi-atm.ln.net (130.152.128.2) 3.341 ms 3.441 ms
4 * fa-0-0-0.a01.lsanca01.us.ra.verio.net (209.189.66.65) 6.187 ms
5 ge-0-2-0.a05.lsanca01.us.ra.verio.net (129.250.29.122) 3.856 ms *
6 p4-0-0-0.a05.irvnca01.us.ra.verio.net (129.250.46.110) 5.642 ms 6.178 ms
7 ge-0-3-0.a06.irvnca01.us.ra.verio.net (129.250.46.54) 5.542 ms 6.574 ms
8 p4-6-0.r00.sndgca01.us.bb.verio.net (129.250.17.93) 8.684 ms 9.889 ms
9 ge-1-2.a03.sndgca01.us.ra.verio.net (129.250.27.100) 9.958 ms 10.720 ms
10 tierranet-gw.sndgca02.verio.net (207.67.240.42) 10.254 ms 9.671 ms
11 mx0.emailqueue.net (209.75.4.101) 8.900 ms 9.234 ms
This end is where the people you're tracerouting to live


-----------------------------------------------------------------



Sam Spade Home © Contact




This message was edited Monday, Mar 12th 10:18 PM