Reported by: Anne Bennett <anne@alcor.concordia.ca> Date: 1996/06/04

This is part of the infamous "moneyworld" series of mailings, with completely forged headers. These folks are well-known mail forgers; see the appended netnews article. At this point, we are rejecting anything that has passed through "moneyworld.com".

The following netnews article, which was retrieved from the Dejanews search service, explains the problem.

Subject: Info for "Willie watchers" From: jfeiszli@krypton.sdsmt.edu (Jim Feiszli) Date: 1996/04/19 Message-Id: <4l9541$8h7@news.sdsmt.edu> Distribution: world Organization: spam watchers central Keywords: William Newell, moneyworld.com, fincon.com, Fred Sterling, Newsgroups: news.admin.net-Abuse.misc The latest on the "Slick Willie" of the Internet: If I were a system administrator, I'd probably want to filter/block all incoming items from selfhelp.net, selfhelpnet.com, and netamerica1.com, because it looks like William Newell, sender of zillions of unwanted commercial messages, might be gearing up for more activities. After getting the plug pulled on moneyworld.com and fincon.com, he seems to have abandoned those domain names for the others mentioned above. My evidence is in a series of "whois" results, below. (It's a long trail, but follow it to the end!) "whois moneyworld.com" -- almost unchanged since ELI pulled the plug, but check out the new address on "Bob Williams" (alias "Willie Newell"?): Financial Connections, Inc (MONEYWORLD-DOM) 2508 5th Ave, #104 Seattle, WA 98121 USA Domain Name: MONEYWORLD.COM Administrative Contact, Technical Contact, Zone Contact: Williams, Bob (BW747) jemco19@NWLINK.COM 812-0808 Record last updated on 14-Mar-96. Record created on 26-Oct-95. Domain servers in listed order: NS1.MONEYWORLD.COM 206.79.196.15 NS2.MONEYWORLD.COM 207.0.56.16 ================ "whois bw747" (funny--I can't "ping" or "finger" nwlink.com at all...) Williams, Bob (BW747) jemco19@NWLINK.COM NetAmerica USA1 2508 5th Ave, #104 Seattle, WA 98121 812-0808 Record last updated on 16-Apr-96. ==================== "whois netamerica1.com" NetAmerica USA1 (NETAMERICA2-DOM) 2508 5th Ave, #104 Seattle, WA 98121 USA Domain Name: NETAMERICA1.COM Administrative Contact, Technical Contact, Zone Contact: Williams, Bob (BW747) jemco19@NWLINK.COM 812-0808 Record last updated on 16-Apr-96. Record created on 22-Jan-96. Domain servers in listed order: NS1.HELPNET.NET 38.243.232.5 NSH.HELPNET.NET 206.81.217.16 ================ "whois helpnet.net" (check the subtle difference in the "Contact") Self Help Institute (HELPNET3-DOM) 2508 5th Ave, #104 Seattle, WA 98121 USA Domain Name: HELPNET.NET Administrative Contact, Technical Contact, Zone Contact: Williams, Bob (BW746) willie@SELFHELPNET.COM 812-0808 Record last updated on 16-Apr-96. Record created on 23-Mar-96. Domain servers in listed order: NS1.HELPNET.NET 38.243.232.5 NSH.HELPNET.NET 206.81.217.16 ===================== "whois bw746" Williams, Bob (BW746) willie@SELFHELPNET.COM Self Help Institute 2508 5th Ave, #104 Seattle, WA 98121 812-0808 Record last updated on 23-Mar-96. ==================== "whois selfhelpnet.com" (here's the big "AHA!!!"-- remember "fincon.com"?) Financial Connections, Inc (SELFHELPNET-DOM) 2508 5th Ave, #104 Seattle, WA 98121 USA Domain Name: SELFHELPNET.COM Administrative Contact, Technical Contact, Zone Contact: Williams, Bob (BW747) jemco19@NWLINK.COM 812-0808 Record last updated on 16-Apr-96. Record created on 04-Mar-96. Domain servers in listed order: NS1.HELPNET.NET 38.243.232.5 NSH.HELPNET.NET 206.81.217.16 ================= "whois 206.81.217" U S WEST Internet Services (NETBLK-USW-INTERACT6) 3rd Avenue Building 1133 3rd Ave Seattle, WA 98101 Netname: USW-INTERACT6 Netblock: 206.81.192.0 - 206.81.223.0 Coordinator: Lundgren, Paul (PL84) paul@USWEST.NET (612) 672-8532 (FAX) (612) 672-8537 (FAX) (612) 672-8537 Domain System inverse mapping provided by: NS3.MN.USWEST.NET 204.147.80.1 BULLWINKLE.NE.INTERACT.NET 204.26.64.1 Record last updated on 16-Jan-96. ==================== USWest Internet has been called and warned--they'll be watching closely! a concerned netizen (don't bother with direct replies--the news server here is mis-configured, producing an invalid return address)