unforum

[toddkrein]

I got followed by Kevin

[toddkrein]

Sigh...

[WolfHawk]

...ishimisho employee picture

[Nighthawk]

Would you be able to post the full email header?

[WolfHawk]

Sure! ( hi nighthawk!) Here it is:

From Document Distributor Wed Mar 10 02:20:08 2010
X-Apparently-To: pm_butchSPLATyahoo.com via 67.195.15.74; Tue, 09 Mar 2010 18:20:46 -0800
Return-Path: <documentdistributor>
X-YMailISG: UtiioJoWLDt2QoUYkU_rYwQz4o2N45Pv6H8wIKLu2BSK4t7DiHHHwcXhAGWjb
brHSJPEUHGzIdLPGaHt3Os_aaIxiz.IWzwjRLAt3PHPexuhWMMSMsCitjnii.Ef_
HuPfwm7SpX0AThJ8BdXAwhxGCpG5xepVIdPlI.iw4tNiKBe1vKyvuDTSI9H4B
RGwvsepxkldVT4MDgyPnJXjWX8Vqo9mzStaWJrihurM9lgy5YJsNHoMru8c9O
Q0ydgFAyqPqs5DY099n8UGUcTfQZYZgA_kfu4lskwUQ02OTs9IzIKxSOVdigb
YRrJ0DDlmA3ld04eNrK3BO9ZxgYP
X-Originating-IP: [65.55.116.40]
Authentication-Results: mta1012.mail.sk1.yahoo.com from=; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO blu0-omc1-s29.blu0.hotmail.com) (65.55.116.40)
by mta1012.mail.sk1.yahoo.com with SMTP; Tue, 09 Mar 2010 18:20:45 -0800
Received: from BLU137-W27 ([65.55.116.8]) by blu0-omc1-s29.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 9 Mar 2010 18:20:08 -0800
Message-ID: <BLU137>
Return-Path: documentdistributorSPLAThotmail.com
Content-Type: multipart/mixed;
boundary="_7554a345-f571-451d-8d1b-916360601fd2_"
X-Originating-IP: [68.222.6.182]
From: Document Distributor <documentdistributor>
Subject: You've recieved a document!
Date: Tue, 9 Mar 2010 20:20:08 -0600
Importance: Normal
MIME-Version: 1.0
Bcc:
X-OriginalArrivalTime: 10 Mar 2010 02:20:08.0769 (UTC) FILETIME=[34895310:01CABFF8]
Content-Length: 4435009


*edited to add line breaks.

[Nighthawk]

OK, thanks. You caught me in a time of boredom.

Doesn't reveal much... 68.222.6.182 is a BellSouth subnet, and they're direct relaying through Hotmail.

As far as I can tell, the handwritten note states:

[MrToasty]

If it's Mashimisho I'd say have a look at the Kevin Balderock thread.

[Nighthawk]

Duh, yeah... The color and font (specifically the "h") is the same as http://www.mashimisho.us.to/

[WolfHawk]

Ok, I will make the same post over there.

Thanks guys!

[WolfHawk]

Hi all! Haven't been here in a while. Haven't really followed any ARGs recently. I originally posted this in a new thread but NightHawk and MrToasty said it should go over here.

I just received this odd email though and it seems like it could be something. I did a UF search for some of the words and nothing came up. What I can make out is:

...isimisho employee!
(strat?) agem
(personal ke?) y is
(ga?) mbit
Access codes below yours in order of privilege are
Dovecote
Common

Then there is a flowchart with what appears to be RN or RoN, AzMec., and STP. The note is smudged and difficult to read.

There is also what looks like a sunburst with the number 7 on one of the rays.

The email address etc. is:

Quote:
You've recieved a document!
...
Tue, March 9, 2010 8:20:08 PM
From:
Document Distributor <documentdistributor> [Chat now]
...
Add to Contacts
To:

document.png (3247KB) View Image
Sending random stuff to random people since 1997.
Hotmail: Powerful Free email with security by Microsoft. Get it now.


I tried looking up AzMec and got a Zambian Mineral Exploration site and a site selling orthopedic products.

*edited to add: (personal ke?)

[WolfHawk]

NightHawk requested the full header:

From Document Distributor Wed Mar 10 02:20:08 2010
X-Apparently-To: pm_butchSPLATyahoo.com via 67.195.15.74; Tue, 09 Mar 2010 18:20:46 -0800
Return-Path: <documentdistributor>
X-YMailISG: UtiioJoWLDt2QoUYkU_rYwQz4o2N45Pv6H8wIKLu2BSK4t7DiHHHwcXhAGWjb
brHSJPEUHGzIdLPGaHt3Os_aaIxiz.IWzwjRLAt3PHPexuhWMMSMsCitjnii.Ef_
HuPfwm7SpX0AThJ8BdXAwhxGCpG5xepVIdPlI.iw4tNiKBe1vKyvuDTSI9H4B
RGwvsepxkldVT4MDgyPnJXjWX8Vqo9mzStaWJrihurM9lgy5YJsNHoMru8c9O
Q0ydgFAyqPqs5DY099n8UGUcTfQZYZgA_kfu4lskwUQ02OTs9IzIKxSOVdigb
YRrJ0DDlmA3ld04eNrK3BO9ZxgYP
X-Originating-IP: [65.55.116.40]
Authentication-Results: mta1012.mail.sk1.yahoo.com from=; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO blu0-omc1-s29.blu0.hotmail.com) (65.55.116.40)
by mta1012.mail.sk1.yahoo.com with SMTP; Tue, 09 Mar 2010 18:20:45 -0800
Received: from BLU137-W27 ([65.55.116.8]) by blu0-omc1-s29.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 9 Mar 2010 18:20:08 -0800
Message-ID: <BLU137>
Return-Path: documentdistributorSPLAThotmail.com
Content-Type: multipart/mixed;
boundary="_7554a345-f571-451d-8d1b-916360601fd2_"
X-Originating-IP: [68.222.6.182]
From: Document Distributor <documentdistributor>
Subject: You've recieved a document!
Date: Tue, 9 Mar 2010 20:20:08 -0600
Importance: Normal
MIME-Version: 1.0
Bcc:
X-OriginalArrivalTime: 10 Mar 2010 02:20:08.0769 (UTC) FILETIME=[34895310:01CABFF8]
Content-Length: 4435009

[WolfHawk]

Ok, it's over there now. I attached the png file instead of the jpg.

[WolfHawk]

More communication. I responded to the initial email with this:

[WolfHawk]

Maybe a mod should delete this thread?

/edit: Thread merged. -ndemeter

[JohnJimJoeBob]

Oh man, I just got really excited because I thought "weapon" would be Paul's password (Music as a Weapon)... but no dice. Sad. I spent a few hours last night trying every word I could even possibly connect with music to no avail.

Yeah, I just found this/caught myself up for the most part last night. Howdy. Kevin has a new Tumblr post up, by the way.