Wednesday, 1 June 2011

Spam from streetdeal.my via mailengine1.com [72.19.193.26]

Return-path:
Delivery-date: Thu, 05 May 2011 14:01:24 +0500
Received: from me-ss2-avmgip.mailengine1.com ([72.19.193.26])
by x.com with esmtp (Exim 4.75 (FreeBSD))
(envelope-from )
id 1QHuQx-000OuI-SJ
for x@x.com; Thu, 05 May 2011 14:01:23 +0500
Received: by me-ss2-avmgip.mailengine1.com (PowerMTA(TM) v3.5r15sb7) id ho9jm00jql4t for ; Thu, 5 May 2011 02:01:13 -0700 (envelope-from )
Content-Type: multipart/alternative; boundary="_----------=_1073964459106330"
MIME-Version: 1.0
X-Mailer: StreamSend2 - 334297
X-Mailer-Version: 2.0
X-Mailer-Environment: production
X-Report-Abuse-At: abuse@streamsend.com
X-Report-Abuse-Info: It is important to please include full email headers in the report
X-rpcampaign: StreamSend13871343
X-Streamsend2id: 334297+1+1492713+13871343+me-ss2-avmgip.mailengine1.com
Date: Thu, 05 May 2011 02:00:07 -0700
From: "StreetDeal.my"
Reply-To: "StreetDeal.my"


Wednesday, 4 May 2011

spam from luxuryvillasturkey.com - 83.104.180.55

Received: from 50.22.136.54-static.reverse.softlayer.com ([50.22.136.54]) by
ixe-mta-20.emailfiltering.com with emfmta (version 4.8.1.33) by TLS id
107341770 for x@x.com;7189ac89925a78af; Wed, 04 May 2011
12:52:08 +0100
Received: from luxury by sta.stageplanet.com with local (Exim 4.69)
(envelope-from ) id 1QHacf-0005Dy-6B for
x@x.com; Wed, 04 May 2011 12:52:05 +0100
To:
Subject: Dates still available for luxury villa holidays in Turkey
X-PHP-Script: luxuryvillasturkey.com/newsletter/admin/index.php for 83.104.180.55
Recieved:
Date: Wed, 4 May 2011 12:52:05 +0100
From: John Cummins - Luxury Villas Turkey
Message-ID: <11998da2e127b1d3baef7754762517a9@luxuryvillasturkey.com>
X-Priority: 3
X-Mailer: PHPMailer [version 1.73]
X-Mailer: phplist v2.10.13
X-MessageID: 56
X-ListMember: x@x.com
Precedence: bulk
MIME-Version: 1.0


sipaura.com - spam from 83.104.180.55 (demon adsl)

Received: from lon1-post-2.mail.demon.net ([195.173.77.149]) by
gse-mta-20.emailfiltering.com with emfmta (version 4.8.1.33) vanilla
id 87712872 for x@x.com;8ea8af8a3a5d3c5f; Tue,
03 May 2011 20:10:35 +0100
Received: from tempbest1-adsl.demon.co.uk ([83.104.180.55] helo=SERVER) by
lon1-post-2.mail.demon.net with smtp (Exim 4.69) id 1QHKzS-0005S0-b8
for x@x.com; Tue, 03 May 2011 19:10:34 +0000
From: Tim at Sipaura Communications

We have been commissioned by snom to recruit a small select group of committed resellers to expand their presence in the telecoms channel. Now you can join snom and grow with them. We are offering just ten resellers a new superb program that delivers real value and differentiates you from your competitors.

Wednesday, 19 January 2011

spam from: firefigure.com 94.102.50.181

Return-path:
Received: from [94.102.50.181] (helo=mx1.firefigure.com)
with smtp (Exim 4.73 (FreeBSD))
(envelope-from )
id 1Pfdwu-000OGW-0o
for a@a.com; Wed, 19 Jan 2011 23:44:09 +0400
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 7bit;
Subject: Check Out the New Hybrids
Date: Wed, 19 Jan 2011 14:43:57 -0500
Message-ID: <20110119144357.rywwlcrehwyd@mx1.firefigure.com>
From: HybridCar

more jsm Spam from Singapore

Return-path: <"wmsps 
Delivery-date: Wed, 19 Jan 2011 19:12:17 +0400
Received: from mercury113.networknoc.com ([203.116.57.92] helo=mercury143.networknoc.com)
by a.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.73 (FreeBSD))
(envelope-from <"wmsps )
id 1PfZhn-0005CB-23
for a@a.com; Wed, 19 Jan 2011 19:12:17 +0400
Received: (qmail 29965 invoked from network); 19 Jan 2011 16:09:28 +0800
Received: from unknown (HELO localhost) (203.116.57.72)
by 203.116.57.72 with SMTP; 19 Jan 2011 16:09:28 +0800
MIME-Version: 1.0
From: "wmsps" 
Subject: Staff Placement
X-Mailer: HTML Mime mail class
Date: Wed, 19 Jan 11 16:09:28 +0800
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Message-ID: 
To: lists@1worldbusiness55.com

More spam from the same owner, different domain: newway5.com [117.120.2.242]
Received: from newway5.com ([117.120.2.242] helo=FreddyNgiam5)
by a.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.73 (FreeBSD))
(envelope-from <"admin )
id 1PcOXQ-000BVW-G6
for a@a.com; Tue, 11 Jan 2011 00:40:27 +0400
Received: (qmail 3286 invoked from network); 11 Jan 2011 04:21:24 +0800
Received: from newway5.com (HELO localhost) (117.120.2.242)
by newway5.com with SMTP; 11 Jan 2011 04:21:24 +0800
MIME-Version: 1.0
From: "Admin" 
Subject: 2000 Tuition & Other Jobs. Apply Now!
X-Mailer: HTML Mime mail class
Date: Tue, 11 Jan 11 04:21:24 +0800
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Message-ID: 
To: lists@newcentury69.com


and another one(newstaff2.com):

Return-path: <"jsm 
Delivery-date: Tue, 11 Jan 2011 01:19:31 +0400
Received: from newstaff2.com ([117.120.2.235] helo=FreddyNgiam2)
by ao.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.73 (FreeBSD))
(envelope-from <"jsm )
id 1PcP9E-000D2d-Ba
for a@a.com; Tue, 11 Jan 2011 01:19:31 +0400
Received: (qmail 24317 invoked from network); 11 Jan 2011 04:05:24 +0800
Received: from newstaff2.com (HELO localhost) (117.120.2.235)
by newstaff2.com with SMTP; 11 Jan 2011 04:05:24 +0800
MIME-Version: 1.0
From: "JSM" 
Subject: SAVE 90% On Job Ads. Recruit Online.
X-Mailer: HTML Mime mail class
Date: Tue, 11 Jan 11 04:05:23 +0800
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Message-ID: 
To: lists@newmailer66.com

WHOIS Data:
Registrant:
Jeffrey Ng
5001 Beach Road
Singapore, 199588
Singapore

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: NEWWAY5.COM
Created on: 03-Mar-10
Expires on: 03-Mar-11
Last Updated on: 13-Apr-10

Administrative Contact:
Ng, Jeffrey netsurfs@yahoo.com.sg
5001 Beach Road
Singapore, 199588
Singapore
+65.62993201 Fax --

Technical Contact:
Ng, Jeffrey netsurfs@yahoo.com.sg
5001 Beach Road
Singapore, 199588
Singapore
+65.62993201 Fax --

Domain servers in listed order:
NS25.DOMAINCONTROL.COM
NS26.DOMAINCONTROL.COM

Thursday, 25 November 2010

New Spammer today - woodhammocks.com

Our spam traps are receiving about 6 spam e-mails per hour from woodhammocks.com today.


Domain WHOIS data:

Registrant:
Wood Hammocks, Inc.
133 sunset hill rd
New Canaan, Connecticut 06840
United States

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: WOODHAMMOCKS.COM
Created on: 12-Apr-10
Expires on: 12-Apr-12
Last Updated on: 01-Jun-10

Administrative Contact:
Goldberg, Barry admin@woodhammocks.com
Wood Hammocks, Inc.
133 sunset hill rd
New Canaan, Connecticut 06840
United States
+1.2034233152 Fax --

Technical Contact:
Goldberg, Barry admin@woodhammocks.com
Wood Hammocks, Inc.
133 sunset hill rd
New Canaan, Connecticut 06840
United States
+1.2034233152 Fax --

Domain servers in listed order:
NS1.WOODHAMMOCKS.COM
NS2.WOODHAMMOCKS.COM


Spam origin IP addresses: 76.72.160.106 76.72.160.107 76.72.160.108 76.72.160.109


From Government Grants Thu Nov 25 12:59:21 2010
X-Apparently-To: x@x.com via 206.190.38.213; Thu, 25 Nov 2010 05:02:37 -0800
Return-Path: 
X-Originating-IP: [76.72.160.108]
Received: from 127.0.0.1  (EHLO mx4.woodhammocks.com) (76.72.160.108)
  by spamtrap with SMTP; Thu, 25 Nov 2010 05:02:36 -0800
Received: from WIN-GQT8S9O8AIU (199.187.126.138) by mx4.woodhammocks.com (PowerMTA(TM) v3.5r15) id htpfzk0mnfgm for ; Thu, 25 Nov 2010 07:59:28 -0500 (envelope-from )
MIME-Version: 1.0
From: "Government Grants" 
To: x@x.com
Subject: People go back to school every day, so can you.
Date: Thu, 25 Nov 2010 04:59:21 -0800
Message-ID: 
Content-Transfer-Encoding: base64
Content-Length: 6570

Pick a degree, and we'll sort through more than 2,000 programs to find the schools that match you best.

Education Advisors Will Help You:
 Degree Icon  

Find a degree you'll love
 
 Piggy Bank Icon  

Explore financial aid options
 
 Enrollment Icon  Complete the enrollment process

Thursday, 11 February 2010

checkit392.com MSN spam

MSN SPAM Advertising checkit392.com:

(9:57:09 AM) cockleburukbl.u@hotmail.com: Hey Sam%20S check out http://Checkit392.com
WHOIS Data on CHECKIT392.COM

Visit AboutUs.org for more information about CHECKIT392.COM
AboutUs: CHECKIT392.COM

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com

Domain name: CHECKIT392.COM

Registrant Contact:
   WhoisGuard
   WhoisGuard Protected ()

   Fax:
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Administrative Contact:
   WhoisGuard
   WhoisGuard Protected (c2914972fe6f4a7583aa0ed5bfa17517.protect@whoisguard.com
)
   +1.6613102107
   Fax: +1.6613102107
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Technical Contact:
   WhoisGuard
   WhoisGuard Protected (c2914972fe6f4a7583aa0ed5bfa17517.protect@whoisguard.com
)
   +1.6613102107
   Fax: +1.6613102107
   8939 S. Sepulveda Blvd. #110 - 732
   Westchester, CA 90045
   US

Status: Locked

Name Servers:
   dns1.registrar-servers.com
   dns2.registrar-servers.com
   dns3.registrar-servers.com

Creation date: 13 Feb 2009 15:23:32
Expiration date: 13 Feb 2010 15:23:32

Saturday, 14 November 2009

Spam from Vietnam IP[222.255.82.3] pretending to be FBI (agentpetersmith@aol.com)

Don't fall for this scam:


Return-path:
Delivery-date: Sat, 14 Nov 2009 17:17:14 +0400
Received: from mail.thuviendongnai.gov.vn ([222.255.82.3] helo=dongnailibrary.thuviendongnai.gov.vn)
by x.com with esmtp (Exim 4.51 (FreeBSD))
id 1N9ISP-0004ao-Ty
for x@x.com; Sat, 14 Nov 2009 17:17:14 +0400
Received: from User ([117.25.129.200]) by dongnailibrary.thuviendongnai.gov.vn with Microsoft SMTPSVC(6.0.3790.1830);
Sat, 14 Nov 2009 20:15:30 +0700
Reply-To: <>
From: "F.B.I"
Subject: 1 New Important Message
Date: Sat, 14 Nov 2009 14:11:43 -0000
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID:
X-OriginalArrivalTime: 14 Nov 2009 13:15:32.0984 (UTC) FILETIME=[8BAD5780:01CA652C]

Federal Bureau of Investigation
Anti-Fraud/Crimes Division.
Federal Bureau Of Investigation.
J. Edgar. Hoover Building,
Telephone Number : (206) 984 - 0470

ATTN: BENEFICIARY

This is to Officially inform you that it has come to our notice and we have thoroughly completed an Investigated with the help of our Intelligence Monitoring Network System that you are having an illegal transaction with Impostors claiming to be Prof. Charles C. Soludo of the Central Bank Of Nigeria, Mr. Patrick Aziza, Mr Frank Nweke, none officials of Oceanic Bank, none officials of Zenith Bank and some impostors claiming to be the Federal Bureau Of Investigation agents. During our Investigation, it came to our notice that the reason why you have not received your payment is because you have not fulfilled your Financial Obligation given to you in respect of your Contract/Inheritance Payment.


So therefore, we have contacted the Federal Ministry Of Finance on your behalf and they have brought a solution to your problem by coordinating your payment in the total amount of $800,000.00 USD which will be deposited into an ATM CARD which you will use to withdraw funds anywhere of the world. You now have the lawful right to claim your funds which have been deposited into the ATM CARD.


Since the Federal Bureau of Investigation has been involved in this transaction, you are now to be rest assured that this transaction is legitimate and completely risk-free as it is our duty to Protect and Serve citizens of the United States Of America. All you have to do is immediately contact the ATM CARD CENTER via E-mail for instructions on how to procure your Approval Slip which contains details on how to receive and activate your ATM CARD for immediate use to withdraw funds being paid to you. We have confirmed that the amount required to procure the Approval Slip will cost you a total of $450 USD which will be paid directly to the ATM CARD CENTER agent via Western Union Money Transfer / MoneyGram Money Transfer. Below, you shall find contact details of the Agent whom will process your transaction:


CONTACT INFORMATION

NAME: AGENT PETER SMITH



Immediately contact AGENT PETER SMITH of the ATM Card Centre with the following information:

Full Name:
Address:
City:
State:
Zip Code:
Direct Phone Number:
Current Occupation:

Annual Income:


Once you have sent the required information to Agent Peter Smith he will contact you with instructions on how to make the payment of $450 USD for the Approval Slip after which he will proceed towards delivery of the ATM CARD without any further delay. You have hereby been authorized/guaranteed by the Federal Bureau Of Investigation to commence towards completing this transaction, as there shall be NO delay once payment for the Approval Slip has been made to the authorized agent.


Once you have completed payment of $450 to the agent in charge of this transaction, immediately contact me back so as to ensure your ATM CARD gets to you rapidly.



FBI Director 
Robert Mueller
.
NSB Seal                                                                 

                                                                                            

                                                                        Authorized Signature

 FBI Director
Robert Mueller.

NOTE: Do disregard any email you get from any impostors or offices claiming to be in possesion of your ATM CARD, you are hereby adviced only to be in contact with Agent Peter Smith of the ATM CARD CENTRE who is the rightful person to deal with in regards to your ATM CARD PAYMENT and forward any emails you get from impostors to Agent Peter Smith so we could act upon and commence investigation.

 
.

Friday, 13 November 2009

MSN Spam (spim) advertising make310.com [83.140.191.169]

spim from Look2381.com

then from

make9181.com


now it is make310.com make009.com



(9:39:16 AM) helenatewod@hotmail.com: Hey Sam check out http://Make310.com
(5:35:05 PM) cotoneasterflad@hotmail.com: Hey Sam check out http://Make310.com
(1:14:10 PM) slotxmsnh@hotmail.com: Hey Sam check out http://Make310.com
(2:20:15 PM) ponchowureo@hotmail.com: Hey Sam check out http://Make310.com
(2:03:51 PM) maudesycuwyh@hotmail.com: Hey Sam check out http://Make310.com
(2:13:08 PM) magnumblevb@hotmail.com: Hey Sam check out http://Make310.com
(4:42:27 PM) madgehozazy@hotmail.com: Hey Sam check out http://Make009.com
(1:00:57 PM) emmaxizefy@hotmail.com: Hey Sam check out http://Make009.com
(11:42:50 AM) hillarynofux@hotmail.com: Hey Sam check out http://Make009.com
(10:25:49 AM) marshabemyda@hotmail.com: Hey Sam check out http://Make009.com
(1:54:29 PM) jacklynbepaw@hotmail.com: Hey Sam check out http://Make310.com
(1:31:21 PM) ceceliazirakeg@hotmail.com: Sam 7 It's time to make a change in your performance http://chickfavor.com
(4:50:47 PM) guadalupecydox@hotmail.com: Sam 9 Generic or Brand Named, Your Choice! http://chickfavor.com
(9:23:42 PM) tinazalubod@hotmail.com: Sam 5 ROLEX, GUCCI, LOUIS VUITTON at Cheap Prices for the Holidays! http://lampcool.com



WHOIS make310.com make009.com all registered to the same person

Domain Name : make310.com

Registrant Contact Information :
ZHANGT
HEIHE YANJIU GONGSI
janeob@126.com
GUANGRONG, 200546
tel:
fax:

Administrative Contact Information :
ZHANGT
HEIHE YANJIU GONGSI
janeob@126.com
GUANGRONG, 200546
tel:
fax:

Technical Contact Information :
ZHANGT
HEIHE YANJIU GONGSI
janeob@126.com
GUANGRONG, 200546
tel:
fax:

Billing Contact Information :
ZHANGT
HEIHE YANJIU GONGSI
janeob@126.com
GUANGRONG, 200546
tel:
fax:

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.kevlarhost.com
ns2.kevlarhost.com

Registration Date :2009-11-11
Expiration Date : 2010-11-11

For more information, please go to http://whois.ename.com.

Monday, 9 November 2009

MSN IM Spam (Spim) advertising tr.im (67.23.26.211)

New wave of MSN Spam started today inviting to visit tr.im


elinburchett294rl@hotmail.com: want a special someone? http://tr.im/Ezql


WHOIS Query on domain tr.im
WHOIS Query
------------ 
Domain Name:    TR.IM
Domain Managers
Name: Eric Woodward
Address
#205 - 280 Nelson Street
Vancouver, BC
V6B 2E2
Canada
Domain Owners / Registrant
Name: Eric Woodward
Address
#205 - 280 Nelson Street
Vancouver, BC
V6B 2E2
Canada
Administrative Contact
Name:  Eric Woodward
Address
#205 - 280 Nelson Street
Vancouver, BC
V6B 2E2
Canada
Billing Contact
Name:  Eric Woodward
Address
#205 - 280 Nelson Street
Vancouver, BC
V6B 2E2
Canada
Technical Contact
Name:  Eric Woodward
Address
#205 - 280 Nelson Street
Vancouver, BC
V6B 2E2
Canada
Domain Details
Expiry Date: 18/06/2010 00:59:58
Name Server: ns1.slicehost.net.
Name Server: ns2.slicehost.net.
Name Server: ns3.slicehost.net.

Wednesday, 28 October 2009

backscatter spam from IP: 62.128.193.152


Delivery-date: Sun, 25 Oct 2009 09:06:06 +0400
Received: from mta2.iomartmail.com ([62.128.193.152])
by x.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.51 (FreeBSD))
id 1N1vIr-0006Zk-JS
for x@x.com; Sun, 25 Oct 2009 09:06:06 +0400
Received: from localhost (localhost)
by mta2.iomartmail.com (8.12.11.20060308/8.12.11) id n9P565bR017816;
Sun, 25 Oct 2009 05:06:05 GMT
Date: Sun, 25 Oct 2009 05:06:05 GMT
From: Mail Delivery Subsystem
Message-Id: <200910250506.n9P565bR017816@mta2.iomartmail.com>
To:
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="n9P565bR017816.1256447165/mta2.iomartmail.com"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)

This is a MIME-encapsulated message

--n9P565bR017816.1256447165/mta2.iomartmail.com

The original message was received at Sun, 25 Oct 2009 05:05:57 GMT
from localhost.localdomain [127.0.0.1]

----- The following addresses had permanent fatal errors -----

(reason: 550 Rejecting message scored for more than 8.0 (10.6) SPAM points.)

----- Transcript of session follows -----
.... while talking to arminco.com.:
>>> DATA
<<< 550 Rejecting message scored for more than 8.0 (10.6) SPAM points. 554 5.0.0 Service unavailable --n9P565bR017816.1256447165/mta2.iomartmail.com Content-Type: message/delivery-status Reporting-MTA: dns; mta2.iomartmail.com Received-From-MTA: DNS; localhost.localdomain Arrival-Date: Sun, 25 Oct 2009 05:05:57 GMT --n9P565bR017816.1256447165/mta2.iomartmail.com Content-Type: text/rfc822-headers Return-Path:
Received: from mta2.iomartmail.com (localhost.localdomain [127.0.0.1])
by mta2.iomartmail.com (8.12.11.20060308/8.12.11) with ESMTP id n9P55vbR017802
for ; Sun, 25 Oct 2009 05:05:57 GMT
Received: from 115-64-111-43.tpgi.com.au (115-64-111-43.tpgi.com.au [115.64.111.43])
by mta2.iomartmail.com (8.12.11.20060308/8.12.11) with ESMTP id n9P55sD5017696
for ; Sun, 25 Oct 2009 05:05:55 GMT
Date: Sun, 25 Oct 2009 05:05:54 GMT
Message-Id: <200910250505.n9P55sD5017696@mta2.iomartmail.com>
From: "Hattie Bundage"
To: flavius.geerdes@x.com
Subject: Bring Xbox please
Content-type: text/html; charset="UTF-8"
Content-transfer-encoding: 8BIT
MIME-Version: 1.0

Fun Tobids (fun2bids) Malaysian Facebook spam

Some spammers are now using legitimate systems like Facebook to send out spam via FacebookMail - here is one:


Hi spamtrap@x.com

I set up a Facebook profile where I can post my pictures, videos and =
events and I want to add you as a friend so you can see it. First, you =
need to join Facebook! Once you join, you can also create your own =
profile.

----------
Come to join and take a look at fun2bids[dot]com Interesting web where you =
can find ultimate true bargain. 50% cheaper from retail price guarantee!
----------

Thanks,
Fun

Tuesday, 20 October 2009

Russian spam from IP: 79.3.86.50

Return-path: 
Delivery-date: Tue, 20 Oct 2009 21:29:46 +0500
Received: from host50-86-dynamic.3-79-r.retail.telecomitalia.it ([79.3.86.50] helo=mx1.nextmail.ru)
by c.com with esmtp (Exim 4.51 (FreeBSD))
id 1N0Hah-000537-8x; Tue, 20 Oct 2009 21:29:46 +0500
Message-ID: <001901ca51a2$82004cd0$5c2fa8c0@host5086dynamic.379r.retail.telecomitalia.it>
From: "=?utf-8?B?0KEg0YPRgdGC0L3QvtCz0L4g0L3QsCDQv9C40YHRjNC80LXQvdC90YvQuQ==?=" 
To: x@x.com
Subject: =?utf-8?B?0J/QtdGA0LXQstC+0LTRh9C40LrQuCDRgdC+INCy0YHQtdGFINGP0LfRi9C60L7QsiDQvNC40YDQsA==?=
Date: Tue, 20 Oct 2009 20:29:34 +0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0016_01CA51C4.01CA51C4"
X-Yahoo-Profile: mosenglish
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6000.16480
X-MimeOLE: Produced By Microsoft MimeOLE V6.1.7100.0

This is a multi-part message in MIME format.

------=_NextPart_000_0016_01CA51C4.01CA51C4
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable

=D0=9F=D0=B8=D1=81=D1=8C=D0=BC=D0=B5=D0=BD=D0=BD=D1=8B=D0=B5 =D0=B8 =
=D1=83=D1=81=D1=82=D0=BD=D1=8B=D0=B5 =
=D0=BF=D0=B5=D1=80=D0=B5=D0=B2=D0=BE=D0=B4=D1=8B =D0=B4=D0=BB=D1=8F =
=D0=B1=D0=B8=D0=B7=D0=BD=D0=B5=D1=81=D0=B0!

Written and oral translations for business!

=D0=91=D1=8B=D1=81=D1=82=D1=80=D0=BE =D0=B8 =
=D0=BF=D1=80=D0=BE=D1=84=D0=B5=D1=81=D1=81=D0=B8=D0=BE=D0=BD=D0=B0=D0=BB=D1=
=8C=D0=BD=D0=BE =D0=BF=D0=B5=D1=80=D0=B5=D0=B2=D0=B5=D0=B4=D0=B5=D0=BC =
=D0=B4=D0=BB=D1=8F =D0=92=D0=B0=D1=81 =D0=BB=D1=8E=D0=B1=D1=8B=D0=B5 =
=D0=B4=D0=BE=D0=BA=D1=83=D0=BC=D0=B5=D0=BD=D1=82=D1=8B, =
=D0=B4=D0=BE=D0=B3=D0=BE=D0=B2=D0=BE=D1=80=D1=8B, =
=D1=82=D0=B5=D1=85=D0=BD=D0=B8=D1=87=D0=B5=D1=81=D0=BA=D1=83=D1=8E =
=D0=B4=D0=BE=D0=BA=D1=83=D0=BC=D0=B5=D0=BD=D1=82=D0=B0=D1=86=D0=B8=D1=8E,=
=D0=B8=D0=BD=D1=81=D1=82=D1=80=D1=83=D0=BA=D1=86=D0=B8=D0=B8 =D0=B8 =
=D1=82.=D0=B4.

=D0=A1 =D0=BB=D1=8E=D0=B1=D0=BE=D0=B3=D0=BE =
=D1=8F=D0=B7=D1=8B=D0=BA=D0=B0 / =D0=BD=D0=B0 =
=D0=BB=D1=8E=D0=B1=D0=BE=D0=B9 =D1=8F=D0=B7=D1=8B=D0=BA.
=D0=91=D0=B5=D0=B7 =D0=BD=D0=B0=D1=86=D0=B5=D0=BD=D0=BA=D0=B8 =
=D0=B7=D0=B0 =D1=82=D0=B5=D0=BC=D0=B0=D1=82=D0=B8=D0=BA=D1=83 =
=D0=BF=D0=B5=D1=80=D0=B5=D0=B2=D0=BE=D0=B4=D0=B0.
=D0=9F=D1=80=D0=B5=D0=B4=D0=BE=D1=81=D1=82=D0=B0=D0=B2=D0=B8=D0=BC =
=D1=83=D1=81=D1=82=D0=BD=D0=BE=D0=B3=D0=BE =
=D0=BF=D0=B5=D1=80=D0=B5=D0=B2=D0=BE=D0=B4=D1=87=D0=B8=D0=BA=D0=B0 =
=D0=B4=D0=BB=D1=8F =
=D1=81=D0=BE=D0=BF=D1=80=D0=BE=D0=B2=D0=BE=D0=B6=D0=B4=D0=B5=D0=BD=D0=B8=D1=
=8F =D0=BF=D0=B5=D1=80=D0=B5=D0=B3=D0=BE=D0=B2=D0=BE=D1=80=D0=BE=D0=B2, =
=D0=BF=D1=83=D0=B1=D0=BB=D0=B8=D1=87=D0=BD=D1=8B=D1=85 =
=D0=BC=D0=B5=D1=80=D0=BE=D0=BF=D1=80=D0=B8=D1=8F=D1=82=D0=B8=D0=B9, =
=D1=81=D0=BE=D0=BF=D1=80=D0=BE=D0=B2=D0=BE=D0=B6=D0=B4=D0=B5=D0=BD=D0=B8=D1=
=8F =D0=B8=D0=BD=D0=BE=D1=81=D1=82=D1=80=D0=B0=D0=BD=D0=BD=D1=8B=D1=85 =
=D1=81=D0=BF=D0=B5=D1=86=D0=B8=D0=B0=D0=BB=D0=B8=D1=81=D1=82=D0=BE=D0=B2 =
=D0=BD=D0=B0 =
=D0=BF=D1=80=D0=BE=D0=B8=D0=B7=D0=B2=D0=BE=D0=B4=D1=81=D1=82=D0=B2=D0=B5.=
=20
=D0=9D=D0=B8=D0=B7=D0=BA=D0=B8=D0=B5 =D1=86=D0=B5=D0=BD=D1=8B, =
=D1=85=D0=BE=D1=80=D0=BE=D1=88=D0=B8=D0=B5 =
=D1=81=D0=BA=D0=B8=D0=B4=D0=BA=D0=B8, =
=D0=B8=D0=BD=D0=B4=D0=B8=D0=B2=D0=B8=D0=B4=D1=83=D0=B0=D0=BB=D1=8C=D0=BD=D1=
=8B=D0=B5 =D1=83=D1=81=D0=BB=D0=BE=D0=B2=D0=B8=D1=8F =D0=B4=D0=BB=D1=8F =
=D0=BA=D1=80=D1=83=D0=BF=D0=BD=D1=8B=D1=85 =
=D0=B7=D0=B0=D0=BA=D0=B0=D0=B7=D0=BE=D0=B2.
=D0=91=D0=B5=D1=80=D0=B5=D0=BC =
=D1=81=D1=80=D0=BE=D1=87=D0=BD=D1=8B=D0=B5 =D0=B8 =
=D1=81=D0=B2=D0=B5=D1=80=D1=85=D1=81=D1=80=D0=BE=D1=87=D0=BD=D1=8B=D0=B5 =
=D0=B7=D0=B0=D0=BA=D0=B0=D0=B7=D1=8B.
=D0=9E=D0=BF=D0=BB=D0=B0=D1=82=D0=B0: =D0=BD=D0=B0=D0=BB., =
=D0=B1/=D0=BD=D0=B0=D0=BB, =
=D1=8F=D0=BD=D0=B4=D0=B5=D0=BA=D1=81.=D0=B4=D0=B5=D0=BD=D1=8C=D0=B3=D0=B8=
, webmoney =D0=B8 =D0=B4=D1=80.

=D0=9F=D1=80=D0=B8 =D0=B7=D0=B0=D0=BA=D0=B0=D0=B7=D0=B5 =D0=BE=D1=82 =
5000 =D1=80=D1=83=D0=B1. =E2=80=93 =
=D0=BF=D0=BE=D0=B4=D0=B0=D1=80=D0=BE=D0=BA.
=D0=9F=D0=BE=D0=BF=D1=80=D0=BE=D0=B1=D1=83=D0=B9=D1=82=D0=B5 =
=D1=80=D0=B0=D0=B1=D0=BE=D1=82=D0=B0=D1=82=D1=8C =D1=81 =
=D0=BD=D0=B0=D0=BC=D0=B8 =E2=80=93 =D0=92=D0=B0=D0=BC =
=D0=BF=D0=BE=D0=BD=D1=80=D0=B0=D0=B2=D0=B8=D1=82=D1=81=D1=8F!

=D0=97=D0=B2=D0=BE=D0=BD=D0=B8=D1=82=D0=B5: +7 (495) 729-1903
=D0=B8=D0=BB=D0=B8 =D0=BF=D0=BE=D1=87=D1=82=D0=B0: =
sverhperevod@yahoo.com

Monday, 19 October 2009

ALERT: New HMRC phishing scam - new spam e-mail is out (11luoz.co.uk)

My spam trap has just registered this phishing email pretending to be from HMRC and providing a link which starts from a valid onilne.hmrc.gov.uk


Avoid clicking on this link!

Here is the offending spam email:


Return-path:
Envelope-to: x@x.com
Delivery-date: Mon, 19 Oct 2009 16:28:24 +0500
Received: from mta7.iomartmail.com ([62.128.193.157])
by x.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.51 (FreeBSD))
id 1MzqPW-000Erk-8U
for x@x.com; Mon, 19 Oct 2009 16:28:24 +0500
Received: from mta7.iomartmail.com (localhost.localdomain [127.0.0.1])
by mta7.iomartmail.com (8.12.11.20060308/8.12.11) with ESMTP id n9JBSGsu006245;
Mon, 19 Oct 2009 12:28:17 +0100
Received: from 201-24-104-162.fnsce701.t.brasiltelecom.net.br (201-24-104-162.fnsce701.t.brasiltelecom.net.br [201.24.104.162])
by mta7.iomartmail.com (8.12.11.20060308/8.12.11) with ESMTP id n9JBSDc9006156;
Mon, 19 Oct 2009 12:28:15 +0100
Message-ID: <000d01ca50af$3d264ea0$6400a8c0@silkensen53>
From: "HM Revenue and Customs"
To:
Subject: Notice of Underreported Income
Date: Mon, 19 Oct 2009 09:28:10 -0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01CA50AF.3D264EA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

This is a multi-part message in MIME format.

------=_NextPart_000_0007_01CA50AF.3D264EA0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

Taxpayer ID: ufwsd-00000505794992UK
Tax Type: INCOME TAX
Issue: Unreported/Underreported Income (Fraud Application)
Please review your tax statement on HM Revenue and Customs (HMRC) website (=
click on the link below):

/online.hmrc.gov.uk.11luoz.co.uk/SecurityWebApp/httpsmode/statement.php?id=3D=
935603624415165971648683077233363052992296055238102320970584&email=3Dufwsd@=
djevans.co.uk&tid=3Dufwsd-00000505794992UK"

review tax statement for taxpayer id: ufwsd-00000505794992UK
HM Revenue and Customs


Domain 11luoz.co.uk has just been registered using a FAKE UK ADDRESS.

Here is the WHOIS Data:


Connecting to UK.whois-servers.net...


Domain name:
11luoz.co.uk

Registrant:
James Smith

Registrant type:
Non-UK Individual

Registrant's address:
5 Lower St Onslow
Winklebury
RG24 8HJ
United Kingdom

Registrar:
Webfusion Ltd t/a 123-Reg.co.uk [Tag = 123-REG]
URL: http://www.123-reg.co.uk

Relevant dates:
Registered on: 18-Oct-2009
Renewal date: 18-Oct-2011
Last updated: 18-Oct-2009

Registration status:
Registration request being processed.

Name servers:
No name servers listed.

MSN Spam (Spim) advertising make9181.com

First it was Look2381.com MSN spam now the spammers have switched to make9181.com

Compromised Hotmail accounts used to send MSN spam:


(10:11:34 AM) tamekadapuvu@hotmail.com: Hey Sam check out http://make9181.com
(2:14:00 PM) bucoliceilcq@hotmail.com: Hey Sam check out http://make9181.com
(3:31:47 PM) liesel.pinedaleci@hotmail.com: Need A Local F*ck Buddy? singleadultmeetup.com
Sent From iPhone Mobile ID: 55039
(4:13:34 PM) stuyvesantqprmx@hotmail.com: Hey Sam check out http://make9181.com
(5:26:54 PM) kristentoral@hotmail.com: Hey Sam check out http://make9181.com
(9:43:44 AM) prioryyku.lq@hotmail.com: Hey Sam check out http://make9181.com
(9:46:46 AM) lottielonelit@hotmail.com: Hey Sam check out http://make9181.com
(1:15:18 PM) margueritebowaz@hotmail.com: Hey Sam check out http://make9181.com
(2:10:31 PM) marionpiwet@hotmail.com: Hey Sam check out http://make9181.com
(11:53:49 AM) desorptionmxqwy@hotmail.com: Hey Sam check out http://make9181.com


WHOIS DATA on make9181.com

Domain Name : make9181.com

Registrant Contact Information :
JOYCEWANG
HEBEI TAGNGUO LTD.
li_wangshang@yeah.net
JIANKANG, 300452
tel:
fax:

Administrative Contact Information :
JOYCEWANG
HEBEI TAGNGUO LTD.
li_wangshang@yeah.net
JIANKANG, 300452
tel:
fax:

Technical Contact Information :
JOYCEWANG
HEBEI TAGNGUO LTD.
li_wangshang@yeah.net
JIANKANG, 300452
tel:
fax:

Billing Contact Information :
JOYCEWANG
HEBEI TAGNGUO LTD.
li_wangshang@yeah.net
JIANKANG, 300452
tel:
fax:

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.kevlarhost.com
ns2.kevlarhost.com

Registration Date :2009-4-16
Expiration Date : 2010-4-16

Thursday, 8 October 2009

spam from 195.225.53.134 (Ukraine)

www.trustedsource.org/query/195.225.53.134

Return-path:
Delivery-date: Wed, 23 Sep 2009 12:13:57 +0500
Received: from [195.225.53.134] (helo=kuler)
by x.com with esmtp (Exim 4.51 (FreeBSD))
id 1MqM2i-000Dkx-15; Wed, 23 Sep 2009 12:13:56 +0500
Date: Wed, 23 Sep 2009 09:13:35 +0200
From: =?koi8-r?B?IvfBzMXSydEg88XMxdrOxdfBIg==?=

X-Mailer: feftig.43
X-Priority: 3 (Normal)
Message-ID: <0846956868.20090923091335@mail.ru>
To: x@x.com
References: <9BA0D7B861CC3E580B1F2B4232865795A955D@mail.ru>
Subject: =?koi8-r?B?5MV008vJyiDJINPFzcXKztnKINDTycgwzM/HIOnSyc7BIOvP03TJyw==?=
MIME-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 8bit

îáðòá÷ìåîéñ ëïîóõìøôáôé÷îïê òáâïôù:
• ðÒÏÂÌÅÍÙ ÓÅÍÅÊÎÙÈ ÐÁÒÔÎÅÒÓËÉÈ ×ÚÁÉÍÏÏÔÎÏÛÅÎÉÊ: ËÏÎÆÌÉËÔÙ, ÉÚÍÅÎÙ, ÚÁÍÅÝÅÎÉÅ ÒÏÌÅ×ÙÈ ÆÕÎËÃÉÊ ÍÕÖÁ(ÖÅÎÙ), ÕÇÒÏÚÁ ÒÁÚ×ÏÄÁ, ÒÁÚ×ÏÄ.
• ðÒÏÂÌÅÍÙ ×ÚÁÉÍÏÏÔÎÏÛÅÎÉÊ Ó ÄÅÔØÍÉ. äÅÔÓËÉÅ ÔÒÅ×ÏÇÉ, ÓÔÒÁÈÉ, ×ÏÚÒÁÓÔÎÙÅ ËÒÉÚÉÓÙ. çÉÐÅÒÁËÔÉ×ÎÏÓÔØ.
• ëÒÉÚÉÓÎÙÅ ÓÏÓÔÏÑÎÉÑ ÌÉÞÎÏÓÔÉ: ÓÔÒÅÓÓÙ, ÄÅÐÒÅÓÓÉÉ, ÓÉÎÄÒÏÍ ÈÒÏÎÉÞÅÓËÏÊ ÕÓÔÁÌÏÓÔÉ, ÓÔÒÁÈÉ.
• äÕÈÏ×ÎÙÅ ËÒÉÚÉÓÙ, ÐÏÉÓË ÓÍÙÓÌÁ ÖÉÚÎÉ É ÐÒÅÄÎÁÚÎÁÞÅÎÉÑ.
• éÓÃÅÌÅÎÉÅ ÷ÎÕÔÒÅÎÎÅÇÏ òÅÂÅÎËÁ.
• ïÓÏÚÎÁÎÉÅ É ÔÒÁÎÓÆÏÒÍÁÃÉÑ ÎÅÇÁÔÉ×ÎÙÈ ÜÍÏÃÉÏÎÁÌØÎÙÈ ÓÏÓÔÏÑÎÉÊ × ÐÏÚÉÔÉ×ÎÙÅ É ÎÅÊÔÒÁÌØÎÙÅ.
• òÁÚ×ÉÔÉÅ ÉÎÔÕÉÃÉÉ É Õ×ÅÒÅÎÎÏÓÔÉ × ÓÅÂÅ.
• òÁÚ×ÉÔÉÅ ÐÏÚÉÔÉ×ÎÏÇÏ ÍÙÛÌÅÎÉÑ.
• òÁÓËÒÙÔÉÅ Ô×ÏÒÞÅÓËÏÇÏ ÐÏÔÅÎÃÉÁÌÁ.

ôÅÌ.: ( *0 4 4 +) 228 ,50 29-


.

Tuesday, 6 October 2009

MSN Spam (Spim) advertising Look2381.com

Another MSN spam advertising Look2381.com - what looks like a redirect to an adult site sent from compromised hotmail accounts.

(17:34:35) carolinamehah@hotmail.com: Hey Sam check out http://Look2381.com

(4:02:22 PM) bernadettelywok@hotmail.com: Hey Sam check out http://Look2381.com

(11:59:28 AM) lanatocefe@hotmail.com: Hey Sam check out http://Look2381.com

(1:52:04 PM) potlatchibpf@hotmail.com: Hey Sam check out http://Look2381.com

(1:10:18 PM) balledxlqacp@hotmail.com: Hey Sam check out http://Look2381.com

(5:13:54 PM) tanishacezowyb@hotmail.com: Hey Sam check out http://Look2381.com

(3:02:37 PM) lottiezagunu@hotmail.com: Hey Sam check out http://Look2381.com

(2:53:05 PM) yerkeshdsh@hotmail.com: Hey Sam check out http://Look2381.com

(1:53:36 PM) altametakim@hotmail.com: Hey Sam check out http://Look2381.com

(11:56:09 AM) sherrygybixyt@hotmail.com: Hey Sam check out http://Look2381.com

(10:17:37 AM) tamekazerugy@hotmail.com: Hey Sam check out http://Look2381.com

Sunday, 4 October 2009

russian spam from brazilian ip 200.219.245.30

Return-path:
Envelope-to: x@x.com
Delivery-date: Thu, 24 Sep 2009 00:17:36 +0500
Received: from weblinuxsded02.bighost.com.br ([200.219.245.30])
by x.com with smtp (Exim 4.51 (FreeBSD))
id 1MqXL2-0007pI-UK
for x@x.com; Thu, 24 Sep 2009 00:17:36 +0500
Received: from gzyhr (194.113.192.88)
by weblinuxsded02.bighost.com.br; Wed, 23 Sep 2009 16:07:18 -0300
Date: Wed, 23 Sep 2009 16:07:18 -0300
From:
X-Mailer: The Bat! (v2.01)
X-Priority: 3 (Normal)
Message-ID: <582709583.20090801165501@lewlara.com.br>
To:
Subject: Ñàíêò-Ïåòåðáóðã.Ìîíòàæ ñèñòåì áåçîïàñíîñòè íà âàøåì îáúåêòå â Ñ-Ïåòåðáóðãå
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------0A0056B1FB8"

------------0A0056B1FB8
Content-Type: text/html; charset=windows-1251
Content-Transfer-Encoding: 8bit

Ïîæàðíàÿ ñèãíàëèçàöèÿ

spam from 208.76.245.2 - never signed up for anything from them...

Return-path:
Delivery-date: Sat, 19 Sep 2009 18:38:04 +0500
Received: from s326.c4.crucialx.net ([208.76.245.2])
by x.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.51 (FreeBSD))
id 1Mp08Y-000K5r-2M
for x@x.com; Sat, 19 Sep 2009 18:38:04 +0500
Received: from localhost ([127.0.0.1]:39891 helo=adsmtp.trademal.com)
by s326.c4.crucialx.net with esmtpa (Exim 4.69)
(envelope-from )
id 1Mp08Q-0000M1-JJ
for x@x.com; Sat, 19 Sep 2009 08:37:54 -0500
To: x@x.com
Subject: PartTimePost.com - Post Your Job For FREE!
Message-ID: <7981b490597c1e9f6a58cc41dda79a44@adsmtp.trademal.com>
Date: Thu, 17 Sep 2009 13:20:23 -0500
From: "Avery Tan"
Reply-To: avery@parttimepost.com
MIME-Version: 1.0
X-Mailer-LID: 9
X-Mailer-SID: 51
X-Mailer-Sent-By: 2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - s326.c4.crucialx.net

How well PartTimePost.com perform?

spam from 203.116.57.101

Return-path: <"Ësquare< admin"@sg31-jsm.com>
Delivery-date: Fri, 18 Sep 2009 00:25:40 +0500
Received: from [203.116.57.101] (helo=mercury131.networknoc.com)
by x.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.51 (FreeBSD))
id 1MoMbq-000COz-3L
for x@x.com; Fri, 18 Sep 2009 00:25:40 +0500
Received: (qmail 11042 invoked from network); 17 Sep 2009 22:09:15 +0800
Received: from unknown (HELO localhost) (203.116.57.101)
by 203.116.57.101 with SMTP; 17 Sep 2009 22:09:15 +0800
MIME-Version: 1.0
From: "=?ISO-8859-1?Q?=CBSQUARE?="
Subject: Are you getting REAL results from SPUR funding?
X-Mailer: HTML Mime mail class
Date: Thu, 17 Sep 09 22:09:14 +0800
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Message-ID:
To: lists@sg31-jsm.com

You may also email us at admin=
@esquare.com.sg
or visit our website www.esquare.com.sg


.

spam from 91.203.136.195

4
Return-path:
Envelope-to: x@x.com
Delivery-date: Thu, 17 Sep 2009 13:36:10 +0500
Received: from [91.203.136.195] (helo=[91.203.136.195])
by x.com with esmtp (Exim 4.51 (FreeBSD))
id 1MoCTI-000JbU-VU; Thu, 17 Sep 2009 13:36:10 +0500
Date: Thu, 17 Sep 2009 10:36:09 +0200
From: =?koi8-r?B?IuHHzMHRIPPPws/MxdfBIg==?=
X-Mailer: tyyiprb.47
X-Priority: 3 (Normal)
Message-ID: <1661013527.20090917103609@mail.ru>
To: wine@x.com
Subject: =?koi8-r?B?58XOxdLB1DDSIOLp+u7l8yDJxMXKISAg9NLFzsnOxyDL0sXB1MnXzg==?= =?koi8-r?B?z8fPIM3Z28zFzsnRIMkgyc7U1cnDyckg1yDCydrOxdPFLiA=?=
MIME-Version: 1.0
Content-Type: text/html; charset=koi8-r
Content-Transfer-Encoding: 8bit








èÏÔÉÔÅ ÚÁÒÁÂÏÔÁÔØ ÎÁ ËÒÉÚÉÓÅ?
èÏÔÉÔÅ Õ×ÅÌÉÞÉÔØ ÞÉÓÔÕÀ
ÐÒÉÂÙÌØ ÎÁ 53%?
èÏÔÉÔÅ ÓÎÉÚÉÔØ ÒÁÓÈÏÄÙ ÎÁ 45 - 70%?


"÷Ï ×ÒÅÍÅÎÁ ËÒÉÚÉÓÁ, ×ÙÖÉ×ÁÀÔ ÔÏÌØËÏ ÔÅ, ËÔÏ ÓÐÏÓÏÂÅÎ
ÐÒÏÉÚ×ÏÄÉÔØ îï÷ùå ÉÄÅÉ É ÍÙÓÌÉÔØ ÎÅÛÁÂÌÏÎÎÏ"

äÏÎÁÌØÄ ôÒÁÍÐ



"çÅÎÅÒÁÔÏÒ âéúîåó
éÄÅÊ"

ôÒÅÎÉÎÇ ÜÆÆÅËÔÉ×ÎÏÇÏ ÍÙÛÌÅÎÉÑ É
ÉÎÔÕÉÃÉÉ × ÂÉÚÎÅÓÅ.


26-27 ÓÅÎÔÑÂÒÑ, Ç.ëÉÅ×




üÔÏÔ ÔÒÅÎÉÎÇ ÐÏÓÅÝÁÀÔ:
÷ÌÁÄÅÌØÃÙ ÂÉÚÎÅÓÁ, ÄÉÒÅËÔÏÒÁ, ôïð-ÍÅÎÅÄÖÅÒÙ, ÕÐÒÁ×ÌÑÀÝÉÅ,
ÂÉÚÎÅÓÍÅÎÙ, ÐÒÅÄÐÒÉÎÉÍÁÔÅÌÉ.

îÁÐÒÁ×ÌÅÎÉÅ
ÔÒÅÎÉÎÇÁ:
ëÁË ÚÁÒÁÂÏÔÁÔØ ÎÁ ËÒÉÚÉÓÅ.


ðÏÓÌÅ ÐÒÏÈÏÖÄÅÎÉÑ ËÕÒÓÁ, ×Ù ÓÍÏÖÅÔÅ:
- ÂÏÌÅÅ
ÐÏÌÎÏ ÐÏÎÉÍÁÔØ ÓÕÔØ ÂÉÚÎÅÓ ÚÁÄÁÞ.
- ÎÁÈÏÄÉÔØ ÐÒÏÂÌÅÍÎÙÅ ÚÏÎÙ É "ÕÚËÉÅ
ÍÅÓÔÁ".
- ÇÅÎÅÒÉÒÏ×ÁÔØ ÉÄÅÉ É ÒÅÛÅÎÉÑ ÐÏ Ó×ÏÅÊ ×ÏÌÅ;
- ÎÁÈÏÄÉÔØ
ÎÏ×ÙÅ ÓÐÏÓÏÂÙ ÄÅÌÁÔØ ÄÅÎØÇÉ;
- ÏÔËÒÙ×ÁÔØ ÎÏ×ÙÅ ×ÏÚÍÏÖÎÏÓÔÉ ×
ÂÉÚÎÅÓÅ;
- ÓÏÚÄÁ×ÁÔØ ÎÏ×ÙÅ ÉÚÄÅÌÉÑ, ÕÓÌÕÇÉ, ÐÒÏÃÅÓÓÙ;
-
ÓÏ×ÅÒÛÅÎÓÔ×Ï×ÁÔØ ÓÔÁÒÙÅ ÉÚÄÅÌÉÑ, ÕÓÌÕÇÉ, ÐÒÏÃÅÓÓÙ;
- ÎÁÈÏÄÉÔØ ÒÅÛÅÎÉÑ
ÓÌÏÖÎÙÈ ÈÏÚÑÊÓÔ×ÅÎÎÙÈ ÐÒÏÂÌÅÍ;
- ÒÁÓÓÍÁÔÒÉ×ÁÔØ ÐÒÏÂÌÅÍÙ ËÁË ÎÏ×ÙÅ
×ÏÚÍÏÖÎÏÓÔÉ;
- ÄÅÊÓÔ×Ï×ÁÔØ ÂÏÌÅÅ ÐÒÏÄÕËÔÉ×ÎÏ;
- ÕÚÎÁÔØ, ÇÄÅ ÓÌÅÄÕÅÔ
ÉÓËÁÔØ "ÐÒÏÒÙ× × ÂÕÄÕÝÅÅ"


"ëÔÏ ÓÐÏÓÏÂÅÎ
ÇÅÎÅÒÉÒÏ×ÁÔØ ÉÄÅÉ - ÔÏÔ ÓÐÏÓÏÂÅÎ ÄÅÌÁÔØ ÄÅÎØÇÉ ÉÚ ×ÏÚÄÕÈÁ!"




ú×ÏÎÉÔÅ ÐÏ ÔÅÌÅÆÏÎÕ *(044) ,
, 228 ,55 3_2


òÅÇÌÁÍÅÎÔ
ÔÒÅÎÉÎÇÁ:

äÁÔÙ ÐÒÏ×ÅÄÅÎÉÑ: 26-27 ÓÅÎÔÑÂÒÑ
äÌÉÔÅÌØÎÏÓÔØ
ÏÄÎÏÇÏ ÔÒÅÎÉÎÇÁ - 2 ÄÎÑ (16 ÞÁÓÏ×)


"÷ÅÄÕÝÅÅ ÕÓÌÏ×ÉÅ ÄÌÑ ÒÁÚ×ÉÔÉÑ ÌÀÂÏÇÏ ÂÉÚÎÅÓÁ - ÇÅÎÅÒÁÃÉÑ
ÎÏ×ÙÈ ÉÄÅÊ"



÷ ÐÒÏÇÒÁÍÍÅ
ÔÒÅÎÉÎÇÁ:

1. ÷×ÏÄÎÁÑ ÞÁÓÔØ.
- üÆÆÅËÔÉ×ÎÏÅ ÍÙÛÌÅÎÉÅ
É ËÒÅÁÔÉ×. íÉÆÙ É ÒÅÁÌØÎÏÓÔØ

2. âÁÚÏ×ÙÅ ÎÁ×ÙËÉ ÜÆÆÅËÔÉ×ÎÏÇÏ
ÍÙÛÌÅÎÉÑ.

- çÉÍÎÁÓÔÉËÁ ÄÌÑ ÍÏÚÇÁ
- ëÏÎÃÅÎÔÒÁÃÉÑ - ÚÁÌÏÇ ÕÓÐÅÈÁ

- üÔÁÐÙ ËÏÎÃÅÎÔÒÁÃÉÉ. õÐÒÁÖÎÅÎÉÑ ÎÁ ËÏÎÃÅÎÔÒÁÃÉÀ

3. íÅÔÏÄÙ
ÐÏÉÓËÁ ÉÎÆÏÒÍÁÃÉÉ.

- ÍÅÔÏÄ "áÇÅÎÔ"
- ÍÅÔÏÄ "íÁÇÉÞÅÓËÉÅ
×ÏÐÒÏÓÙ"

4. 5 ÛÁÇÏ× ÐÒÏÉÚ×ÏÄÓÔ×Á éäåé.
- áÌÇÏÒÉÔÍ
ÓÏÚÄÁÎÉÑ ÐÏÔÏËÁ ÉÄÅÊ.
- ë×ÏÔÁ ÉÄÅÊ
- óÅËÒÅÔÙ ÍÁÓÔÅÒÓÔ×Á "çÅÎÅÒÁÔÏÒ
ÂÉÚÎÅÓ ÉÄÅÊ"

5. óÔÒÁÔÅÇÉÑ É ÔÁËÔÉËÁ ÍÙÛÌÅÎÉÑ × ÂÉÚÎÅÓÅ.

- ðÒÁ×ÉÌÁ ÜÆÆÅËÔÉ×ÎÏÊ ÓÔÒÁÔÅÇÉÉ
- ðÒÉÅÍ ÓÔÒÁÔÅÇÉÞÅÓËÏÇÏ
ÍÙÛÌÅÎÉÑ "òÅÛÅÔËÁ æëâ"
- ðÒÉÅÍ ÇÅÎÅÒÁÃÉÉ ÔÁËÔÉÞÅÓËÉÈ ÂÉÚÎÅÓ ÉÄÅÊ
"óëáíðåò"

6. óÔÒÁÔÅÇÉÉ ÐÏÉÓËÁ ÒÅÛÅÎÉÊ.
- ðÒÉÅÍ
"áÎÁÌÉÔÉÞÅÓËÏÅ ËÏÌÅÓÏ"
- ðÒÉÅÍ "þÁÓÔÉ É
ÃÅÌÏÅ"

7. ðÒÉÅÍÙ ÇÅÎÅÒÁÃÉÉ ÉÄÅÊ.
- "îÏ×ÁÑ ÒÅÁÌØÎÏÓÔØ"

- "ëÏÌÏÄÅà ÉÄÅÊ"
- "õÍÎÙÊ ÓÏ×ÅÔ"

8. ïÔËÒÙ×ÁÅÍ
ÉÎÔÕÉÔÉ×ÎÙÅ ÎÁ×ÙËÉ.

- õÐÒÁÖÎÅÎÉÑ ÎÁ ËÁÖÄÙÊ ÄÅÎØ
- 5 ÓÐÏÓÏÂÏ×
ÉÓÐÏÌØÚÏ×ÁÎÉÑ ÉÎÔÕÉÃÉÉ
- ôÅÈÎÉËÉ ÒÅÌÁËÓÁÃÉÉ

9. éÎÔÕÉÔÉ×ÎÙÅ
ÉÇÒÙ.

- éÒÒÁÃÉÏÎÁÌØÎÏÅ ÍÙÛÌÅÎÉÅ.
- ðÁÓÓÉ×ÎÙÊ
ÐÏÉÓË ÉÄÅÊ. íÅÔÏÄ "ïÚÁÒÅÎÉÅ"
- íÅÔÏÄ "íÇÎÏ×ÅÎÎÏÅ ÒÅÛÅÎÉÅ"
- íÅÔÏÄ
"óÔÁËÁÎ ×ÏÄÙ"

10. ÷ÙÂÏÒ ÒÅÛÅÎÉÑ.
- ëÒÉÔÅÒÉÉ ÏÔÂÏÒÁ
ÒÅÛÅÎÉÊ
- ðÒÁ×ÉÌÁ ÐÒÉÎÑÔÉÑ ÒÅÛÅÎÉÊ

11. óÏ×ÅÔÙ ÄÌÑ
ËÒÅÁÔÉ×ÝÉËÁ ÎÁ ËÁÖÄÙÊ ÄÅÎØ.

+ 10 ÉÇÒ ÎÁ ÒÁÚ×ÉÔÉÅ
ËÒÅÁÔÉ×ÎÏÓÔÉ.



ðÏ ÏËÏÎÞÁÎÉÀ ÔÒÅÎÉÎÇÁ,
×ÙÄÁÅÔÓÑ ÉÍÅÎÎÏÊ ÓÅÒÔÉÆÉËÁÔ ÃÅÎÔÒÁ "òÁÚ×ÉÔÉÅ"





çÁÒÁÎÔÉÒÕÅÍ: 47 ÎÏ×ÙÈ
ÉÄÅÊ ÄÌÑ ÷ÁÛÅÇÏ ÂÉÚÎÅÓÁ ÕÖÅ ÎÁ ÔÒÅÎÉÎÇÅ!



ôÒÅÎÉÎÇ ÓÏÓÔÏÉÔ ÉÚ:

- ÔÅÏÒÅÔÉÞÅÓËÏÊ ÞÁÓÔÉ 20%
-
ÐÒÁËÔÉÞÅÓËÏÊ ÞÁÓÔÉ 60% (21 ÕÐÒÁÖÎÅÎÉÅ)
- ÁÎÁÌÉÚ
ÒÅÚÕÌØÔÁÔÏ× É ËÏÎÓÕÌØÔÁÃÉÉ 20%

õÓÌÏ×ÉÑ
ÕÞÁÓÔÉÑ É ÓËÉÄËÉ:

íÅÓÔÏ ÐÒÏ×ÅÄÅÎÉÑ: ëÉÅ×, ÕÌ.
áÎÄÒÅÅ×ÓËÉÊ óÐÕÓË
úÁÎÑÔÉÑ ÐÒÏ×ÏÄÑÔÓÑ × ÇÒÕÐÐÅ 14-16 ÞÅÌÏ×ÅË.


óÔÏÉÍÏÓÔØ ÕÞÁÓÔÉÑ × ÔÒÅÎÉÎÇÅ - 1850
ÇÒÎ.

÷ ÓÔÏÉÍÏÓÔØ ×ÈÏÄÉÔ:
- ïÂÕÞÅÎÉÅ;
- üËÓËÌÀÚÉ×ÎÙÅ
ÔÅÈÎÏÌÏÇÉÉ ÇÅÎÅÒÁÃÉÉ ÉÄÅÊ;
- òÁÚÄÁÔÏÞÎÙÅ ÍÁÔÅÒÉÁÌÙ;
- îÅÏÂÈÏÄÉÍÁÑ
ËÁÎÃÅÌÑÒÉÑ;
- ëÏÆÅ-ÂÒÅÊËÉ;
- ïÂÅÄ.

óËÉÄËÉ:
äÌÑ
ÕÞÁÓÔÉÑ 2-È É ÂÏÌÅÅ ÞÅÌÏ×ÅË - ÏÔ 5 ÄÏ 15 %

ú×ÏÎÉÔÅ ÐÏ ÔÅÌÅÆÏÎÕ (+044)*
'228 +55, 32







ïÔÚÙ×Ù ÕÞÁÓÔÎÉËÏ× ÐÒÅÄÙÄÕÝÉÈ
ÔÒÅÎÉÎÇÏ×:

îÁ ÓÅÇÏÄÎÑÛÎÉÊ ÄÅÎØ,
ÐÒÏÛÌÏ ÕÖÅ ÂÏÌÅÅ Ä×ÕÈ ÎÅÄÅÌØ, ÐÒÏÇÒÅÓÓ ÉÄÅÔ. ôÑÖÅÌÏ ËÏÎÅÞÎÏ
ÚÁÓÔÁ×ÉÔØ ÓÅÂÑ ÓÄÅÌÁÔØ ÕÐÒÁÖÎÅÎÉÅ, ÎÏ ËÏÇÄÁ ÎÁÞÉÎÁÅÛØ ÅÇÏ ÄÅÌÁÔØ,
ÐÒÉÈÏÄÉÔ ÁÚÁÒÔ É ÉÄÅÉ ÓÙÐÑÔÓÑ ËÁË ÉÚ ×ÅÄÒÁ, ÔÏÌØËÏ ÕÓÐÅ×ÁÊ
ÚÁÐÉÓÙ×ÁÔØ. ä×Å ÉÄÅÉ ÕÖÅ ×ÎÅÄÒÉÌ, ÏÄÎÁ ÕÖÅ ÐÒÉÎÏÓÉÔ ÍÎÅ ÄÅÎØÇÉ,
×ÔÏÒÁÑ ÚÁÒÁÂÏÔÁÅÔ × ÓÌÅÄÕÀÝÅÍ Ë×ÁÒÔÁÌÅ.
úÎÁÎÉÅ ÐÕÔÅÊ ÒÁÚ×ÉÔÉÑ
ÍÏÅÇÏ ÂÉÚÎÅÓÁ ÄÏÒÏÇÏÇÏ ÓÔÏÑÔ. èÏÒÏÛÉÊ ÔÒÅÎÉÎÇ.

ðÅÔÒ óÁ×ÞÅÎËÏ, ÇÅÎ.ÄÉÒÅËÔÏÒ. ÐÒÏÄÁÖÁ ËÏÐÉÒÏ×ÁÌØÎÏÊ ÔÅÈÎÉËÉ
(äÎÅÐÒÏÐÅÔÒÏ×ÓË)


òÁÄÏÓÔØ ÐÏÚÎÁÎÉÑ,
ÕÚÎÁ×ÁÎÉÑ, ÚÎÁÎÉÑ É ÐÏÑ×ÌÅÎÉÑ ÎÏ×ÙÈ ×ÏÐÒÏÓÏ×. íÁÇÉÞÅÓËÏÅ ÐÒÅ×ÒÁÝÅÎÉÅ
ÌÀÂÙÈ ÐÒÏÂÌÅÍ × ÒÁÚÒÅÛÁÅÍÙÅ ÓÉÔÕÁÃÉÉ. ïÔËÒÙÔÉÅ ÎÏ×ÙÈ ×ÏÚÍÏÖÎÏÓÔÅÊ É
ÂÏÌÅÅ ÌÅÇËÉÈ ÐÒÉÑÔÎÙÈ ÄÏÒÏÇ Ë ÌÀÂÏÊ ×ÅÒÛÉÎÅ. é Ë ÓÅÂÅ ÎÁÓÔÏÑÝÅÍÕ.

åÌÅÎÁ óÕÈÁÞÅ×Á, ÄÉÒÅËÔÏÒ é×ÅÎÔ áÇÅÎÔÓÔ×Á.
(ëÉÅ×)


ðÅÒÅ×ÅÒÎÕÔØ Ó×Ï£ ÍÙÛÌÅÎÉÅ "Ó
ÎÏÇ ÎÁ ÇÏÌÏ×Õ" É ÕÂÅÄÉÔØÓÑ ÞÔÏ ÒÁÂÏÔÁÅÔ É ÅÝÅ É ËÁË ÒÁÂÏÔÁÅÔ.

éÄÅÉ × ÇÏÌÏ×Õ ÐÒÉÈÏÄÑÔ ÓÁÍÉ. òÁÓÛÉÒÉÔØ Ó×ÏÊ ËÒÕÇÏÚÏÒ É ÎÅ
ÂÏÑÔØÓÑ "ÐÅÒÅÂÏÒÝÉÔØ".
äÏ×ÅÒÑÔØ Ó×ÏÅÊ ÉÎÔÕÉÃÉÉ. ðÏÚÎÁÔØ ËÁË
ÒÏÖÄÁÀÔÓÑ ÂÉÚÎÅÓ ÉÄÅÉ - ÜÔÏ ËÁÊÆ!!!
ðÅÒÅÓÍÏÔÒÅÔØ Ó×ÏÊ ÂÉÚÎÅÓ ÐÏ
ÎÏ×ÏÍÕ. òÅÛÅÎÉÅ ÍÎÏÇÉÈ ÐÒÏÂÌÅÍ ÓÔÁÎÅÔ ÎÁÍÎÏÇÏ ÐÒÏÝÅ.
÷ÅÒÉÔØ ÞÔÏ
É ÖÅÌÁÎÉÅ ÍÏÖÅÔ ÓÔÁÔØ ÒÅÁÌØÎÏÓÔØÀ. îÁÄÏ ÔÏÌØËÏ ÐÒÉÌÏÖÉÔØ Ë ÜÔÏÍÕ
ÕÓÉÌÉÅ.
÷Ó£ ÚÁ×ÉÓÉÔ ÔÏÌØËÏ ÏÔ ÎÁÓ - ÏÔ ÎÁÛÉÈ ÄÅÊÓÔ×ÉÊ,
ÐÏÓÔÕÐËÏ×, ÎÏ×ÏÇÏ ÍÙÛÌÅÎÉÑ.
òÁÂÏÔÙ ÎÁÄ ÓÏÂÏÊ ÐÏÓÌÅ ÔÒÅÎÉÎÇÁ -
"ÎÅÐÅÒÅÐÁÈÁÎÁÎÎÏÅ ÐÏÌÅ" ÐÁÈÁÔØ É ÐÁÈÁÔØ…(ÏÔ Á×Ô.)
÷Ó£ ÂÙÌÏ ÏÞÅÎØ
ËÒÅÁÔÉ×ÎÏ. óÐÁÓÉÂÏ å×ÇÅÎÉÀ!

äÏ×ÇÁÌØ
÷ÌÁÄÉÍÉÒ, ×ÌÁÄÅÌÅà ÂÉÚÎÅÓÁ ÏËÏÎÎÙÈ ÔÅÈÎÏÌÏÇÉÊ (ëÉÅ×)





ú×ÏÎÉÔÅ ÐÏ ÔÅÌÅÆÏÎÕ (04,4)
_ _ 228* 55 32.


P.S.
÷
ÍÉÒÅ ÂÉÚÎÅÓÁ, ÄÏÒÏÖÅ ×ÓÅÇÏ - éäåñ!






.

christian(?) spam from 74.86.54.143

Return-path:
Envelope-to: x@x.com
Delivery-date: Wed, 16 Sep 2009 11:43:41 +0500
Received: from ip24.salestools411.info ([74.86.54.143] helo=jadmin2.ded.arvixe.com)
by x.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.51 (FreeBSD))
id 1MnoEu-00019o-Ab
for x@x.com; Wed, 16 Sep 2009 11:43:41 +0500
Received: from drjim217 by jadmin2.ded.arvixe.com with local (Exim 4.69)
(envelope-from )
id 1MnoEm-0007QB-SE
for x@x.com; Tue, 15 Sep 2009 23:43:32 -0700
To: x@x.com
Subject: Do You Have a Plan B?
From: Dr. Jim L. Hamby
Reply-To:
MIME-Version: 1.0
X-Mailer: GMailer 1.2
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id:
Date: Tue, 15 Sep 2009 23:43:32 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - jadmin2.ded.arvixe.com
X-AntiAbuse: Originator/Caller UID/GID - [568 568] / [47 12]
X-AntiAbuse: Sender Address Domain - jadmin2.ded.arvixe.com

To my Christian co-worker,
I have a letter that I want you take about 2 minutes to look at. It concerns your ministry and something that is vital to those that God has called you to shepherd.
PLEASE do not delete this message or fail to study my letter. IT IS VITALLY IMPORTANT!
Here is the web site for the letter: http://is.gd/xxxx

spam from 86.125.23.30

2
Return-path:
Delivery-date: Tue, 15 Sep 2009 16:27:29 +0500
Received: from [86.125.23.30] (helo=womenhorny.com)
(envelope-from )
id 1MnWBq-0007EZ-6v
for x@x.com; Tue, 15 Sep 2009 16:27:21 +0500
Message-Id: <200918354568.23835.kyvixog@womenhorny.com>
Date: Tue, 15 Sep 2009 13:26:11 +0100
From: =?utf-8?B?0JPQtdGA0LzQsNC9?=
User-Agent: Thunderbird 2.0.0.23 (X11/20090812)
MIME-Version: 1.0
To: x@x
Subject: =?utf-8?B?0KMg0JLQsNGI0LXQuSDQutC+0LzQv9Cw0L3QuNC4INC10YHRgtGMINGD0L3QuNC60LDQu9GM0L3QsNGPINCy0L7Qt9C80L7QttC90L7RgdGC0Ywg0YDQsNC30YDQsNCx0L7RgtCw0YLRjCDRgdCw0LnRgiDQsdC10YHQv9C70LDRgtC90L4hKg==?=
Content-Type: multipart/alternative;
boundary="------------NextPart__kruyj.95220"
X-AIC-Spam-Score: -0.3 (/)
X-AIC-Scan-Signature: cd90788a1ae231499254423703503615
X-AIC-Scan-Server: styx.aic.net

This is a multi-part message in MIME format.
--------------NextPart__kruyj.95220
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

Здравствуйте, меня зовут Аня!
У Вашей компании есть уникальная возможность разработать сайт бесплатно!*
Продвинуть сайт за 5 тысяч рублей.*
А так же бесплатно обновить информацию на Вашем сайте!*

Мои контакты:

ICQ: 570-278-700
Почта: Sitestut@gmail.com

Friday, 2 October 2009

Twitter "Ghosts"

NoelCooke (NoelCooke661) is now following your tweets on Twitter.

A little information about NoelCooke:
0 followers
1 tweet
following 217 people

NidiaHickman (Hickman_509) is now following your tweets on Twitter.

A little information about NidiaHickman:
0 followers
1 tweet
following 793 people


Tresa Patience (tresatjb) is now following your tweets on Twitter
0 tweets
following 491 people

MSN IM Spam (spim) advertising Look2381.com

Got this MSN message this afternoon:


(1:12:08 PM) leahferebox@hotmail.com: Hey Samcheck out http://Look2381.com


Somehow crafty spammers have managed to:
a) register a valid Hotmail account

b) bypass MSN blocking filter (only accept messages from people in your contact list)

I have been gettin now an average of 2 such spims a day from various hotmail accounts

full list here

Monday, 6 April 2009

Another spam from networknoc: [203.116.57.79] (helo=mercury70.networknoc.com)

Got another piece of junk mail one from notorious networknoc.com - this time the From: field is set to be from domain neujsm4.com

An interesting thing about all spam coming from networknoc is that Return-path is in invalid format.


According to SpamCom the ISP of this spammer (starhub.com in Singapore) rejects the abuse reports..

here is the header of teh spam message received today:



Received: from [203.116.57.79] (helo=mercury70.networknoc.com)
by x.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.51 (FreeBSD))
id 1Lqr1M-000KEe-DQ
for x@x.com; Mon, 06 Apr 2009 20:46:02 +0500
Received: (qmail 7000 invoked from network); 6 Apr 2009 23:30:38 +0800
Received: from unknown (HELO localhost) (203.116.57.79)
by 203.116.57.79 with SMTP; 6 Apr 2009 23:30:38 +0800
MIME-Version: 1.0
From: "Ivy Lee"
Subject: Job Openings
X-Mailer: HTML Mime mail class
Date: Mon, 06 Apr 09 23:30:37 +0800
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Message-ID:
To: list@neujsm4.com

Monday, 30 March 2009

kerigmasolutions tentoken.com atomimaven.com [204.139.58.12]

Here is a copy of an interesting spam received by my spam trap just now. KerigmaSolutions (aka tentoken.com aka atomimaven.com) appears to be a hosting company located in Oklahoma, they chose a quite interesting (and 100% illegal) marketing strategy by sending out unsolicited spam to millions of innocent Internet users.

The IP address of the mail server used to send out spam (204.139.58.12) has not yet been picked up by any blacklist however kerigmasolutions.com is already blacklisted in SURBL

My spam traps located in Eastern Europe as well as UK and USA picked up this spam.

tentoken.com and atomimaven.com are not yet picked up by other systems as at 22:00GMT 30/Mar/2009


A copy of full internet headers is enclosed to help network administrators:

Delivery-date: Tue, 31 Mar 2009 02:06:10 +0500
Received: from smtp12.kerigmasolutions.com ([204.139.58.12] helo=kerigmasolutions.com)
by x.com with esmtp (Exim 4.51 (FreeBSD))
id 1LoOgE-00069I-Iu
for spamtrap@x.com; Tue, 31 Mar 2009 02:06:10 +0500
Received: by kerigmasolutions.com id hq4q3s0n2f4k for ; Mon, 30 Mar 2009 17:04:20 -0400 (envelope-from )
Date: Mon, 30 Mar 2009 17:04:20 -0400
From: "Kerigma Solutions"
Subject: Kerigma Information
To: "Sam Kamin"
List-Unsubscribe:
Reply-To:
Message-ID:
X-Mailer: mailex
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------------431248183877120133271685"
--------------431248183877120133271685
Content-Type: text/plain; charset="iso-8859-1"

Welcome to Kerigma Solutions

Kerigma Solutions, is here to secure your business. We are confident we can provide you with the highest level of support with our dedicated team of experts. With Kerigma Solutions you can depend on high customer service, quality equipment, and maximum domains.



Click here to contact us.
http://atomimaven.com/X.pl?ZVCHKB_PBW=39127&LX=3&fv=0416440093&zl=96&wlTsh
==
END OF MESSAGE