Spam from Vietnam IP[222.255.82.3] pretending to be FBI (agentpetersmith@aol.com)

Don't fall for this scam:


Return-path:
Delivery-date: Sat, 14 Nov 2009 17:17:14 +0400
Received: from mail.thuviendongnai.gov.vn ([222.255.82.3] helo=dongnailibrary.thuviendongnai.gov.vn)
by x.com with esmtp (Exim 4.51 (FreeBSD))
id 1N9ISP-0004ao-Ty
for x@x.com; Sat, 14 Nov 2009 17:17:14 +0400
Received: from User ([117.25.129.200]) by dongnailibrary.thuviendongnai.gov.vn with Microsoft SMTPSVC(6.0.3790.1830);
Sat, 14 Nov 2009 20:15:30 +0700
Reply-To: <>
From: "F.B.I"
Subject: 1 New Important Message
Date: Sat, 14 Nov 2009 14:11:43 -0000
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID:
X-OriginalArrivalTime: 14 Nov 2009 13:15:32.0984 (UTC) FILETIME=[8BAD5780:01CA652C]

Anti-Fraud/Crimes Division.

Federal Bureau Of Investigation.

J. Edgar. Hoover Building,

Telephone Number : (206) 984 - 0470

ATTN: BENEFICIARY

This is to Officially inform you that it has come to our notice and we have thoroughly completed an Investigated with the help of our Intelligence Monitoring Network System that you are having an illegal transaction with Impostors claiming to be Prof. Charles C. Soludo of the Central Bank Of Nigeria, Mr. Patrick Aziza, Mr Frank Nweke, none officials of Oceanic Bank, none officials of Zenith Bank and some impostors claiming to be the Federal Bureau Of Investigation agents. During our Investigation, it came to our notice that the reason why you have not received your payment is because you have not fulfilled your Financial Obligation given to you in respect of your Contract/Inheritance Payment.

So therefore, we have contacted the Federal Ministry Of Finance on your behalf and they have brought a solution to your problem by coordinating your payment in the total amount of $800,000.00 USD which will be deposited into an ATM CARD which you will use to withdraw funds anywhere of the world. You now have the lawful right to claim your funds which have been deposited into the ATM CARD.

Since the Federal Bureau of Investigation has been involved in this transaction, you are now to be rest assured that this transaction is legitimate and completely risk-free as it is our duty to Protect and Serve citizens of the United States Of America. All you have to do is immediately contact the ATM CARD CENTER via E-mail for instructions on how to procure your Approval Slip which contains details on how to receive and activate your ATM CARD for immediate use to withdraw funds being paid to you. We have confirmed that the amount required to procure the Approval Slip will cost you a total of $450 USD which will be paid directly to the ATM CARD CENTER agent via Western Union Money Transfer / MoneyGram Money Transfer. Below, you shall find contact details of the Agent whom will process your transaction:

CONTACT INFORMATION

NAME: AGENT PETER SMITH

EMAIL: agentpetersmaith@aol.com

Immediately contact AGENT PETER SMITH of the ATM Card Centre with the following information:

Full Name:

Address:

City:

State:

Zip Code:

Direct Phone Number:

Current Occupation:

Annual Income:

Once you have sent the required information to Agent Peter Smith he will contact you with instructions on how to make the payment of $450 USD for the Approval Slip after which he will proceed towards delivery of the ATM CARD without any further delay. You have hereby been authorized/guaranteed by the Federal Bureau Of Investigation to commence towards completing this transaction, as there shall be NO delay once payment for the Approval Slip has been made to the authorized agent.

Once you have completed payment of $450 to the agent in charge of this transaction, immediately contact me back so as to ensure your ATM CARD gets to you rapidly.

FBI Director 
Robert Mueller.

                                                                 

                                                                                            

                                                                        Authorized Signature

 FBI Director

Robert Mueller.

NOTE: Do disregard any email you get from any impostors or offices claiming to be in possesion of your ATM CARD, you are hereby adviced only to be in contact with Agent Peter Smith of the ATM CARD CENTRE who is the rightful person to deal with in regards to your ATM CARD PAYMENT and forward any emails you get from impostors to Agent Peter Smith so we could act upon and commence investigation.

 

.

MSN Spam (spim) advertising make310.com [83.140.191.169]

spim from Look2381.com

then from

make9181.com


now it is make310.com make009.com



(9:39:16 AM) helenatewod@hotmail.com: Hey Sam check out http://Make310.com
(5:35:05 PM) cotoneasterflad@hotmail.com: Hey Sam check out http://Make310.com
(1:14:10 PM) slotxmsnh@hotmail.com: Hey Sam check out http://Make310.com
(2:20:15 PM) ponchowureo@hotmail.com: Hey Sam check out http://Make310.com
(2:03:51 PM) maudesycuwyh@hotmail.com: Hey Sam check out http://Make310.com
(2:13:08 PM) magnumblevb@hotmail.com: Hey Sam check out http://Make310.com
(4:42:27 PM) madgehozazy@hotmail.com: Hey Sam check out http://Make009.com
(1:00:57 PM) emmaxizefy@hotmail.com: Hey Sam check out http://Make009.com
(11:42:50 AM) hillarynofux@hotmail.com: Hey Sam check out http://Make009.com
(10:25:49 AM) marshabemyda@hotmail.com: Hey Sam check out http://Make009.com
(1:54:29 PM) jacklynbepaw@hotmail.com: Hey Sam check out http://Make310.com
(1:31:21 PM) ceceliazirakeg@hotmail.com: Sam 7 It's time to make a change in your performance http://chickfavor.com
(4:50:47 PM) guadalupecydox@hotmail.com: Sam 9 Generic or Brand Named, Your Choice! http://chickfavor.com
(9:23:42 PM) tinazalubod@hotmail.com: Sam 5 ROLEX, GUCCI, LOUIS VUITTON at Cheap Prices for the Holidays! http://lampcool.com



WHOIS make310.com make009.com all registered to the same person

Domain Name : make310.com

Registrant Contact Information :
ZHANGT
HEIHE YANJIU GONGSI
janeob@126.com
GUANGRONG, 200546
tel:
fax:

Administrative Contact Information :
ZHANGT
HEIHE YANJIU GONGSI
janeob@126.com
GUANGRONG, 200546
tel:
fax:

Technical Contact Information :
ZHANGT
HEIHE YANJIU GONGSI
janeob@126.com
GUANGRONG, 200546
tel:
fax:

Billing Contact Information :
ZHANGT
HEIHE YANJIU GONGSI
janeob@126.com
GUANGRONG, 200546
tel:
fax:

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.kevlarhost.com
ns2.kevlarhost.com

Registration Date :2009-11-11
Expiration Date : 2010-11-11

For more information, please go to http://whois.ename.com.



MSN IM Spam (Spim) advertising tr.im (67.23.26.211)

New wave of MSN Spam started today inviting to visit tr.im


elinburchett294rl@hotmail.com: want a special someone? http://tr.im/Ezql


WHOIS Query on domain tr.im

WHOIS Query
------------ 
Domain Name:    TR.IM
Domain Managers
Name: Eric Woodward
Address
#205 - 280 Nelson Street
Vancouver, BC
V6B 2E2
Canada
Domain Owners / Registrant
Name: Eric Woodward
Address
#205 - 280 Nelson Street
Vancouver, BC
V6B 2E2
Canada
Administrative Contact
Name:  Eric Woodward
Address
#205 - 280 Nelson Street
Vancouver, BC
V6B 2E2
Canada
Billing Contact
Name:  Eric Woodward
Address
#205 - 280 Nelson Street
Vancouver, BC
V6B 2E2
Canada
Technical Contact
Name:  Eric Woodward
Address
#205 - 280 Nelson Street
Vancouver, BC
V6B 2E2
Canada
Domain Details
Expiry Date: 18/06/2010 00:59:58
Name Server: ns1.slicehost.net.
Name Server: ns2.slicehost.net.
Name Server: ns3.slicehost.net.

backscatter spam from IP: 62.128.193.152


Delivery-date: Sun, 25 Oct 2009 09:06:06 +0400
Received: from mta2.iomartmail.com ([62.128.193.152])
by x.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.51 (FreeBSD))
id 1N1vIr-0006Zk-JS
for x@x.com; Sun, 25 Oct 2009 09:06:06 +0400
Received: from localhost (localhost)
by mta2.iomartmail.com (8.12.11.20060308/8.12.11) id n9P565bR017816;
Sun, 25 Oct 2009 05:06:05 GMT
Date: Sun, 25 Oct 2009 05:06:05 GMT
From: Mail Delivery Subsystem
Message-Id: <200910250506.n9P565bR017816@mta2.iomartmail.com>
To:
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="n9P565bR017816.1256447165/mta2.iomartmail.com"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)

This is a MIME-encapsulated message

--n9P565bR017816.1256447165/mta2.iomartmail.com

The original message was received at Sun, 25 Oct 2009 05:05:57 GMT
from localhost.localdomain [127.0.0.1]

----- The following addresses had permanent fatal errors -----

(reason: 550 Rejecting message scored for more than 8.0 (10.6) SPAM points.)

----- Transcript of session follows -----
.... while talking to arminco.com.:
>>> DATA
<<< 550 Rejecting message scored for more than 8.0 (10.6) SPAM points. 554 5.0.0 Service unavailable --n9P565bR017816.1256447165/mta2.iomartmail.com Content-Type: message/delivery-status Reporting-MTA: dns; mta2.iomartmail.com Received-From-MTA: DNS; localhost.localdomain Arrival-Date: Sun, 25 Oct 2009 05:05:57 GMT --n9P565bR017816.1256447165/mta2.iomartmail.com Content-Type: text/rfc822-headers Return-Path:
Received: from mta2.iomartmail.com (localhost.localdomain [127.0.0.1])
by mta2.iomartmail.com (8.12.11.20060308/8.12.11) with ESMTP id n9P55vbR017802
for ; Sun, 25 Oct 2009 05:05:57 GMT
Received: from 115-64-111-43.tpgi.com.au (115-64-111-43.tpgi.com.au [115.64.111.43])
by mta2.iomartmail.com (8.12.11.20060308/8.12.11) with ESMTP id n9P55sD5017696
for ; Sun, 25 Oct 2009 05:05:55 GMT
Date: Sun, 25 Oct 2009 05:05:54 GMT
Message-Id: <200910250505.n9P55sD5017696@mta2.iomartmail.com>
From: "Hattie Bundage"
To: flavius.geerdes@x.com
Subject: Bring Xbox please
Content-type: text/html; charset="UTF-8"
Content-transfer-encoding: 8BIT
MIME-Version: 1.0



Fun Tobids (fun2bids) Malaysian Facebook spam

Some spammers are now using legitimate systems like Facebook to send out spam via FacebookMail - here is one:


Hi spamtrap@x.com

I set up a Facebook profile where I can post my pictures, videos and =
events and I want to add you as a friend so you can see it. First, you =
need to join Facebook! Once you join, you can also create your own =
profile.

----------
Come to join and take a look at fun2bids[dot]com Interesting web where you =
can find ultimate true bargain. 50% cheaper from retail price guarantee!
----------

Thanks,
Fun


Russian spam from IP: 79.3.86.50

Return-path: 
Delivery-date: Tue, 20 Oct 2009 21:29:46 +0500
Received: from host50-86-dynamic.3-79-r.retail.telecomitalia.it ([79.3.86.50] helo=mx1.nextmail.ru)
by c.com with esmtp (Exim 4.51 (FreeBSD))
id 1N0Hah-000537-8x; Tue, 20 Oct 2009 21:29:46 +0500
Message-ID: <001901ca51a2$82004cd0$5c2fa8c0@host5086dynamic.379r.retail.telecomitalia.it>
From: "=?utf-8?B?0KEg0YPRgdGC0L3QvtCz0L4g0L3QsCDQv9C40YHRjNC80LXQvdC90YvQuQ==?=" 
To: x@x.com
Subject: =?utf-8?B?0J/QtdGA0LXQstC+0LTRh9C40LrQuCDRgdC+INCy0YHQtdGFINGP0LfRi9C60L7QsiDQvNC40YDQsA==?=
Date: Tue, 20 Oct 2009 20:29:34 +0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0016_01CA51C4.01CA51C4"
X-Yahoo-Profile: mosenglish
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6000.16480
X-MimeOLE: Produced By Microsoft MimeOLE V6.1.7100.0

This is a multi-part message in MIME format.

------=_NextPart_000_0016_01CA51C4.01CA51C4
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable

=D0=9F=D0=B8=D1=81=D1=8C=D0=BC=D0=B5=D0=BD=D0=BD=D1=8B=D0=B5 =D0=B8 =
=D1=83=D1=81=D1=82=D0=BD=D1=8B=D0=B5 =
=D0=BF=D0=B5=D1=80=D0=B5=D0=B2=D0=BE=D0=B4=D1=8B =D0=B4=D0=BB=D1=8F =
=D0=B1=D0=B8=D0=B7=D0=BD=D0=B5=D1=81=D0=B0!

Written and oral translations for business!

=D0=91=D1=8B=D1=81=D1=82=D1=80=D0=BE =D0=B8 =
=D0=BF=D1=80=D0=BE=D1=84=D0=B5=D1=81=D1=81=D0=B8=D0=BE=D0=BD=D0=B0=D0=BB=D1=
=8C=D0=BD=D0=BE =D0=BF=D0=B5=D1=80=D0=B5=D0=B2=D0=B5=D0=B4=D0=B5=D0=BC =
=D0=B4=D0=BB=D1=8F =D0=92=D0=B0=D1=81 =D0=BB=D1=8E=D0=B1=D1=8B=D0=B5 =
=D0=B4=D0=BE=D0=BA=D1=83=D0=BC=D0=B5=D0=BD=D1=82=D1=8B, =
=D0=B4=D0=BE=D0=B3=D0=BE=D0=B2=D0=BE=D1=80=D1=8B, =
=D1=82=D0=B5=D1=85=D0=BD=D0=B8=D1=87=D0=B5=D1=81=D0=BA=D1=83=D1=8E =
=D0=B4=D0=BE=D0=BA=D1=83=D0=BC=D0=B5=D0=BD=D1=82=D0=B0=D1=86=D0=B8=D1=8E,=
=D0=B8=D0=BD=D1=81=D1=82=D1=80=D1=83=D0=BA=D1=86=D0=B8=D0=B8 =D0=B8 =
=D1=82.=D0=B4.

=D0=A1 =D0=BB=D1=8E=D0=B1=D0=BE=D0=B3=D0=BE =
=D1=8F=D0=B7=D1=8B=D0=BA=D0=B0 / =D0=BD=D0=B0 =
=D0=BB=D1=8E=D0=B1=D0=BE=D0=B9 =D1=8F=D0=B7=D1=8B=D0=BA.
=D0=91=D0=B5=D0=B7 =D0=BD=D0=B0=D1=86=D0=B5=D0=BD=D0=BA=D0=B8 =
=D0=B7=D0=B0 =D1=82=D0=B5=D0=BC=D0=B0=D1=82=D0=B8=D0=BA=D1=83 =
=D0=BF=D0=B5=D1=80=D0=B5=D0=B2=D0=BE=D0=B4=D0=B0.
=D0=9F=D1=80=D0=B5=D0=B4=D0=BE=D1=81=D1=82=D0=B0=D0=B2=D0=B8=D0=BC =
=D1=83=D1=81=D1=82=D0=BD=D0=BE=D0=B3=D0=BE =
=D0=BF=D0=B5=D1=80=D0=B5=D0=B2=D0=BE=D0=B4=D1=87=D0=B8=D0=BA=D0=B0 =
=D0=B4=D0=BB=D1=8F =
=D1=81=D0=BE=D0=BF=D1=80=D0=BE=D0=B2=D0=BE=D0=B6=D0=B4=D0=B5=D0=BD=D0=B8=D1=
=8F =D0=BF=D0=B5=D1=80=D0=B5=D0=B3=D0=BE=D0=B2=D0=BE=D1=80=D0=BE=D0=B2, =
=D0=BF=D1=83=D0=B1=D0=BB=D0=B8=D1=87=D0=BD=D1=8B=D1=85 =
=D0=BC=D0=B5=D1=80=D0=BE=D0=BF=D1=80=D0=B8=D1=8F=D1=82=D0=B8=D0=B9, =
=D1=81=D0=BE=D0=BF=D1=80=D0=BE=D0=B2=D0=BE=D0=B6=D0=B4=D0=B5=D0=BD=D0=B8=D1=
=8F =D0=B8=D0=BD=D0=BE=D1=81=D1=82=D1=80=D0=B0=D0=BD=D0=BD=D1=8B=D1=85 =
=D1=81=D0=BF=D0=B5=D1=86=D0=B8=D0=B0=D0=BB=D0=B8=D1=81=D1=82=D0=BE=D0=B2 =
=D0=BD=D0=B0 =
=D0=BF=D1=80=D0=BE=D0=B8=D0=B7=D0=B2=D0=BE=D0=B4=D1=81=D1=82=D0=B2=D0=B5.=
=20
=D0=9D=D0=B8=D0=B7=D0=BA=D0=B8=D0=B5 =D1=86=D0=B5=D0=BD=D1=8B, =
=D1=85=D0=BE=D1=80=D0=BE=D1=88=D0=B8=D0=B5 =
=D1=81=D0=BA=D0=B8=D0=B4=D0=BA=D0=B8, =
=D0=B8=D0=BD=D0=B4=D0=B8=D0=B2=D0=B8=D0=B4=D1=83=D0=B0=D0=BB=D1=8C=D0=BD=D1=
=8B=D0=B5 =D1=83=D1=81=D0=BB=D0=BE=D0=B2=D0=B8=D1=8F =D0=B4=D0=BB=D1=8F =
=D0=BA=D1=80=D1=83=D0=BF=D0=BD=D1=8B=D1=85 =
=D0=B7=D0=B0=D0=BA=D0=B0=D0=B7=D0=BE=D0=B2.
=D0=91=D0=B5=D1=80=D0=B5=D0=BC =
=D1=81=D1=80=D0=BE=D1=87=D0=BD=D1=8B=D0=B5 =D0=B8 =
=D1=81=D0=B2=D0=B5=D1=80=D1=85=D1=81=D1=80=D0=BE=D1=87=D0=BD=D1=8B=D0=B5 =
=D0=B7=D0=B0=D0=BA=D0=B0=D0=B7=D1=8B.
=D0=9E=D0=BF=D0=BB=D0=B0=D1=82=D0=B0: =D0=BD=D0=B0=D0=BB., =
=D0=B1/=D0=BD=D0=B0=D0=BB, =
=D1=8F=D0=BD=D0=B4=D0=B5=D0=BA=D1=81.=D0=B4=D0=B5=D0=BD=D1=8C=D0=B3=D0=B8=
, webmoney =D0=B8 =D0=B4=D1=80.

=D0=9F=D1=80=D0=B8 =D0=B7=D0=B0=D0=BA=D0=B0=D0=B7=D0=B5 =D0=BE=D1=82 =
5000 =D1=80=D1=83=D0=B1. =E2=80=93 =
=D0=BF=D0=BE=D0=B4=D0=B0=D1=80=D0=BE=D0=BA.
=D0=9F=D0=BE=D0=BF=D1=80=D0=BE=D0=B1=D1=83=D0=B9=D1=82=D0=B5 =
=D1=80=D0=B0=D0=B1=D0=BE=D1=82=D0=B0=D1=82=D1=8C =D1=81 =
=D0=BD=D0=B0=D0=BC=D0=B8 =E2=80=93 =D0=92=D0=B0=D0=BC =
=D0=BF=D0=BE=D0=BD=D1=80=D0=B0=D0=B2=D0=B8=D1=82=D1=81=D1=8F!

=D0=97=D0=B2=D0=BE=D0=BD=D0=B8=D1=82=D0=B5: +7 (495) 729-1903
=D0=B8=D0=BB=D0=B8 =D0=BF=D0=BE=D1=87=D1=82=D0=B0: =
sverhperevod@yahoo.com

ALERT: New HMRC phishing scam - new spam e-mail is out (11luoz.co.uk)

My spam trap has just registered this phishing email pretending to be from HMRC and providing a link which starts from a valid onilne.hmrc.gov.uk

Avoid clicking on this link!

Here is the offending spam email:


Return-path:
Envelope-to: x@x.com
Delivery-date: Mon, 19 Oct 2009 16:28:24 +0500
Received: from mta7.iomartmail.com ([62.128.193.157])
by x.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.51 (FreeBSD))
id 1MzqPW-000Erk-8U
for x@x.com; Mon, 19 Oct 2009 16:28:24 +0500
Received: from mta7.iomartmail.com (localhost.localdomain [127.0.0.1])
by mta7.iomartmail.com (8.12.11.20060308/8.12.11) with ESMTP id n9JBSGsu006245;
Mon, 19 Oct 2009 12:28:17 +0100
Received: from 201-24-104-162.fnsce701.t.brasiltelecom.net.br (201-24-104-162.fnsce701.t.brasiltelecom.net.br [201.24.104.162])
by mta7.iomartmail.com (8.12.11.20060308/8.12.11) with ESMTP id n9JBSDc9006156;
Mon, 19 Oct 2009 12:28:15 +0100
Message-ID: <000d01ca50af$3d264ea0$6400a8c0@silkensen53>
From: "HM Revenue and Customs"
To:
Subject: Notice of Underreported Income
Date: Mon, 19 Oct 2009 09:28:10 -0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01CA50AF.3D264EA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

This is a multi-part message in MIME format.

------=_NextPart_000_0007_01CA50AF.3D264EA0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

Taxpayer ID: ufwsd-00000505794992UK
Tax Type: INCOME TAX
Issue: Unreported/Underreported Income (Fraud Application)
Please review your tax statement on HM Revenue and Customs (HMRC) website (=
click on the link below):

/online.hmrc.gov.uk.11luoz.co.uk/SecurityWebApp/httpsmode/statement.php?id=3D=
935603624415165971648683077233363052992296055238102320970584&email=3Dufwsd@=
djevans.co.uk&tid=3Dufwsd-00000505794992UK"

review tax statement for taxpayer id: ufwsd-00000505794992UK
HM Revenue and Customs


Domain 11luoz.co.uk has just been registered using a FAKE UK ADDRESS.

Here is the WHOIS Data:


Connecting to UK.whois-servers.net...


Domain name:
11luoz.co.uk

Registrant:
James Smith

Registrant type:
Non-UK Individual

Registrant's address:
5 Lower St Onslow
Winklebury
RG24 8HJ
United Kingdom

Registrar:
Webfusion Ltd t/a 123-Reg.co.uk [Tag = 123-REG]
URL: http://www.123-reg.co.uk

Relevant dates:
Registered on: 18-Oct-2009
Renewal date: 18-Oct-2011
Last updated: 18-Oct-2009

Registration status:
Registration request being processed.

Name servers:
No name servers listed.



MSN Spam (Spim) advertising make9181.com

First it was Look2381.com MSN spam now the spammers have switched to make9181.com

Compromised Hotmail accounts used to send MSN spam:


(10:11:34 AM) tamekadapuvu@hotmail.com: Hey Sam check out http://make9181.com
(2:14:00 PM) bucoliceilcq@hotmail.com: Hey Sam check out http://make9181.com
(3:31:47 PM) liesel.pinedaleci@hotmail.com: Need A Local F*ck Buddy? singleadultmeetup.com
Sent From iPhone Mobile ID: 55039
(4:13:34 PM) stuyvesantqprmx@hotmail.com: Hey Sam check out http://make9181.com
(5:26:54 PM) kristentoral@hotmail.com: Hey Sam check out http://make9181.com
(9:43:44 AM) prioryyku.lq@hotmail.com: Hey Sam check out http://make9181.com
(9:46:46 AM) lottielonelit@hotmail.com: Hey Sam check out http://make9181.com
(1:15:18 PM) margueritebowaz@hotmail.com: Hey Sam check out http://make9181.com
(2:10:31 PM) marionpiwet@hotmail.com: Hey Sam check out http://make9181.com
(11:53:49 AM) desorptionmxqwy@hotmail.com: Hey Sam check out http://make9181.com


WHOIS DATA on make9181.com

Domain Name : make9181.com

Registrant Contact Information :
JOYCEWANG
HEBEI TAGNGUO LTD.
li_wangshang@yeah.net
JIANKANG, 300452
tel:
fax:

Administrative Contact Information :
JOYCEWANG
HEBEI TAGNGUO LTD.
li_wangshang@yeah.net
JIANKANG, 300452
tel:
fax:

Technical Contact Information :
JOYCEWANG
HEBEI TAGNGUO LTD.
li_wangshang@yeah.net
JIANKANG, 300452
tel:
fax:

Billing Contact Information :
JOYCEWANG
HEBEI TAGNGUO LTD.
li_wangshang@yeah.net
JIANKANG, 300452
tel:
fax:

Status :
clientDeleteProhibited
clientTransferProhibited

Domain Name Server :
ns1.kevlarhost.com
ns2.kevlarhost.com

Registration Date :2009-4-16
Expiration Date : 2010-4-16

spam from 195.225.53.134 (Ukraine)

www.trustedsource.org/query/195.225.53.134

Return-path:
Delivery-date: Wed, 23 Sep 2009 12:13:57 +0500
Received: from [195.225.53.134] (helo=kuler)
by x.com with esmtp (Exim 4.51 (FreeBSD))
id 1MqM2i-000Dkx-15; Wed, 23 Sep 2009 12:13:56 +0500
Date: Wed, 23 Sep 2009 09:13:35 +0200
From: =?koi8-r?B?IvfBzMXSydEg88XMxdrOxdfBIg==?=

X-Mailer: feftig.43
X-Priority: 3 (Normal)
Message-ID: <0846956868.20090923091335@mail.ru>
To: x@x.com
References: <9BA0D7B861CC3E580B1F2B4232865795A955D@mail.ru>
Subject: =?koi8-r?B?5MV008vJyiDJINPFzcXKztnKINDTycgwzM/HIOnSyc7BIOvP03TJyw==?=
MIME-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 8bit

îáðòá÷ìåîéñ ëïîóõìøôáôé÷îïê òáâïôù:
• ðÒÏÂÌÅÍÙ ÓÅÍÅÊÎÙÈ ÐÁÒÔÎÅÒÓËÉÈ ×ÚÁÉÍÏÏÔÎÏÛÅÎÉÊ: ËÏÎÆÌÉËÔÙ, ÉÚÍÅÎÙ, ÚÁÍÅÝÅÎÉÅ ÒÏÌÅ×ÙÈ ÆÕÎËÃÉÊ ÍÕÖÁ(ÖÅÎÙ), ÕÇÒÏÚÁ ÒÁÚ×ÏÄÁ, ÒÁÚ×ÏÄ.
• ðÒÏÂÌÅÍÙ ×ÚÁÉÍÏÏÔÎÏÛÅÎÉÊ Ó ÄÅÔØÍÉ. äÅÔÓËÉÅ ÔÒÅ×ÏÇÉ, ÓÔÒÁÈÉ, ×ÏÚÒÁÓÔÎÙÅ ËÒÉÚÉÓÙ. çÉÐÅÒÁËÔÉ×ÎÏÓÔØ.
• ëÒÉÚÉÓÎÙÅ ÓÏÓÔÏÑÎÉÑ ÌÉÞÎÏÓÔÉ: ÓÔÒÅÓÓÙ, ÄÅÐÒÅÓÓÉÉ, ÓÉÎÄÒÏÍ ÈÒÏÎÉÞÅÓËÏÊ ÕÓÔÁÌÏÓÔÉ, ÓÔÒÁÈÉ.
• äÕÈÏ×ÎÙÅ ËÒÉÚÉÓÙ, ÐÏÉÓË ÓÍÙÓÌÁ ÖÉÚÎÉ É ÐÒÅÄÎÁÚÎÁÞÅÎÉÑ.
• éÓÃÅÌÅÎÉÅ ÷ÎÕÔÒÅÎÎÅÇÏ òÅÂÅÎËÁ.
• ïÓÏÚÎÁÎÉÅ É ÔÒÁÎÓÆÏÒÍÁÃÉÑ ÎÅÇÁÔÉ×ÎÙÈ ÜÍÏÃÉÏÎÁÌØÎÙÈ ÓÏÓÔÏÑÎÉÊ × ÐÏÚÉÔÉ×ÎÙÅ É ÎÅÊÔÒÁÌØÎÙÅ.
• òÁÚ×ÉÔÉÅ ÉÎÔÕÉÃÉÉ É Õ×ÅÒÅÎÎÏÓÔÉ × ÓÅÂÅ.
• òÁÚ×ÉÔÉÅ ÐÏÚÉÔÉ×ÎÏÇÏ ÍÙÛÌÅÎÉÑ.
• òÁÓËÒÙÔÉÅ Ô×ÏÒÞÅÓËÏÇÏ ÐÏÔÅÎÃÉÁÌÁ.

ôÅÌ.: ( *0 4 4 +) 228 ,50 29-


.

MSN Spam (Spim) advertising Look2381.com

Another MSN spam advertising Look2381.com - what looks like a redirect to an adult site sent from compromised hotmail accounts.

(17:34:35) carolinamehah@hotmail.com: Hey Sam check out http://Look2381.com

(4:02:22 PM) bernadettelywok@hotmail.com: Hey Sam check out http://Look2381.com

(11:59:28 AM) lanatocefe@hotmail.com: Hey Sam check out http://Look2381.com

(1:52:04 PM) potlatchibpf@hotmail.com: Hey Sam check out http://Look2381.com

(1:10:18 PM) balledxlqacp@hotmail.com: Hey Sam check out http://Look2381.com

(5:13:54 PM) tanishacezowyb@hotmail.com: Hey Sam check out http://Look2381.com

(3:02:37 PM) lottiezagunu@hotmail.com: Hey Sam check out http://Look2381.com

(2:53:05 PM) yerkeshdsh@hotmail.com: Hey Sam check out http://Look2381.com

(1:53:36 PM) altametakim@hotmail.com: Hey Sam check out http://Look2381.com

(11:56:09 AM) sherrygybixyt@hotmail.com: Hey Sam check out http://Look2381.com

(10:17:37 AM) tamekazerugy@hotmail.com: Hey Sam check out http://Look2381.com

russian spam from brazilian ip 200.219.245.30

Return-path:
Envelope-to: x@x.com
Delivery-date: Thu, 24 Sep 2009 00:17:36 +0500
Received: from weblinuxsded02.bighost.com.br ([200.219.245.30])
by x.com with smtp (Exim 4.51 (FreeBSD))
id 1MqXL2-0007pI-UK
for x@x.com; Thu, 24 Sep 2009 00:17:36 +0500
Received: from gzyhr (194.113.192.88)
by weblinuxsded02.bighost.com.br; Wed, 23 Sep 2009 16:07:18 -0300
Date: Wed, 23 Sep 2009 16:07:18 -0300
From:
X-Mailer: The Bat! (v2.01)
X-Priority: 3 (Normal)
Message-ID: <582709583.20090801165501@lewlara.com.br>
To:
Subject: Ñàíêò-Ïåòåðáóðã.Ìîíòàæ ñèñòåì áåçîïàñíîñòè íà âàøåì îáúåêòå â Ñ-Ïåòåðáóðãå
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------0A0056B1FB8"

------------0A0056B1FB8
Content-Type: text/html; charset=windows-1251
Content-Transfer-Encoding: 8bit

Ïîæàðíàÿ ñèãíàëèçàöèÿ

spam from 208.76.245.2 - never signed up for anything from them...

Return-path:
Delivery-date: Sat, 19 Sep 2009 18:38:04 +0500
Received: from s326.c4.crucialx.net ([208.76.245.2])
by x.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.51 (FreeBSD))
id 1Mp08Y-000K5r-2M
for x@x.com; Sat, 19 Sep 2009 18:38:04 +0500
Received: from localhost ([127.0.0.1]:39891 helo=adsmtp.trademal.com)
by s326.c4.crucialx.net with esmtpa (Exim 4.69)
(envelope-from )
id 1Mp08Q-0000M1-JJ
for x@x.com; Sat, 19 Sep 2009 08:37:54 -0500
To: x@x.com
Subject: PartTimePost.com - Post Your Job For FREE!
Message-ID: <7981b490597c1e9f6a58cc41dda79a44@adsmtp.trademal.com>
Date: Thu, 17 Sep 2009 13:20:23 -0500
From: "Avery Tan"
Reply-To: avery@parttimepost.com
MIME-Version: 1.0
X-Mailer-LID: 9
X-Mailer-SID: 51
X-Mailer-Sent-By: 2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - s326.c4.crucialx.net

How well PartTimePost.com perform?

spam from 203.116.57.101

Return-path: <"Ësquare< admin"@sg31-jsm.com>
Delivery-date: Fri, 18 Sep 2009 00:25:40 +0500
Received: from [203.116.57.101] (helo=mercury131.networknoc.com)
by x.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.51 (FreeBSD))
id 1MoMbq-000COz-3L
for x@x.com; Fri, 18 Sep 2009 00:25:40 +0500
Received: (qmail 11042 invoked from network); 17 Sep 2009 22:09:15 +0800
Received: from unknown (HELO localhost) (203.116.57.101)
by 203.116.57.101 with SMTP; 17 Sep 2009 22:09:15 +0800
MIME-Version: 1.0
From: "=?ISO-8859-1?Q?=CBSQUARE?="
Subject: Are you getting REAL results from SPUR funding?
X-Mailer: HTML Mime mail class
Date: Thu, 17 Sep 09 22:09:14 +0800
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Message-ID:
To: lists@sg31-jsm.com

You may also email us at admin=
@esquare.com.sg or visit our website www.esquare.com.sg

.

spam from 91.203.136.195

4
Return-path:
Envelope-to: x@x.com
Delivery-date: Thu, 17 Sep 2009 13:36:10 +0500
Received: from [91.203.136.195] (helo=[91.203.136.195])
by x.com with esmtp (Exim 4.51 (FreeBSD))
id 1MoCTI-000JbU-VU; Thu, 17 Sep 2009 13:36:10 +0500
Date: Thu, 17 Sep 2009 10:36:09 +0200
From: =?koi8-r?B?IuHHzMHRIPPPws/MxdfBIg==?=
X-Mailer: tyyiprb.47
X-Priority: 3 (Normal)
Message-ID: <1661013527.20090917103609@mail.ru>
To: wine@x.com
Subject: =?koi8-r?B?58XOxdLB1DDSIOLp+u7l8yDJxMXKISAg9NLFzsnOxyDL0sXB1MnXzg==?= =?koi8-r?B?z8fPIM3Z28zFzsnRIMkgyc7U1cnDyckg1yDCydrOxdPFLiA=?=
MIME-Version: 1.0
Content-Type: text/html; charset=koi8-r
Content-Transfer-Encoding: 8bit

èÏÔÉÔÅ ÚÁÒÁÂÏÔÁÔØ ÎÁ ËÒÉÚÉÓÅ? èÏÔÉÔÅ Õ×ÅÌÉÞÉÔØ ÞÉÓÔÕÀ ÐÒÉÂÙÌØ ÎÁ 53%? èÏÔÉÔÅ ÓÎÉÚÉÔØ ÒÁÓÈÏÄÙ ÎÁ 45 - 70%? "÷Ï ×ÒÅÍÅÎÁ ËÒÉÚÉÓÁ, ×ÙÖÉ×ÁÀÔ ÔÏÌØËÏ ÔÅ, ËÔÏ ÓÐÏÓÏÂÅÎ ÐÒÏÉÚ×ÏÄÉÔØ îï÷ùå ÉÄÅÉ É ÍÙÓÌÉÔØ ÎÅÛÁÂÌÏÎÎÏ" äÏÎÁÌØÄ ôÒÁÍÐ "çÅÎÅÒÁÔÏÒ âéúîåó éÄÅÊ" ôÒÅÎÉÎÇ ÜÆÆÅËÔÉ×ÎÏÇÏ ÍÙÛÌÅÎÉÑ É ÉÎÔÕÉÃÉÉ × ÂÉÚÎÅÓÅ. 26-27 ÓÅÎÔÑÂÒÑ, Ç.ëÉÅ× üÔÏÔ ÔÒÅÎÉÎÇ ÐÏÓÅÝÁÀÔ: ÷ÌÁÄÅÌØÃÙ ÂÉÚÎÅÓÁ, ÄÉÒÅËÔÏÒÁ, ôïð-ÍÅÎÅÄÖÅÒÙ, ÕÐÒÁ×ÌÑÀÝÉÅ, ÂÉÚÎÅÓÍÅÎÙ, ÐÒÅÄÐÒÉÎÉÍÁÔÅÌÉ. îÁÐÒÁ×ÌÅÎÉÅ ÔÒÅÎÉÎÇÁ: ëÁË ÚÁÒÁÂÏÔÁÔØ ÎÁ ËÒÉÚÉÓÅ. ðÏÓÌÅ ÐÒÏÈÏÖÄÅÎÉÑ ËÕÒÓÁ, ×Ù ÓÍÏÖÅÔÅ: - ÂÏÌÅÅ ÐÏÌÎÏ ÐÏÎÉÍÁÔØ ÓÕÔØ ÂÉÚÎÅÓ ÚÁÄÁÞ. - ÎÁÈÏÄÉÔØ ÐÒÏÂÌÅÍÎÙÅ ÚÏÎÙ É "ÕÚËÉÅ ÍÅÓÔÁ". - ÇÅÎÅÒÉÒÏ×ÁÔØ ÉÄÅÉ É ÒÅÛÅÎÉÑ ÐÏ Ó×ÏÅÊ ×ÏÌÅ; - ÎÁÈÏÄÉÔØ ÎÏ×ÙÅ ÓÐÏÓÏÂÙ ÄÅÌÁÔØ ÄÅÎØÇÉ; - ÏÔËÒÙ×ÁÔØ ÎÏ×ÙÅ ×ÏÚÍÏÖÎÏÓÔÉ × ÂÉÚÎÅÓÅ; - ÓÏÚÄÁ×ÁÔØ ÎÏ×ÙÅ ÉÚÄÅÌÉÑ, ÕÓÌÕÇÉ, ÐÒÏÃÅÓÓÙ; - ÓÏ×ÅÒÛÅÎÓÔ×Ï×ÁÔØ ÓÔÁÒÙÅ ÉÚÄÅÌÉÑ, ÕÓÌÕÇÉ, ÐÒÏÃÅÓÓÙ; - ÎÁÈÏÄÉÔØ ÒÅÛÅÎÉÑ ÓÌÏÖÎÙÈ ÈÏÚÑÊÓÔ×ÅÎÎÙÈ ÐÒÏÂÌÅÍ; - ÒÁÓÓÍÁÔÒÉ×ÁÔØ ÐÒÏÂÌÅÍÙ ËÁË ÎÏ×ÙÅ ×ÏÚÍÏÖÎÏÓÔÉ; - ÄÅÊÓÔ×Ï×ÁÔØ ÂÏÌÅÅ ÐÒÏÄÕËÔÉ×ÎÏ; - ÕÚÎÁÔØ, ÇÄÅ ÓÌÅÄÕÅÔ ÉÓËÁÔØ "ÐÒÏÒÙ× × ÂÕÄÕÝÅÅ" "ëÔÏ ÓÐÏÓÏÂÅÎ ÇÅÎÅÒÉÒÏ×ÁÔØ ÉÄÅÉ - ÔÏÔ ÓÐÏÓÏÂÅÎ ÄÅÌÁÔØ ÄÅÎØÇÉ ÉÚ ×ÏÚÄÕÈÁ!" ú×ÏÎÉÔÅ ÐÏ ÔÅÌÅÆÏÎÕ *(044) , , 228 ,55 3_2 òÅÇÌÁÍÅÎÔ ÔÒÅÎÉÎÇÁ: äÁÔÙ ÐÒÏ×ÅÄÅÎÉÑ: 26-27 ÓÅÎÔÑÂÒÑ äÌÉÔÅÌØÎÏÓÔØ ÏÄÎÏÇÏ ÔÒÅÎÉÎÇÁ - 2 ÄÎÑ (16 ÞÁÓÏ×) "÷ÅÄÕÝÅÅ ÕÓÌÏ×ÉÅ ÄÌÑ ÒÁÚ×ÉÔÉÑ ÌÀÂÏÇÏ ÂÉÚÎÅÓÁ - ÇÅÎÅÒÁÃÉÑ ÎÏ×ÙÈ ÉÄÅÊ" ÷ ÐÒÏÇÒÁÍÍÅ ÔÒÅÎÉÎÇÁ: 1. ÷×ÏÄÎÁÑ ÞÁÓÔØ. - üÆÆÅËÔÉ×ÎÏÅ ÍÙÛÌÅÎÉÅ É ËÒÅÁÔÉ×. íÉÆÙ É ÒÅÁÌØÎÏÓÔØ 2. âÁÚÏ×ÙÅ ÎÁ×ÙËÉ ÜÆÆÅËÔÉ×ÎÏÇÏ ÍÙÛÌÅÎÉÑ. - çÉÍÎÁÓÔÉËÁ ÄÌÑ ÍÏÚÇÁ - ëÏÎÃÅÎÔÒÁÃÉÑ - ÚÁÌÏÇ ÕÓÐÅÈÁ - üÔÁÐÙ ËÏÎÃÅÎÔÒÁÃÉÉ. õÐÒÁÖÎÅÎÉÑ ÎÁ ËÏÎÃÅÎÔÒÁÃÉÀ 3. íÅÔÏÄÙ ÐÏÉÓËÁ ÉÎÆÏÒÍÁÃÉÉ. - ÍÅÔÏÄ "áÇÅÎÔ" - ÍÅÔÏÄ "íÁÇÉÞÅÓËÉÅ ×ÏÐÒÏÓÙ" 4. 5 ÛÁÇÏ× ÐÒÏÉÚ×ÏÄÓÔ×Á éäåé. - áÌÇÏÒÉÔÍ ÓÏÚÄÁÎÉÑ ÐÏÔÏËÁ ÉÄÅÊ. - ë×ÏÔÁ ÉÄÅÊ - óÅËÒÅÔÙ ÍÁÓÔÅÒÓÔ×Á "çÅÎÅÒÁÔÏÒ ÂÉÚÎÅÓ ÉÄÅÊ" 5. óÔÒÁÔÅÇÉÑ É ÔÁËÔÉËÁ ÍÙÛÌÅÎÉÑ × ÂÉÚÎÅÓÅ. - ðÒÁ×ÉÌÁ ÜÆÆÅËÔÉ×ÎÏÊ ÓÔÒÁÔÅÇÉÉ - ðÒÉÅÍ ÓÔÒÁÔÅÇÉÞÅÓËÏÇÏ ÍÙÛÌÅÎÉÑ "òÅÛÅÔËÁ æëâ" - ðÒÉÅÍ ÇÅÎÅÒÁÃÉÉ ÔÁËÔÉÞÅÓËÉÈ ÂÉÚÎÅÓ ÉÄÅÊ "óëáíðåò" 6. óÔÒÁÔÅÇÉÉ ÐÏÉÓËÁ ÒÅÛÅÎÉÊ. - ðÒÉÅÍ "áÎÁÌÉÔÉÞÅÓËÏÅ ËÏÌÅÓÏ" - ðÒÉÅÍ "þÁÓÔÉ É ÃÅÌÏÅ" 7. ðÒÉÅÍÙ ÇÅÎÅÒÁÃÉÉ ÉÄÅÊ. - "îÏ×ÁÑ ÒÅÁÌØÎÏÓÔØ" - "ëÏÌÏÄÅà ÉÄÅÊ" - "õÍÎÙÊ ÓÏ×ÅÔ" 8. ïÔËÒÙ×ÁÅÍ ÉÎÔÕÉÔÉ×ÎÙÅ ÎÁ×ÙËÉ. - õÐÒÁÖÎÅÎÉÑ ÎÁ ËÁÖÄÙÊ ÄÅÎØ - 5 ÓÐÏÓÏÂÏ× ÉÓÐÏÌØÚÏ×ÁÎÉÑ ÉÎÔÕÉÃÉÉ - ôÅÈÎÉËÉ ÒÅÌÁËÓÁÃÉÉ 9. éÎÔÕÉÔÉ×ÎÙÅ ÉÇÒÙ. - éÒÒÁÃÉÏÎÁÌØÎÏÅ ÍÙÛÌÅÎÉÅ. - ðÁÓÓÉ×ÎÙÊ ÐÏÉÓË ÉÄÅÊ. íÅÔÏÄ "ïÚÁÒÅÎÉÅ" - íÅÔÏÄ "íÇÎÏ×ÅÎÎÏÅ ÒÅÛÅÎÉÅ" - íÅÔÏÄ "óÔÁËÁÎ ×ÏÄÙ" 10. ÷ÙÂÏÒ ÒÅÛÅÎÉÑ. - ëÒÉÔÅÒÉÉ ÏÔÂÏÒÁ ÒÅÛÅÎÉÊ - ðÒÁ×ÉÌÁ ÐÒÉÎÑÔÉÑ ÒÅÛÅÎÉÊ 11. óÏ×ÅÔÙ ÄÌÑ ËÒÅÁÔÉ×ÝÉËÁ ÎÁ ËÁÖÄÙÊ ÄÅÎØ. + 10 ÉÇÒ ÎÁ ÒÁÚ×ÉÔÉÅ ËÒÅÁÔÉ×ÎÏÓÔÉ. ðÏ ÏËÏÎÞÁÎÉÀ ÔÒÅÎÉÎÇÁ, ×ÙÄÁÅÔÓÑ ÉÍÅÎÎÏÊ ÓÅÒÔÉÆÉËÁÔ ÃÅÎÔÒÁ "òÁÚ×ÉÔÉÅ" çÁÒÁÎÔÉÒÕÅÍ: 47 ÎÏ×ÙÈ ÉÄÅÊ ÄÌÑ ÷ÁÛÅÇÏ ÂÉÚÎÅÓÁ ÕÖÅ ÎÁ ÔÒÅÎÉÎÇÅ! ôÒÅÎÉÎÇ ÓÏÓÔÏÉÔ ÉÚ: - ÔÅÏÒÅÔÉÞÅÓËÏÊ ÞÁÓÔÉ 20% - ÐÒÁËÔÉÞÅÓËÏÊ ÞÁÓÔÉ 60% (21 ÕÐÒÁÖÎÅÎÉÅ) - ÁÎÁÌÉÚ ÒÅÚÕÌØÔÁÔÏ× É ËÏÎÓÕÌØÔÁÃÉÉ 20% õÓÌÏ×ÉÑ ÕÞÁÓÔÉÑ É ÓËÉÄËÉ: íÅÓÔÏ ÐÒÏ×ÅÄÅÎÉÑ: ëÉÅ×, ÕÌ. áÎÄÒÅÅ×ÓËÉÊ óÐÕÓË úÁÎÑÔÉÑ ÐÒÏ×ÏÄÑÔÓÑ × ÇÒÕÐÐÅ 14-16 ÞÅÌÏ×ÅË. óÔÏÉÍÏÓÔØ ÕÞÁÓÔÉÑ × ÔÒÅÎÉÎÇÅ - 1850 ÇÒÎ. ÷ ÓÔÏÉÍÏÓÔØ ×ÈÏÄÉÔ: - ïÂÕÞÅÎÉÅ; - üËÓËÌÀÚÉ×ÎÙÅ ÔÅÈÎÏÌÏÇÉÉ ÇÅÎÅÒÁÃÉÉ ÉÄÅÊ; - òÁÚÄÁÔÏÞÎÙÅ ÍÁÔÅÒÉÁÌÙ; - îÅÏÂÈÏÄÉÍÁÑ ËÁÎÃÅÌÑÒÉÑ; - ëÏÆÅ-ÂÒÅÊËÉ; - ïÂÅÄ. óËÉÄËÉ: äÌÑ ÕÞÁÓÔÉÑ 2-È É ÂÏÌÅÅ ÞÅÌÏ×ÅË - ÏÔ 5 ÄÏ 15 % ú×ÏÎÉÔÅ ÐÏ ÔÅÌÅÆÏÎÕ (+044)* '228 +55, 32 ïÔÚÙ×Ù ÕÞÁÓÔÎÉËÏ× ÐÒÅÄÙÄÕÝÉÈ ÔÒÅÎÉÎÇÏ×: îÁ ÓÅÇÏÄÎÑÛÎÉÊ ÄÅÎØ, ÐÒÏÛÌÏ ÕÖÅ ÂÏÌÅÅ Ä×ÕÈ ÎÅÄÅÌØ, ÐÒÏÇÒÅÓÓ ÉÄÅÔ. ôÑÖÅÌÏ ËÏÎÅÞÎÏ ÚÁÓÔÁ×ÉÔØ ÓÅÂÑ ÓÄÅÌÁÔØ ÕÐÒÁÖÎÅÎÉÅ, ÎÏ ËÏÇÄÁ ÎÁÞÉÎÁÅÛØ ÅÇÏ ÄÅÌÁÔØ, ÐÒÉÈÏÄÉÔ ÁÚÁÒÔ É ÉÄÅÉ ÓÙÐÑÔÓÑ ËÁË ÉÚ ×ÅÄÒÁ, ÔÏÌØËÏ ÕÓÐÅ×ÁÊ ÚÁÐÉÓÙ×ÁÔØ. ä×Å ÉÄÅÉ ÕÖÅ ×ÎÅÄÒÉÌ, ÏÄÎÁ ÕÖÅ ÐÒÉÎÏÓÉÔ ÍÎÅ ÄÅÎØÇÉ, ×ÔÏÒÁÑ ÚÁÒÁÂÏÔÁÅÔ × ÓÌÅÄÕÀÝÅÍ Ë×ÁÒÔÁÌÅ. úÎÁÎÉÅ ÐÕÔÅÊ ÒÁÚ×ÉÔÉÑ ÍÏÅÇÏ ÂÉÚÎÅÓÁ ÄÏÒÏÇÏÇÏ ÓÔÏÑÔ. èÏÒÏÛÉÊ ÔÒÅÎÉÎÇ. ðÅÔÒ óÁ×ÞÅÎËÏ, ÇÅÎ.ÄÉÒÅËÔÏÒ. ÐÒÏÄÁÖÁ ËÏÐÉÒÏ×ÁÌØÎÏÊ ÔÅÈÎÉËÉ (äÎÅÐÒÏÐÅÔÒÏ×ÓË) òÁÄÏÓÔØ ÐÏÚÎÁÎÉÑ, ÕÚÎÁ×ÁÎÉÑ, ÚÎÁÎÉÑ É ÐÏÑ×ÌÅÎÉÑ ÎÏ×ÙÈ ×ÏÐÒÏÓÏ×. íÁÇÉÞÅÓËÏÅ ÐÒÅ×ÒÁÝÅÎÉÅ ÌÀÂÙÈ ÐÒÏÂÌÅÍ × ÒÁÚÒÅÛÁÅÍÙÅ ÓÉÔÕÁÃÉÉ. ïÔËÒÙÔÉÅ ÎÏ×ÙÈ ×ÏÚÍÏÖÎÏÓÔÅÊ É ÂÏÌÅÅ ÌÅÇËÉÈ ÐÒÉÑÔÎÙÈ ÄÏÒÏÇ Ë ÌÀÂÏÊ ×ÅÒÛÉÎÅ. é Ë ÓÅÂÅ ÎÁÓÔÏÑÝÅÍÕ. åÌÅÎÁ óÕÈÁÞÅ×Á, ÄÉÒÅËÔÏÒ é×ÅÎÔ áÇÅÎÔÓÔ×Á. (ëÉÅ×) ðÅÒÅ×ÅÒÎÕÔØ Ó×Ï£ ÍÙÛÌÅÎÉÅ "Ó ÎÏÇ ÎÁ ÇÏÌÏ×Õ" É ÕÂÅÄÉÔØÓÑ ÞÔÏ ÒÁÂÏÔÁÅÔ É ÅÝÅ É ËÁË ÒÁÂÏÔÁÅÔ. éÄÅÉ × ÇÏÌÏ×Õ ÐÒÉÈÏÄÑÔ ÓÁÍÉ. òÁÓÛÉÒÉÔØ Ó×ÏÊ ËÒÕÇÏÚÏÒ É ÎÅ ÂÏÑÔØÓÑ "ÐÅÒÅÂÏÒÝÉÔØ". äÏ×ÅÒÑÔØ Ó×ÏÅÊ ÉÎÔÕÉÃÉÉ. ðÏÚÎÁÔØ ËÁË ÒÏÖÄÁÀÔÓÑ ÂÉÚÎÅÓ ÉÄÅÉ - ÜÔÏ ËÁÊÆ!!! ðÅÒÅÓÍÏÔÒÅÔØ Ó×ÏÊ ÂÉÚÎÅÓ ÐÏ ÎÏ×ÏÍÕ. òÅÛÅÎÉÅ ÍÎÏÇÉÈ ÐÒÏÂÌÅÍ ÓÔÁÎÅÔ ÎÁÍÎÏÇÏ ÐÒÏÝÅ. ÷ÅÒÉÔØ ÞÔÏ É ÖÅÌÁÎÉÅ ÍÏÖÅÔ ÓÔÁÔØ ÒÅÁÌØÎÏÓÔØÀ. îÁÄÏ ÔÏÌØËÏ ÐÒÉÌÏÖÉÔØ Ë ÜÔÏÍÕ ÕÓÉÌÉÅ. ÷Ó£ ÚÁ×ÉÓÉÔ ÔÏÌØËÏ ÏÔ ÎÁÓ - ÏÔ ÎÁÛÉÈ ÄÅÊÓÔ×ÉÊ, ÐÏÓÔÕÐËÏ×, ÎÏ×ÏÇÏ ÍÙÛÌÅÎÉÑ. òÁÂÏÔÙ ÎÁÄ ÓÏÂÏÊ ÐÏÓÌÅ ÔÒÅÎÉÎÇÁ - "ÎÅÐÅÒÅÐÁÈÁÎÁÎÎÏÅ ÐÏÌÅ" ÐÁÈÁÔØ É ÐÁÈÁÔØ…(ÏÔ Á×Ô.) ÷Ó£ ÂÙÌÏ ÏÞÅÎØ ËÒÅÁÔÉ×ÎÏ. óÐÁÓÉÂÏ å×ÇÅÎÉÀ! äÏ×ÇÁÌØ ÷ÌÁÄÉÍÉÒ, ×ÌÁÄÅÌÅà ÂÉÚÎÅÓÁ ÏËÏÎÎÙÈ ÔÅÈÎÏÌÏÇÉÊ (ëÉÅ×) ú×ÏÎÉÔÅ ÐÏ ÔÅÌÅÆÏÎÕ (04,4) _ _ 228* 55 32. P.S. ÷ ÍÉÒÅ ÂÉÚÎÅÓÁ, ÄÏÒÏÖÅ ×ÓÅÇÏ - éäåñ!

.

christian(?) spam from 74.86.54.143

Return-path:
Envelope-to: x@x.com
Delivery-date: Wed, 16 Sep 2009 11:43:41 +0500
Received: from ip24.salestools411.info ([74.86.54.143] helo=jadmin2.ded.arvixe.com)
by x.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.51 (FreeBSD))
id 1MnoEu-00019o-Ab
for x@x.com; Wed, 16 Sep 2009 11:43:41 +0500
Received: from drjim217 by jadmin2.ded.arvixe.com with local (Exim 4.69)
(envelope-from )
id 1MnoEm-0007QB-SE
for x@x.com; Tue, 15 Sep 2009 23:43:32 -0700
To: x@x.com
Subject: Do You Have a Plan B?
From: Dr. Jim L. Hamby
Reply-To:
MIME-Version: 1.0
X-Mailer: GMailer 1.2
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id:
Date: Tue, 15 Sep 2009 23:43:32 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - jadmin2.ded.arvixe.com
X-AntiAbuse: Originator/Caller UID/GID - [568 568] / [47 12]
X-AntiAbuse: Sender Address Domain - jadmin2.ded.arvixe.com

To my Christian co-worker,
I have a letter that I want you take about 2 minutes to look at. It concerns your ministry and something that is vital to those that God has called you to shepherd.
PLEASE do not delete this message or fail to study my letter. IT IS VITALLY IMPORTANT!
Here is the web site for the letter: http://is.gd/xxxx

spam from 86.125.23.30

2
Return-path:
Delivery-date: Tue, 15 Sep 2009 16:27:29 +0500
Received: from [86.125.23.30] (helo=womenhorny.com)
(envelope-from )
id 1MnWBq-0007EZ-6v
for x@x.com; Tue, 15 Sep 2009 16:27:21 +0500
Message-Id: <200918354568.23835.kyvixog@womenhorny.com>
Date: Tue, 15 Sep 2009 13:26:11 +0100
From: =?utf-8?B?0JPQtdGA0LzQsNC9?=
User-Agent: Thunderbird 2.0.0.23 (X11/20090812)
MIME-Version: 1.0
To: x@x
Subject: =?utf-8?B?0KMg0JLQsNGI0LXQuSDQutC+0LzQv9Cw0L3QuNC4INC10YHRgtGMINGD0L3QuNC60LDQu9GM0L3QsNGPINCy0L7Qt9C80L7QttC90L7RgdGC0Ywg0YDQsNC30YDQsNCx0L7RgtCw0YLRjCDRgdCw0LnRgiDQsdC10YHQv9C70LDRgtC90L4hKg==?=
Content-Type: multipart/alternative;
boundary="------------NextPart__kruyj.95220"
X-AIC-Spam-Score: -0.3 (/)
X-AIC-Scan-Signature: cd90788a1ae231499254423703503615
X-AIC-Scan-Server: styx.aic.net

This is a multi-part message in MIME format.
--------------NextPart__kruyj.95220
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

Здравствуйте, меня зовут Аня!
У Вашей компании есть уникальная возможность разработать сайт бесплатно!*
Продвинуть сайт за 5 тысяч рублей.*
А так же бесплатно обновить информацию на Вашем сайте!*

Мои контакты:

ICQ: 570-278-700
Почта: Sitestut@gmail.com

Twitter "Ghosts"

NoelCooke (NoelCooke661) is now following your tweets on Twitter.

A little information about NoelCooke:
0 followers
1 tweet
following 217 people

NidiaHickman (Hickman_509) is now following your tweets on Twitter.

A little information about NidiaHickman:
0 followers
1 tweet
following 793 people


Tresa Patience (tresatjb) is now following your tweets on Twitter
0 tweets
following 491 people

MSN IM Spam (spim) advertising Look2381.com

Got this MSN message this afternoon:


(1:12:08 PM) leahferebox@hotmail.com: Hey Samcheck out http://Look2381.com


Somehow crafty spammers have managed to:
a) register a valid Hotmail account

b) bypass MSN blocking filter (only accept messages from people in your contact list)

I have been gettin now an average of 2 such spims a day from various hotmail accounts

full list here

Another spam from networknoc: [203.116.57.79] (helo=mercury70.networknoc.com)

Got another piece of junk mail one from notorious networknoc.com - this time the From: field is set to be from domain neujsm4.com

An interesting thing about all spam coming from networknoc is that Return-path is in invalid format.


According to SpamCom the ISP of this spammer (starhub.com in Singapore) rejects the abuse reports..

here is the header of teh spam message received today:

---

Received: from [203.116.57.79] (helo=mercury70.networknoc.com)
by x.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.51 (FreeBSD))
id 1Lqr1M-000KEe-DQ
for x@x.com; Mon, 06 Apr 2009 20:46:02 +0500
Received: (qmail 7000 invoked from network); 6 Apr 2009 23:30:38 +0800
Received: from unknown (HELO localhost) (203.116.57.79)
by 203.116.57.79 with SMTP; 6 Apr 2009 23:30:38 +0800
MIME-Version: 1.0
From: "Ivy Lee"
Subject: Job Openings
X-Mailer: HTML Mime mail class
Date: Mon, 06 Apr 09 23:30:37 +0800
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Message-ID:
To: list@neujsm4.com

kerigmasolutions tentoken.com atomimaven.com [204.139.58.12]

Here is a copy of an interesting spam received by my spam trap just now. KerigmaSolutions (aka tentoken.com aka atomimaven.com) appears to be a hosting company located in Oklahoma, they chose a quite interesting (and 100% illegal) marketing strategy by sending out unsolicited spam to millions of innocent Internet users.

The IP address of the mail server used to send out spam (204.139.58.12) has not yet been picked up by any blacklist however kerigmasolutions.com is already blacklisted in SURBL

My spam traps located in Eastern Europe as well as UK and USA picked up this spam.

tentoken.com and atomimaven.com are not yet picked up by other systems as at 22:00GMT 30/Mar/2009


A copy of full internet headers is enclosed to help network administrators:

Delivery-date: Tue, 31 Mar 2009 02:06:10 +0500
Received: from smtp12.kerigmasolutions.com ([204.139.58.12] helo=kerigmasolutions.com)
by x.com with esmtp (Exim 4.51 (FreeBSD))
id 1LoOgE-00069I-Iu
for spamtrap@x.com; Tue, 31 Mar 2009 02:06:10 +0500
Received: by kerigmasolutions.com id hq4q3s0n2f4k for ; Mon, 30 Mar 2009 17:04:20 -0400 (envelope-from )
Date: Mon, 30 Mar 2009 17:04:20 -0400
From: "Kerigma Solutions"
Subject: Kerigma Information
To: "Sam Kamin"
List-Unsubscribe:
Reply-To:
Message-ID:
X-Mailer: mailex
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------------431248183877120133271685"
--------------431248183877120133271685
Content-Type: text/plain; charset="iso-8859-1"

Welcome to Kerigma Solutions

Kerigma Solutions, is here to secure your business. We are confident we can provide you with the highest level of support with our dedicated team of experts. With Kerigma Solutions you can depend on high customer service, quality equipment, and maximum domains.



Click here to contact us.
http://atomimaven.com/X.pl?ZVCHKB_PBW=39127&LX=3&fv=0416440093&zl=96&wlTsh
==
END OF MESSAGE