Spock.com - another creepy social network

From: donotreply@spock.com
Subject: [a friend's name] has requested your trust on Spock
Date: December 17, 2007 4:18:21 AM GMT+00:00
To: [my email]

Hi Future Spocker,

[a friend's name] has added you as a trusted contact on Spock. By accepting trust, you will be able to search each others’ network, share contact information, and get news.

Click here to get started. [had some URL incorporated to that]

-
Unsubscribe: http://www.spock.com/do/public/request_unsubscribe

Another of the series of failures of the social networking attempts, just like Pulse Plaxo. Is it so hard, really?

1. Do not send me spam. One is enough.

2. Do not spam the internet and digg about how you will become the google of the people searches. Know what? I'm happy to be found using google when I want to. I sign up for my profiles. There is a huge difference in spock or any other creepy failure social network creating automatically a profile for you or me, or we creating them ourselves. I have no control over who they claim I am. And I have zero desire to join spock, or any other spooky network. No, seriously, no, no, no. LinkedIn, and limited Facebook, that's it. No spock, pulse plaxo, hi5, tweety, orkut, schoolfriends, or anything else. No.

3. What is it with the unsubscribe? Anything that I never subscribed to that is offering me the option to unsubscribe is nothing but spam, irregardless of who sends or appears to have sent it. The spock invites are from people I know, but these basic not understanding how the invites or social networking sites work really creep me out. Don't create a profile by any spambot for me, thank you very much. And don't send me any unsubscribe option either.

Surpise, I am not the only one out there annoyed by spock.com invites.
People are considering action against spock.com through CAN-SPAM act

How to survive Facebook, Beacon, and avoid Facebook spam

In a blog specialized in nothing but spam, how come there was no entry for Facebook yet?
Well... it was a nice and tolerable website first, allowing one to keep in contact with the friends that are not in Linkedin or anywhere else that you'd actually care to join.

But it keeps getting worse and worse, so it's time for a cumulative How to survive Facebook-post.

I have over 100 hundred invitations to add applications in my profile. Each one is generating an email, and they are by friends, not by random spammers out there. Everyone finds something fun and wants their friends to add it, but ... well, friends don't always find it fun when you have hundreds of applications in there sending you uninvited spams.
If you want to offer me a beer, please do it in a bar in real life, not in Facebook.
And please keep superwall, sith and jedi, vampires, compare people, x-me and make a baby out of my email inbox, thank you...

First, let's jump to a solution. Block Facebook Spam is a group that helps with links to how to block the most offending applications.

After the solution, a quick 3 step how to survive Facebook:

1. Add only people you consider to be your friends.
2. When you don't like to receive a notification from an application, block it, or block them all (or remove them, from the same link).
3. Disable Beacon (below).

That's it - 3 steps. I could make it proper Web 2.0 style and lengthen it to 10 points but why bother? Here below rather how to block individual applications.

Facebook itself does not send spam, but with one of the relatively recent changes in the platform it allowed all sorts of little applications that you can add to your profile to spam everyone in your contacts list. How nice... that added to the fact that 90 % of these applications in Facebook are pointless (want to add vampires? Want to add vampires? How about pirates, yarr? Join quizes and spam everyone on your friendslist now? Join superwall? Someone sent you a gift or a message, click here and thisandthat to see it).

Facebook also added Beacon a month ago. A neutral name for an application that tracks what you do on external websites, and that you are supposed to opt out and not in, in case you would not like your friends to see what you purchased in Amazon etc.

To disable Beacon in Facebook: Set your privacy settings to remove Beacon -
1. go to privacy
2. go to external sites (bottom of list)
3. check - "Don't allow any websites to send stories to my profile."

To disable individual offending applications from sending you spam from your friends - more e.g. here.

* My personality:
http://www.facebook.com/apps/block.php?id=2490151219&action=block
* Hatching eggs:
http://www.facebook.com/apps/block.php?id=6702295930&action=block
* Friend wheel:
http://www.facebook.com/apps/block.php?id=2415325843&action=block
*Polls:
http://www.facebook.com/apps/block.php?id=2334088888&action=block
* Instant messaging:
http://www.facebook.com/apps/block.php?id=2603081069&action=block
* Boozemail:
http://www.facebook.com/apps/block.php?id=2360569570&action=block
* My questions:
http://www.facebook.com/apps/block.php?id=2363570816&action=block
* How Sexy Is Your Name Calculator:
http://www.facebook.com/apps/block.php?id=4673474311&action=block
* Name Analyzer:
http://www.facebook.com/apps/block.php?id=10939930426&action=block
* My Heritage:
http://www.facebook.com/apps/block.php?id=2528261089&action=block
* Jedi vs. Sith:
http://www.facebook.com/apps/block.php?id=2403689652&action=block
* Sticky Notes
http://www.facebook.com/apps/block.php?id=2384089789&action=block
* Naughty Gifts
http://www.facebook.com/apps/block.php?id=2412269324&action=block
* Free Condoms
http://www.facebook.com/apps/block.php?id=2410978396&action=block
* Are YOU Interested? (Yes in News Feeds):
http://www.facebook.com/apps/block.php?id=17091798008&action=block
* Entourage:
http://www.facebook.com/apps/block.php?id=4706620662&action=block
* Compare People:
http://www.facebook.com/apps/block.php?id=2433486906&action=block
* Superlatives:
http://www.facebook.com/apps/block.php?id=2372128250&action=block
* X-Me:
http://www.facebook.com/apps/block.php?id=2345673396&action=block
* Super Wall:
http://www.facebook.com/apps/block.php?id=2601240224&action=block
* Hot or Not:
http://www.facebook.com/apps/block.php?id=2252801962&action=block
* Likeness:
http://www.facebook.com/apps/block.php?id=4188419540&action=block
* Top Friends:
http://www.facebook.com/apps/block.php?id=2425101550&action=block
* Pirates:
http://www.facebook.com/apps/block.php?id=2342084241&action=block
* Vampires:
http://www.facebook.com/apps/block.php?id=2458301688&action=block
* Zombies:
http://www.facebook.com/apps/block.php?id=2341504841&action=block
* Werewolves:
http://www.facebook.com/apps/block.php?id=2721700161&action=block
* Slayers:
http://www.facebook.com/apps/block.php?id=17801732384&action=block
* Flixter/Movies:
http://www.facebook.com/apps/block.php?id=2558160538&action=block
* Funwall:
http://www.facebook.com/apps/block.php?id=2378983609&action=block

More:
Stop sending me invitations to add shit applications - Another interesting Facebook group with a lot of links.
Facebook: Do not sell my private pictures! Change your terms of use, NOW!
Facebook Is Always Watching You
How to sniff out private information on Facebook
Facebook CEO Apologizes, Lets Users Turn Off Beacon
15 reasons Facebook may be worth $15bn
Facebook opens profiles to public
Your boss could own your Facebook profile

From Terms of Use - regarding user data, incl. e.g who owns the photos or any materials users have posted.

When you post User Content to the Site, you authorize and direct us to make such copies thereof as we deem necessary in order to facilitate the posting and storage of the User Content on the Site. By posting User Content to any part of the Site, you automatically grant, and you represent and warrant that you have the right to grant, to the Company an irrevocable, perpetual, non-exclusive, transferable, fully paid, worldwide license (with the right to sublicense) to use, copy, publicly perform, publicly display, reformat, translate, excerpt (in whole or in part) and distribute such User Content for any purpose on or in connection with the Site or the promotion thereof, to prepare derivative works of, or incorporate into other works, such User Content, and to grant and authorize sublicenses of the foregoing. You may remove your User Content from the Site at any time. If you choose to remove your User Content, the license granted above will automatically expire, however you acknowledge that the Company may retain archived copies of your User Content.
{http://www.facebook.com/terms.php}

From a Facebook group:

1. It's not your friends fault (except a few) - the application are constructed in a way that rewards invites etc.
2. It's facebooks fault - what was a really nice contact management/news system - is becoming spambook.
3. Where is the "ignore ALL invites" button? - shame on facebook.
4. Everyone using facebook has put effort and time into creating and maintaining a profile - in good faith that facebook wouldn't screw up the basic premise of the system - that is being ignored by facebook. Saying "if you don't like it leave it" - is stupid - if you don't like - tell them info@facebook.com - if they ignore it... you won't be the only one leaving.

5. http://news.bbc.co.uk/1/hi/technology/7120916.stm - 50,000 users get facebook to change Beacon.

Block the worst applications:
http://www.facebook.com/group.php?gid=7230287089 - Block Facebook Spam

Subject: What does the Bible say about homosexuality?

From: Jan Grimm [akstcadamsmotorcompanymnsdgs@adamsmotorcompany.com]
Subject: What does the Bible say about homosexuality?
Date: November 5, 2007 6:02:13 PM GMT+00:00
To: [someone else's email]

Save money and buy your prescription*s online

press right here

them to work immediately.
learned by those

Oh, what a disappointment. For once at least an interesting title. This is really such a disappointment (even if I would not care about religion). With this headline it's such a loser solution to have 2 lines of meaningless text and a link to a geocities homepage.

At least you could have been selling discounted and counterfeit Bibles or something.

Well well. For a miracle a forward of that link was still valid.
Canadian pharmacy, eh?

Domain Name: IMYLATEYNO.COM
Registrar: SCHLUND+PARTNER AG
Whois Server: whois.schlund.info
Referral URL: http://REGISTRAR.SCHLUND.INFO
Name Server: NS2.POLACREPOX.COM

registrant-firstname: Mark
registrant-lastname: Kinevan
registrant-street1: 7844 Troy Hills Ln
registrant-pcode: 32256
registrant-state: FL
registrant-city: Jacksonville
registrant-ccode: US
registrant-phone: +1.9045380494
registrant-email: motorbus@tokyo.com

tech-c-firstname: Hostmaster
tech-c-lastname: ONEANDONE
tech-c-organization: 1&1 Internet Inc.
tech-c-street1: 701 Lee Rd.
tech-c-street2: Suite 300
tech-c-pcode: 19087
tech-c-state: PA
tech-c-city: Chesterbrook
tech-c-ccode: US
tech-c-phone: +1.8774612631
tech-c-fax: +1.6105601501
tech-c-email: hostmaster@1and1.com

Schlund.info gets a few hits on google. The registrant itself is based in Germany, despite a few fishy details (Registrant ID:C5261-LRMS, schlund.de, but referral etc details missing) schlund itself won't get a tag of its own until I get a few new and annoying spams from them again. Which I hope won' happen anytime soon.

Liu hui or cncliup@21cn.com, again and again

From: Betty Longoria [flatatom@yahoo.com]
Subject: Weapon
Date: November 6, 2007 5:37:56 PM GMT+00:00
To: [someone else's email]

buy all kind of med on a very cheap price.

pharmstopmachine.com.

Remove the dot from the end of the link to use it, thanks.

This is only entry #2 for Ivy, or Liu Hui or whatever he wants to be called, so he's still far behind Leo Kuvayev aka Alex Rodrigez. At least Liu Hui does not seem to have his own biography information on rokso.

But I have had dozens of these spams on my private and very private email address, several of them daily, and that has the tendency to piss me off very much. The style is always the same, much more repetitive than Kuvayev's.

Received: from [88.231.255.223] by e.mx.mail.yahoo.com

Domain Name: PHARMSTOPMACHINE.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN

Name: liu hui
Organization: liu hui
Address: nan chang
City: NanChang
Country: CN
Postal Code: 321000
Phone: +86.7913219002
Fax: +86.7913219002
Email: cncliup@21cn.com

The next big Chinese version of Alex Rodrigez?

From: Toni Bernal [flames102587@yahoo.com]
Subject: Window
Date: November 8, 2007 7:42:37 AM GMT+00:00
To: [some other person's email address]

purchase all kind of pharmacy on a very less price.

onlinemedicalkey.com. Remove the dot from the end of the link to use it, thanks.

At least the flames part of the email address looks appropriate.

Domain Name: ONLINEMEDICALKEY.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN

Registrant:
Name: liu hui
Address: nan chang
City: NanChang
Country: CN
Postal Code: 321000

Administrative Contact/Technical Contact:
Name: liu hui
Organization: liu hui
Address: nan chang
City: NanChang
Country: CN
Postal Code: 321000
Phone: +86.7913219002
Fax: +86.7913219002
Email: cncliup@21cn.com

Create: 2007-10-31 00:40:34
Update: 2007-11-06
Expired: 2008-10-31
QueryTimes: 63

The mathematician Liu Hui must hate you for poisoning his name.

Not new to abusebutler, or news.admin.net-abuse.email, or Sirt.

Pulse Plaxo - spams you from random people and offers opt-out (don't you expect something more from a "social networking site"?)

Alright, oh please not again one more social networking site?
Justonemoredamnsocialnetworkingweb2.0website.com?

Let's have a look.

From: pulse@mx.plaxo.com
Subject: Dipl. Detlef Käding added you as a connection on Pulse
Date: December 10, 2007 2:51:11 PM GMT+00:00
To: [my email]
Reply-To: pulse@plaxo.com

Dipl. Detlef Käding wants to add you as a connection on Plaxo Pulse.

To accept this connection request, go to:
http://pulse.plaxo.com/pulse/invite/?i=somerandomnumber

Thanks!
The Plaxo team

---
What's Pulse?

It's the first networking tool to span business and personal life.

Your family, friends, and business connections are using lots of different sites to find and share content. Some are writing blogs. Others write restaurant and product reviews. And many are uploading photos and videos. Until now, finding that stuff has been really hard - and staying on top of it, even harder. Let Pulse bring it to you - automatically - in your own personal stream of news.

Don't want to receive emails from Plaxo any more? Opt out:
http://www.plaxo.com/opt_out

1. I don't know anyone called Detlef Käding.

2. I have never subscribed or even been to pulse.com.

3. I absolutely don't want to join one damn more failure of social networking site that someone that I have never heard of in my life invites me to.

4. The biggest failure of them all: considering the above, you are offering me an opt-out for your spam site? I never opted in, so I should not have to opt out. Quit flooding my inbox.

Let's have a look.

Plaxo Pulse Random Connections - I'm not the only one ...
Does Plaxo flood your inbox with connection requests? - definitely not the only one... and there are a huge number of others out there. I think I'm happy enough to forward every single pulse or plaxo (by the way, does plaxo come from the word plague?) to my isp spamfilter. And possibly remove the people that I would know sending me that spam from my professional networks in the other services that I already use.

A comment from Tom's blog (above) probably sums it better than a good googling around:

In a previous iteration, Plaxo was notorious for spamming the contacts you had listed on it to get them to sign up for Plaxo service - after many complaints the publicly renounced this policy and promised to be on their best behaviour.

Dear Real Life friends and business contacts, in case you want to ever add me, let's make a deal? Keep it in linkedin. That said, if I don't know who you are and you make no effort in introducing yourself to me, I will click the "I have no clue who this person is" button.

FROM CENTRAL BANK OF NIGERIA -style score: -227 points

Subject: FROM CENTRAL BANK OF NIGERIA

X-Apparently-To: [my email] via 206.190.48.155; Mon, 10 Dec 2007 03:47:36 -0800
X-Originating-IP: [64.71.41.45]
Return-Path: tunde@sunlight-company.biz
Authentication-Results: mta164.mail.re3.yahoo.com from=; domainkeys=neutral (no sig)
Received: from 64.71.41.45 (EHLO lvs01-n06.chi.affinity.com) (64.71.41.45) by mta164.mail.re3.yahoo.com with SMTP; Mon, 10 Dec 2007 03:47:35 -0800
Received: ("??"@ams06.chi.affinity.com) by ams06.chi.affinity.com id S374514AbXLJLrU for [my email]; Mon, 10 Dec 2007 05:47:20 -0600
From: "Dr Tunde Lemo" tunde@sunlight-company.biz Add to Address Book Add Mobile Alert
Reply-to: tlemo101_0000@yahoo.com.hk
Message-Id: S374514AbXLJLrU/20071210114720Z+21059@ams06.chi.affinity.com

Yea, right, not again. Central Bank of Nigeria? The start of this scam should receive negative 50 points for the total lack of originality.

Dear Nigerian scammers, make your kids enjoy the XO laptop at school to learn everything about The Internet....
Based on your content, may I just assume you are using the 1 per child laptop and you are way underaged? Otherwise, you might want to consider to learn e.g. about the grammatics...

Oh, and would any "manager" from the Central Bank of Nigeria for once bother to explain me a few things?
1. Why you are not using your official email address? Do you really think that a yahoo Hong Kong address with some other repty-to email address (that again isn't your cenbank address) will do it?
2. You are telling me that you are sending a box worh $ 75 million and I need to send you a deposit? I'm sorry, you have probably never even been in a bank, let alone any central bank, unless central village bank of Dogbutt, Suburbia of Lagos counts. First, for money transfers you don't send a box. Wired transfer, hello? Second, remove the damn deposits from that. Third, you send this email to a list of people without bothering to specify who you are faking to send all this cash to?

You fail as a scammer, Tunde. And really big time.

No love,

me.

FROM CENTRAL BANK OF NIGERIA
HEAD OF BANKING OPERATIONS
Tinubu square - Lagos


Attention

CONTRACT PAYMENT BY CASH CALL SYSTEM

Sequel to the secret arrangement in regards to the Shipment of your
totalcontract sum(US$55.5m), I wish to inform you that all necessary
modalities have been automatically concluded and the fund has left
C.B.N
office through the Diplomatic Courier Services today by Express Cargo
Flight to your home country.

Note carefully that the content of the box are your total contract
value
but the CBN did not disclose the content to the Courier Services,
rather it
was registered as Vital "DIPLOMATIC DOCUMENTS" belonging to the CBN
client
(That’s you).

Furthermore, the box is (1) in number and about 75kg. However, you are
advised not to disclose the content of the box to the Courier Services
to
avoid Betrayal in any circumstances In the mean time, you are kindly
advised to furnish us with your direct
telephone/mobile number, your valid I.D/Drivers License and your
office/house address or where ever you wish to receive the diplomat to
enable him identify you when he arrives to your address with the box
For
more information, we advise you to contact this office as soon as you
receive this mail to enable us fax you the necessary documents which
you
will
need to deposit your funds into your bank account.

Congratulations and remain blessed.
Sincerely,

Dr Tunde Lemo
C. B .N HEAD BANKING OPERATIONS

Blessing Goodluck - so poor Central Bank of Nigeria fake that no one would have falled to taht even in 1990

From: blessing2007@web2mail.com
Subject: Notification Message
Date: September 14, 2007 4:30:12 AM GMT+01:00
To: [me]
Reply-To: goodluck2007@web2mail.com
Return-Path: [..]
Received: from topaze.jouy.inra.fr (topaze [138.102.22.1]) by adm3.jouy.inra.fr (Postfix) with ESMTP id C02A36F8ACfor [email]; Fri, 14 Sep 2007 05:30:12 +0200 (CEST)
Received: by topaze.jouy.inra.fr (Postfix, from userid 48)id B7EAF104DD9; Fri, 14 Sep 2007 05:30:12 +0200 (CEST)
Message-Id: <20070914033012.B7EAF104DD9@topaze.jouy.inra.fr>
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-1.6 (diorite.jouy.inra.fr [138.102.119.178]); Fri, 14 Sep 2007 05:30:12 +0200 (CEST)

FEDERAL REPUBLIC OF NIGERIA
CENTRAL BANK OF NIGERIA
CORPORATE HEAD QUARTERS TINUBU SQUARE,
MARINA LAGOS NIGERIA.
Our Ref: CBN/IRD/CGX/NNPC/021/05
ATTN: contractors,

During the Third Quarter Payment Shedule of the financial records of the Central Bank of Nigeria (CBN) it was discovered from the records of outstanding Foreign contractors due for payment with the Federal Government of Nigeria on 14th Sept. 2007 that your name is next on the
list of Those who will receive their fund. I wish to officially notify you that your payment is being processed and will be released to you as soon as you respond to this letter.

Also once we receive the information's from you for the President of Federal Government of Nigeria will Approve it to enable us release the fund to your account. Note that from the record in our file, your outstanding contract payment is US D$9.000,000.00(Nine Million United States Dollars). Kindly re-confirm to me if this is inline with what you have in your Record and also re-confirm the information below to enable this office Proceed and finalize your fund remittance without further delays.

1) Your full name.
2) Phone, fax and mobile #.
3) Company name, position and address.
4) Profession, age and marital status.

As soon as the above information are received, your payment will be Made available to you via an international certified bank draft, which will be delivered to your doorstep for your confirmation or through Bank ransfer.

You should Email: blessinggoodluck1@yahoo.com as soon as you receive his letter for your payment approval and also for further Discussion and ore clarification.

YOURS SINCERELY,
Ms. Blessing Goodluck
Dep. Governor CBN

Uh oh. Dear Ms Blessing Goodluck, you have a very fake name.

If you are faking to be communicating to anyone from Central Bank of Nigeria, quit using these shady emails.

In fact, if you were working for Central Bank of Nigeria, I am pretty sure their webmail access policies would be at least as anal as I've heard they have at Morgan Stanley. No webmail for you, if you need that spelled out.

If I was supposed to be paid $9 million USD by CBN, I think you would have honestly called me.

Dear Blessing Goodluck, you have just managed to provide me the least original Central Bank of Nigeria scam that I have read in years. Even in 1990 no one would have fell for it.

IP 138.102.119.178 is located in Paris, IL, FR
netname: FR-INRA-ILE-DE-FRANCE
descr: Institut National de Recherches Agronomiques
descr: 147 rue de l'Universite

Another dying African with millions to give you for some charity

From: florence.henshaw@orangemail.es
Subject: MAY GOD BE WITH YOU.
Date: September 9, 2007 5:01:25 AM GMT+01:00
To: florence@shuf.com
Return-Path:
Received: [...] by smtp.latinmail.com (Postfix, from userid 65534) id C073AD650D5; Sun, 09 Sep 2007 06:01:25 +0200 (CEST)
Received: from unknown (unknown [172.17.224.57]) by smtp.latinmail.com (Postfix) with SMTPid A5650D5E666; Sun, 09 Sep 2007 06:01:25 +0200 (CEST)
Message-Id: <20070909040125.A5650D5E666@smtp.latinmail.com>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary=orangemail.es_dam08.wnet_9bcf6f59d8ea449d982b4b854f5e0319
Importance: normal
X-Bogosity: No, tests=bogofilter, spamicity=0.539907, version=0.15.13
Original-Recipient:

My Dear Friend
May Almighty God be with you, and how are you doing?. My intention of contacting you is to solicit your assistance for a project, which will be mutually beneficial. Though I know my decision to contact you is to a large extent unconventional, the prevailing circumstances necessitated my action. I am Mrs. Florence Henshaw from Seychelles. I am married to late Johnson Clarke Henshaw of blessed memory who was an oil explorer in Libya and Kuwait for twelve years before he died in the year 2000. We were married for twelve years without a child. He died after a brief illness that lasted for only four days before his death we were both devoted Christians. Since his death I too have been battling with both Cancer and fibroid problems. When my late Husband was alive he made a huge deposit in millions of US dollars with a Deposit Company in overseas. (I will tell you the amount as we proceed).
Recently, my doctor told me that I have only six months to live due to blood cancer problem. Though what disturbs me mostly is my stroke sickness. Having known my condition I decided to donate this fund to either a Christian's organization or devoted individual that will utilize this money the way I am going to instruct herein. I want this Christian organization or individual to use this money in all sincerity to fund churches, orphanages, widows, and also propagating the word of God and to ensure that the society upholds the views and belief of the Holy Bible.
The Holy Bible emphasizes so much on GOD benevolence and this has encouraged me to take the bold step. I took this decision because I don't have any child that will inherit this money and my husband relatives are into some radical Organizations and I don't want a situation where this money will be used in an unholy manner. Hence the reasons for this bold decision. I know that after death I will be with Bosom of our Lord the most beneficent and the most merciful I don't need any telephone communication in this regard because of my health, because of the presence of my husband's relatives around me always. I don't want them to know about this development. With God all things are possible. As soon as I receive your reply on Email: (florence.henshaw1@ozu.es) I shall give you the contact information of the Deposit Company in oversea where the money was deposited. I will also issue a letter of authority to the Deposit Company authorizing them that the said fund have being willed to you and a copy of such authorization will be forwarded to you. I want you and the Christian community where you reside to always pray for me. My happiness is that I lived a true devoted Christian worthy of emulation. Whoever that wants to serve God must serve him in truth and in fairness. I will not stipulate any precise amount to reward you, as it will have to be on pre-negotiated terms, based on your level of involvement.
Please always be prayerful all through your life. Any delay in your reply will give room in sourcing for a Christian organization or a devoted Christian for this same purpose. Until I hear from you by email, my drea,s will rest squarely on your Shoulders.
May the Almighty God continue to guide and protect you.
God Bless,

Mrs. Florence Henshaw

And that repeated 5 times in the same email.

If anyone had these millions of dollars, they would hopefully be smart enough to first, cure themselves in hospitals that can help them, and secondly, use a lawyer or someone to take care of their finances while they are alive and when they will not be any more. Seriously. What kind of millionaire, even if they had a famine starved brain, would go to internet to spam unknown people to give them millions of dollars?

Dear Mrs Henshaw or whatever you want to be called, if you indeed have millions of dollars that you don't want and need, I don't think you would be very smart spamming random people in the internet to help you. How do you know if random recipient of your emails care about your christian values? If you however exist and have these millions, how about drop a half a or a million of dollars for Joshua as he will need it when he grows up.

Pfizer zombies send Viagra spam, Wired reports

Zombie Pfizer Computers Spew Viagra Spam

By Ryan Singel 09.06.07 | 2:00 AM

Computers inside pharmaceutical giant Pfizer's network are spamming the internet with e-mails touting the company's flagship erectile-enhancement drug Viagra, along with ads for knockoff Rolexes and shady junk stocks.

But the e-mails are not part of Pfizer's official marketing efforts.

Pfizer's computers appear to have been infected with malware that has transformed them into zombie computers sending spam at the behest of a hacker. Oddly enough, they are spamming the public's inboxes with ads for the company's own product.

"There is a disaster inside this company, and they don't know it," says Rick Wesson, CEO of Support Intelligence -- a small San Francisco-based security company that alerted Wired News to the problem.

The flood of spam adds to Pfizer's recent computer security woes. This summer, the company revealed that it had suffered three breaches of sensitive data, cumulatively affecting more than 50,000 individuals.

In one breach, a Pfizer employee exposed personal information on 17,000 employees after installing peer-to-peer software on a laptop. In another breach, confirmed Tuesday, a former employee downloaded sensitive data, including social security numbers and credit-card information for about 34,000 Pfizer employees.

Full story at Wired.

True or false : Joshua needs your help

Update : the information I had found in the Internet regarding this illness was not even nearly complete to estimate the whole story, so I have updated the bits and pieces provided in the comments section, striking over pieces here, and have to update the category. Not scams.

This is a real child, and with a real disease, of which the costs to cure him or to help him get as normal as possible life are not cheap, so the gala evenings are a way to help them be able to afford the treatment. Which they cannot have done closer to where they live due to the rarity of disease, as the Irish hospitals are not prepared for treating it.

Here a link for ways for helping his family.


This as a piece of email may be scam and spam questionable regarding companies email acceptable use policies. Not the blog post itself - but the points Rahina makes in it. This is how I run to it.

Come join us on Sat September 29th for a Drinks Reception, 4 Course Banquet, Goodies Bag for everyone worth €150!! Live music and dancing and an auction!!
Every single penny goes to Josh Huffy Duff from Castletownroche, who is 20 months old and has a rare medical condition which necessitated both his legs being amputated. This money will fund his medical treatment in Shriner Hospital, Chicago as well as prosthetic limbs.
For more details on the night planned and Josh & family see the offical email below from my friend Gerry, formerly of RTÉ Radio 1.
Tickets are €100 per person - so when you think of it, you actually *make* €50 by going and getting the goodie bag alone
I know we’re all short of cash these days, but I think something like this really puts things in perspective - please pass this on to as many people as you know, we really need a big turn out for this event to help Josh and his family.
If you can go, we require a minimum of 50% deposit (or if possible the total amount) — Cheques made payable to “For Josh.” — Their second son has autism but is responding very well on the one to one teaching method. However, the costs involved with Josh are horrendous.

1. It was sent out to him in company email (not where I work for, nevertheless)
2. It underlines, not only in this email but also in the whole country wide media coverage how this is a sick child and how they want to raise money for it.
I'm not saying this child would be fake - the newspapers on national level probably would have noticed by now if it was. I'm not saying the kid would not be sick either, or that getting new prosthetics etc would be cheap either. It for sure isn't. BUT a few things .. The story seemed odd as the medical details provided did not seem to match. The things that seemed particularly odd :

They live in Ireland, in a country where their some sort of national health insurance should cover the costs of it. The system should be closer to the UK NHS style than the wild range US market.
Where the hospitals are not prepared to deal with this disease. Where they should cover it.

Why does a under 2 years old need 2 prosthetic legs? He will grow so fast out of them - good point (in Rahina's post)

From comments:

2. Children are given prosthetic lower limbs at the same age they would be starting to learn to stand and walk. They get adjustments made as they grow, and get new ones as they outgrow them. The earlier they start, the better they learn to use them. Weight bearing and walking helps shape the hip sockets in the toddler years, so if they don't walk early enough, they may end up with deformed hips that will make it more difficult to wear prostheses as an adult.

The exact disease of this child is not really mentioned in the articles in the national newspaper. The event mentioned is not organized by RTE but by a private person. Or they do mention arthrogryposis as the disease, but that can't be it.

Arthrogryposis, also known as Arthrogryposis Multiplex Congenita, is a rare congenital disorder that causes multiple joint contractures and is characterized by muscle weakness and fibrosis. It is a non-progressive disease.

Since when is amputation a cure for congenital, non-progressive muscle and joint wasting disease?

1. Children with severe arthrogryposis sometimes have legs amputated, when the severity of the contractures are such that they cannot be corrected to any kind of functionality. Severe contractures can be painful as a child grows. It is not common, but it happens. There can also be complications from previous surgeries that make it the best option.

Brave Joshua Duffy-Huff was born with a rare condition which meant he had to have emergency surgery when he was just one month old.

That is over 1,5 years ago? This is unfortunately one of the serious cases about AMC. And far from fun for a small child, or a person of any age.

Due to complications and limited medical resources in Ireland, doctors have amputated his legs and now there is discussion of his hands or arms.

This looks identical to the scam email Rahina received. Same $ 100 food deal.
It is better in this case if they actually DO manage to organize more people for the dinners and other help, so that the child will be able to have as normal and happy life as possible.

Shriners Hospitals for Children is a network of 22 pediatric hospitals in the U.S., Canada and Mexico providing specialized care for orthopaedic conditions, burns, spinal cord injuries and cleft lip and palate. All services are provided at no charge.

Is on big bold letters on Shriners hospital webpage.

Again, from comments clarified :

3. Shriners hospitals do provide treatment free of charge. And parents are offered places in Ronald McDonald houses if they need them. However, they do not pay for airfare, for incidentals, or for loss of wages and babysitters for the other children while a parent is at the hospital with the child. The RM houses are sometimes full, and the hotels that you are bumped to can be more expensive. You can usually only get a visa to come to the US for treatment if you can get everything done in one shot, meaning some serious time away from home. I researched this on behalf of a parent from Pakistan who was hoping to bring his child to Shriners.

Living months there to be with the child to get him back to health will be far from cheap.

I hope this will help to convince anyone else running to the story of Joshua and wondering if it is a real story or a made up one. Now that it is debusted as a made up story, consider helping him.

Thank you for the information priovided additionally in the comments. My apologies.

I would like to see this kid grow up keeping the happy smile he has in the only picture that I've seen of him in the internet.

University degrees spam - they can't even spell other than their phone number, (206) 350-2402

From: stheis@blizzop.com
Subject: RE: Your-Degree is pending.
Date: September 4, 2007 5:20:47 PM GMT+01:00
To: [someone else's email]

Received: from [59.23.249.177] ([59.23.249.177]) by mac.com (Xserve/smtpin073/MantshX 4.0) with ESMTP id l84GK2LQ001140; Tue, 04 Sep 2007 09:20:42 -0700 (PDT)
Received: from [59.23.249.177] by redir-mailav-telehouse2.gandi.net; Tue, 35 Aug 2007 25:20:46 +0900
Date-Warning: Invalid date header replaced by ms121.mac.com; original content: Tue, 35 Aug 2007 25:20:46 +0900
Message-Id: <0107ffa4$0107fe78$b1f9173b@stheis>
Mime-Version: 1.0
X-Mimeole: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Mailer: Microsoft Outlook Express 6.00.2800.1106



F A S T T R A C K D E G R E E P R O G R A M

Obtain the degree you deserve, based on your present knowledge and life experience.

A prosperous future, money earning power, and the Admiration of all.

Degrees from an Established, Prestigious, Leading Institution.

Your Degree will show exactly what you really can do.

Get the Job, Promotion, Business Opportunity

and Social Advancement you Desire!

Eliminates classrooms and traveling.

Achieve your Bachelors, Masters, MBA, or PhD
in the field of your expertise

Professional and affordable

Call now - your Graduation is a phone call away.

Please call:
1-206-350-2402

Interesting. No website, just phone number. Maybe a few other people have got this same spam it seems...

Would you consider getting a degree from something that spams you, and does not even know how to capitalize words? You could even think that these are German Spammers as All Conceptual Words are Capitalized.

(206) 350-2402

Type: Land LineProvider: International Telcom, Ltd Location: Seattle, WA

The landline registrant details look shady too.

Registrant:
International Telcom
Attn: chip phillips
417 Second ave West
Seattle, WA 98119
US

Registrar: DOTSTER
Domain Name: ITLTD.NET
Created on: 24-FEB-96
Expires on: 25-FEB-08
Last Updated on: 03-FEB-06

Administrative, Technical Contact:
Telcom, International admin@itltd.net
Attn: chip phillips
417 Second ave West
Seattle, WA 98119
US
(206) 666-4991

Domain servers in listed order:
GATE.KALLBACK.COM
BART.KALLBACK.COM

Paypal scammers, srdev.fr

From : service@paypal.com
Sent : Sunday, August 26, 2007 9:37 PM
Subject : Notification of Limited Account Access

X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator33.hostgator.com
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

Information Regarding Your account:
Dear PayPal Member:

Attention! Your PayPal account has been limited!

As part of our security measures, we regularly screen activity in the PayPal system.We recently contacted you after noticing an issue on your account.We requested information from you for the following reason:

Our system detected unusual charges to a credit card linked to your PayPal account.

Reference Number: PP-259-187-991

This is the Last reminder to log in to PayPal as soon as possible. Once you log in, you will be provided with steps to restore your account access.

Once you log in, you will be provided with steps to restore your account access. We appreciate your understanding as we work to ensure account safety.

Click here to activate your account



We thank you for your prompt attention to this matter. Please understand that this is a security measure intended to help protect you and your account. We apologise for any inconvenience..

Sincerely,
PayPal Account Review Department
Copyright © 1999-2007 PayPal. All rights reserved. PayPal Ltd. PayPal FSA Register Number: 226056.

PayPal Email ID PP059

Protect Your Account Info
Make sure you never provide your password to fraudulent websites.

To safely and securely access the PayPal website or your account, open a new web browser (e.g. Internet Explorer or Netscape) and type in the PayPal login page (http://paypal.com/) to be sure you are on the real PayPal site.

For more information on protecting yourself from fraud, please review our Security Tips at https://www.paypal.com/us/securitytips
Protect Your Password
You should never give your PayPal password to anyone.

Sure, the images linked from paypal's server and the warnings to not give out passwords for fraudulent sites give some authentic look, but why would paypal want you to authenticate to a completely non-paypal website? http://srdev.fr/images/paypal.co.uk/paypal/cgi-bin/webscrcmd=_login-run/webscrcmd=_account-run/updates-paypal/confirm-paypal/index.htm - srdev.fr shows a few other google results for fraud attempts.

UK FORTUNATE DRAWS RESULT - Sure, UK national lottery giving out money for email addresses harvested with a spambot

From : UK FORTUNATE DRAWS RESULT < fortunate_draws0012@hotmail.com >
Reply-To : < barrister_frank_davies@yahoo.co.uk >
Sent : Friday, August 24, 2007 5:08 PM
Subject : UK FORTUNATE DRAWS

MIME-Version: 1.0
X-Originating-IP: [64.214.231.141]
X-Message-Delivery: Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Info: 9P4r4dq6Pdvh5oKuxbNsBa2zvH2Q9ir2TxJbseS7RDpsNCRTK3LhyPfGDKOAuM14VqTDtl4l20iIC3uTglQ+xA==
Return-Path: fortunate_draws0012@hotmail.com
X-OriginalArrivalTime: 24 Aug 2007 17:08:13.0786 (UTC) FILETIME=[5B1FEBA0:01C7E671]


UNITED KINGDOM NATIONAL LOTTERY
292, Upper Richmond Rd West,
East Sheen, London,
SW14 7JG United Kingdom

TRACK Nº: 51024060210 OFFICIAL PRIZE NOTIFICATION

This is to inform you that have been selected for a cash prize of £500,000.00 (
FIVE HUNDRED THOUSAND GREAT BRITAIN POUNDS) programs held on the 23th OF August
, 2007 in the London U.K. The selection process was carried out through random
selection in our computerized email selection system(ess) from a database of
over 250,000 email addresses drawn from all the continents of the world. The UK
National Lottery is approved by the British Gaming Board and also Licensed by
the The International Association of Gaming Regulators (IAGR). This lottery is
the 3rd of its kind and we intend to sensitize the public.

To begin the processing of your prize you are to contact your claims officer
through our accredited Prize Transfer agents as stated below:
================================================================
Mr.Frank Davies
292, Upper Richmond Rd West,
East Sheen, London,
SW14 7JG United Kingdom

Email:(barrister_frank_davies@yahoo.co.uk)
Phone/ Fax: +44 709 288 0349
Phone Number: +44-70457-15368
For further enquiries Please call us (10.00am to 5.30 pm london Standard Time)
====== ==========================================================
contact him, please provide him with your secret pin code x7pwyz2006 and your
reference number BCLY:12052006/21.You are also advised to provide him with the
under listed information as soon as possible:
========================== ========================================
If you do not claim your WINNINGS on or before 30TH of SEPTEMBER,your winnings
would be revoked. Winners are advised to keep their winning details/information
from the public to avoid fraudulent claim (IMPORTANT)pending the transfer/claim
by Winner.

*Winner under the age of 18 are automatically disqualified.
*Staff of all Companies in the UK are not to partake in this Email Promotional
Lottery.

Accept my hearty congratulations once again!

Regards
Mr ANTHONY CAMPBELL
(Lottery Manager)

_________________________________________________________________
Discover the new Windows Vista
http://search.msn.com/results.aspx?q=windows+vista&mkt=en-US&form=QBRE

Text pieces in bold and italics added to highlight the best pieces.

So they have selected YOU based on a spambot finding 250,000 email addresses from the web, for he sole purpose of donating BIG AMOUNT OF MONEY (why does it always have to be spelled in capitals?)

Also the contact person you should contact is always with a free email provider, not once from anything like lottery.gov.uk ..

So you would need to be over 18, in UK, and yet "Staff of all Companies in the UK are not to partake in this Email Promotional Lottery"..

Sydney Car Center job offers again...

From: jsmzyexyzeud@atlanta.com
Subject: vacant position in the Sydney Car Centre
Date: July 25, 2007 7:31:15 PM GMT+01:00
To: [someone's email]

While we may have high expectations of our associates, we also give them high rewards. Imagine being part of a stable organization with a sterling reputation - a place where the Sydney Car Centre is an integral part of all that we do. With our car centre personality, you'll not just succeed - you'll thrive. And, with our strong commitment to promoting from within, you'll definitely enjoy your rise to the top.

Today the Sydney Car Centre is looking for an industrious regional assistant to fasten the process of the delivery of customer payments to the suppliers. The position offered is a part-time job, and will only require from you to be available for 1-2 hours a day.

As a regional assistant, you will be supposed to operate with the payments from those customers, based in your country. You will be expected to accept 2-3 transactions to your bank account every week, make certain calculations about every transaction (you will be precisely instructed about it), & transfer the funds to the suppliers by means of western Union/Money Gram less your fee & the charges of the Western Union/Money Gram. You will be continuously communicating with the manager from the head office, who will instruct you & give advice regarding every new payment.

The ideal candidate will be industrious, goal-oriented person, with the availability of a personal/business bank account suitable to be used for the company needs. Knowledge of English, computer literacy and sociability are appreciated.

The company guarantees to pay NET 10% fee out of the amount of every payment you dealt with and to provide you with the regular income & flexible schedule. All the related expenses you might have (like the Western Union/Money Gram chargers, related expenses on traveling) are covered by the company.

The more detailed information is available on our web-site http://vacancy-2427298.sydncar.kg/vacancies.php, where you can fill in the on-line application form for this position.

We would be glad to welcome you in our team!

We are looking forward to hearing from you as soon as possible!

Yours sincerely, Polly Lyles

common: 0x4, 0x3, 0x4300, 0x32818886, 0x5, 0x85379018, 0x071, 0x022, [etc, white on white background]

Sydney car centre, eh?
Again.

Earlier, same story and more about them

A car sales job in Sydney, Australia, when the domain is registered in Kyrgystan or however it's spelled?

The email is sent from walla.com - a big no. I have never received a legitimate email from anyone using walla.com.

Sender and return path are different, both free email services. And the mail is signed by another name than is on the sender field.

Their jobs list 401K as a benefit, even though they claim to be in Australia.

And so on. All these details don't match.

+ Google (4,860,000 hits)
+ Sydney Car Centre Fraud (a lot about these Sydney Car Center jobs history and background).

Sydney Car Centre is the replacement money laundering/transfer fraud site for the Lux Capital money laundering fraud - exactly the same Serenitynet / Infinitie.net / Eonix Corporation hosted nameserver/botnet controller, exactly the same modus operandi, i.e. a stolen website offering an illegal 'Regional Assistant' so-called 'job' as a money laundering mule/transfer fraud victim and generally hosting the stolen site using a zombie botnet, (some domains use the Yahoo/Geocities 'small business' network as seen before), often with a host that apparently has no scruples about hosting thieves and fraudsters, the latest being Convergent Network Services of Hicksville NY, aka Ironcolo.com who do not respond to abuse reports concerning this criminal botnet on their network.

HOTXTINA again, this time searching for her fuckbuddies at pinpointthecoordinates.com

From : Increadible Dating
Reply-To : Doddering@84Ew095La.com
Sent : Thursday, August 2, 2007 3:18 PM
To : essiers@hotmail.com
Subject : Free Online Search

Received: from aN6zkES.com ([89.181.47.236]) by bay0-mc2-f8.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Thu, 2 Aug 2007 10:10:43 -0700
Received: from 84Ew095La.com ([89.181.47.236]) by bay0-mc2-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Thu, 2 Aug 2007 08:18:08 -0700
Received: by 84Ew095La.com id hm7qqk0afgkl for ; Thu, 2 Aug 2007 08:18:01 -0700 (envelope-from )
Received: by srv-000-95-000-95.84Ew095La.com (Postfix, from userid 0) id 269B17D7A73; Thu, 2 Aug 2007 08:18:01 -0700 (ART)
X-Message-Delivery: Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Info: g+YnDTwJTP4ObfgplAbNAybZSuhtVRrwl0n7RO1Zcvl3ODcrovgVXCiAm/ZwDjWNppd0o1mmeSk=
Errors-To: noreply@84Ew095La.com
Precedence: list
Return-Path: noreply@84Ew095La.com
X-Spam-Check: igzdqos.egd$kgfixfztk04=
X-OriginalArrivalTime: 02 Aug 2007 17:10:43.0819 (UTC) FILETIME=[0F76A3B0:01C7D528]

The same hotxtina that was in the other emails too..

whois for pinpointthecoordinates.com

Referral URL: http://www.dns.com.cn
Domain Name.......... pinpointthecoordinates.com
Creation Date........ 2007-07-12 23:13:51
Registration Date.... 2007-07-12 23:13:51
Expiry Date.......... 2008-07-12 23:13:51
Organisation Name.... wang jing
Organisation Address. NO.75 PINGTAN XIAN PU DONG ZHUANG
Organisation Address.
Organisation Address. Fuzhou
Organisation Address. 210222
Organisation Address. FJ
Organisation Address. CN

De lotto online - one more lottery scam, as original as all these yahoo microsoft msn aol lottery notifications out there

From : Info Desk < infodesk@lotto.nl >
Reply-To : claimsdepartmentstaatbv@yahoo.co.uk
Sent : Monday, August 20, 2007 11:35 PM
Subject : PP 3502 /8707-01.

MIME-Version: 1.0
Received: from swip.net ([212.247.154.108]) by bay0-mc5-f6.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Mon, 20 Aug 2007 16:35:05 -0700
Received: from [64.70.24.209] (account eu1371123@tele2.fr) by mailbe02.swip.net (CommuniGate Pro WEBUSER 5.1.10) with HTTP id 72853902; Tue, 21 Aug 2007 01:35:01 +0200
X-Message-Delivery: Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Info: N4u0pqWW+O2oFq5Mbu0IBjQaTW9L0ZrHRvLwX/O+wN8ZykD9/Fsx2lo6Y1tpc/6adDPdRJX7PTS83yuxE2yIDA==
X-Cloudmark-Score: 0.000000 []
X-Mailer: CommuniGate Pro WebUser v5.1.10
Organization: Info Desk
Return-Path: eu1371123@tele2.fr
X-OriginalArrivalTime: 20 Aug 2007 23:35:05.0855 (UTC) FILETIME=[BCF190F0:01C7E382]


De Lotto Nl Email Result;
INTERNATIONAL PROGRAM

Dear Email User,

We are pleased to inform you of the result of the last final annual
draw of our LOTTERY INTERNATIONAL Programs. De Lotto online
cyber lotto draws was conducted from an exclusive list of 25,000,000 e-
mail addresses of individuals and corporate institutions,picked by an
advanced automated random computer search from the internet. No
tickets were sold.After this automated computer ballot, your e-mail
address emerged as a winner in the category "A" with the following
numbers Email Informations below.

Your prize award has been insured with your e-mail address and will be
transferred to you upon meeting our requirements,statutory
obligations,verifications, validations and satisfactory report.

It is important to note that your award information was released today
the 20th of August 2007 with the following particulars attached to it.

(I) Award numbers: TL 22/15409
(ii) Email ticket number: PP 3502 /8707-01.
(iii) Lotto code number: TL09622NL
(iv) The file Ref number: TL/0534/30/07

To file in for the processing of your prize winnings, you are advised
to contact our Certified and Accredited claims agent for category "A" winners with the information below To file for your claim, please contact our /your processing
agent.
**********************************************
Mr.Steve Litzin
DIRECTLINE: 0031-616-725-622
EMAIL:delottonl001@yahoo.co.uk
**********************************************

Sincerely,
SUSAN LU
Promotions Manager
Netherlands the Letter company
European promotions.

Dear Email User? Wow, is that me?

This is as bad and without imagination as these yahoo microsoft msn lotteries out there.

Yahoo.co.uk email address used for some big lottery in Netherlands? As likely as any bank manager anywhere on this planet sending you any email from yahoo or hotmail.

My favorite part in this one is though "De Lotto online
cyber lotto draws was conducted from an exclusive list of 25,000,000 e-
mail addresses of individuals and corporate institutions,picked by an
advanced automated random computer search from the internet.". So what they are effectively saying is that this big lottery used an email harvesting bot to get the addresses ...
I think what they should have said is that they sent this same email to these 25,000,000 email addresses.

Stock spam, cytv.ob

From : admin@stockcross.com < fake email>
Sent : Monday, August 6, 2007 8:06 AM
To : < same fake email>
Subject : RE: Weekly News
MIME-Version: 1.0
X-Originating-IP: [82.48.4.430]

Cytv.ob would resolve to China YouTV Corp. [snippet]

Never trust stock advice that you didn't ask for, that arrives in your inbox, and that appears that you have even sent yourself from your email address (the fake email part).

Joey Jones, an American soldier in Iraq, fluent in Chinese, with millions of dollars to offer to Hello Pal...

From : Sgt.Joey Jones. < thepreacherman@yahoo.com >
Reply-To : sgtjoeyjones_usarmy@yahoo.com.cn
Sent : Monday, August 6, 2007 12:27 AM
To : [my email]
Subject : CAN I TRUST YOU?(Assistance Needed From Iraq)

MIME-Version: 1.0
Received: from quox.net ([85.214.52.163]) by bay0-mc2-f16.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Sun, 5 Aug 2007 17:32:01 -0700
Received: (qmail 21834 invoked by uid 30); 6 Aug 2007 02:27:06 +0200
X-Message-Delivery: Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Info: JGTYoYF78jGrtPiMsbkWHeFOfu0UTMWNk75KwY6EJLv0RgxjUL0NeZS8MVeTDBweM+6V/OPh1CZh4GCH5tQi1Q==
Return-Path: root@quox.net
X-OriginalArrivalTime: 06 Aug 2007 00:32:01.0953 (UTC) FILETIME=[34E68110:01C7D7C1]

Content-Type: text/plain
Content-Transfer-Encoding: 8bit

Hello Pal,

I hope my email meets you well. I am in need of your assistance. My name is
Sgt. Joey Jones. I am an American soldier serving in the military of the 1st
Armored Division in Iraq, we have just been posted out of Iraq and to return in
a short while. My colleague and I need your help to transfer out the sum of
Twnety Five Mllion U.S Dollars (US25.0M).

The money which is now in the custody of a Security Company is part of the
money we seized from late Saddam Hussein but was not declared. Right now I am
in the Bagdad trying to sort out things with the Security Company to ensure a
smooth and unhindered transfer of the money to you,Therefore be assured that the
transfer is safe and risk free.

My colleague and I need a good partner someone we can trust to actualize this
venture.But we are moving it through diplomatic means to your house directly or
a safe and secured location of your choice using a shipping company.But can we
trust you? Once the funds get to you, you take your 40% out and keep our own
60%. Your own part of this deal is to find a safe place where the funds can be
sent to. Our own part is sending it to you.

If you are interested I will furnish you with more details,
Awaiting your urgent response.

Your Buddy.
Sgt. Joey Jones.

God Bless America!!!!

Maybe these scammers have realized that while the general public gets more xenophobic and does not trust that much all these Abdul Al Abdullah who have the Hundreds of Millions of Euro Dollars to offer you (whom they found in the internet and trust you with their millions ..), so all these American soldiers in Iraq are now hten norm then?

At least the spelling isn't as retarded as the majority of the Nigerian scammers have.

I just find it very very odd that an American soldier named Joey Jones would have enough Chinese skills to use Yahoo chinese email... also if he did know enough Chinese to actually use it, what would he be doing in Iraq? And with all these millions, "Hello Pal"? Odd choice of words there...

CEPU spam, from mailing-list.it

From : Cepu
Reply-To : mailing@mailing-list.it
Sent : Tuesday, August 21, 2007 7:14 AM
To : [my email]
Subject : Cepu c'è! Nello studio è con te!

Quando ...

non riesci a superare un esame, Cepu c'è.
vuoi sentirti più sicuro, Cepu c'è.
vuoi acquisire un metodo di studio, Cepu c'è.
desideri un bel voto all'esame, Cepu c'è.
vuoi finire prima l'università, Cepu c'è.
sogni la laurea, Cepu c'è.
arrivi alla laurea, Cepu c'è.

... e gioisce con te.

Inoltre nelle sedi cepu trovi Campus Privati Universitari per le facoltà di Giurisprudenza, Psicologia, Ingegneria e Economia,
con stage, inglese, e pratica per la tua futura professione.

Messaggio inviato in ottemperanza al Decreto legislativo 196/03.
Clicca qui per cancellare la registrazione e non ricevere piu' messaggi.

With some link for the cancel. Sure.
You can say you are using whatever points behind Italian spam legislation. Nevertheless, I have never agreed to get a single CEPU spam from you. I have used mailing-list.it a few times while it didn't suck, that was over 5 years ago. Now the email is doomed in receiving still all these CEPU and other @#%%. I for sure have NEVER agreed to received even a single CEPU related notification. Oh did I mention the frequency I get the CEPU spam? It makes it qualify for hte annoying, repetitive category

Hotmail joys - "Meet a new fuck buddy", criostasiswithequipment.com

X-Message-Status: n:0
X-SID-PRA: cool@yuiopplkjh.com
X-Message-Info: LsUYwwHHNt2679teDQ0I1ujVGG18SjEEV61J4QCsJCDe8Q49HfWXczIrUawpA+FR
Received: from yuiopplkjh.com ([58.237.41.137]) by bay0-mc9-f22.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Thu, 12 Jul 2007 13:15:07 -0700
Date: Thu, 12 Jul 2007 18:35:40 -0400
Message-ID:
From:Meet A New FuckBuddy
To: essiers@hotmail.com
Subject: Search Your Area
Mime-Version: 1.0
Content-Type: text/html;
Sender: cool@yuiopplkjh.com
Return-Path:
X-OriginalArrivalTime: 12 Jul 2007 20:15:07.0833 (UTC) FILETIME=[57747290:01C7C4C1]



[snip] accomplished.margin.kids.clear
personal-compose

fame.victims.appointed.commands
personal-compose

smoothly.hands.king-craft.options--becoming
personal-compose

little.traumatic.solemnity.because
personal-compose

one-third.cocktail.examined.Their
personal-compose

solid.resembles.mentally.Cro-Magnon
personal-compose [snip]

And more of that that mindless junk.

Whois for http://www.criostasiswithequipment.com

Referral URL: http://www.dns.com.cn
Domain Name.......... criostasiswithequipment.com
Creation Date........ 2007-07-12 23:14:46
Registration Date.... 2007-07-12 23:14:46
Expiry Date.......... 2008-07-12 23:14:46
Organisation Name.... wang jing
Organisation Address. NO.75 PINGTAN XIAN PU DONG ZHUANG
Organisation Address.
Organisation Address. Fuzhou
Organisation Address. 210222
Organisation Address. FJ
Organisation Address. CN
Admin Name........... wang jing
Admin Address........ NO.75 PINGTAN XIAN PU DONG ZHUANG
Admin Address........
Admin Address........ Fuzhou
Admin Address........ 210222
Admin Address........ FJ
Admin Address........ CN
Admin Email.......... admin@32c.com
Admin Phone.......... +86.5913210023
Admin Fax............ +86.5913210023

This is just one of the reasons why I would not suggest anyone to let hotmail be their children's email choice. This kind of junk goes always to my inbox, no matter how many times it is indicated to be spam.

More graphic spam containing male organs and Russian women measuring them

From: xversal.com@usedcompanycars.com
Subject: She will love you more than any other guy
Date: August 1, 2007 11:40:26 PM GMT+01:00
To: [my email

Contained a very gross graphic picture of a male organ, and a Russian looking black haired lady measuring said white male organ with a tape measure on it's right side. I don't feel like uploading that graphic to the web as it is just gross. Maybe some desperate males who want to attract money leeching Russian ladies who want to have a huge while male organ in addition to your wallet might like it, I'm obviously not in the target group.

The picture was linked to http://www.vetrib.com/.

Whois gives

Domain Name: VETRIB.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com

Registrant Contact:
liu dong
dong liu liug@greatchinausa.com
0891-32563256 fax: 0891-32563256
NO.23 xin road qiche xin road
haikou hainan 891000
cn

Well, at least it's Liu Dong and not a Dick Wang.

I have got several graphic spams about the same subject, always the same ugly male organ and that same Russian looking lady. Being exposed more to this graphic might make an average lady to turn lesbian rather than to order these male enhancement pills to their man. Since I'm not average and just not into ladies at all, this turns me off and very badly.

Voce recebeu um Tim VideoMensagem ! from phone number 99854211

From: supervisao_se@uol.com.br
Subject: Voce recebeu um Tim VideoMensagem !
Date: August 11, 2007 4:50:15 PM GMT+01:00
To: supervisao_se@uol.com.br
Reply-To: supervisao_se@uol.com.br

Você recebeu um TIM VideoMensagem!
VideoMensagem foi enviado de um celular para seu e-mail, do número
99854211.

visualizar

TIM agora do seu celular para seu e-mail.
Importante: VideoMensagem ficará disponível na Web durante 7 dias.
TIM - Viver sem fronteiras.

Brazilians seem to go crazy for these free video messages. I have been getting these at least one a day for the past month. Sure, to view your free video message all you need is to download and execute some shady http://www.c2ctrees.com/VideoMensagem.exe on your computer. Excellent idea.

Never mind even the fact that I have not subscribed ever to any service that would allow any video messages.

From: torpedos@tim.com.br
Subject: Voce recebeu um Tim VideoMensagem !
Date: August 9, 2007 7:38:51 AM GMT+01:00
To: torpedos@tim.com.br
Reply-To: torpedos@tim.com.br


Você recebeu um TIM VideoMensagem!
VideoMensagem foi enviado de um celular para seu e-mail, do número
99854211.

visualizar

TIM agora do seu celular para seu e-mail.
Importante: VideoMensagem ficará disponível na Web durante 7 dias.

All these free TIM video messages some Brazilian has left to my service that I have never even subscribed to allways appear coming from number 99854211.
How about for authenticity add some region code in the number? Just as good as getting a phone call from US from 123-4567. There are a few prefix options there you know.
Well, this number hasn't left messages only for me...
Oh, it has some graphics too, so it looks like the TIM messages, however I'm just too lazy to load any graphics on my emails unless they are from my manager.

Banca di Roma scam

From: servizi.clienti@bancadiroma.it
Subject: Oggetto: Comunicazione nr. 53841 del 13 08 2007 - Leggere con attenzione
Date: August 13, 2007 7:24:38 AM GMT+01:00
To: 5@lora.pns.networktel.net
Return-Path:
Received: [...] from lora.pns.networktel.net (jor-l.pns.networktel.net [216.83.236.236]) by isp (Xserve/smtpin026/MantshX 4.0) with ESMTP id l7D6LjD2006504for [email]; Sun, 12 Aug 2007 23:21:45 -0700 (PDT)
Received: from server2k.corp.landcrafters.com (72-12-63-158.wan.networktel.net [72.12.63.158])by lora.pns.networktel.net (8.13.6/8.12.11) with ESMTP id l7D6IShr008859; Mon, 13 Aug 2007 06:18:34 +0000 (GMT)
Received: from User ([71.251.120.98]) by server2k.corp.landcrafters.com with Microsoft SMTPSVC(5.0.2195.6713); Mon, 13 Aug 2007 01:19:34 -0500
Message-Id:
Mime-Version: 1.0
X-Mimeole: Produced By Microsoft MimeOLE V6.00.2800.1081
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
Content-Type: text/html; charset=Windows-1251
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-Msmail-Priority: Normal
Original-Recipient: [my email]
X-Originalarrivaltime: 13 Aug 2007 06:19:34.0234 (UTC) FILETIME=[EAB853A0:01C7DD71]


Gentile Cliente,


Il codice segreto del suo conto on-line e stato inserito incorretto piu di tre volte.
Per proteggere suo conto abbiamo sospeso il acceso.
Per recuperare il acceso prego di entrare e completare la pagina di attivazione.

Se scegliete di ignorare la nostra richiesta, purtroppo non avremo altra scelta che bloccare temporaneamente il suo account.

Grazie ancora per aver scelto i servizi on-line di Banca di Roma.



Banca di Roma garantisce il corretto trattamento dei dati personali degli utenti ai sensi dell'art. 13 del D. Lgs 30 giugno 2003 n. 196 'Codice in materia di protezione dei dati personali'.


Considerazioni migliori.

With a few images added for the authentic look.

Sure, Banca di Roma obviously uses some shady cox.net scriptkiddy address for authentication...

OEM scammer - asnolyke.com aka Jacqueling Tomaszewski

From: irkjdot@blotteracid.com
Subject: User favorites software
Date: August 31, 2007 2:45:03 PM GMT+01:00
To: [someone else's email address]
Reply-To: irkjdot@blotteracid.com
[Received: from [201.244.215.181] by mx1.balanced.spunky.mail.dreamhost.com; Fri, 31 Aug 2007 08:45:03 -0500
Message-Id: <036876691.82044173926622@blotteracid.com>
Mime-Version: 1.0
X-Mailer: The Bat! (v3.71.14) Professional]

User favorites software
Adobe Photoshop CS3 Extended $89.95
Microsoft Windows XP Professional with SP2 $49.95
Microsoft Office 2003 Professional with Business Contact Manager for Outlook $69.95
Microsoft Windows Vista Business $79.95
Microsoft Office 2007 Enterprise $79.95
Adobe Acrobat 8.0 Professional $79.95
Macromedia Studio 8 $99.95
Microsoft Office XP Professional $49.95
and other
http://asnolyke.com

Whois gives

[whois.myorderbox.com]
Registration Service Provided By: CRISP NAMES, INC.
Contact: +1.3104837168

Domain Name: ASNOLYKE.COM

Registrant, technical, admin etc:
N/A
JACQUELING TOMASZEWSKI (repository@munich.com)
140 S HOBBS HWY
TRAVERSE CITY
Michigan,49686
US
Tel. +6.2319292893

Creation Date: 18-Jul-2007
Expiration Date: 18-Jul-2008

Michigan phone number starting with +6? Sure. This "Jacqueling" gives already some google hits.

500,000 Euros with LSLUK/4034/8161/04 winning code from Holland

And back after some downtime - been too absorbed in the real life work.

From: farmacia.barnaba@virgilio.it
Subject: CONTACT CLAIM OFFICE
Date: August 30, 2007 6:20:09 PM GMT+01:00
Reply-To: farmacia.barnaba@virgilio.it
[Received: from pswm19.cp.tin.it (192.168.70.69) by vsmtp3.tin.it (7.3.122) id 46B6E4A8002DC49F; Thu, 30 Aug 2007 19:20:09 +0200
X-Originating-Ip: 86.87.7.252]

CONTACT CLAIM OFFICE
REFERENCE NUMBER: LSLUK/4034/8161/04
BATCH NUMBER:
15/011/IPD


Dear sir/madam,

We are happy to inform you that you have
emerged a winner under the First Category of our promotion,Winners were
picked by computerized system, drawn from company and individual e-mail
addresses worldwide.The draws is officially announced today 29th of
August, 2007.You have therefore been awarded alump sum pay out of
500,000(Five hundred thousand Euros), which is the winning payout for
Category A winners.

NOTE: For easy reference and identification,find
below your Reference and Batch numbers. Remember to quote these numbers
in your correspondence to our claim Department.

REFERENCE NUMBER:
LSLUK/4034/8161/04
BATCH NUMBER: 15/011/IPD
Please contact Staatsclaim
department immediately for due processing and remittance of your prize
money to a designated account of your choice:


Dr. Peter Hans
Tel.:
0031- 626381909
Fax: 0031- 847103194
Email:claimfile@sfax.ws

Sincerely Yours,
Mrs Betty Rice
PROMOTION CORDINATOR
*************************************************************************************************************
N.B: Disclaimer - This email is confidential and contain privileged or
copyright information. You must not present this message to another
party.If you are not the intended recipient you must not copy,
distribute or use this email or the information contained in it for any
purpose other than to notify us.
If you have received this message in
error, please delete this email from your system.

Sure, a Five Hundred Thousand Euros is alumpofmoney.
How about they even once would forge their email addresses to be something that actually has even remotely something to do with any lottery?
Why is this particular scammer using virgilio.it if he is still physically located in Netherlands?

'Sydney Car Centre' - sydncar.kg

X-Originating-IP: [84.110.180.64]
Return-Path: < nguyen.kelli@walla.com >
Subject: new vacancies in our company – please, find out about them
Sender: "Sydney Car Centre" < Webb005@free.fr >
User-Agent: Mutt/1.5.1i

While we may have high expectations of our associates, we also give them high rewards. Imagine being part of a stable organization with a sterling reputation - a place where the Sydney Car Centre is an integral part of all that we do. With our car centre personality, you'll not just succeed - you'll thrive. And, with our strong commitment to promoting from within, you'll definitely enjoy your rise to the top.

Today the Sydney Car Centre is looking for an industrious regional assistant to fasten the process of the delivery of customer payments to the suppliers. The position offered is a part-time job, and will only require from you to be available for 1-2 hours a day.

As a regional assistant, you will be supposed to operate with the payments from those customers, based in your country. You will be expected to accept 2-3 transactions to your bank account every week, make certain calculations about every transaction (you will be precisely instructed about it), & transfer the funds to the suppliers by means of western Union/Money Gram less your fee & the charges of the Western Union/Money Gram. You will be continuously communicating with the manager from the head office, who will instruct you & give advice regarding every new payment.

The ideal candidate will be industrious, goal-oriented person, with the availability of a personal/business bank account suitable to be used for the company needs. Knowledge of English, computer literacy and sociability are appreciated.

The company guarantees to pay NET 10% fee out of the amount of every payment you dealt with and to provide you with the regular income & flexible schedule. All the related expenses you might have (like the Western Union/Money Gram chargers, related expenses on traveling) are covered by the company.

The more detailed information is available on our web-site http://vacancy-888257429.sydncar.kg/vacancies.php, where you can fill in the on-line application form for this position.

We would be glad to welcome you in our team!

We are looking forward to hearing from you as soon as possible!

Yours sincerely, Gale Zapata

0x36756210, 0x2000, 0x56, 0x4 4RTT 0x81, 0x085, 0x275 [and so on a long list of letters, white on white]

I have received several of these, to different email addresses.
And fair enough, it looks a bit like a marketing email for jobs.
But look at the details.

A car sales job in Sydney, Australia, when the domain is registered in Kyrgystan or however it's spelled?

The email is sent from walla.com - a big no. I have never received a legitimate email from anyone using walla.com.

Sender and return path are different, both free email services. And the mail is signed by another name than is on the sender field.

Their jobs list 401K as a benefit, even though they claim to be in Australia.

And so on. All these details don't match.

The jobs look very good though. I just hope no one volunteers their personal info to these people

Whois on the domain

Domain SYDNCAR.KG

Administrative Contact:
Garcar (11619-KG), botlbonds@hotmail.com
8557 Forestview Avenue
phone: 4402555718

Technical Contact:
Garcar (11619-KG), botlbonds@hotmail.com
8557 Forestview Avenue
phone: 4402555718

Billing Contact:
Garcar (11619-KG), botlbonds@hotmail.com
8557 Forestview Avenue
phone: 4402555718

Domain support: AsiaInfo

Record created: Mon Jul 16 22:56:43 2007
Record last updated on Wed Jul 25 02:41:56 2007
Record expires on Wed Jul 16 23:59:00 2008

No name of person is provided, also no city or country. Just hotmail address and a street name and number, and a phone number without telling in which country it is. Would you trust your personal information to them?

Rodrigez aka Kuvayev again

From: timbergrovefarm.com@crossroadsmusicfestival.com
Subject: Corel Draw
Date: July 23, 2007 10:58:18 PM GMT+01:00
To: [my email]


OEM software means no CD/DVD, no packing case, no booklets and no overhead cost!
So OEM software is synonym for lowest price.

Buy directly from the manufacturer, pay for software ONLY and save 75-90%!

See discounts and special offers! Find software for home and office!
TOP POSITIONS

Windows XP Pro w/SP2 $49
MS Office Enterprise 2007 $79
Adobe Acrobat 8 Pro $79
Microsoft Windows Vista Ult $79
Macromedia Studio 8 $99
Adobe Premiere 2.0 $59
Corel Grafix Suite X3 $59
Adobe Illustrator CS2 $59
Macromedia Flash Prof 8 $49
Adobe Photoshop CS2 V9.0 $69
Macromedia Studio 8 $99
Autodesk Autocad 2007 $129
Adobe Creative Suite 2 $149
http://pnt.lalasoftb.com/?[random letters]
----
Top items for Mac:
Adobe Acrobat PR0 7 $69
Adobe After Effects $49
Macromedia Flash Pro 8 $49
Adobe Creative Suite 2 Prem $149
Ableton Live 5.0.1 $49
Adobe Photoshop CS $49
http://pnt.lalasoftb.com/[random letters]
----
Popular eBooks:
Home Networking For Dummies 3rd Edition $10
Windows XP Gigabook For Dummies $10
Adobe CS2 All in One Desk Reference For Dummies $10
Adobe Photoshop CS2 Classroom in a Book(Adobe Press) $10
----
Find more by these manufacturers:
Microsoft...Mac...Adobe...Borland...Macromedia...IBM
http://pnt.lalasoftb.com/?[random letters]
----



Brodick led the procession up
The Maitland home was at the t
Brodick dismounted with Alec i
The crowd silently pressed for
Alecs homecoming should be pri

OEM is illegal BS.

The companies listed in scams like these do NOT sell their software online by some shady resellers.

The OEM software spams are REALLY annoying, but they are way too numerous out there making that Adobe, Apple, IBM, Microsoft etc etc can't keep up to the speed of scamming.

Of the scammer URL we can get the following info

Domain Name: LALASOFTB.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com

Creation Date: 04-jul-2007
Expiration Date: 04-jul-2008 -- these dates are one more indication of not being proper kosher. Recent registration, minimum registration validity time.

Domain name: lalasoftb.com

Registrant Contact:
-
Alex Rodrigez domains@surink1.com
+358-30-5563 fax:
po box 445
Laapentranta Laapentranta 12700
fi

Thus our friend Alex Rodrigez aka Leo Kuvayev again.
Again with an invalid Finnish address and invalid phone number.
What is his passion with Finland?

And surink1.com email?

Domain Name: SURINK1.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS1.GORLOK.NET

Creation Date: 21-jun-2007
Expiration Date: 21-jun-2008

Domain Name.......... surink1.com
Creation Date........ 2007-06-22 10:40:26
Registration Date.... 2007-06-22 10:40:26
Expiry Date.......... 2008-06-22 10:40:26
Organisation Name.... cheng mingfei
Organisation Address. NO.599 east road nanjing
Organisation Address.
Organisation Address. Nanchang
Organisation Address. 321100
Organisation Address. JX
Organisation Address. CN

Admin Name........... cheng mingjun
Admin Address........ NO.599 east road nanjing
Admin Address........
Admin Address........ Nanchang
Admin Address........ 321100
Admin Address........ JX
Admin Address........ CN
Admin Email.......... liuggg@surink1.com
Admin Phone.......... +86.7916316556
Admin Fax............ +86.7916316556

http://www.dns.com.cn gets listed on bad registrars list.
And Mr Kuvayev seems to do a lot of traffic with the Chinese lately.

The reason why all these lottery notifications always come from Holland

iDeceive has a link that explains why so many of the lottery winning noifications you get in your email are coming from Netherland.

Dutch police arrest 111 West Africans in 419 clampdown

Dutch police have arrested 111 suspected 419 scammers. The arrests on Saturday follow the end of a seven-month investigation - dubbed Operation Apollo, AFP reports.

Eight of those detained were carrying false papers. Many others among the group of West African (mainly Nigerian) suspects are reckoned to have entered the Netherlands illegally or to have overstayed their permitted stay.

The alleged scammers are suspected of running a series of lottery-based (AKA 419-lite) scams. Prospective victims of these frauds are first informed by email that they have won fictitious lottery prizes. Victims are then tricked into handing over money-up front to cover processing fees or other fictitious expenses. The promised windfalls never materialise and dupes are left nursing their losses.
Investigators in the Netherlands estimate that 2,000 internet con-men are active in the country.

Unrelated but interesting : Harvard prof scams $600,000, then hands it to 419ers

Wonder Crew Unsubscribe, enom.com, and whoisprivacyprotect.com

X-SID-PRA: Confirmation Department
X-Message-Info: LsUYwwHHNt060LY3N4Ugg6uoo6pi8yZesED9xjzqM1hRzBmxnAy+5SipqnHykXRO
Received: from gardeninsectguide.com ([64.21.182.39]) by bay0-mc5-f23.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Mon, 16 Jul 2007 09:32:48 -0700
Received: by gardeninsectguide.com id hjfb5i0cvqg8; Mon, 16 Jul 2007 16:31:33 -0400 (envelope-from )
Date: Mon, 16 Jul 2007 16:31:33 -0400
MIME-Version: 1.0
From: Confirmation Department
Subject: JCPenney Participation Confirmation
Message-ID:
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-Path:
X-OriginalArrivalTime: 16 Jul 2007 16:32:48.0853 (UTC) FILETIME=[F274A050:01C7C7C6]

[3 graphics that link to http://www.itsyourdisco.com]

\majorities \

\Essences \volunteering \Antal \directly \antiguo \bought \relevant \Cordova \cheesy.porkium \..Survey \calibration \RCP \chosen \forested \peripherals \lifespan \adoring \ticketed \facilitate \laying \GMAT \cataract \despondent \KEEPSAKES \

\products.even \forbids \ina \cover. \­half \raspy \Grumman \investigational \designing \Saint \vegetables.not \Gandhi \economists \noticia \92.95 \drinks \Californians \SNA \courrier_des_lecteur \Bathtub \desiring \Jobs \tribal \for. \sues \
\Pars \1602 \Stryker \religion \Habib \Halles \Mauna \dietitians \Saturday \00.1 \reinforces \Cassano \anxieties \Ketchikan \composting \improvised \D6751.02a \Stripper \megabit \Citys \1834 \Acciona \discontent \comfortable \debacle \
\grievances \Incarnation \Lonesome \inevitability \1116 \1.1 \demonised \teddy \contact \appointment \Fmt \Queda \imitating \outwardly \consultancy \webcast_ \outcry \Emeryville \flares \succession \withdrawn \59 \chiefs \PQ \couch \

\kind \problems \ljus \Etheridge \..Results \sz \particuliè \carrot \Yates \4225 \en \outcomes \rant \Simone \affections [nonsense continues]

Again, the http://www.itsyourdisco.com page goes to "Wonder Crew" which only has unsubscribe button in it. See why unsubscribing is a very bad idea.

Whois gives

Domain Name: ITSYOURDISCO.COM
Registrar: ENOM, INC.
Domain name: itsyourdisco.com

Registrant Contact:
Whois Privacy Protection Service, Inc.
Whois Agent (pndwrgkpn@whoisprivacyprotect.com) *
+1.4252740657
Fax: +1.4256960234
PMB 368, 14150 NE 20th St - F1
C/O itsyourdisco.com
Bellevue, WA 98007
US

I have been getting these JC Penney Confirmations, Order Confimations, Thisandthat Confirmations, Anything confirmations several of them a day for the past at least 3 years. Know what? I am sick of it.

I am disgusted by the fact that enom.com claims how they have such great zero spam policy, yet they allow bulk registrations, and the registrant details for enom.com are suspiciously too close to the geographical area of this other Nameless Person or is it Company with an Original Name.

Registration Service Provided By: eNom, Inc.
Contact: paul.stahura@enom.com

Domain name: enom.com

Registrant Contact:
eNom, Inc.
DNS Manager (info2@enom.com)
+1.4258838860
Fax: +1.4258833553
PO Box 7449
Bellevue, WA 98008
US

Enom About US site provides a lot of info regarding him.

Please note: this person can not be contacted ( the phone voice mail is always full or will cut you off),he is a spamer and uses bots and fake info to collect names and email addresses. He uses these to send people to one or more of his many duplicated sites pretending to loan or offer to loan you money. if you fill in the form you will get even more spam email ( No one will lend you money) I do not even own property and I was getting 10 to 20 of these a day with fake names attached. offering to get me a $365,000 loan for a property which I don't own. Obviously they do not research, they just send out bulk emails. All the domains registered recently have been new as of Dec 2006. Be advised , It is very easy to buy up Domain names and start a web site, many re3gistrars offer cheaper prices in bulk. If you get email from this person do a who is search, if my info is correct you will see the exact same person attached to them. report them at the bottom of the Who is page. it is the only way to end it.

I've found eNom to be the worse company I've dealt with in my life. Arrogant, stuck up and downright thieves. eNom could give DELL's customer support line a run for it's money, at least at DELL they reply. This company is still trying to charge me $200 for my own domain, they even renewed it a further year so I couldn't have it for even longer.
DO NOT DEAL WITH ENOM!
Dan

Enom report abuse page
+ Google reveals 48,600 hits for query 'enom.com spam'
Enom.com review
Enom review 2
Reporting spam & Where to send your complaints (suggests legal@enom.com)

ENOM.COM.RESPECTED.BY.WWW.DNDIALOG.COM

DNDIALOG.COM

Registrant [680427]:
XSS, Ltd.
Sokolnicheskaya pl. 4A
Moscow
RU
107113
RU

Administrative Contact [680427]:
Ilya Poyarkov xss@xss.ru
XSS, Ltd.
Sokolnicheskaya pl. 4A
Moscow
RU
107113
RU
Phone: +7.4957488116

Dndialog.com was the service used to register enom.com?
That website has now only a forum, but it has interesting topics. Such as this. Based on what I can guess of the words in Russian, the whole domain seems to be a playground for Russian bulk domain registrants and spammers.


* And whoisprivacyprotect.com (used in domain registration email address above for this Wonder Crew)

whoisprivacyprotect.com:
[whois.enom.com]
Whois Privacy Protection Services, Inc.
Whois Agent (idprotect@whoisprivacyprotect.com)
+1.4252740657
Fax: +1.4254842044
PMB 368, 14150 NE 20th St - F1
Bellevue, WA 98007
US

Again registered by enom.com!

Whosiprivacyprotect.com gets a few hits in Google, and they are all indicating spam.

Hm. Let me think.

Enom.com makes a big fuzz how they have strong antispam policies and zero spam tollerance.
Yet enom.com gets nearly 50,000 hits only in google for a very simple search for their name and the word spam.

All of the spams that I have received from companies (or the same spam group) that uses enam.com for the past over three years, have always had this Whois Privacy Protection Services, Inc, without a real email address, or a name, as the registrant. In the years, this means I have got thousands if not tens of thousands of spam by them. Too bad one of the email addresses suffering for this I need to keep for other purposes, and the anti-spam tools seem too dumb to just ignore all of them.

If enom.com really had this anti-spam attitude, and zero spam tollerance, I believe they would not allow companies to register without a name for registrant, and a real address and contact details.

If they had truely this zero spam tolerancy, they would not allow this Wonder Spam company to be hosting on their services fof bulk domains for over 2 years, with their main page just harvesting for email addreses.

Enom.com just got their own name tag.