Sunday, February 04, 2007

Russian "Euro" casino, Eucas.org ..

Now I must admit I'm not used to casino ads. I've been getting them slowly every now and then .. and I kind of feel I shouldn't bother to give these ones a label - that would prove they are worth something. Maybe the casino owners weren't or aren't that bad themselves? But they send spam. Or pay someone else to send spam. And that is enough to really annoy me.

Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs114525qbf;
Fri, 2 Feb 2007 23:07:39 -0800 (PST)
Received: by 10.35.84.16 with SMTP id m16mr8501297pyl.1170486459919;
Fri, 02 Feb 2007 23:07:39 -0800 (PST)
Return-Path:
Received: from c-24-125-1-11.hsd1.va.comcast.net (c-24-125-1-11.hsd1.va.comcast.net [24.125.1.11])
by isp with ESMTP id 6si20143323nzn.2007.02.02.23.07.39;
Fri, 02 Feb 2007 23:07:39 -0800 (PST)
Received-SPF: pass (isp: domain of hslohnu@comcast.net designates 24.125.1.11 as permitted sender)
From: "Kasparov Chessmate"
To: [my email]
Subject: Fun and make money.
Date: Sat, 3 Feb 2007 02:07:38 +0500
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0000_01C74738.14045F40"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Thread-Index: AcdHOBQEyuj3lA1ISnOABPe4yNeWTA==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
Message-Id:

Only from the most noble of all
casinos you could except such a Regal gift:

300% Bonus on your First Deposit!!!

Deposit 100 €/$ and Play with 400 €/$!!!
And on top of that, a service at such a
level you would not find in the best
Royal Families of Europe.

<<<<< Come and play at Royal VIP Casino!!! >>>>>
then link

Of where the link goes to we get with whois :

Domain ID:D138238728-LROR
Domain Name:EUCAS.ORG
Created On:26-Jan-2007 12:46:22 UTC
Last Updated On:02-Feb-2007 19:15:56 UTC
Expiration Date:26-Jan-2008 12:46:22 UTC
Sponsoring Registrar:OnlineNIC Inc. (R64-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:ONLC-2572694-4
Registrant Name:Sergey Ivanov
Registrant Organization:Personal Domens
Registrant Street1:Russia, Mikhailova st, 22-22
Registrant Street2:
Registrant Street3:
Registrant City:Moscow
Registrant State/Province:MO
Registrant Postal Code:109456
Registrant Country:RU
Registrant Phone:+7.4955184040
Registrant Phone Ext.:
Registrant FAX:+7.4955184040
Registrant FAX Ext.:
Registrant Email:maddreams2005@yandex.ru
Admin ID:ONLC-2572694-1
Admin Name:Sergey Ivanov
Admin Organization:Personal Domens
Admin Street1:Russia, Mikhailova st, 22-22
Admin Street2:
Admin Street3:
Admin City:Moscow
Admin State/Province:MO
Admin Postal Code:109456
Admin Country:RU
Admin Phone:+7.4955184040
Admin Phone Ext.:
Admin FAX:+7.4955184040
Admin FAX Ext.:
Admin Email:maddreams2005@yandex.ru
Tech ID:ONLC-2572694-2
Tech Name:Sergey Ivanov
Tech Organization:Personal Domens
Tech Street1:Russia, Mikhailova st, 22-22
Tech Street2:
Tech Street3:
Tech City:Moscow
Tech State/Province:MO
Tech Postal Code:109456
Tech Country:RU
Tech Phone:+7.4955184040
Tech Phone Ext.:
Tech FAX:+7.4955184040
Tech FAX Ext.:
Tech Email:maddreams2005@yandex.ru
Name Server:NS2.NSSERVISRU.RU
Name Server:NS3.NSSERVISRU.RU


Eucas? The last time I checked, Russia wasn't part of EU ...
And the name Sergey Ivanov is a bit boring but at least we get a few other spam related stuff with google for it.

Another retro sex spam - herbal-kings.com

Another retro sexual enhancement spam ...
The text is so bad .. really, do any guys believe claims like that??
(For once without full headers since for once I am entertained just by the stupidity of the texts)

From: Haydon
To: [my email]
Date: Jan 6, 2007 8:22 PM
Subject: FWD[82]:

Our Penis Enlargement Pills Will Expand, Lengthen And Enlarge Your Penis Up to 3+ Inches. 100% Satisfaction Guaranteed! Or Your Money Back!

Our team of expert Doctors have spent years developing a product that will safely and effectively add length, width, and strength to any man's penis. The work has created a product that has been shown to significantly increase penis length, provide stronger erections, improve sexual endurance, and increase ejaculation volume. ManXL has been labeled a "Medical Breakthrough" with over 1,500,000 bottles sold worldwide. ManXL is the only penis enlargement pill that has been manufactured in a FDA Approved laboratory.

click here >>>>>
(with link)


Ha. Now if this ManXL was a medical breakthrough, you'd think it would have become as famous as all these viagras and cialis. And it probably would have been sold and produced by a pharmaceutical company, not by some herbal-kings.com ...
Hm.. also, if it was approved by FDA, why would the registrants be located in Mexico?

Whois :
Referral URL: http://www.joker.com
domain: herbal-kings.com
owner: Eduardo Macias
organization: TOLMEN STAR ENTERPRISES LTD
email: admin@querendamx.com
address: Querenda No. 353, Fracc. Bosque Camelinas
city: Michoacan
postal-code: 58290
country: MX
phone: +52.443655187
fax: +52.443655187
admin-c: CCOM-477954 admin@querendamx.com
tech-c: CCOM-477954 admin@querendamx.com
billing-c: CCOM-477954 admin@querendamx.com
nserver: ns1.main-dns3.com 59.188.23.77
nserver: ns2.main-dns3.com 218.188.64.134
nserver: ns3.main-dns3.com 210.245.160.139
status: lock
created: 2007-01-06 05:20:40 UTC
modified: 2007-01-23 07:23:16 UTC
expires: 2008-01-06 05:20:40 UTC

contact-hdl: CCOM-477954
person: Eduardo Macias
organization: TOLMEN STAR ENTERPRISES LTD
email: admin@querendamx.com
address: Querenda No. 353, Fracc. Bosque Camelinas
city: Michoacan
postal-code: 58290
country: MX
phone: +52.443655187


Oh wait - the best part - their testimonials :

I've played on and off with pumps, weights, and exercises for the last few years and have never gained one centimeter. I recently began ManXL and was pleasantly surprised to see that this product actually works. I have been on the product 2 months now and I have already gained 1 inch. Its fantastic! My new girlfriend is really impressed with my size and stamina.
J.C. Raleigh, NC


This is going to sound weird but I was never really embarrassed of my penis size in front of my wife. However, I always wished that I was bigger and I was embarrassed of my size when I was in the locker room. I felt that guys would look at me and secretly make fun of me. With ManXL I have gained 1.5 inches and appear quite thick when flaccid. I am no longer embarrassed in the locker room and I feel that I am a solid size now. My wife also loves my new size.
P.J. Holly, MI


Men are going to stand up and clap their hands at these penis enlargement capsules. It has produced remarkable results that have never been seen before with NO negative side effects. These penis enlargement capsules offer women what they really want, more to play with! Those extra inches really do make the difference!
AngelStar - PornStar

Retro viagra and cialis spam - Progenyid.com

They still spam for viagra?
Amazing but they do.
Getting some of these creative spelling viagra-cialis-spams makes me feel retro fuzzy, just as if I was using hotmail 12 years ago.
Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs22459qbf;
Wed, 31 Jan 2007 09:38:25 -0800 (PST)
Received: by 10.49.20.5 with SMTP id x5mr2879040nfi.1170265105219;
Wed, 31 Jan 2007 09:38:25 -0800 (PST)
Return-Path:
Received: from landheim-schondorf.de (p54AAEBB6.dip.t-dialin.net [84.170.235.182])
by isp with SMTP id y23si6893734nfb.2007.01.31.09.38.24;
Wed, 31 Jan 2007 09:38:25 -0800 (PST)
Received-SPF: neutral (isp: 84.170.235.182 is neither permitted nor denied by best guess record for domain of manyasum@iapdatacom.net)
Message-ID: <01c7455e$9934b880$6401a8c0@pentium4>
Reply-To: "Eutimio Pritt"
From: "Eutimio Pritt"
To: "Katsuro Morello" [my email]
Subject: Re: VIAcihGRA
Date: Wed, 31 Jan 2007 18:38:20 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106

Good day,

Viav_gra $1, 80
Ciav_lis $3, 00
Leviv_tra $3, 35

http://www.progenyid!.com ( Important Remove "!" )

--
You believe I didnt do it, then? said Harry, concealing with
difficulty the rush of gratitude he felt at Hagrids words.
Course I do, Hagrid grunted. Yeh say it wasn you, an I believe



So what do we get with good whois? At least the registrants phone number is invalid .. which probably should matter to dotregistrar.com if they weren't bulk domin registrants.

Referral URL: http://www.dotregistrar.com
Registrant:
arnette (PROGENYID-COM-DOM)
gibson

4271 Nw 5th
Plantation, FL 33317
USA
+332.7188767449
arnettegibson@yahoo.com
Domain Name: PROGENYID.COM
Administrative Contact:
arnette arnettegibson@yahoo.com
4271 Nw 5th
Plantation, FL 33317
USA
+332.7188767449
Technical Contact, Zone Contact:
arnette arnettegibson@yahoo.com
4271 Nw 5th
Plantation, FL 33317
USA
+332.7188767449
Record last updated on 19-Jan-2007.
Record expires on 10-Jan-2008.
Record created on 10-Jan-2007.
Domain servers in listed order:
Name Server: in.indusfk.com
Name Server: fk.indusfk.com

Exquisitereplicas

I never realized the fake watches was such a big business. I considered it to be a thing of the past, a thing of the wannabe beach lions beach rolexes from the 1980s .. but they still seem to exist, and they seem to be getting more numerous. First the beautifulswiss thing, now this.
This is getting a bit boring...

Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs129766qbf;
Sat, 3 Feb 2007 13:26:23 -0800 (PST)
Received: by 10.49.42.5 with SMTP id u5mr182529nfj.1170537983204;
Sat, 03 Feb 2007 13:26:23 -0800 (PST)
Return-Path:
Received: from localhost.localdomain (cpe-66-68-88-166.austin.res.rr.com [66.68.88.166])
by isp with SMTP id o45si20601923nfa.2007.02.03.13.26.18;
Sat, 03 Feb 2007 13:26:23 -0800 (PST)
Received-SPF: neutral (isp: 66.68.88.166 is neither permitted nor denied by best guess record for domain of iramey@mailbox.sk)
Message-ID: <5ba501c747d9$b6afc8b7$2621bc89@mailbox.sk>
From: Bvlgari Watches
To: [my email]
Subject: Exquisite Replica
Date: Sun, 04 Feb 2007 00:20:33 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0000_3D3E90D7.57FB7D65"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express V6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

QUALITY REPLICAS!

Rolex Watches
Cartier Watches
Breitling Watches
Bvlgari Watches
Omega Watches
Tag Heuer Watches
Officine Panerai Watches
A.Lange & Sohne Watches
Franck Muller Watches
Chopard watches
Hermes watches
Jacob & Co. watches

Get 25% off when buying 2 watches!

VISIT OUR ONLINE SHOP!
with the link ...

Of which some whois and we have the registrant :

Domain Name: newdsannysongg.com
Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET
Registrant Contact
Name: paul gregoire
Address: 175 Montreal Road
304
vanier, on K1L 6E4
CA
Email Address: paulgregoire@coldmail.ca
Phone Number: (613)255-2162
Administrative Contact
Name: paul gregoire
Address: 175 Montreal Road
304
vanier, on K1L 6E4
CA
Email Address: paulgregoire@coldmail.ca
Phone Number: (613)255-2162
Technical Contact
Name: paul gregoire
Address: 175 Montreal Road
304
vanier, on K1L 6E4
CA
Email Address: paulgregoire@coldmail.ca
Phone Number: (613)255-2162
Record Created on........ 2007-02-01 17:15:16.057
Expire on................ 2008-02-01 17:25:04.000
Domain servers in listed order:
ns1.hairyolddns.com
ns2.hairyolddns.com


Needless to say .. I wouldn't buy from these if I was in the market for a watch.
First - the domain exists for the past 3 days.
Second - and biggest : these people could get sued by the copyright country of any civilized and semicivilized country, probably including even Romania.
Third - wtf is it with the routings of this email? Austin, TX, or Slovakia .. for a Canadian registered site? sure. Now if only I would bother to forward the details to Bvlgari and all these other companies that would be really interested in infringing their name ...

And the first Microsoft Vista Scammers are here ..

Microsoft Vista pirate scammers ... now that didn't take that long that these would start to appear, did it?

Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs140932qbf;
Sun, 4 Feb 2007 06:48:42 -0800 (PST)
Received: by 10.90.34.3 with SMTP id h3mr7634002agh.1170600522592;
Sun, 04 Feb 2007 06:48:42 -0800 (PST)
Return-Path:
Received: from 200.209.221.130 ([200.209.221.130])
by [isp] with SMTP id 8si7572771agd.2007.02.04.06.48.36;
Sun, 04 Feb 2007 06:48:42 -0800 (PST)
Received-SPF: neutral (isp: 200.209.221.130 is neither permitted nor denied by best guess record for domain of matkueuo@vinorumcodex.com)
From: "Jackie Mueller"
Reply-To: "Jackie Mueller"
Message-ID: <9700665285.3600826893@vinorumcodex.com>
Date: Sun, 4 Feb 2007 08:51:01 -0600
To: [my email]
Subject: Windows Vista Business ready to download
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

The most comprehensive edition of Windows Vista, Vista Business Upgrade (DVD-ROM) is the first operating system that combines all of the advanced infrastructure features of a business-focused operating system, all of the management and efficiency features of a mobility-focused operating system, and all of the digital entertainment features of a consumer-focused operating system. For the person who wants one operating system that is great for working from home, working on the road, and for entertainment, Vista Business is a no-compromise operating system that lets you have it all. Windows Vista Business contains a number of new features, the most notable of which are: Windows Vista Business combines all the features of a business-focused operating system, all the efficiency features of a mobility-focused operating system, and all of the digital entertainment features of a consumer-focused operating system; Remotely connect to business networks; Windows BitLocker Drive Encryptiption provides improve levels of protection against theft for your important business data whether you are at home, on the road, or in the office; Delivers all of the entertainment features available in Vista Home Premium; includes everything you need to enjoy the latest in digital photography, music, movies, analog TV, or even HDTV; Upgrade from your current edition of Microsoft Windows XP or Windows 2000 (including Windows XP Professional, Windows XP Home, Windows XP Media Center, Windows XP Tablet PC, Windows XP Professional x64, Windows 2000)
Windows Vista Business Upgrade (DVD-ROM)
Retail Price $299.00
Our Price $79.95
You save $219.05
http://juvenileoccupeble.org
Please note, that there will be more special offers available for our constant customers. Every effort has been made to ensure the accuracy of all information contained herein. DS Team makes no warranty expressed or implied with respect to accuracy of the information, including price, product editorials or product specifications. Product and manufacturer names are used only for the purpose of identification. We appreciate your cooperation with us and we'll be glad to see you as our clients in the future.


Microsoft for surely will like this. So I forwarded their piracy department the whole shabang, and meanwhile made some tracing ... So if the registrant details would be correct, these scammers would be in Bulgaria.

Domain ID:D138853446-LROR
Domain Name:JUVENILEOCCUPEBLE.ORG
Created On:03-Feb-2007 21:36:39 UTC
Last Updated On:03-Feb-2007 21:36:42 UTC
Expiration Date:03-Feb-2008 21:36:39 UTC
Sponsoring Registrar:Direct Information PVT Ltd dba PublicDomainRegistry.com (R27-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:DI_5117152
Registrant Name:Manny Pull
Registrant Organization:Manny Pull
Registrant Street1:1u second st
Registrant Street2:
Registrant Street3:
Registrant City:Sophia
Registrant State/Province:
Registrant Postal Code:B-1050
Registrant Country:BG
Registrant Phone:+032.32653777
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:geraworkman@inbox.com
Admin ID:DI_5117152
Admin Name:Manny Pull
Admin Organization:Manny Pull
Admin Street1:1u second st
Admin Street2:
Admin Street3:
Admin City:Sophia
Admin State/Province:
Admin Postal Code:B-1050
Admin Country:BG
Admin Phone:+032.32653777
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:geraworkman@inbox.com
Tech ID:DI_5117152
Tech Name:Manny Pull
Tech Organization:Manny Pull
Tech Street1:1u second st
Tech Street2:
Tech Street3:
Tech City:Sophia
Tech State/Province:
Tech Postal Code:B-1050
Tech Country:BG
Tech Phone:+032.32653777
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:geraworkman@inbox.com
Name Server:NS1.KROLOBUL.COM
Name Server:NS2.KROLOBUL.COM
Name Server:NS3.KROLOBUL.COM
Name Server:NS4.KROLOBUL.COM
Name Server:NS5.KROLOBUL.COM

Another peculiarity that probably should be taken into account .. the URL redirects after clicking on it to http://www.pozdravloem.com/. Of which we get one of our favorite spammer and scammer bulk domain registration services, pacnames.org, and some scammer who cares for his privacy (as you see the fancy email).
Needless to say ... Microsoft Windows is not legally sold in downloadable format anywhere on this planet.


Domain name: POZDRAVLOEM.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: (Private Contact) (pws.ad952b82efb7219@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Administrative, Technical Contact: (Private Contact) (pws.ad952b82efb7219@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Name Server: NS1.SRUL5.COM
Name Server: NS2.SRUL5.COM
Domain creation date: 2007-01-19 21:44:58.0
Domain expiration date: 2008-01-20 02:58:07.0

Amina Togar .. another African millionaire?

Let me guess...
Another poor millionaire at a concentration camp with fast speed internet access, offering me millions since I am such a reliable and honest person, whom they found in the internet and trust me more than they would trust their mother...

Oh, and wait - this Liberian guy/gal who is in Senegal has for some reason an Italian IP address, close to Bergamo in the far Northern Italy, and a bit too good English.

From: amina4togar@yahoo.com
Subject: Greetings From Africa [random letters]
Date: February 4, 2007 [some time]
To: [my email]
Return-Path:
Received: [..]
Received: from mx4.hotmail.com ([196.207.197.65]) by [isp] (Xserve/smtpin18/MantshX 4.0) with ESMTP id l14FRx9S022174for ; Sun, 04 Feb 2007 10:06:40 -0800 (PST)
Message-Id: <200702041806.l14FRx9S022174@isp>
X-Mimeole: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
Content-Type: text/plain
X-Msmail-Priority: Normal
X-Spam-Flag: Suspected Spam
Original-Recipient: [email]


Hello,

I am writing you from Africa and I know you will be surprised to receieve a mail from a stranger....Please, don't be surprised...I got your contact from peoples search and decided to share an important issue with you...My name is Amina Togar and I am originally from Liberia, but do reside in Senegal...I am single, 26 years old and I would like you to spare me your time to know and discuss an important issue with you , which in my opinion will be of interest to you and hopefully, we would get to know from there....

Please confirm the receipt of this short mail and I will get back to you with a more detailed mail about myself and what I actually want to share with you....

You may reach me on yahoo messenger with the following id; amina4togar@yahoo.com or you can reply to the email above...

Thanks for your time and hope to hear from you soon...

Amina...

Monday, January 08, 2007

Great responses aol, bol and namecheap.com .. nada

It has been two weeks since I first got my inboxes of email killed by the bounces of the emails sent by the spammers marketing for Beautifulswiss.net or .com.
It has been two weeks since I contacted TOSREPORTS@aol.com, abuse@bol.com.br, and support@namecheap.com. No answers, from any of them.

These beautifulswiss, fineswiss and so on people or someone they pay to do the dirty job, send these spams. My email address is still occasionally showing as the reply-to field, so the undelivered spam bounces to me. Great.

AOL have clear TOS about not using its sites for marketing illegal stuff. Even if AOL would shut down these sites that host the redirects to this site (or its clones), it's still killing them slowly, one by one ... AOL hasn't answered to any TOS report. Fantastic customer service.

Namecheap.com is the domain registrant that has something fancy in their TOS agreement ... But as if they would give a shiitake... allow bulk site registrations, and suddenly any bulk registration site doesn't really care. Your WG Domain or the content found at any associated IP address infringes upon or conflicts with the legal rights of any third party or any third party's trademark or trade name. You also warrant that neither the WG Services nor WG Domain(s) will not be used in connection with any illegal or morally objectionable activity (as defined below in section 5), or, in connection with the transmission of unsolicited commercial email ("Spam"). " Or show me one bulk registration site that cares.

There we go. No answer from any of the TOS breaking and abuse complaints, and the mailboxes still get more bounced shiitake by these same people.
This gives a great image of AOL TOS reports handling people, BOL abuse, and of this bulk spam domain registrant namecheap.com.
Maybe time to write an angry letter to that Mr Maduro if the email address he used in these domain bulk registrations is even valid.
Or one day, time to just get a new email address... it is very frustrating when the address they kill by this shiitake are not the free email addresses but something you actually pay to use. The email provider, as usual, hasn't done anything more than AOL TOS reports on this ...

Tuesday, December 26, 2006

Beautifulswiss.com War - Part II

Beautifulswiss.com War - Part I

Today 8 AM : discovery that this spammer has invaded my inbox, using my email address as his reply-to.
First spam reports and TOS violations were reported hours ago; no reply yet.

Today 9 PM :
Second round of war.
More spam on my inbox.
Again I am used as reply-to fields. F-ers.


Again as in the previous spam post, again the beautifulswiss.com domain.
This time the only difference : the spammer has used a new aol account to spam :

Message-ID: <0AB1981F.70D59CEA@mac.com>
Date: Wed, 27 Dec 2006 02:53:26 +0600
From: "King, Catherine"
User-Agent: eGroups Message Poster
MIME-Version: 1.0
To: "Daniel"
Subject: ROLEX at unbelievable prices cu
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit

High Quality Rrol,x Re*lica

Worldwide Fast Shipping -- Meticulous Design -- Inexpensive

An additonal 15% off when you purchase two or more re.lica watches.

http://members.aol.com/amandagld/

Their stone, nursing a baby in the paradise, wasn't tearfully wax.
Her devil, crying in the toolbox, is silently piggy.



Today around 10 PM,
my response to this last spam attack :


From: me
Subject: Fwd: Undeliverable Mail
Date: December 26, 2006 9:56:17 PM GMT+00:00
To: spam@my email provider, TOSReports@aol.com, support@namecheap.com

This spammer (http://members.aol.com/amandagld/ ) continues to abuse my email address.
My email address in the reply-to field, making me angry...

This aol account forwards to http://beautifulswiss.com/

of which whois:

Visit AboutUs.org for more information about beautifulswiss.com
a href="http://www.aboutus.org/beautifulswiss.com"AboutUs: beautifulswiss.com/a

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: beautifulswiss.com

Registrant Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Administrative Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Technical Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Status: Locked

Name Servers:
ns1.beautifulswiss.com
ns2.beautifulswiss.com

Creation date: 25 Dec 2006 14:49:57
Expiration date: 25 Dec 2007 14:49:57
=-=-=-=

Domain registrant,
TOS of cheapnames.com would also prohibit this spamming activity; http://www.namecheap.com/legal/reg-agreement.asp has : "Your WG Domain or the content found at any associated IP address infringes upon or conflicts with the legal rights of any third party or any third party's trademark or trade name. You also warrant that neither the WG Services nor WG Domain(s) will not be used in connection with any illegal or morally objectionable activity (as defined below in section 5), or, in connection with the transmission of unsolicited commercial email ("Spam"). "
Cheapnames.com, please consider canceling the account of this user. The domain is selling illegal products, and clearly violates your TOS by sending SPAM.

Cheapnames.com, please deactivate.

Mac.com, please do something to help deactivate these irrelevant spam forwards.

Angrily,

ME

[with full spam and its headers followed]

Beautifulswiss.com - invading my emails means WAR

Dear spammers, the fact that you use MY email address in your spams reply-to field means war.

War, 8 AM on 26 December 2006.
My inbox :


From: Postmaster@post4.tele.dk
Subject: Mail System Error - Returned Mail
Date: December 26, 2006 8:50:43 AM GMT+00:00
To: [my email]
Reply-To: Postmaster@post4.tele.dk
Return-Path: <>
Received: from mac.com (smtpin11-en2 [10.13.10.81]) by ms121.mac.com (iPlanet Messaging Server 5.2 HotFix 2.08 (built Sep 22 2005)) with ESMTP id <0JAV005BHHXQ11@ms121.mac.com> for [my email]; Tue, 26 Dec 2006 00:51:26 -0800 (PST)
Received: from fep34.mail.dk (fep34.mail.dk [80.160.76.198]) by mac.com (Xserve/smtpin11/MantshX 4.0) with ESMTP id kBQ8oj0D023645for ; Tue, 26 Dec 2006 00:50:46 -0800 (PST)
Message-Id:
Mime-Version: 1.0
Content-Type: multipart/report; Boundary="===========================_ _= 6371765(15235)1167123043"; report-type=delivery-status
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Scanned: yes
Original-Recipient: [my email]

This Message was undeliverable due to the following reason:

Dansk forklaring, klik her:
http://tdc.mail.dk/cgi-bin/redirect.pl?MsLimitNumMsgs

The user(s) account is temporarily over quota.



Please reply to
if you feel this message to be in error.
Reporting-MTA: dns; fep34.mail.dk
Arrival-Date: Tue, 26 Dec 2006 09:50:42 +0100
Received-From-MTA: dns; fep24.mail.dk (211.59.78.182)

Final-Recipient: RFC822;
Action: failed
Status: 4.2.2

From: "Williams, Joyce"
Date: December 27, 2006 1:56:02 AM GMT+00:00
To: "Brown, Julie" , "Karen" < some user @post4.tele.dk>, "Lisa Davis" , "Smith, Margaret" , "Andrew" , "Anthony Brown" , "White, Brenda"
Subject: An Affordable Rolex [random letters]
Reply-To: "Johnson, Joseph"

High Quality Rro*ex Rep*ica

Worldwide Fast Shipping -- Meticulous Design -- Inexpensive

An additonal 15% off when you purchase two or more repl,ca watches.

http://hometown.aol.com/steed249/

Her vampire, ruling the world in the Shire, nicely nasty.
Her devil, crying in the toolbox, is silently piggy.

The paper, sitting under the roof, was briefly hellish.
His programmer, standing in your house, is quietly slim.
Her ancestor, stealing money in the shadows, isn't perseveringly yellow.

Your dancer, talking crap behind the window, wasn't generously barren.


War, 11 AM
My response :

From: [my email]
Subject: SPAM Fwd: Mail System Error - Returned Mail
Date: December 26, 2006 5:42:26 PM GMT+00:00
To: TOSREPORTS@aol.com, abuse@bol.com.br, support@namecheap.com
Mime-Version: 1.0 (Apple Message framework v752.2)
Message-Id:
Content-Type: multipart/alternative; boundary=Apple-Mail-1--130814484
References: <20061226085043.somenumbers.fep34.mail.dk@fep34>

I forward this spam report to you AOL Tosreports since it IS relevant.

Someone - user steed249 - is forging my email to be used for sending out these emails. the emails with forget details are in the bottom of this email.
I have received several of these emails today.

The URL http://hometown.aol.com/steed249/ is in this spam advertising.
User steed249 is breaking his TOS.
The site is forwarding to replicas of brand products and that is a violation of your TOS, http://help.aol.com/aimhelp/search.do?cmd=displayKC&docType=kc&externalId=http--helpchannelsaolcom-kjumpadparticleId219305&sliceId=&dialogID=63390544&stateId=1%200%2063416598

Needless to say, I am angry that my email is used in these spams as reply-to.

And bol.com.br and the bulk domain support used for registering these domain are in to field too.
I would think that the TOS of cheapnames.com would also prohibit this spamming activity; http://www.namecheap.com/legal/reg-agreement.asp has : "Your WG Domain or the content found at any associated IP address infringes upon or conflicts with the legal rights of any third party or any third party's trademark or trade name. You also warrant that neither the WG Services nor WG Domain(s) will not be used in connection with any illegal or morally objectionable activity (as defined below in section 5), or, in connection with the transmission of unsolicited commercial email ("Spam"). "
Cheapnames.com, please consider canceling the account of this user. The domain is selling illegal products, and clearly violates your TOS by sending SPAM.

Here are the registrant details I have found out using whois searches for who registered the domains that website redirects to :

Domain Name: FINESWISS.NET
Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: fineswiss.net

Registrant Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Administrative Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Technical Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Status: Locked

Name Servers:
ns1.mygoodswiss.net
ns2.mygoodswiss.net

Creation date: 30 Oct 2006 12:12:26
Expiration date: 30 Oct 2007 12:12:26

It also redirects to :
Domain Name: BEAUTIFULSWISS.COM
[whois.enom.com]
=-=-=-=
Visit AboutUs.org for more information about beautifulswiss.com
a href="http://www.aboutus.org/beautifulswiss.com"AboutUs: beautifulswiss.com/a

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: beautifulswiss.com

Registrant Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Administrative Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Technical Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Status: Locked

Name Servers:
ns1.beautifulswiss.com
ns2.beautifulswiss.com

Creation date: 25 Dec 2006 14:49:57
Expiration date: 25 Dec 2007 14:49:57
=-=-=-=
The data in this whois database is provided to you for information
purposes only, that is, to assist you in obtaining information about or
related to a domain name registration record. We make this information
available "as is," and do not guarantee its accuracy. By submitting a
whois query, you agree that you will use this data only for lawful
purposes and that, under no circumstances will you use this data to: (1)
enable high volume, automated, electronic processes that stress or load
this whois database system providing you this information; or (2) allow,
enable, or otherwise support the transmission of mass unsolicited,
commercial advertising or solicitations via direct mail, electronic
mail, or by telephone. The compilation, repackaging, dissemination or
other use of this data is expressly prohibited without prior written
consent from us.

[and in the bottom the full full headers and full text of the spam I had bounced in my email inbox]

Regards,

ME

----- to be continued as soon as I get answers for this spam.

Saturday, December 16, 2006

Nomarriage.com isn't that much about hating women than it's about making money

Nomarriage.com is funny on the first look. And to a big percent I agree on what's the point of marrying anyway. Well - the valid points to marry would be ... getting a visa or visas for either or both,or getting a socially acceptable environment for the reproductional needs, or to just get the tax breaks of the married people, or just to go public with the relationship itself.

But reading thru even the titles on the links of the main page of that site is depressing and disturbing on the same time. So the men are all victims, and all American women are the evil? All men are innocent, and all the American women are just trying to get married, pop out a kid or two, only to become severely post-partum depressed psycho bitches who will force their poor victim husband go years with no sex with them and thus get these East European girlfriends to satisfy the bodily needs... ummh, yea.

But the opinions are interesting.. they tell a lot about the author too. Not that I would have had a real need to run whois on the domain, I was still curious who would want to have his name behind all these opinions. The site was registered by someone called Jan Herzog, whose address was in Venice CA, and contact address in Austin, TX. A geek or a scam for a long time for sure to be also able to own a 3-letter domain as well (never mind its content). Further digging around found some weird results with this relatively unique name, such as some text on Church of Seven Dolors, Minnesota website. And a lot about the family tree, and a listing of 2005 Teacher of the Year nominees for the area of Austin, TX. So an elementary school honor teacher at Huey, or a Montessori school at Wichita Falls? And doesn't this veganism all the carnivores are teh evil-style speech sound comparable to no marriage site? My favorite type of vegetarians and vegans is the one that tolerates other people and their opinions, not the vegenazi. And I think I can use that word in this case after reading all these pearls in nomarriage site, as below. You'd think they have fired teachers for less diverse opinions ... even though here he says he doesn't have kids and on the school website he has a daughter. Well, it could be all miracles and coincidences that there are three people with the same name in the same area, with the exact same rant style too. -- and some other searches found another variant for spelling his name actually as Jon Herzog, and being a Russian or ex Soviet born emigrant residing nevertheless in Austin area.

Why marriage no longer makes sense : "Traditional marriage balances different privileges and obligations for men and women. Modern woman wants all the benefits of "equality" without any of the responsibilities. " and so on. Hm. Why is it that not 100 % of men that I know take the full responsibility of their life? Or maybe those who do take it, are not attracted to women who don't.
Any American man can find a good foreign girlfriend or wife - umh. These men whose identities have been covered look all so perfect.

"Give me one good reason why a man should sign the marriage contact with an American woman. With a foreign bride, I guess you need to sign the marriage contract so she can get her green card and move to the United States." Ok, fine.
"But with an American woman, why not just live with her and fuck her. Verbally commit for life if you want."
"The ONLY thing that signing that marriage contract will do is ensure that the man receives a solid ass raping in divorce court if the relationship doesn't work out. And since American-American marriages have a 60% divorce rate, that's a very real possibility."

What your future wife will be thinking a few years after you have children. .. why marry a leech like these anyway? The mere existence of the people thinking like that would be enough to turn me a gay if I was male.
Majority of American women have Histrionic and Narcissistic disorders - and the majority of the men are sane and angels in comparison...

"The one constant of life is that women, after you marry them, will always change. You think they are sexy and fair now? They will probably change after the wedding.
That's just the way it is, folks, no way to change it. Best thing is to look at the women's mom, married sisters, and how she was raised. That is a much better indicator than what she says when you date her
." (and this would not be the same for the advertised foreigner women? Or look at the dad and married brothers of the broom ... all look sane, happy, in shape and not to be too psychos...) "Do you ever sense that your wife sees you as a means to an end rather than a person? Sometimes I feel like my wife loves me for what I can do for her (kids, security, whatever) but does not really care about me specifically. Many woman who are getting older want to get married, but who they marry seems less important than actually being married." Wise hint for you mr Herzog then : don't ever marry a German wife either. The reason you just gave above is why another American divorced of the German... not being a person anymore, only a tool. It was all about her, her, her...

"It's amazing how many people think that a guy looking for a good woman should do what's "fair" or what's socially responsible. Fuck that. It's each guy's responsibility to find a woman that's the best possible choice for HIM. Who will make HIM happy. This one time, when he's choosing his future wife, he needs to focus exclusively on his own needs and making sure they are satisfied." ... "The "wifely" skills are those that the woman needs to have, or learn darned quick, if she's going to make you happy." (which explained are : Cooking, cleaning, mothering, nurturing, wants kids, loves kids, loyal, trustworthy.) Ha. Your opinion on these wifey skills makes you a breeder. Go on, please marry these foreign, mothering, nurturing, breeder women. Or just make money telling other people how to.

More pearls : "99.9% of the single women in this country are not even marriageable.
Take away the women beyond the marriageable age (over 30).
Take away the fat women.
Take away the ugly women.
Take away the psycho Zoloft / Prozac women.
Take away the raped women.
Take away the women with STDs / HIV.
Take away the women who can't cook.
Take away the women who already have kids.
And you've eliminated 99.9% of the single women in this country."
while on the same page preaching big that "So quite honestly, it doesn't matter if they're fat/skinny/ugly. It's not about what's fair. It's about what you can get. American men get what they want" So it doesn't matter if YOU, the MAN, is ugly, old sick psycho but the womb you want to marry MUST be under 30, a certain attractiveness, weight, size, shape, color, ...

Other pearls - there is a link in the source to fireyourwife.com. It doesn't come as any surprise that this site as well is registered by this same Jan Herzog, this time with the registrant addresses in Silver Spring, MD, and in Austin, TX.

And the big great ass banner to singleabroad.com is registered by Jan Herzog, Silver Spring, MD, and Austin, TX. So it's all about making money, sir Herzog. Somehow I have NEVER seen lusers like you get women like this, this, this, this (ever seen an Eastern European girl like these? I haven't), this, or this ... ONLY for the sake of your passport. And the womben you have added in the pictures are probably not that likely type of being mothering, nurturing, breeder type you were just advocating for. You are only doing this preaching for money. For selling your books (that are that successful that even amazon.com hasn't heard of you??), and your web services. But never mind Amazon since the people's need of love is usually even bigger than their need of religion, I'm sure you will not run out of business. And you sure keep trying and entertaining people, even traditionalwife.com is yours as it appears on whois.
But that is enough for digging out the weird people and ideas and products in the Internet for one evening.



So it's not all about hating American women, it's about making money.

Tuesday, December 12, 2006

Bruce Schneier on spam

Bruce Schneier has brilliant points on combating spam, taken to his freshest blog entry also today. To fight spam better would really need reingeneering the internet.
Even if the spam filters are well in place and working on the server side, I just keep getting all these scam emails. All Nigerians with the millions of dollars to donate to us poor, non-Africans, all the MSN&Yahoo&Google $ 50 million lottery tickets that only are waiting for my passport and bank account details in that yahoo, hotmail, lycos, tripod, or walla email account ... well well. The day the spam filters will be efficient, and there will not be a single scam, a pointless .gif for marketing some weird shares, I will be glad to eliminate this blog as unneeded. Or transform it to a museum of an era in the Internet.

Ms Aisha Hassan, Lebanese concentration camp, offering business deals..

Another of these oh I am emailing you about business deals while I am in a refugee camp with fast speed internet access...
Then another interesting detail with all of this type of emails : the money is always 10 millions or more (this being slightly less) and it is always deposited in some cheap third world country you might not want to travel to (like anywhere in Africa alone). None of these dead poor scammer's dads had ever thought about making it simple and opening a bank account in Switzerland or in US. If they would have the account already in Switzerland, all these poor people in the concentration camps with these fast speed internet access could just go to Switzerland to get their money whenever they would want.
If these really were business deals, and they offered really 30 % of the money, this would save them easily $ 3 million per a scam. I mean per inheritance.

From: aishahassan@rediffmail.com
Subject: PLEASE LET ME KNOW IF YOU GOT THIS MAIL & GOD BLESS AS YOU DO SO [then some random letters]
Date: December 11, 2006 12:42:50 PM GMT+00:00
To: [my email]
Return-Path:
Received: [...] from mx4.hotmail.com (11.red-83-41-171.dynamicip.rima-tde.net [83.41.171.11]) by [domain] (Xserve/smtpin44/MantshX 4.0) with ESMTP id kBBC77SK002790for [my email]; Mon, 11 Dec 2006 04:42:50 -0800 (PST)
Message-Id: <200612111242.kBBC77SK002790@[domain]>
X-Mimeole: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
Content-Type: text/plain
X-Msmail-Priority: Normal
Original-Recipient: [my email]

From Aisha Hassan
C/O: Refugee camp-Beirut
Republic Of Lebanon
23/11/2006

EMAIL: aishahassan@rediffmail.com

Dearest One,

I came across your contact and have Decided to get in touch with you after the prayer, to see if you can help me solve my problem . Firstly, i wish to introduce myself as Aisha Hassan, The Daughter of (Late Alhaji Hussien bin Hassan) who lost his life in the course of the crisis here in Lebanon on the 24th of July this year during Israeli bomb attack to Lebanon, which claim the lives of my family members and left me without any body to lien on.
My father willed in cash, the sum of $8.7 Million US Dollars which he put in a trunk box and deposited with a bank in Malaysia and with enabling conditions for the release of t he fund which are as follows.

(1) That I must be 30 years or above.

(2) That upon request for the release of the fund, there must be intentions of investment especially outside the Lebanon.

I contact you therefore to confirm if you can accept me into your life as my guardian and possibly advise me on any investment opportunity in your country. If after this mail you get back to me and I reach agreement with you, the Bank/Finance firm will release the consignment into your care and I will come over to you to commence business partnership with you and the fund.
Please forgive me if you find this message offended in anyway, but i am just searching for assistance, because i have lost all my people during this crisis here

I expect your urgent response with assurance that you will help me.

God Bless You.
Ms.Aisha Hassan

Sunday, December 10, 2006

Alex Rodrigez aka xsalsa@gmail.com - leave me alone

Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs380024qbf;
Sun, 10 Dec 2006 00:12:11 -0800 (PST)
Received: by 10.48.254.1 with SMTP id b1mr2922416nfi.1165738330674;
Sun, 10 Dec 2006 00:12:10 -0800 (PST)
Return-Path:
Received: from mail.garyzobb.com ([195.114.9.119])
by mx.google.com with ESMTP id k9si5975398nfc.2006.12.10.00.12.09;
Sun, 10 Dec 2006 00:12:10 -0800 (PST)
Received-SPF: neutral (google.com: 195.114.9.119 is neither permitted nor denied by domain of bc@garyzobc.com)
DomainKey-Status: bad
Received: (qmail 47846 invoked from network); 10 Dec 2006 08:09:09 -0000
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=garyzobc.com;
b=LjMxnD1eif9y5Yn0S+TYaPbuOxnlnaPfvCECjVGdtXpWrsfieOczodYN8bMiGEBmom/bt5mQBTDOqLqMKIozk4+m0pWDF/CG8N/+WYP5W7YygulXWo/5I+LIYayh2FH3ZHW8SqBOI6S24XZZyMLmVEPkU5r4+yej0UCG0CQXqas= ;
Received: from localhost (HELO localhost.localdomain) (127.0.0.1)
by localhost with SMTP; 10 Dec 2006 08:09:06 -0000
Received: (qmail 8933 invoked by uid 80); 10 Dec 2006 06:26:43 -0000
Date: 10 Dec 2006 06:26:43 -0000
From: DS Team special offers
To: [my email]
Reply-To: DS Team special offers
X-Priority: 3
List: DST
List-Archive:
List-ID:
List-Owner:
List-Subscribe:
List-Unsubscribe:
List-URL:
Message-ID: <20061210074153.91246766@garyzobc.com>
X-Mailer: Dada Mail 2.10.9
Content-type: multipart/alternative; boundary="----------=_1165725713-69542-0"; charset=iso-8859-1
MIME-Version: 1.0
Subject: VIP gift prices on Adobe CS, Macromedia, Adobe Photoshop, Acrobat, Roxio, MS Office web bundles

This is a multi-part message in MIME format...

------------=_1165725713-69542-0
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.420 (Entity 5.420)
Content-Length: 4011

(Mailing list information, including unsubscription instructions,
is located at the end of this message.)

�Dear customers and
friends of DS Team,

Please let us represent our new special discount deals created especially for
you. In accordance to these deals you'll be able to order some products from our
online software store saving up to 80% off on each purchase. Watch for our
weekly special discount offers to get what you really need at discount prices
and to receive your free-of-charge bonuses as well. We're always working on this
issue to make our cooperation more interesting and useful for both of us. Your
satisfaction is very important, therefore please feel free to contact us in case
you're in need of some specific software which isn't in our store at the moment.
We'll try to make it available in a short time period for your satisfaction.
Make your choice, don't miss a chance, work with us, enjoy.� OnDemand
Software Group is always at your service.
[snip] same kind of list than in this post

The following information is a reminder of your current mailing
list subscription:
You are subscribed to the following list:
DS Team special offers
using the following email: [my email] (and no, I have NOT).
You may automatically unsubscribe from this list at any time by visiting the following URL:
If the above URL is inoperable, make sure that you have copied the entire address. Some mail readers will wrap a long URL and thus break this automatic unsubscribe mechanism.
You may also change your subscription by visiting this list's main screen:
If you're still having trouble, please contact the list owner at:

The following physical address is associated with this mailing list:
PO Box U342 Woods Centre
St. Johns, Antigua
Ahem - no you have not. You have still the same invalid address associated with your domain than in that other post:

Domain name: okunsoft.com (this time these scam software were linked to be sold at gifts.okunsoft.com/something...
Domain name: OKUNSOFT.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: TOTALNIC-128733 (XSALSA@GMAIL.COM) (for other his business you can also find (XSALSA@ETN.ORG) as registrant email)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Administrative, Technical Contact: TOTALNIC-128733 (XSALSA@GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Name Server: NS1.ZOPUSINFINITUS.COM
Name Server: NS2.ZOPUSINFINITUS.COM
Domain creaton date: 2006-12-05 22:14:27.0
Domain expiration date: 2007-12-06 03:31:14.0

Again, this domain registrant address is invalid. If you search more about thi Alex Rodrigez in Lappeenranta, you'll find a lot of interesting posts out there.

Tuesday, December 05, 2006

Mr. Roland Benneth - the "British" living in Africa donating all his money...

So this British gentleman lives in Africa, and uses a Spanish email provider. And interesting choices of words and spelling such as organizations, helpless needies, hospitalized, .. Ten Million Three Hundred Thousand dollars ($10.3million but not bothering to mention what it is in UK pounds. (Italics below mine) Oh - and even the God Bless You isn't that British thing to say.

Congratulations on your US spelling, sir.
I don't understand why you would even want to sit on your prostate and die when the cure for sure costs less than what you say you have on your account, and prostate cancer isn't fatal. And how come you have time to send these spam mails while you lie hospitalized in a bed? You even have the same template all these Africans and Lottery Winner Notifications use - the same nationality, passport number etc all litany, right away pasted and even all capitol letters like in every single other scam.

Or why you never considered e.g. making a donation to Oxfam. Maybe you are not British enough.

From: roland_benneth4@terra.es
Subject: From Mr. Roland Benneth
Date: December 5, 2006 5:40:06 AM GMT+00:00
Reply-To: roland_benneth4@terra.es
Return-Path:
Received: [...]
Received: from cps5 (213.4.149.20) by csmtpout3.frontal.correo (7.2.056.6) id 45740FA60005A709; Tue, 05 Dec 2006 06:48:58 +0100
Received: from [195.166.237.42] by correo10.terra.es with HTTP (authenticated as roland_benneth4@terra.es); Tue, 05 Dec 2006 06:40:06 +0100
Message-Id: <21184699.1165297207001.JavaMail.root@cps5>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_225_5775010.1165297206999"
Original-Recipient: [my email]

Dear Friend,

I sincerely hope that after you read this mail you will respond to my
call. let me start by introducing myself my name is Roland Benneth. I am 70
years old, a British living in West Africa. I am a businessman and own two
companies here in Ouagadougou, married with two children. My wife and
two children had a fatal car accident subsequently died six years ago.
Before this incident my life internally depend on my business for self
sustenance as well, for I appreciate life as well never really cared about other
values in life since the loss of my family, I have found a new
philanthropic desire to assist helpless needies.

I have been dedicating my service in helping orphans in motherless
homes; I visit and donate money to orphans in Sudan, America And some Asian
countries. Before I became ill, I kept some money, Ten Million Three
Hundred Thousand dollars ($10.3million)
to be precise in a long term
deposit account in a Finance House.

Presently, I'm suffering from an illness and hospitalized my doctor told
me I have prostate cancer that I living by grace, few months to live. It is
my last wish to see that I disburse the money I kept to charity
organizations?
Because so much of my wealth has been plundered by relatives and friends
since my protracted illness, hence I cannot live with the agony of
entrusting this huge responsibility to any of them since the funds in
the Finance House is the last money that I have left. Right now I am
partially stranded in the hospital due to the nature of my sickness so I am
appealing to you to help, assist me collect ,retrieve the deposit from the Finance
House and disburse or use it for philanthropic purposes amongst
charitable institutions.

I would want you to use your discretion to disburse the money and keep
20% of it for your gratuity. Feel free to reimburse yourself when you have
the money for any cost you might have incurred during the process of
collecting and distributing the money to charity organizations. May the good Lord
bless you and your Family.
Please reply to this mail as I can only communicate through my laptop
which is by my bed, as soon as I get your response I shall then give you the
necessary information you need to collect this money.If you really want
to asist me please send in your information to proceed:

FULL NAME:
AGE:
OCCUPATION:
PHONE:
FAX:
NATIONALITY:

God bless you.
Mr. Roland Benneth.


Prueba el Nuevo Correo Terra; Seguro, rápido, fiable.

Monday, December 04, 2006

Way too much spam is repetitive




How sad is this? Actually at the moment over 1500 spams in my gmail. And all are repetitive - there don't seem to be any entertaining ones.
As bad as hotmail, except the ones that arrive at all in gmail aren't all in remote or added .gif images but in text.

In hotmail spams there aren't many spam emails left that would have actual text - it's all remote or added images.

In gmail it's all about these [random letters].ph or .pk financial advice that don't have anything to do with the subject line, or fake rolexes, 10,000 creative ways of spelling viagra and cialis, or a number of ways to make my woman enjoy. Oh too bad I am not a lesbian. Or I could make my male body part 4" longer if I had one... however that seems to be a bit passe' as the spam object.

So among the few enjoyable subjects seems to be running whois on all these illegal software ads.

Sunday, December 03, 2006

Mac software scammer aka XSALSA@GMAIL.COM

Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs124699qbf;
Wed, 29 Nov 2006 04:48:27 -0800 (PST)
Received: by 10.49.55.13 with SMTP id h13mr13651538nfk.1164804507158;
Wed, 29 Nov 2006 04:48:27 -0800 (PST)
Return-Path:
Received: from transit-r1.garyzooe.com (pptpoe-pool-195-114-8-102.rustel-dsl.com [195.114.8.102])
by mx.google.com with ESMTP id q28si28990862nfc.2006.11.29.04.48.26;
Wed, 29 Nov 2006 04:48:27 -0800 (PST)
Received-SPF: pass (google.com: domain of bc@garyzooe.com designates 195.114.8.102 as permitted sender)
DomainKey-Status: bad
Received: (qmail 39415 invoked from network); 29 Nov 2006 12:48:18 -0000
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=garyzooe.com;
b=TEcyYq/I3fjAvTTmM3Jdrv2Ln7Ezse tS8oPHm42QEV0Zrq6DIL2N2pzfB8 iU/dioicqLUZUcltecKEh C7jbUsJM4mJy2JB5Ko/MTZZ7m6TCYuN9qtyneOyxknBb8rBypLsJg5SjlVjyKYV/oo6esm2d9EhHcD+K6M0fKucrx9I= ;
Received: from localhost (HELO localhost.localdomain) (127.0.0.1)
by localhost with SMTP; 29 Nov 2006 12:48:13 -0000
Received: (qmail 34625 invoked by uid 80); 29 Nov 2006 12:47:23 -0000
Date: 29 Nov 2006 12:47:23 -0000
From: DS Team special offers
To: [my email]
Reply-To: DS Team special offers
X-Priority: 3
List: DST
List-Archive:
List-ID:
List-Owner:
List-Subscribe:
List-Unsubscribe:
List-URL:
Message-ID: <20061129113425.25332096@garyzooe.com>
X-Mailer: Dada Mail 2.10.9
Content-type: multipart/alternative; boundary="----------=_1164789265-60776-0"; charset=iso-8859-1
MIME-Version: 1.0
Subject: 80%off on MAC versions of iView, Adobe, Macromedia, Symantec 2006 titles I

This is a multi-part message in MIME format...

------------=_1164789265-60776-0
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.420 (Entity 5.420)
Content-Length: 4249

(Mailing list information, including unsubscription instructions,
is located at the end of this message.)
__

� New Mac updates available ! Order any title of your
choice, contact our support via *members
support form* and get any other Mac title for free. This offer valid for
next 10 days only.
Ableton Live 5.0.1 for Mac
Retail Price $499.00
Our Price $49.95
You save $449.05
Adobe Acrobat 7.0 Pro for Mac
Retail Price $449.90
Our Price $69.95
You save $379.95
Adobe After Effects V 6.5 for Mac
Retail Price $699.00
Our Price $49.95
You save $649.05
Adobe Creative Suite 2 Premium for Mac
Retail Price $1199.00
Our Price $149.95
You save $1049.05
Adobe Creative Suite for Mac
Retail Price $1130.00
Our Price $99.95
You save $1030.05
Adobe InDesign CS for Mac
Retail Price $499.00
Our Price $49.95
You save $449.05
Adobe Photoshop CS for Mac
Retail Price $500.00
Our Price $49.95
You save $450.05
Adobe Photoshop Elements 3.0 for Mac
Retail Price $89.99
Our Price $39.95
You save $50.04
Adobe Photoshop Elements V 2.0
Retail Price $99.00
Our Price $19.95
You save $79.05
Corel Painter IX for Mac
Retail Price $429.00
Our Price $39.95
You save $389.05
Extensis SUITCASE X1 for Mac
Retail Price $99.95
Our Price $19.95
You save $80
Macromedia Contribute 3.11 for Mac
Retail Price $149.00
Our Price $39.95
You save $109.05
Macromedia Director MX 2004 for Mac
Retail Price $1199.00
Our Price $49.95
You save $1149.05
Macromedia Dreamweaver 8 for Mac
Retail Price $399.99
Our Price $49.95
You save $350.04
Macromedia Dreamweaver MX2004 for Mac
Retail Price $499.00
Our Price $39.95
You save $459.05
Macromedia Fireworks MX2004 for Mac
Retail Price $360.00
Our Price $29.95
You save $330.05
Macromedia Flash MX2004 for Mac
Retail Price $550.00
Our Price $39.95
You save $510.05
Macromedia Flash Pro 8 for Mac
Retail Price $699.00
Our Price $49.95
You save $649.05
Macromedia FreeHand MX for Mac
Retail Price $399.00
Our Price $39.95
You save $359.05
Macromedia Studio 8 for Mac
Retail Price $999.99
Our Price $99.95
You save $900.04
Macromedia Studio MX2004 for Mac
Retail Price $339.99
Our Price $69.95
You save $270.04
Roxio Popcorn
Retail Price $49.95
Our Price $19.95
You save $30
Roxio Toast 7.0 Titanium
Retail Price $99.95
Our Price $29.95
You save $70
StuffIt Deluxe 10 for Mac
Retail Price $79.99
Our Price $19.95
You save $60.04
Symantec Norton Antivirus 10.1 for Mac
Retail Price $49.95
Our Price $29.95
You save $20
Virtual PC 7.0 for Mac
Retail Price $249.99
Our Price $49.95
You save $200.04
iView Media 3 Pro
Retail Price $199.00
Our Price $0.00
You save $199
The full software list is available at DS Team website
Every effort
has been made to ensure the accuracy of all information contained
herein. DS Team makes no warranty expressed or implied with respect to
accuracy of the information, including price, product editorials or
product specifications. Product and manufacturer names are used only
for the purpose of identification. We appreciate your cooperation with
us and we'll be glad to see you as our clients in the future.
(C)
2003-2006, onDemand PTE. All rights reserved. All logos,
trademarks, etc. are property of their respectful owners.�
--
The following information is a reminder of your current mailing
list subscription:
You are subscribed to the following list:
DS Team special offers
using the following email:
[my email]
You may automatically unsubscribe from this list at any time by
visiting the following URL:
http://garyzooe.com/cgi-bin/dada/mail.cgi/u/DST/
If the above URL is inoperable, make sure that you have copied the
entire address. Some mail readers will wrap a long URL and thus break
this automatic unsubscribe mechanism.
You may also change your subscription by visiting this list's main screen:
http://garyzooe.com/cgi-bin/dada/mail.cgi/list/DST
If you're still having trouble, please contact the list owner at:
< mailto:news@garyzooe.com >
The following physical address is associated with this mailing list:
PO Box U342 Woods Centre
St. Johns, Antigua

[html content removed]
New Mac updates available ! Order any title of your
choice, contact our support via members
support form
and get any other Mac title for free. This offer valid for
next 10 days only.
The full software list is available at href="http://mac.popansoft.com"> DS Team website

Every effort has been made to ensure the accuracy of all information contained
herein. DS Team makes no warranty expressed or implied with respect to
accuracy of the information, including price, product editorials or
product specifications. Product and manufacturer names are used only
for the purpose of identification. We appreciate your cooperation with
us and we'll be glad to see you as our clients in the future.
(C) 2003-2006, onDemand PTE. All rights reserved. All logos,
trademarks, etc. are property of their respectful owners. 
The following information is a reminder of your current mailing
list subscription:
You are subscribed to the following list:
DS Team special offers
using the following email:
[my email]
You may automatically unsubscribe from this list at any time by
visiting the following URL:

http://garyzooe.com/cgi-bin/dada/mail.cgi/u/DST/

If the above URL is inoperable, make sure that you have copied the
entire address. Some mail readers will wrap a long URL and thus break
this automatic unsubscribe mechanism.
You may also change your subscription by visiting this list's main
screen:

http://garyzooe.com/cgi-bin/dada/mail.cgi/list/DST>

If you're still having trouble, please contact the list owner at:

news@garyzooe.com

The following physical address is associated with this mailing list:
PO Box U342 Woods Centre

St. Johns, Antigua
------------=_1164789265-60776-0--

Of which we get :

www.popansoft.com
Registrar: CAPITAL NETWORKS PTY LTD
[whois.pacnames.com]
PacNames WHOIS Server Version 1.1.0
Domain name: POPANSOFT.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: TOTALNIC-128733 (XSALSA@GMAIL.COM)

Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Administrative, Technical Contact: TOTALNIC-128733 (XSALSA@GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Name Server: NS1.ZOPUSINFINITUS.COM
Name Server: NS2.ZOPUSINFINITUS.COM
Domain creaton date: 2006-11-24 21:00:38.0
Domain expiration date: 2007-11-25 02:18:23.0

The address of the domain registrant is illegal and inexistant.
And surprise surprise

PacNames WHOIS Server Version 1.1.0
Domain name: GARYZOOE.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: TOTALNIC-128733 (XSALSA@GMAIL.COM)

Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Administrative, Technical Contact: TOTALNIC-128733 (XSALSA@GMAIL.COM)
Alex Rodrigez
Alex Rodrigez
PO box 109 WP 1432
Lappeenranta NA 53101
FI
Telephone: +358.207818027
Fax: +358.207818027
Name Server: NS1.ZOPUSINFINITUS.COM
Name Server: NS2.ZOPUSINFINITUS.COM
Domain creaton date: 2006-11-28 20:00:21.0
Domain expiration date: 2007-11-29 01:17:46.0

Bulp purchased domains using http://www.pacnames.com as registrant. Illegal addresses.
What I would LIKE to do is to inform the software writers about these spammers, but after reporting has (ten attempts) never got any results, why bother.

You won flight tickets again

Umh.

So, I have won fligth tickets for free.
Great. How come this spam is trying to tell it was coming from yahoo groups? That I don't even belong to.
This pisses me off. So, off you go to the internet now, to get your own medicine, with the added for convenience a href mailto tags.

X-Message-Status: n:0
X-SID-PRA: newsletter-bounces@dealsforeach.com
X-Message-Info: LsUYwwHHNt25DSl5BTYbNBSdBGHBh1ce2wlc9pUtsSg=
Received: from dealsforeach.com ([216.83.214.205]) by bay0-mc3-f4.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Sun, 3 Dec 2006 02:44:41 -0800
Received: by dealsforeach.com id he9i3s09bo45; Sat, 2 Dec 2006 22:42:44 -0700 (envelope-from )
Message-ID: <31209568.4732982905890.JavaMail.SYSTEM@DESLLO11>
Date: Sat, 2 Dec 2006 22:42:44 -0700
To: [my email]
Mime-Version: 1.0
From: Reservation Dept.
Subject: Airline Flight Reservation_Participation_Confirmation
List-Unsubscribe: ,

List-Archive:
List-Post:
List-Help:
List-Subscribe: ,

Content-Type: text/html
Content-Transfer-Encoding: 7bit
Sender: newsletter-bounces@dealsforeach.com
Errors-To: newsletter-bounces@dealsforeach.com
Return-Path: flight@dealsforeach.com
X-OriginalArrivalTime: 03 Dec 2006 10:44:41.0313 (UTC) FILETIME=[09913510:01C716C8]

The Daily Enlightenment
Complete Being | Mantras | Taking Praise | Good or Bad News? | Heari
From:
NamoAmituofo
Message

amituofosg

Fri Dec 1, 2006 8:34 pm (PST)
TheDailyEnlightenment.comWeekly 02.12.06

Quote:

See http://thedailyenlightenment.com/pjnew for Chinese TDE. To subscribe to the above, email thedailyenlightenment-subscribe@yahoogroups.com TDE-Weekly (TheDailyEnlightenment.com) is a free multi-traditional Dharma inspiration e-newsletter (members:25,000+) run by kmspks.org. Please support us by contributing articles and encouraging friends to subscribe. Contributions, suggestions and queries are welcomed at comment@TheDailyEnlightenment.com The opinions in the articles, and those of event organisers do not necessarily reflect ours. The copyright of the articles belong to the authors and are not to be reproduced without permission. (Ads are not placed by TDE-Weekly.)
Yahoo! Groups
Change settings via the Web (Yahoo! ID required)

Change settings via email: Switch delivery to Individual | Switch format to Traditional


Visit Your Group
|

Yahoo! Groups Terms of Use
|

Unsubscribe

Thursday, November 30, 2006

YAHOO/MSN INC AND THE MICROSOFT WINDOWS LOTTERY OF £500,000.00

Oh, this is a hilarious spam.
Yahoo, MSN, and Microsoft Windows collaborating for lotteries... a £500,000.00 price, and they use a yahoo email address??


From: fallbrookgirl@adelphia.net
Subject: YOU HAVE WON THE YAHOO/MSN INC AND THE MICROSOFT WINDOWS LOTTERY OF £500,000.00
Date: November 30, 2006 2:09:58 AM GMT+00:00
To: undisclosed-recipients: ;
Reply-To: windows04_boardagents@yahoo.com
Return-Path:
Received: [...]
Received: from web19 ([68.168.75.45]) by mta16.adelphia.net (InterMail vM.6.01.05.04 201-2131-123-105-20051025) with ESMTP id <20061130015349.JXTW26381.mta16.adelphia.net@web19>; Wed, 29 Nov 2006 20:53:49 -0500
Message-Id: <25949024.1164852599077.JavaMail.root@web19>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Priority: 3 (Normal)
Sensitivity: Normal
X-Brightmail-Tracker: AAAAAA==
Original-Recipient: [....]

Yahoo/MsnLottery Incoperation
Baley House, Har Road
Sutton, Greater London
SM1 4te
United Kingdom

This is to inform you that you have won a prize money of(£500,000) FIVE HUNDRED THOUSAND GREAT BRITAIN POUNDS STERLINGS for the month of NOVEMBER 2006 Lottery promotion which is organized by YAHOO/MSN LOTTERY INC & WINDOWS LIVE.
YAHOO/MSN AND MICROSOFT WINDOWS, collects all the email addresses of the people that are active online, among the millions that subscribed to the web. we only select five people every Month as our winners through electronic balloting System without the winner applying,we congratulate you for being one of the people selected.
PAYMENT OF PRIZE AND CLAIM
You are to contact your Claims Agent on or before your date of Claim, Winners Shall be paid in accordance with his/her Settlement Centre.
Yahoo/Msn Lottery Prize must be claimed no later than 15 days from month of Draw Notification after the Draw date in which Prize was won.Any prize not claimed within this period will be forfeited.
These are your identification numbers:

Batch number.....................YM 09102XN
Reff number.......................YM35447XN
Winning number...................YM09788
These numbers fall within your Location file,you are requested to contact EVENTS AGENT MANAGER,send your winning identification numbers to them at this contact address below.
(CONTACT EVENTS AGENT MANAGER)
Mr.Peter Davidson
EMAIL:windows04_boardagents@yahoo.com

You are therefore advised to send the following information to the EVENTS AGENT Manager for him to process your wins.
1. Full name..............
2. Sex..............
3. Country................
4. State.............
5. Contact Address........
6. Telephone Number.......
7. Marital Status.........
8. Occupation.............
9. Age....................
10.Nest Of Kin..........
11.Zip Code.............
Congratulations once again.
Dr. Samson Bent
(Lottery Co-ordinator)

Wednesday, September 20, 2006

Internet connection in Zimbabwe shut down - if only in Nigeria too...

The internet connections in Zimbabwe are closed due to unpaid debt of the customer's of the government owned TelOne.

Now if this news only would have been for Nigeria, it would have reduced the spams in the inboxes by a lot.

Or wait .. I haven't received that many spams by all these Nigerian scammers for the past few days. Maybe some of them were in Zimbabwe then...

Sunday, July 30, 2006

Natwest Bank, London with a spammy email address offering millions for me...

After a long time offline, and only seeing stock spam (of which I WILL find the originator of spam, and do evil things to his/theirs emails), this felt at least different.

So NATWEST BANK PLC (will all capital letters) sends me email using walla.com email address, and sending the spam via terra.mx?
As good as all these people emailing from Central Bank of Nigeria using any free email service such as lycos, hotmail, or yahoo.

Hm ... so if I would have had such millions payments from Nigeria, shouldn't tehy have called me? Or how about a t least using your Natwest Bank PLC supplied email address, not using an email provider that I have yet not been seen used by anyone else than spammers?

Here ya go anyway, anyone want to receive these millions from UK? Free free to email these people.

I also love how they don't bother adding an address to this "bank". Of course London is so small, it's just as good as having a 34th Spammer cafe on 4th Street on West, Some Slum in Lagos outskirts, Lagos.

From: natwest_bank_plc@terra.com.mx
Date: July 25, 2549 BE 5:09:58 AM GMT+01:00
To: undisclosed-recipients: ;
Return-Path: natwest_bank_plc@terra.com.mx
[....]
Received: from terra.com.mx (xnmwebmail4.terra.com [66.231.227.74]) (authenticated user natwest_bank_plc!terramx)by xnmsmtp1.terra.com (Postfix) with ESMTP id 630692240E6; Tue, 25 Jul 2006 00:09:58 -0400 (EDT)
Message-Id:
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="_=__=_XaM3_.1153800598.2A.395783.42.19376.52.42.007.1847162469"
Received-Spf: none (xnmsmtp1.terra.com: 66.119.66.67 is neither permitted nor denied by domain of terra.com.mx) client-ip=66.119.66.67; envelope-from=natwest_bank_plc@terra.com.mx; helo=terra.com.mx;
X-Terra-Karma: 0%
X-Terra-Hash: 1eed97e6dabd2c7cacc7f2d8cf2409f8
X-Sensitivity: 3
X-Xam3-Api-Version: 4.1 (B108)
X-Senderip: 86.62.8.178
Original-Recipient: [my email]

ahmed@ahmedtest.net NATWEST INTERNATIONAL BANK PLC LONDON UNITED KINGDOM.
Tel: 447024014666
Tel: 447040111097

Dear Friend,
This is to notify you about the status of your fund right
now in our desk. After due vetting and evaluation of your
contract file, which The Ministry Of Finance Of Federal
Republic of Nigeria Forwarded and contracted us to see to
your immediate payment.
From our findings, you have been going through hard ways by
paying a lot of charges to see to the release of your fund,
which has been delayed. Please, from now henceforth stop
further communication with any correspondence from Nigeria.
You are not to pay any charges to receive your contract fund
anymore as you have meet up with the whole requirements.
Your representatives in Nigeria will tell you to still go
ahead with them but on your own risk.
The only thing required from you is to forward your
Non-Resident Clearance Form/Receipt to this office. The
Government of Nigeria has paid us for handling/processing of
your payment with other contractors. As soon as we receive
the form from you, We (NATWEST INTERNATIONAL BANK PLC, LONDON)
will effect your payment immediately.
Will you follow up our directives, your fund will reflect in
your account within seven working days from the day you we
receive the form from you. Do not respond to a ny
correspondence again but only to this offshore payment
office here in London if you're really the beneficiary and
want you contract fund to be released immediately.

Direct all message email address ID: natwest_bank_plc11@walla.com
Dr. Joshua Larry
Payment Coordinator
Natwest International Bank Plc.
London U.K

natwest_bank_plc11@walla.com