Monday, May 22, 2006

Sensattion'alll revolution #2

Spam hunting for Sensatttional revolution in medicine # 2


X-Gmail-Received: 38f6828ae5da9d57dd80f414d77f064be6d79ed5
Delivered-To: [my email]
Received: by 10.70.69.11 with SMTP id r11cs321099wxa;
Mon, 22 May 2006 12:30:08 -0700 (PDT)
Received: by 10.78.51.16 with SMTP id y16mr1200803huy;
Mon, 22 May 2006 12:30:07 -0700 (PDT)
Return-Path:
Received: from 72.14.215.27 ([210.218.232.119])
by mx.gmail.com with SMTP id 37si1295812hub.2006.05.22.12.30.00;
Mon, 22 May 2006 12:30:07 -0700 (PDT)
Received-SPF: neutral (gmail.com: 210.218.232.119 is neither permitted nor denied by best guess record for domain of UYRDBWEFVTYN@csaw.com)
Received: from draftsmanpeternixon.net [76.112.255.149] (helo=composition.vergenet.net)
by smtp0.cistron.nl with esmtp (beach)
id 5AQ6iH-2992CR-00; Mon, 22 May 2006 15:29:59 -0500
Date: Mon, 22 May 2006 18:29:59 -0200
Message-ID: <6834B67C.3929107@larynx.peternixon.net>
From: "Anderson Lynn"
To: [another email address]
Subject: Fwd: REPLY
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5) Gecko/20031013 Thunderbird/0.3
X-Accept-Language: en-us, en


-S'ensationall revoolution in m'edicine!

-E'n'l'a'r'g'e your p''enis up to 10 cm or up to 4 inches!

-It's herbal solution what hasn't side effect, but has 100% guaranted results!

-Don't lose your chance and but know wihtout doubts, you will be impressed with results!

Clisk here: http://associationexchange.info



bitterroot thatch homology journey regretful nolo irresolution armhole dreamboat amethystine
curd scabious archetype polymorph elder postulate grater dosimeter sectarian
complexion muzak concurred crummy grizzly snuggle balzac ticklish whitetail embarrass sunbonnet
kiss raze baleful salvatore fiasco mattson speed lost
portia evaluate staid longtime textile margo duplex afresh
behind congressman incise bifurcate mosque testes disquietude pulitzer




Domain Name:ASSOCIATIONEXCHANGE.INFO
Created On:20-May-2006 21:47:12 UTC
Last Updated On:21-May-2006 08:45:34 UTC
Expiration Date:20-May-2007 21:47:12 UTC
Sponsoring Registrar:RegisterFly.com, Inc. (R318-LRMS)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT RENEW PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:DI_3042873
Registrant Name:emmanuel muller
Registrant Organization:emmanuel
Registrant Street1:rue des colimacons 15
Registrant Street2:
Registrant Street3:
Registrant City:clermont
Registrant State/Province:NA
Registrant Postal Code:60600
Registrant Country:FR
Registrant Phone:+1.33344503520
Registrant Phone Ext.:
Registrant FAX:+1.33344503520
Registrant FAX Ext.:
Registrant Email:muller@perovo.net
Admin ID:DI_3042873
Admin Name:emmanuel muller
Admin Organization:emmanuel
Admin Street1:rue des colimacons 15
Admin Street2:
Admin Street3:
Admin City:clermont
Admin State/Province:NA
Admin Postal Code:60600
Admin Country:FR
Admin Phone:+1.33344503520
Admin Phone Ext.:
Admin FAX:+1.33344503520
Admin FAX Ext.:
Admin Email:muller@perovo.net
Billing ID:DI_3042873
Billing Name:emmanuel muller
Billing Organization:emmanuel
Billing Street1:rue des colimacons 15
Billing Street2:
Billing Street3:
Billing City:clermont
Billing State/Province:NA
Billing Postal Code:60600
Billing Country:FR
Billing Phone:+1.33344503520
Billing Phone Ext.:
Billing FAX:+1.33344503520
Billing FAX Ext.:
Billing Email:muller@perovo.net
Tech ID:DI_3042873
Tech Name:emmanuel muller
Tech Organization:emmanuel
Tech Street1:rue des colimacons 15
Tech Street2:
Tech Street3:
Tech City:clermont
Tech State/Province:NA
Tech Postal Code:60600
Tech Country:FR
Tech Phone:+1.33344503520
Tech Phone Ext.:
Tech FAX:+1.33344503520
Tech FAX Ext.:
Tech Email:muller@perovo.net
Name Server:DNS1.REGISTERFLY.COM
Name Server:DNS2.REGISTERFLY.COM
Name Server:DNS3.REGISTERFLY.COM


Which gives us back to the registerfly and the sensatttional revolution in medicine #1

- same, not valid registrar details as in the #1.
Posted by @ No comments:
Labels: ,

Bookmyname.com again ....

X-Gmail-Received: 57e23de077f925ef264ad7e5ad55d3547ad7c76d
Delivered-To: [my email]
Received: by 10.70.69.11 with SMTP id r11cs315277wxa;
Mon, 22 May 2006 10:16:11 -0700 (PDT)
Received: by 10.36.75.6 with SMTP id x6mr5715619nza;
Mon, 22 May 2006 10:16:10 -0700 (PDT)
Return-Path:
Received: from interbusiness.it (69-171-233-239.clspco.adelphia.net [69.171.233.239])
by mx.gmail.com with SMTP id 16si1855077nzo.2006.05.22.10.16.10;
Mon, 22 May 2006 10:16:10 -0700 (PDT)
Received-SPF: neutral (gmail.com: 69.171.233.239 is neither permitted nor denied by domain of cowlmar@interbusiness.it)
Message-ID: <000001c67dc3$657be170$5381a8c0@fht24>
Reply-To: "Marissa Cowley"
From: "Marissa Cowley"
To: [my email]
Subject: Re: test VvtAGGRA
Date: Mon, 22 May 2006 10:16:00 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C67D88.B91D0970"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106

This is a multi-part message in MIME format.

------=_NextPart_000_0001_01C67D88.B91D0970
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi,
=20
L E V / T R A
M E R / D / A
S O M ^
P R O Z ^ C
X ^ N A X
V / A G R A
V A L / U M
A M B / E N
C / A L / S
=20
http://www.bunotacke.com
=20
=20
=20
=20
=20
below because of the overhang of the cliff, nor from further off because
it was so small that it looked like a dark crack and no more. It was not
a cave and was open to the sky above; but at its inner end a flat wall=20
rose up that in the lower I part, close to the ground, was as smooth and
upright as masons work, but without a joint or crevice to be seen.=20
No sign was there of post or lintel or threshold, nor any sign of=20


------=_NextPart_000_0001_01C67D88.B91D0970
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable


L E V / T R A

M E R / D / A

S O M ^

P R O Z ^ C

X ^ N A X

V / A G R A

V A L / U M

A M B / E N

C / A L / S
 

=
 

 

 

 

 

below because of the overhang of the =
cliff, nor from further off because
it was so small that it looked =
like a dark crack and no more. It was not
a cave and was open to the =
sky above; but at its inner end a flat wall
rose up that in the =
lower I part, close to the ground, was as smooth and
upright as =
masons work, but without a joint or crevice to be seen.
No sign =
was there of post or lintel or threshold, nor any sign of =


------=_NextPart_000_0001_01C67D88.B91D0970--

#########

Gives

Domain Name : bunotacke.com (BUNOTA2-BMN-DOM)
Registrar : BookMyName
Whois Server : whois.bookmyname.com
Referral URL : https://www.bookmyname.com

Registrant / Admin Contact :
PERSON
David FORMAN (FORMAN6-BMN-PE)

73-15 196th St

11366 Fresh Meadows
UNITED STATES NY
phone : 7182175470
fax :
e-mail : lameisat@yahoo.com


Billing Contact :
PERSON
David FORMAN (FORMAN6-BMN-PE)

73-15 196th St

11366 Fresh Meadows
UNITED STATES NY
phone : 7182175470
fax :
e-mail : lameisat@yahoo.com


Technical Contact :
PERSON
David FORMAN (FORMAN6-BMN-PE)

73-15 196th St

11366 Fresh Meadows
UNITED STATES NY
phone : 7182175470
fax :
e-mail : lameisat@yahoo.com


Domain servers :
ns0.anothegisa.com (NAC230-BMN-HST)

ns0.sigumebersi.com (NSC202-BMN-HST)

Created on 05/20/2006 17:00:03
Updated on 05/21/2006 10:19:21
Expires on 05/20/2007 13:00:03

Our friend bookmyname gets some mail again ...
Posted by @ No comments:
Labels: ,

Sensatttttionnnaaalll revolution in medicine with typos, #1

Of the kind that I was annoyed by earlier.
Of the billion different ways to typo sensational revolution in medicine.

Here we go, let's hunt them back one by one.

X-Apparently-To: [my email address] via 206.190.48.153; Mon, 22 May 2006 12:05:13 -0700
X-YahooFilteredBulk: 70.127.155.110
X-Originating-IP: [70.127.155.110]
Return-Path:
Authentication-Results: mta306.mail.scd.yahoo.com from=messe-duesseldorf.de; domainkeys=neutral (no sig)
Received: from 70.127.155.110 (HELO 110-155.127-70.tampabay.res.rr.com) (70.127.155.110) by mta306.mail.scd.yahoo.com with SMTP; Mon, 22 May 2006 12:05:11 -0700
Received: from micro.webhost8.alterusa.com id CFB67284DE; Mon, 22 May 2006 18:00:16 -0200
Received: by desultory.webhost1.starnetusa.net (Postfix, from userid 308) id CFB63724DE; Mon, 22 May 2006 21:03:16 +0100
Date: Tue, 23 May 2006 02:03:16 +0600
Message-Id: <21041130090241.CFB3859DE@age.starnetusa.net>
From: "Brady Carr" Add to Address Book Add Mobile Alert
To: [another email address showing here]
Subject: Order Delivery
Content-Length: 749
-S'ensationall revoolution in m'edicine!

-E'n'l'a'r'g'e your p''enis up to 10 cm or up to 4 inches!

-It's herbal solution what hasn't side effect, but has 100% guaranted
results!

-Don't lose your chance and but know wihtout doubts, you will be
impressed with results!

Clisk here: http://yaoph.info


chariot convair pitchfork bullock taos sake rectify nine chou christy
propylene scapegoat brindisi deplore emit franchise bluebird silty tic
spin mathews field energy pottery chemisorption transverse freetown
anhydrite apparent census
cagey knickerbocker vita somers supply postpone aspire chosen
gretchen centerpiece coercion dragnet rebuke interception thiocyanate
bombard
caveman fin rotc ink sculptor staircase switchboard sextuple




Of which we can find out the following :

Domain ID:D13489530-LRMS
Domain Name:YAOPH.INFO
Created On:20-May-2006 22:14:42 UTC
Last Updated On:21-May-2006 07:52:05 UTC
Expiration Date:20-May-2007 22:14:42 UTC
Sponsoring Registrar:RegisterFly.com, Inc. (R318-LRMS)
Status:CLIENT DELETE PROHIBITED
Status:CLIENT RENEW PROHIBITED
Status:CLIENT TRANSFER PROHIBITED
Status:CLIENT UPDATE PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:DI_3042873
Registrant Name:emmanuel muller
Registrant Organization:emmanuel
Registrant Street1:rue des colimacons 15
Registrant Street2:
Registrant Street3:
Registrant City:clermont
Registrant State/Province:NA
Registrant Postal Code:60600
Registrant Country:FR
Registrant Phone:+1.33344503520
Registrant Phone Ext.:
Registrant FAX:+1.33344503520
Registrant FAX Ext.:
Registrant Email: muller@perovo.net
Admin ID:DI_3042873
Admin Name:emmanuel muller
Admin Organization:emmanuel
Admin Street1:rue des colimacons 15
Admin Street2:
Admin Street3:
Admin City:clermont
Admin State/Province:NA
Admin Postal Code:60600
Admin Country:FR
Admin Phone:+1.33344503520
Admin Phone Ext.:
Admin FAX:+1.33344503520
Admin FAX Ext.:
Admin Email: muller@perovo.net
Billing ID:DI_3042873
Billing Name:emmanuel muller
Billing Organization:emmanuel
Billing Street1:rue des colimacons 15
Billing Street2:
Billing Street3:
Billing City:clermont
Billing State/Province:NA
Billing Postal Code:60600
Billing Country:FR
Billing Phone:+1.33344503520
Billing Phone Ext.:
Billing FAX:+1.33344503520
Billing FAX Ext.:
Billing Email: muller@perovo.net
Tech ID:DI_3042873
Tech Name:emmanuel muller
Tech Organization:emmanuel
Tech Street1:rue des colimacons 15
Tech Street2:
Tech Street3:
Tech City:clermont
Tech State/Province:NA
Tech Postal Code:60600
Tech Country:FR
Tech Phone:+1.33344503520
Tech Phone Ext.:
Tech FAX:+1.33344503520
Tech FAX Ext.:
Tech Email: muller@perovo.net
Name Server:DNS1.REGISTERFLY.COM
Name Server:DNS2.REGISTERFLY.COM
Name Server:DNS3.REGISTERFLY.COM


Of which ...

http://registerfly.com/ shows the following ... bulk registrations - "Bulk registrations. Search and register up to 300 names at once
Bulk Transfers - Transfer up to 100 names at once
Bulk renewals - Renew a single, multiple or all of your names at once" - now please someone come up with ONE legitimate reason for bulk registrations? Apart of spam, I can't find any, not a single reasson.


Well, as they promise the following
"We provide you your own unique spam-filtered email address. We scrub and spam/virus filter all emails sent to your Spam Filtered email address" the least we could expect from them is to not host sites that send me spam.

The minimum we can come up with the domain registration details is the following:

- the phone number is not valid. It is not a valid phone number for nor USA neither France.
- the address is not valid. Again a confusion by registrant about the country they were residing in.
- email address MAY be valid but it's on a Russian site, which makes both the phone and physical address details even less affidable.

part #2
Posted by @ No comments:
Labels: , ,

How to chase spam

A great simple how to chase spam instructions.

Unfortunately I haven't found any good spam recently, it's all this sensattionnal revoluttttion in medicine with more typoes than I have ever seen. Maybe 120 different versions of that viagra and related spam in the past 2 weeks - who knows, maybe I get bored enough to actually start to hunt these rrrr'e"vvvolutTTiiioonal pe0pl3. Stay tuned.
Posted by @ No comments:
Labels: ,
Subscribe to: Posts (Atom)