Lochers.com - underwear spammers with cmpgnr.com

From: info@lochers.com
Subject: Locher's New Darling Collection
Date: February 8, 2007 6:49:07 PM GMT+00:00
To: [my email]
Reply-To: Lochers_yyyvwv@cmpgnr.com
Return-Path:
Received: [...] from mta16br.cmpgnr.com (mta16br.cmpgnr.com [216.24.227.16]) by [isp] (Xserve/smtpin60/MantshX 4.0) with SMTP id l18Im31u005587for ; Thu, 08 Feb 2007 10:48:03 -0800 (PST)
Errors-To: gotb889308_888565_702191_931354833@cmpgnr.com
Message-Id: <1700222.1170960547062.KadaSegment.156.1@mta16br.cmpgnr.com>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_429433_18707296.1170960547062"
Bounces-To: somrandomnumbers@cmpgnr.com
X-Campaign: 889308.888565.702191.931354833
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Scanned: yes
Original-Recipient: [my email]

Just in time for Fashion Week in Paris, Locher's launches their new darling embroidery collection featuring tops embroidered with delicate flowers and "nasty sayings", (perfect for Valentine's Day, gift certificates also available).

The entire collection of 16 tops plus accessories is available online at http://www.lochers.com The photo shoot for this collection was shot by frequent Italian Vogue photographer Amedeo Volpe.
It would be surely nice to have you visit.
Bisous from Nicole

You are subscribed as [my email]. To unsubscribe please click here. (had a link to www.cmpgnr.com/ something)

Umh, what?
No, I have not subscribed to lochers.com. I'm not interested in women's underwear spamlist subscriptions. So let's see a bit further.

Domain Name.......... lochers.com
Creation Date........ 2004-06-10
Registration Date.... 2004-06-10
Expiry Date.......... 2007-06-10
Organisation Name.... Nicole Locher
Organisation Address. 188 rue championnet #122
Organisation Address.
Organisation Address. paris
Organisation Address. 75018
Organisation Address. TX
Organisation Address. FRANCE
Admin Name........... Nicole Locher
Admin Address........ 188 rue championnet #122
Admin Address........
Admin Address........ paris
Admin Address........ 75018
Admin Address........ TX
Admin Address........ FRANCE
Admin Email.......... unagidesign@yahoo.com
Admin Phone.......... +1.0698779484
Admin Fax............
Tech Name............ YahooDomains TechContact
Tech Address......... 701 First Ave.
Tech Address.........
Tech Address......... Sunnyvale
Tech Address......... 94089
Tech Address......... CA
Tech Address......... UNITED STATES
Tech Email........... domain.tech@YAHOO-INC.COM
Tech Phone........... +1.6198813096
Tech Fax.............
Name Server.......... yns1.yahoo.com
Name Server.......... yns2.yahoo.com

So wait ... Paris, TX, or Paris, France?
The address is invalid.
The phone number is invalid for at least being in France.

Second part, whois for this remove me-something part :

Registrant:
Got Corporation Inc.
685 Cathcart Street
Suite 300
Montreal, Quebec H3B 1M7
Canada
Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: CMPGNR.COM
Created on: 04-Oct-06
Expires on: 04-Oct-08
Last Updated on:

Administrative Contact:
Saibil, Jeremy it@gotcorp.com
Got Corporation Inc.
685 Cathcart Street
Suite 300
Montreal, Quebec H3B 1M7
Canada
5142820595 Fax -- 5142821908
Technical Contact:
Saibil, Jeremy it@gotcorp.com
Got Corporation Inc.
685 Cathcart Street
Suite 300
Montreal, Quebec H3B 1M7
Canada
5142820595 Fax -- 5142821908
Domain servers in listed order:
NS1.FST-DNS.ORG
NS2.FST-DNS.ORG
NS1.CAMPAIGNER.COM

Some companies don't just seem to get that faking that people would have subscribed to their spamlists is rude. Whatever rude would be in French.

French bank scam

Ah ah.
One more bank scam.
This time ah so European version.
Oh I'm a French bank this and that and I want to offer you 15 million UK pounds, just nevermind that my IP is Italy, and you want me to anser to a Polish email addy, not your work email address.
So we just found this random Gerard Stone that is a relative of yours so do you want to get all this free money?
Free money, sounds all good doesn't it?


X-Apparently-To: [my email] via 206.190.48.158; Wed, 07 Feb 2007 01:11:27 -0800
X-Originating-IP: [212.216.176.223] [that IP resides in Arese, Lombardia, Italy]
Return-Path:
Authentication-Results: mta332.mail.re4.yahoo.com from=virgilio.it; domainkeys=neutral (no sig)
Received: from 212.216.176.223 (EHLO vsmtp3.tin.it) (212.216.176.223) by mta332.mail.re4.yahoo.com with SMTP; Wed, 07 Feb 2007 01:11:22 -0800
Received: from pswm3.cp.tin.it (192.168.70.17) by vsmtp3.tin.it (7.2.072.1) id 45ACADE60045A30C; Wed, 7 Feb 2007 10:11:12 +0100
Message-ID: <1109b788a4a.b13_richard@virgilio.it>
Date: Wed, 7 Feb 2007 10:11:12 +0100 (GMT+01:00)
From: "Mr Richard"
Reply-to: bob_richard@o2.pl
Subject: From Richard
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: 86.62.6.162
Content-Length: 790

Dear,
Do accept my sincere apologies if my mail does not meet your
personal ethics.I introduce myself as Richard a staff in the accounts
management Section of a well-known bank here in France.One of our
foreign accounts with holding balance of £15,000,000(Fifteen Million
British Pounds) has been dormant and last operated in the past 5 years.
From my investigations and confirmations, the owner of this account is
a Foreigner by name Gerald Stone died on the 4th of January 2002 on a
planecrash in Birmingham faraway United Kingdom.Since then nobody has
done anything as regards the claiming of this moneyas he has no family
Member who is aware of the existence of either the account nor the
Funds.Information from the National Immigration also states that he was
single on entry into France.I have confidentially discussed this issue
with some of the bank officials and we have agreed to find a reliable
foreign partner to deal with. We thus propose to do business with you,
standing in as the next of kin of the deceased and have the funds
released to you after due processes have been followed.This transaction
is totally free of risk and troubles as the fund is Legitimate and does
not originate from drug, money laundry, terrorism or any othe rIllegal
act.On your interest, let me hear from you.
Regards,
Mr Richard

Private Urgent Message from Citibank

How urgent can it be? I don't even have an account at them.



The link went to http://www.citi.com.globalportal.id2508058396.cpurn.biz/app instead.

Of which whois :

Domain Name: CPURN.BIZ
Domain ID: D16251490-BIZ
Sponsoring Registrar: MONIKER ONLINE SERVICES, LLC
Sponsoring Registrar IANA ID: 228
Domain Status: clientDeleteProhibited
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Registrant ID: MONIKER344946
Registrant Name: hostmaster
Registrant Organization: Domain Park Limited
Registrant Address1: Vaea Street
Registrant Address2: Level 2, Lotemau Centre
Registrant City: Apia
Registrant State/Province: Samoa
Registrant Postal Code: 0815
Registrant Country: Samoa
Registrant Country Code: WS
Registrant Phone Number: +42.0603822657
Registrant Email: hostmaster@domainparkltd.com
Administrative Contact ID: MONIKER344946

Citibank's report fraudulent and suspicious emails instructions. Needless to say, they got some email ...

Mr John Michael - 419 once in a while

How weird. Mr Businessman who is now emailing me that he has stored my $ 750,000 that are ready for me .. is 1) using a hotmail address, not his work address, 2) my name is not in the To : field .. last time I checked my name wasn't "undisclosed-recipients", and 3) for some reason, the work email's spam filters didn't catch this. Oh, and his secretary has a walla.com email address instead of a professional one. Or is it maybe that the only time I have ever seen anyone use any walla.com email address is for professional African scammers?

From: jmmichael19@hotmail.com
Subject: COMPENSATION
Date: February 3, 2007 11:31:08 AM GMT+00:00
To: undisclosed-recipients: ;
Reply-To: jnmichael007@yahoo.com
Return-Path:
Received: [...]
Received: from hotmail.com ([65.54.162.47]) by bay0-omc3-s20.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Sat, 03 Feb 2007 03:31:12 -0800
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Sat, 03 Feb 2007 03:31:12 -0800
Received: from 65.54.162.200 by by108fd.bay108.hotmail.msn.com with HTTP; Sat, 03 Feb 2007 11:31:08 +0000 (GMT)
X-Originating-Ip: [196.29.120.70]
X-Sender: jmmichael19@hotmail.com
Message-Id:
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-Auditid: 1148853b-acc1abb00000638b-2b-45c47281fc09
X-Originating-Email: [jmmichael19@hotmail.com]
X-Brightmail-Tracker: AAAAAA==
Original-Recipient: [my email]
X-Originalarrivaltime: 03 Feb 2007 11:31:12.0417 (UTC) FILETIME=[CECE6110:01C74786]

Dear Friend,

I'm happy to inform you about my success in getting those Funds transferred under the cooperation of a new partner from Trinidad and Tobago. Presently I'm in Switzerland for investment Projects with my own share of the total sum. Meanwhile, I didn't forget your past efforts and attempts to assist me in transferring those funds despite that it failed us some how.

Now contact my confidential secretary, his name is Mr. George Okoye on this e-mail address:- secretary_sgeorge@walla.com ask him to send you the total of USD$750,000.00 which I kept for your compensation for all the past efforts and attempts to assist me in this matter in the past. I appreciated your efforts at that time very much. So feel free and get in touch with my secretary Mr. George Okoye and instruct him where to send the amount to you.

Please do let me know immediately you receive it so that we can share the joy after all the sufferness at that time. In the moment, I am very busy here because of the Investment projects which me and the new partner are having at hand. Finally, Remember that I had forwarded instruction to the secretary on your behalf to receive that money, so feel free to get in touch with Mr. George Okoye, he will send the amount to you without any delay.

Regards,
Mr. John Michael.

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

Alex Rodrigez - how long until he gets a Wikipedia entry?

Someone found be searching for Alex Rodrigez some time ago.
Interesting.
Also interesting to find a blog with the same interests than mine, where of course I found some sites of this Alex Rodrigez again. (Except what I have noticed Mr Rodrigez more for is Mac software .. not just Office).
Since he seems to be quite famous .. I wonder how long before someone bothers to make a wikipedia entry for him?

Russian "Euro" casino, Eucas.org ..

Now I must admit I'm not used to casino ads. I've been getting them slowly every now and then .. and I kind of feel I shouldn't bother to give these ones a label - that would prove they are worth something. Maybe the casino owners weren't or aren't that bad themselves? But they send spam. Or pay someone else to send spam. And that is enough to really annoy me.

Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs114525qbf;
Fri, 2 Feb 2007 23:07:39 -0800 (PST)
Received: by 10.35.84.16 with SMTP id m16mr8501297pyl.1170486459919;
Fri, 02 Feb 2007 23:07:39 -0800 (PST)
Return-Path:
Received: from c-24-125-1-11.hsd1.va.comcast.net (c-24-125-1-11.hsd1.va.comcast.net [24.125.1.11])
by isp with ESMTP id 6si20143323nzn.2007.02.02.23.07.39;
Fri, 02 Feb 2007 23:07:39 -0800 (PST)
Received-SPF: pass (isp: domain of hslohnu@comcast.net designates 24.125.1.11 as permitted sender)
From: "Kasparov Chessmate"
To: [my email]
Subject: Fun and make money.
Date: Sat, 3 Feb 2007 02:07:38 +0500
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0000_01C74738.14045F40"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Thread-Index: AcdHOBQEyuj3lA1ISnOABPe4yNeWTA==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
Message-Id:

Only from the most noble of all
casinos you could except such a Regal gift:

300% Bonus on your First Deposit!!!

Deposit 100 €/$ and Play with 400 €/$!!!
And on top of that, a service at such a
level you would not find in the best
Royal Families of Europe.

<<<<< Come and play at Royal VIP Casino!!! >>>>> then link

Of where the link goes to we get with whois :

Domain ID:D138238728-LROR
Domain Name:EUCAS.ORG
Created On:26-Jan-2007 12:46:22 UTC
Last Updated On:02-Feb-2007 19:15:56 UTC
Expiration Date:26-Jan-2008 12:46:22 UTC
Sponsoring Registrar:OnlineNIC Inc. (R64-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:ONLC-2572694-4
Registrant Name:Sergey Ivanov
Registrant Organization:Personal Domens
Registrant Street1:Russia, Mikhailova st, 22-22
Registrant Street2:
Registrant Street3:
Registrant City:Moscow
Registrant State/Province:MO
Registrant Postal Code:109456
Registrant Country:RU
Registrant Phone:+7.4955184040
Registrant Phone Ext.:
Registrant FAX:+7.4955184040
Registrant FAX Ext.:
Registrant Email:maddreams2005@yandex.ru
Admin ID:ONLC-2572694-1
Admin Name:Sergey Ivanov
Admin Organization:Personal Domens
Admin Street1:Russia, Mikhailova st, 22-22
Admin Street2:
Admin Street3:
Admin City:Moscow
Admin State/Province:MO
Admin Postal Code:109456
Admin Country:RU
Admin Phone:+7.4955184040
Admin Phone Ext.:
Admin FAX:+7.4955184040
Admin FAX Ext.:
Admin Email:maddreams2005@yandex.ru
Tech ID:ONLC-2572694-2
Tech Name:Sergey Ivanov
Tech Organization:Personal Domens
Tech Street1:Russia, Mikhailova st, 22-22
Tech Street2:
Tech Street3:
Tech City:Moscow
Tech State/Province:MO
Tech Postal Code:109456
Tech Country:RU
Tech Phone:+7.4955184040
Tech Phone Ext.:
Tech FAX:+7.4955184040
Tech FAX Ext.:
Tech Email:maddreams2005@yandex.ru
Name Server:NS2.NSSERVISRU.RU
Name Server:NS3.NSSERVISRU.RU

Eucas? The last time I checked, Russia wasn't part of EU ...
And the name Sergey Ivanov is a bit boring but at least we get a few other spam related stuff with google for it.

Another retro sex spam - herbal-kings.com

Another retro sexual enhancement spam ...
The text is so bad .. really, do any guys believe claims like that??
(For once without full headers since for once I am entertained just by the stupidity of the texts)

From: Haydon
To: [my email]
Date: Jan 6, 2007 8:22 PM
Subject: FWD[82]:

Our Penis Enlargement Pills Will Expand, Lengthen And Enlarge Your Penis Up to 3+ Inches. 100% Satisfaction Guaranteed! Or Your Money Back!

Our team of expert Doctors have spent years developing a product that will safely and effectively add length, width, and strength to any man's penis. The work has created a product that has been shown to significantly increase penis length, provide stronger erections, improve sexual endurance, and increase ejaculation volume. ManXL has been labeled a "Medical Breakthrough" with over 1,500,000 bottles sold worldwide. ManXL is the only penis enlargement pill that has been manufactured in a FDA Approved laboratory.

click here >>>>> (with link)

Ha. Now if this ManXL was a medical breakthrough, you'd think it would have become as famous as all these viagras and cialis. And it probably would have been sold and produced by a pharmaceutical company, not by some herbal-kings.com ...
Hm.. also, if it was approved by FDA, why would the registrants be located in Mexico?

Whois :

Referral URL: http://www.joker.com
domain: herbal-kings.com
owner: Eduardo Macias
organization: TOLMEN STAR ENTERPRISES LTD
email: admin@querendamx.com
address: Querenda No. 353, Fracc. Bosque Camelinas
city: Michoacan
postal-code: 58290
country: MX
phone: +52.443655187
fax: +52.443655187
admin-c: CCOM-477954 admin@querendamx.com
tech-c: CCOM-477954 admin@querendamx.com
billing-c: CCOM-477954 admin@querendamx.com
nserver: ns1.main-dns3.com 59.188.23.77
nserver: ns2.main-dns3.com 218.188.64.134
nserver: ns3.main-dns3.com 210.245.160.139
status: lock
created: 2007-01-06 05:20:40 UTC
modified: 2007-01-23 07:23:16 UTC
expires: 2008-01-06 05:20:40 UTC

contact-hdl: CCOM-477954
person: Eduardo Macias
organization: TOLMEN STAR ENTERPRISES LTD
email: admin@querendamx.com
address: Querenda No. 353, Fracc. Bosque Camelinas
city: Michoacan
postal-code: 58290
country: MX
phone: +52.443655187

Oh wait - the best part - their testimonials :

I've played on and off with pumps, weights, and exercises for the last few years and have never gained one centimeter. I recently began ManXL and was pleasantly surprised to see that this product actually works. I have been on the product 2 months now and I have already gained 1 inch. Its fantastic! My new girlfriend is really impressed with my size and stamina.
J.C. Raleigh, NC

This is going to sound weird but I was never really embarrassed of my penis size in front of my wife. However, I always wished that I was bigger and I was embarrassed of my size when I was in the locker room. I felt that guys would look at me and secretly make fun of me. With ManXL I have gained 1.5 inches and appear quite thick when flaccid. I am no longer embarrassed in the locker room and I feel that I am a solid size now. My wife also loves my new size.
P.J. Holly, MI

Men are going to stand up and clap their hands at these penis enlargement capsules. It has produced remarkable results that have never been seen before with NO negative side effects. These penis enlargement capsules offer women what they really want, more to play with! Those extra inches really do make the difference!
AngelStar - PornStar

Retro viagra and cialis spam - Progenyid.com

They still spam for viagra?
Amazing but they do.
Getting some of these creative spelling viagra-cialis-spams makes me feel retro fuzzy, just as if I was using hotmail 12 years ago.
Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs22459qbf;
Wed, 31 Jan 2007 09:38:25 -0800 (PST)
Received: by 10.49.20.5 with SMTP id x5mr2879040nfi.1170265105219;
Wed, 31 Jan 2007 09:38:25 -0800 (PST)
Return-Path:
Received: from landheim-schondorf.de (p54AAEBB6.dip.t-dialin.net [84.170.235.182])
by isp with SMTP id y23si6893734nfb.2007.01.31.09.38.24;
Wed, 31 Jan 2007 09:38:25 -0800 (PST)
Received-SPF: neutral (isp: 84.170.235.182 is neither permitted nor denied by best guess record for domain of manyasum@iapdatacom.net)
Message-ID: <01c7455e$9934b880$6401a8c0@pentium4>
Reply-To: "Eutimio Pritt"
From: "Eutimio Pritt"
To: "Katsuro Morello" [my email]
Subject: Re: VIAcihGRA
Date: Wed, 31 Jan 2007 18:38:20 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106

Good day,

Viav_gra $1, 80
Ciav_lis $3, 00
Leviv_tra $3, 35

http://www.progenyid!.com ( Important Remove "!" )

--
You believe I didnt do it, then? said Harry, concealing with
difficulty the rush of gratitude he felt at Hagrids words.
Course I do, Hagrid grunted. Yeh say it wasn you, an I believe

So what do we get with good whois? At least the registrants phone number is invalid .. which probably should matter to dotregistrar.com if they weren't bulk domin registrants.

Referral URL: http://www.dotregistrar.com
Registrant:
arnette (PROGENYID-COM-DOM)
gibson
4271 Nw 5th
Plantation, FL 33317
USA
+332.7188767449
arnettegibson@yahoo.com
Domain Name: PROGENYID.COM
Administrative Contact:
arnette arnettegibson@yahoo.com
4271 Nw 5th
Plantation, FL 33317
USA
+332.7188767449
Technical Contact, Zone Contact:
arnette arnettegibson@yahoo.com
4271 Nw 5th
Plantation, FL 33317
USA
+332.7188767449
Record last updated on 19-Jan-2007.
Record expires on 10-Jan-2008.
Record created on 10-Jan-2007.
Domain servers in listed order:
Name Server: in.indusfk.com
Name Server: fk.indusfk.com

Exquisitereplicas

I never realized the fake watches was such a big business. I considered it to be a thing of the past, a thing of the wannabe beach lions beach rolexes from the 1980s .. but they still seem to exist, and they seem to be getting more numerous. First the beautifulswiss thing, now this.
This is getting a bit boring...

Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs129766qbf;
Sat, 3 Feb 2007 13:26:23 -0800 (PST)
Received: by 10.49.42.5 with SMTP id u5mr182529nfj.1170537983204;
Sat, 03 Feb 2007 13:26:23 -0800 (PST)
Return-Path:
Received: from localhost.localdomain (cpe-66-68-88-166.austin.res.rr.com [66.68.88.166])
by isp with SMTP id o45si20601923nfa.2007.02.03.13.26.18;
Sat, 03 Feb 2007 13:26:23 -0800 (PST)
Received-SPF: neutral (isp: 66.68.88.166 is neither permitted nor denied by best guess record for domain of iramey@mailbox.sk)
Message-ID: <5ba501c747d9$b6afc8b7$2621bc89@mailbox.sk>
From: Bvlgari Watches
To: [my email]
Subject: Exquisite Replica
Date: Sun, 04 Feb 2007 00:20:33 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0000_3D3E90D7.57FB7D65"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express V6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

QUALITY REPLICAS!

Rolex Watches
Cartier Watches
Breitling Watches
Bvlgari Watches
Omega Watches
Tag Heuer Watches
Officine Panerai Watches
A.Lange & Sohne Watches
Franck Muller Watches
Chopard watches
Hermes watches
Jacob & Co. watches

Get 25% off when buying 2 watches!

VISIT OUR ONLINE SHOP! with the link ...

Of which some whois and we have the registrant :

Domain Name: newdsannysongg.com
Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET
Registrant Contact
Name: paul gregoire
Address: 175 Montreal Road
304
vanier, on K1L 6E4
CA
Email Address: paulgregoire@coldmail.ca
Phone Number: (613)255-2162
Administrative Contact
Name: paul gregoire
Address: 175 Montreal Road
304
vanier, on K1L 6E4
CA
Email Address: paulgregoire@coldmail.ca
Phone Number: (613)255-2162
Technical Contact
Name: paul gregoire
Address: 175 Montreal Road
304
vanier, on K1L 6E4
CA
Email Address: paulgregoire@coldmail.ca
Phone Number: (613)255-2162
Record Created on........ 2007-02-01 17:15:16.057
Expire on................ 2008-02-01 17:25:04.000
Domain servers in listed order:
ns1.hairyolddns.com
ns2.hairyolddns.com

Needless to say .. I wouldn't buy from these if I was in the market for a watch.
First - the domain exists for the past 3 days.
Second - and biggest : these people could get sued by the copyright country of any civilized and semicivilized country, probably including even Romania.
Third - wtf is it with the routings of this email? Austin, TX, or Slovakia .. for a Canadian registered site? sure. Now if only I would bother to forward the details to Bvlgari and all these other companies that would be really interested in infringing their name ...

And the first Microsoft Vista Scammers are here ..

Microsoft Vista pirate scammers ... now that didn't take that long that these would start to appear, did it?

Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs140932qbf;
Sun, 4 Feb 2007 06:48:42 -0800 (PST)
Received: by 10.90.34.3 with SMTP id h3mr7634002agh.1170600522592;
Sun, 04 Feb 2007 06:48:42 -0800 (PST)
Return-Path:
Received: from 200.209.221.130 ([200.209.221.130])
by [isp] with SMTP id 8si7572771agd.2007.02.04.06.48.36;
Sun, 04 Feb 2007 06:48:42 -0800 (PST)
Received-SPF: neutral (isp: 200.209.221.130 is neither permitted nor denied by best guess record for domain of matkueuo@vinorumcodex.com)
From: "Jackie Mueller"
Reply-To: "Jackie Mueller"
Message-ID: <9700665285.3600826893@vinorumcodex.com>
Date: Sun, 4 Feb 2007 08:51:01 -0600
To: [my email]
Subject: Windows Vista Business ready to download
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

The most comprehensive edition of Windows Vista, Vista Business Upgrade (DVD-ROM) is the first operating system that combines all of the advanced infrastructure features of a business-focused operating system, all of the management and efficiency features of a mobility-focused operating system, and all of the digital entertainment features of a consumer-focused operating system. For the person who wants one operating system that is great for working from home, working on the road, and for entertainment, Vista Business is a no-compromise operating system that lets you have it all. Windows Vista Business contains a number of new features, the most notable of which are: Windows Vista Business combines all the features of a business-focused operating system, all the efficiency features of a mobility-focused operating system, and all of the digital entertainment features of a consumer-focused operating system; Remotely connect to business networks; Windows BitLocker Drive Encryptiption provides improve levels of protection against theft for your important business data whether you are at home, on the road, or in the office; Delivers all of the entertainment features available in Vista Home Premium; includes everything you need to enjoy the latest in digital photography, music, movies, analog TV, or even HDTV; Upgrade from your current edition of Microsoft Windows XP or Windows 2000 (including Windows XP Professional, Windows XP Home, Windows XP Media Center, Windows XP Tablet PC, Windows XP Professional x64, Windows 2000)
Windows Vista Business Upgrade (DVD-ROM)
Retail Price $299.00
Our Price $79.95
You save $219.05
http://juvenileoccupeble.org
Please note, that there will be more special offers available for our constant customers. Every effort has been made to ensure the accuracy of all information contained herein. DS Team makes no warranty expressed or implied with respect to accuracy of the information, including price, product editorials or product specifications. Product and manufacturer names are used only for the purpose of identification. We appreciate your cooperation with us and we'll be glad to see you as our clients in the future.

Microsoft for surely will like this. So I forwarded their piracy department the whole shabang, and meanwhile made some tracing ... So if the registrant details would be correct, these scammers would be in Bulgaria.

Domain ID:D138853446-LROR
Domain Name:JUVENILEOCCUPEBLE.ORG
Created On:03-Feb-2007 21:36:39 UTC
Last Updated On:03-Feb-2007 21:36:42 UTC
Expiration Date:03-Feb-2008 21:36:39 UTC
Sponsoring Registrar:Direct Information PVT Ltd dba PublicDomainRegistry.com (R27-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:DI_5117152
Registrant Name:Manny Pull
Registrant Organization:Manny Pull
Registrant Street1:1u second st
Registrant Street2:
Registrant Street3:
Registrant City:Sophia
Registrant State/Province:
Registrant Postal Code:B-1050
Registrant Country:BG
Registrant Phone:+032.32653777
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:geraworkman@inbox.com
Admin ID:DI_5117152
Admin Name:Manny Pull
Admin Organization:Manny Pull
Admin Street1:1u second st
Admin Street2:
Admin Street3:
Admin City:Sophia
Admin State/Province:
Admin Postal Code:B-1050
Admin Country:BG
Admin Phone:+032.32653777
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:geraworkman@inbox.com
Tech ID:DI_5117152
Tech Name:Manny Pull
Tech Organization:Manny Pull
Tech Street1:1u second st
Tech Street2:
Tech Street3:
Tech City:Sophia
Tech State/Province:
Tech Postal Code:B-1050
Tech Country:BG
Tech Phone:+032.32653777
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:geraworkman@inbox.com
Name Server:NS1.KROLOBUL.COM
Name Server:NS2.KROLOBUL.COM
Name Server:NS3.KROLOBUL.COM
Name Server:NS4.KROLOBUL.COM
Name Server:NS5.KROLOBUL.COM

Another peculiarity that probably should be taken into account .. the URL redirects after clicking on it to http://www.pozdravloem.com/. Of which we get one of our favorite spammer and scammer bulk domain registration services, pacnames.org, and some scammer who cares for his privacy (as you see the fancy email).
Needless to say ... Microsoft Windows is not legally sold in downloadable format anywhere on this planet.

Domain name: POZDRAVLOEM.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: (Private Contact) (pws.ad952b82efb7219@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Administrative, Technical Contact: (Private Contact) (pws.ad952b82efb7219@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Name Server: NS1.SRUL5.COM
Name Server: NS2.SRUL5.COM
Domain creation date: 2007-01-19 21:44:58.0
Domain expiration date: 2008-01-20 02:58:07.0

Amina Togar .. another African millionaire?

Let me guess...
Another poor millionaire at a concentration camp with fast speed internet access, offering me millions since I am such a reliable and honest person, whom they found in the internet and trust me more than they would trust their mother...

Oh, and wait - this Liberian guy/gal who is in Senegal has for some reason an Italian IP address, close to Bergamo in the far Northern Italy, and a bit too good English.

From: amina4togar@yahoo.com
Subject: Greetings From Africa [random letters]
Date: February 4, 2007 [some time]
To: [my email]
Return-Path:
Received: [..]
Received: from mx4.hotmail.com ([196.207.197.65]) by [isp] (Xserve/smtpin18/MantshX 4.0) with ESMTP id l14FRx9S022174for ; Sun, 04 Feb 2007 10:06:40 -0800 (PST)
Message-Id: <200702041806.l14FRx9S022174@isp>
X-Mimeole: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
Content-Type: text/plain
X-Msmail-Priority: Normal
X-Spam-Flag: Suspected Spam
Original-Recipient: [email]

Hello,

I am writing you from Africa and I know you will be surprised to receieve a mail from a stranger....Please, don't be surprised...I got your contact from peoples search and decided to share an important issue with you...My name is Amina Togar and I am originally from Liberia, but do reside in Senegal...I am single, 26 years old and I would like you to spare me your time to know and discuss an important issue with you , which in my opinion will be of interest to you and hopefully, we would get to know from there....

Please confirm the receipt of this short mail and I will get back to you with a more detailed mail about myself and what I actually want to share with you....

You may reach me on yahoo messenger with the following id; amina4togar@yahoo.com or you can reply to the email above...

Thanks for your time and hope to hear from you soon...

Amina...