Subject: What does the Bible say about homosexuality?

From: Jan Grimm [akstcadamsmotorcompanymnsdgs@adamsmotorcompany.com]
Subject: What does the Bible say about homosexuality?
Date: November 5, 2007 6:02:13 PM GMT+00:00
To: [someone else's email]

Save money and buy your prescription*s online

press right here

them to work immediately.
learned by those

Oh, what a disappointment. For once at least an interesting title. This is really such a disappointment (even if I would not care about religion). With this headline it's such a loser solution to have 2 lines of meaningless text and a link to a geocities homepage.

At least you could have been selling discounted and counterfeit Bibles or something.

Well well. For a miracle a forward of that link was still valid.
Canadian pharmacy, eh?

Domain Name: IMYLATEYNO.COM
Registrar: SCHLUND+PARTNER AG
Whois Server: whois.schlund.info
Referral URL: http://REGISTRAR.SCHLUND.INFO
Name Server: NS2.POLACREPOX.COM

registrant-firstname: Mark
registrant-lastname: Kinevan
registrant-street1: 7844 Troy Hills Ln
registrant-pcode: 32256
registrant-state: FL
registrant-city: Jacksonville
registrant-ccode: US
registrant-phone: +1.9045380494
registrant-email: motorbus@tokyo.com

tech-c-firstname: Hostmaster
tech-c-lastname: ONEANDONE
tech-c-organization: 1&1 Internet Inc.
tech-c-street1: 701 Lee Rd.
tech-c-street2: Suite 300
tech-c-pcode: 19087
tech-c-state: PA
tech-c-city: Chesterbrook
tech-c-ccode: US
tech-c-phone: +1.8774612631
tech-c-fax: +1.6105601501
tech-c-email: hostmaster@1and1.com

Schlund.info gets a few hits on google. The registrant itself is based in Germany, despite a few fishy details (Registrant ID:C5261-LRMS, schlund.de, but referral etc details missing) schlund itself won't get a tag of its own until I get a few new and annoying spams from them again. Which I hope won' happen anytime soon.

The next big Chinese version of Alex Rodrigez?

From: Toni Bernal [flames102587@yahoo.com]
Subject: Window
Date: November 8, 2007 7:42:37 AM GMT+00:00
To: [some other person's email address]

purchase all kind of pharmacy on a very less price.

onlinemedicalkey.com. Remove the dot from the end of the link to use it, thanks.

At least the flames part of the email address looks appropriate.

Domain Name: ONLINEMEDICALKEY.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN

Registrant:
Name: liu hui
Address: nan chang
City: NanChang
Country: CN
Postal Code: 321000

Administrative Contact/Technical Contact:
Name: liu hui
Organization: liu hui
Address: nan chang
City: NanChang
Country: CN
Postal Code: 321000
Phone: +86.7913219002
Fax: +86.7913219002
Email: cncliup@21cn.com

Create: 2007-10-31 00:40:34
Update: 2007-11-06
Expired: 2008-10-31
QueryTimes: 63

The mathematician Liu Hui must hate you for poisoning his name.

Not new to abusebutler, or news.admin.net-abuse.email, or Sirt.

Pfizer zombies send Viagra spam, Wired reports

Zombie Pfizer Computers Spew Viagra Spam

By Ryan Singel 09.06.07 | 2:00 AM

Computers inside pharmaceutical giant Pfizer's network are spamming the internet with e-mails touting the company's flagship erectile-enhancement drug Viagra, along with ads for knockoff Rolexes and shady junk stocks.

But the e-mails are not part of Pfizer's official marketing efforts.

Pfizer's computers appear to have been infected with malware that has transformed them into zombie computers sending spam at the behest of a hacker. Oddly enough, they are spamming the public's inboxes with ads for the company's own product.

"There is a disaster inside this company, and they don't know it," says Rick Wesson, CEO of Support Intelligence -- a small San Francisco-based security company that alerted Wired News to the problem.

The flood of spam adds to Pfizer's recent computer security woes. This summer, the company revealed that it had suffered three breaches of sensitive data, cumulatively affecting more than 50,000 individuals.

In one breach, a Pfizer employee exposed personal information on 17,000 employees after installing peer-to-peer software on a laptop. In another breach, confirmed Tuesday, a former employee downloaded sensitive data, including social security numbers and credit-card information for about 34,000 Pfizer employees.

Full story at Wired.

University degrees spam - they can't even spell other than their phone number, (206) 350-2402

From: stheis@blizzop.com
Subject: RE: Your-Degree is pending.
Date: September 4, 2007 5:20:47 PM GMT+01:00
To: [someone else's email]

Received: from [59.23.249.177] ([59.23.249.177]) by mac.com (Xserve/smtpin073/MantshX 4.0) with ESMTP id l84GK2LQ001140; Tue, 04 Sep 2007 09:20:42 -0700 (PDT)
Received: from [59.23.249.177] by redir-mailav-telehouse2.gandi.net; Tue, 35 Aug 2007 25:20:46 +0900
Date-Warning: Invalid date header replaced by ms121.mac.com; original content: Tue, 35 Aug 2007 25:20:46 +0900
Message-Id: <0107ffa4$0107fe78$b1f9173b@stheis>
Mime-Version: 1.0
X-Mimeole: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Mailer: Microsoft Outlook Express 6.00.2800.1106



F A S T T R A C K D E G R E E P R O G R A M

Obtain the degree you deserve, based on your present knowledge and life experience.

A prosperous future, money earning power, and the Admiration of all.

Degrees from an Established, Prestigious, Leading Institution.

Your Degree will show exactly what you really can do.

Get the Job, Promotion, Business Opportunity

and Social Advancement you Desire!

Eliminates classrooms and traveling.

Achieve your Bachelors, Masters, MBA, or PhD
in the field of your expertise

Professional and affordable

Call now - your Graduation is a phone call away.

Please call:
1-206-350-2402

Interesting. No website, just phone number. Maybe a few other people have got this same spam it seems...

Would you consider getting a degree from something that spams you, and does not even know how to capitalize words? You could even think that these are German Spammers as All Conceptual Words are Capitalized.

(206) 350-2402

Type: Land LineProvider: International Telcom, Ltd Location: Seattle, WA

The landline registrant details look shady too.

Registrant:
International Telcom
Attn: chip phillips
417 Second ave West
Seattle, WA 98119
US

Registrar: DOTSTER
Domain Name: ITLTD.NET
Created on: 24-FEB-96
Expires on: 25-FEB-08
Last Updated on: 03-FEB-06

Administrative, Technical Contact:
Telcom, International admin@itltd.net
Attn: chip phillips
417 Second ave West
Seattle, WA 98119
US
(206) 666-4991

Domain servers in listed order:
GATE.KALLBACK.COM
BART.KALLBACK.COM

Stock spam, cytv.ob

From : admin@stockcross.com < fake email>
Sent : Monday, August 6, 2007 8:06 AM
To : < same fake email>
Subject : RE: Weekly News
MIME-Version: 1.0
X-Originating-IP: [82.48.4.430]

Cytv.ob would resolve to China YouTV Corp. [snippet]

Never trust stock advice that you didn't ask for, that arrives in your inbox, and that appears that you have even sent yourself from your email address (the fake email part).

Hotmail joys - "Meet a new fuck buddy", criostasiswithequipment.com

X-Message-Status: n:0
X-SID-PRA: cool@yuiopplkjh.com
X-Message-Info: LsUYwwHHNt2679teDQ0I1ujVGG18SjEEV61J4QCsJCDe8Q49HfWXczIrUawpA+FR
Received: from yuiopplkjh.com ([58.237.41.137]) by bay0-mc9-f22.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Thu, 12 Jul 2007 13:15:07 -0700
Date: Thu, 12 Jul 2007 18:35:40 -0400
Message-ID:
From:Meet A New FuckBuddy
To: essiers@hotmail.com
Subject: Search Your Area
Mime-Version: 1.0
Content-Type: text/html;
Sender: cool@yuiopplkjh.com
Return-Path:
X-OriginalArrivalTime: 12 Jul 2007 20:15:07.0833 (UTC) FILETIME=[57747290:01C7C4C1]



[snip] accomplished.margin.kids.clear
personal-compose

fame.victims.appointed.commands
personal-compose

smoothly.hands.king-craft.options--becoming
personal-compose

little.traumatic.solemnity.because
personal-compose

one-third.cocktail.examined.Their
personal-compose

solid.resembles.mentally.Cro-Magnon
personal-compose [snip]

And more of that that mindless junk.

Whois for http://www.criostasiswithequipment.com

Referral URL: http://www.dns.com.cn
Domain Name.......... criostasiswithequipment.com
Creation Date........ 2007-07-12 23:14:46
Registration Date.... 2007-07-12 23:14:46
Expiry Date.......... 2008-07-12 23:14:46
Organisation Name.... wang jing
Organisation Address. NO.75 PINGTAN XIAN PU DONG ZHUANG
Organisation Address.
Organisation Address. Fuzhou
Organisation Address. 210222
Organisation Address. FJ
Organisation Address. CN
Admin Name........... wang jing
Admin Address........ NO.75 PINGTAN XIAN PU DONG ZHUANG
Admin Address........
Admin Address........ Fuzhou
Admin Address........ 210222
Admin Address........ FJ
Admin Address........ CN
Admin Email.......... admin@32c.com
Admin Phone.......... +86.5913210023
Admin Fax............ +86.5913210023

This is just one of the reasons why I would not suggest anyone to let hotmail be their children's email choice. This kind of junk goes always to my inbox, no matter how many times it is indicated to be spam.

OEM scammer - asnolyke.com aka Jacqueling Tomaszewski

From: irkjdot@blotteracid.com
Subject: User favorites software
Date: August 31, 2007 2:45:03 PM GMT+01:00
To: [someone else's email address]
Reply-To: irkjdot@blotteracid.com
[Received: from [201.244.215.181] by mx1.balanced.spunky.mail.dreamhost.com; Fri, 31 Aug 2007 08:45:03 -0500
Message-Id: <036876691.82044173926622@blotteracid.com>
Mime-Version: 1.0
X-Mailer: The Bat! (v3.71.14) Professional]

User favorites software
Adobe Photoshop CS3 Extended $89.95
Microsoft Windows XP Professional with SP2 $49.95
Microsoft Office 2003 Professional with Business Contact Manager for Outlook $69.95
Microsoft Windows Vista Business $79.95
Microsoft Office 2007 Enterprise $79.95
Adobe Acrobat 8.0 Professional $79.95
Macromedia Studio 8 $99.95
Microsoft Office XP Professional $49.95
and other
http://asnolyke.com

Whois gives

[whois.myorderbox.com]
Registration Service Provided By: CRISP NAMES, INC.
Contact: +1.3104837168

Domain Name: ASNOLYKE.COM

Registrant, technical, admin etc:
N/A
JACQUELING TOMASZEWSKI (repository@munich.com)
140 S HOBBS HWY
TRAVERSE CITY
Michigan,49686
US
Tel. +6.2319292893

Creation Date: 18-Jul-2007
Expiration Date: 18-Jul-2008

Michigan phone number starting with +6? Sure. This "Jacqueling" gives already some google hits.

Rodrigez aka Kuvayev again

From: timbergrovefarm.com@crossroadsmusicfestival.com
Subject: Corel Draw
Date: July 23, 2007 10:58:18 PM GMT+01:00
To: [my email]


OEM software means no CD/DVD, no packing case, no booklets and no overhead cost!
So OEM software is synonym for lowest price.

Buy directly from the manufacturer, pay for software ONLY and save 75-90%!

See discounts and special offers! Find software for home and office!
TOP POSITIONS

Windows XP Pro w/SP2 $49
MS Office Enterprise 2007 $79
Adobe Acrobat 8 Pro $79
Microsoft Windows Vista Ult $79
Macromedia Studio 8 $99
Adobe Premiere 2.0 $59
Corel Grafix Suite X3 $59
Adobe Illustrator CS2 $59
Macromedia Flash Prof 8 $49
Adobe Photoshop CS2 V9.0 $69
Macromedia Studio 8 $99
Autodesk Autocad 2007 $129
Adobe Creative Suite 2 $149
http://pnt.lalasoftb.com/?[random letters]
----
Top items for Mac:
Adobe Acrobat PR0 7 $69
Adobe After Effects $49
Macromedia Flash Pro 8 $49
Adobe Creative Suite 2 Prem $149
Ableton Live 5.0.1 $49
Adobe Photoshop CS $49
http://pnt.lalasoftb.com/[random letters]
----
Popular eBooks:
Home Networking For Dummies 3rd Edition $10
Windows XP Gigabook For Dummies $10
Adobe CS2 All in One Desk Reference For Dummies $10
Adobe Photoshop CS2 Classroom in a Book(Adobe Press) $10
----
Find more by these manufacturers:
Microsoft...Mac...Adobe...Borland...Macromedia...IBM
http://pnt.lalasoftb.com/?[random letters]
----



Brodick led the procession up
The Maitland home was at the t
Brodick dismounted with Alec i
The crowd silently pressed for
Alecs homecoming should be pri

OEM is illegal BS.

The companies listed in scams like these do NOT sell their software online by some shady resellers.

The OEM software spams are REALLY annoying, but they are way too numerous out there making that Adobe, Apple, IBM, Microsoft etc etc can't keep up to the speed of scamming.

Of the scammer URL we can get the following info

Domain Name: LALASOFTB.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com

Creation Date: 04-jul-2007
Expiration Date: 04-jul-2008 -- these dates are one more indication of not being proper kosher. Recent registration, minimum registration validity time.

Domain name: lalasoftb.com

Registrant Contact:
-
Alex Rodrigez domains@surink1.com
+358-30-5563 fax:
po box 445
Laapentranta Laapentranta 12700
fi

Thus our friend Alex Rodrigez aka Leo Kuvayev again.
Again with an invalid Finnish address and invalid phone number.
What is his passion with Finland?

And surink1.com email?

Domain Name: SURINK1.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS1.GORLOK.NET

Creation Date: 21-jun-2007
Expiration Date: 21-jun-2008

Domain Name.......... surink1.com
Creation Date........ 2007-06-22 10:40:26
Registration Date.... 2007-06-22 10:40:26
Expiry Date.......... 2008-06-22 10:40:26
Organisation Name.... cheng mingfei
Organisation Address. NO.599 east road nanjing
Organisation Address.
Organisation Address. Nanchang
Organisation Address. 321100
Organisation Address. JX
Organisation Address. CN

Admin Name........... cheng mingjun
Admin Address........ NO.599 east road nanjing
Admin Address........
Admin Address........ Nanchang
Admin Address........ 321100
Admin Address........ JX
Admin Address........ CN
Admin Email.......... liuggg@surink1.com
Admin Phone.......... +86.7916316556
Admin Fax............ +86.7916316556

http://www.dns.com.cn gets listed on bad registrars list.
And Mr Kuvayev seems to do a lot of traffic with the Chinese lately.

Anatrim spam - rlcco.com

From: cvelasqu@hopecollective.com
Subject: Thanks for the awesome product and the great service. Anatrim.
Date: July 8, 2007 12:54:44 PM GMT+01:00
To: [my email]
Return-Path:
Received: .. [122.128.152.59] by smtp.secureserver.net; Sun, 08 Jul 2007 02:54:44 -0900
Message-Id: <01c7c10b$56b9d9d0$3b98807a@cvelasqu>
Mime-Version: 1.0
X-Mimeole: Produced By Microsoft MimeOLE V6.00.3790.1830
X-Mailer: Microsoft Outlook Express 6.00.3790.1830
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0007_01C7C156.C6A181D0"
X-Priority: 3
X-Msmail-Priority: Normal
Original-Recipient: [my email]

I was originally amazed that the first two pills I took of Anatrim, almost immediately took my cravings away. Now 4 weeks later, 3 belt holes later, I have become an advocate for this awesomely powerful, natural supplement! Due to the incredible surge in popularity of Anatrim, many new products are flooding the market claiming to be of top quality.
http://holenem.net
Anatrim contains the absolute highest quality ingredients available- you simply won’t find a more complete product of this kind, anywhere.

Of which

Domain Name: HOLENEM.NET
Registrar: 1-877NAMEBID.COM LLC DBA "1-877NAMEBID.COM"
Whois Server: whois.1-877namebid.com
Referral URL: http://www.1-877namebid.com

Registration Service Provided By: 1-877NAMEBID.COM LLC
Contact: +1.8776263243
Website: http://1-877NameBid.com

Registrant:
N/A
eugene lopez (penmanshif@mad.scientist.com)
3210 killarney
el paso
Texas,79925
US
Tel. +7.9155920373

Creation Date: 05-Jul-2007
Expiration Date: 05-Jul-2008

Of which at least phone number is invalid. If the person is in Texas, his phone number should not be a Russian one. Or is this just a new try for Alex Kuvayev aka Alex Rodrigez?
And on the site that this spam was linked to, typically no phone number and no address for contacting them, other than the website. And sure, buying it from Texas .. with a Russian phone number...

http://1-877namebid.com offers bulk registration and bulk domain transfers so for that domain

[whois.myorderbox.COM]
Registration Service Provided By: DOMAINSTOBESEEN.COM
Contact: +1.4235100030

Domain Name: 1-877NAMEBID.COM

Registrant:
R. Lee Chambers Company LLC
Richard (chambers@rlcco.com)
Post Office Box Ten
Ooltewah
TN,37363-0010
US
Tel. +000.0000000

Creation Date: 19-Mar-2004
Expiration Date: 19-Mar-2009

Domain servers in listed order:
ns1.1-877namebid.com
ns2.1-877namebid.com

And of domaintobeseen.com

[whois.myorderbox.com]
Registration Service Provided By: 1-877NAMEBID.COM LLC
Contact: +1.8776263243
Website: http://1-877NameBid.com

Domain Name: DOMAINSTOBESEEN.COM

Registrant:
1-877NameBid.com LLC
Richard L. Chambers (chambers@rlcco.com)
6441 Bonny Oaks Drive
Suite C
chattanooga
TN,37416-3537
US
Tel. +1.4235100030

Looking at the email address of the registrant, maybe we find some more - at least http://www.rlcco.com seems to be a historic website of this R Lee Chambers. Rlcco.com gives also the same exact registrant details - R Lee Chambers, with phone number of 00000 ....

At least rlcco.com has something entertaining .. the source.

< meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
< title>RLCCO.COM - Global Reach...Web Savvy

< meta name="GENERATOR" content="Microsoft FrontPage 4.0">
< meta name="ProgId" content="FrontPage.Editor.Document">

We have the winner.

DeVry University and University of Phoenix

From : DeVry.University
Sent : Tuesday, July 3, 2007 1:38 PM
To : [my email]
Subject : Succeed faster...
MIME-Version: 1.0
Received: from KarmaDogOnline.com ([66.29.53.53]) by bay0-mc9-f18.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Tue, 3 Jul 2007 10:42:10 -0700
Received: by KarmaDogOnline.com id hh98r60cvqg5; Tue, 3 Jul 2007 09:38:28 -0400 (envelope-from )
X-Message-Info: LsUYwwHHNt1LK/nREKLBsanyDZxzDd7nXyQi1nswZ+09XS+ln+gJY3jbM/zhsRDL
Return-Path:
X-OriginalArrivalTime: 03 Jul 2007 17:42:10.0203 (UTC) FILETIME=[7B717EB0:01C7BD99]

Message contents : gif

Gif links to yourdirectline.com for "cancelling".

From : University of Phoenix - Online
Sent : Friday, June 29, 2007 2:34 PM
To : [my email]
Subject : The leading choice...
Received: from KarmaDogOnline.com ([66.29.74.1]) by bay0-mc2-f16.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Fri, 29 Jun 2007 11:36:57 -0700
Received: by KarmaDogOnline.com id hgkca20cvqg8; Fri, 29 Jun 2007 10:34:20 -0400 (envelope-from )
X-Message-Info: LsUYwwHHNt0hnHTZ2pc/8nz5x3nDjSFiRyV0Vz3CYnL1M5nIwb1+AOqNHRPzVSWb
Return-Path:
X-OriginalArrivalTime: 29 Jun 2007 18:36:57.0015 (UTC) FILETIME=[78E23470:01C7BA7C]

Gif with link to www.originativebusiness.com to "cancel".


DeVry University and University of Pheonix are something that have been annoying me for a long time.

I never signed to receive any of their spams, yet I get at least one spam per day, and this has been going on for at least the past 4 years.
These along with the [something] confirmation department are something that are so constant that it's not probably even annoying...

More Karin Patterson originated Viagra spam

From: busy4miles@urscorp.com
Subject: You pay We ship, NoPrescription, CialisPhentemineXanaViagra\/aliun from $2/pill MeridiaCelebrex RivotrilLevitrPropecia favour
Date: June 12, 2007 2:39:05 PM GMT+01:00
To: [someotheremail]

Certified OnlinePharmacy
Genuine Quality Ingredient & All Countries Shipping
ViagraAs 10pills $57
CialisAs 20pills $1xx
PhentermineAs 30pills $1xx
ValiumAs 30pills $95
XanaxAs 30pills $99
LevitraAs 10pills $73
plus 30 meds more RivotrilAs 30pills $70
AtivanAs 30pills $90
AmbienAs 30pills $1xx
MeridiaAs 30pills $1xx
SomaAs 30pills $1xx
CelebrexAs 30pills $1xx
plus 30 meds more
Best Price - Click Here To View More [link to http://kehuxw.alsoathankyou.com]

Of which we can get

Domain Name: ALSOATHANKYOU.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN

Registrant:
Name: Karin Patterson
Organization: Karin Patterson
Address: 408 McLaughlin Dr.
City: Santa Cruz
Country: US
Postal Code: 95064-1017
Email: karinpattersonmint@yahoo.com

Which makes it that she/he/them have been spamming habitually my inbox, and it annoys me enough to get an own label for this Karin Patterson.

Schoolisalways.com - viagra spams

From: am9discuss@cnh.com
Subject: 1 Million Satisfied Customers Worldwide, 100% Safe & Effective PenisEnlargement Pill raised
Date: June 11, 2007 6:10:25 AM GMT+01:00
To: [some other email]
Return-Path:
[..] Received: from 78.237.237.221.broad.ga.sc.dynamic.163data.com.cn (78.237.237.221.broad.ga.sc.dynamic.163data.com.cn [221.237.237.78] (may be forged))by isp (Xserve/smtpin50/MantshX 4.0) with SMTP id l5B4Achg028878; Sun, 10 Jun 2007 21:10:41 -0700 (PDT)
Message-Id: <76901.26134.30544@cnh.com>
Mime-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Accept-Language: en-us, en
User-Agent: Mozilla Thunderbird 1.5 (Windows/20060111)
Original-Recipient: [my email]

idea address tomorrow.
Safe & Effective PenisEnlargement
Over 1,500,000 bottles sold worldwide
WeOffer a FULL MONEY BACK GUARANTEE if you are not completely satisfied with the results of Man-XL, you have nothing to lose, just a lot to gain
A breakthrough in herbal Science has created a pill that has been designed specifically for PenisEnlargement. The tests that took place over a 6 month period showed that out of the 5,000 Males from around the world who participated, the average gain after 5 months of taking Man-XL pills was 3.02 Inches! Amazing, PERMANENT RESULTS that will last.
Did you know... Man-XL was featured in leading mens magazines such as FHM, MAXIM, plus many others, and rated No.1 choice forPenisEnlargement Also seen on TV
-:- Gain Up to 3+ Inches In Length
-:- Increase YourPenis Width (Girth) By upto 20%
-:- Help Stop PrematureEjaculation!
-:- Produce Stronger, Rock HardErections
-:- 100% Safe To Take, With NO Side Effects
-:- Fast Shipping WorldWide
-:- Doctor Approved And Recommended
-:- No Pumps, No Surgery, No Exercises
-:- Very discrete shipping and billing
-:- 100% Money Back Guarantee
-:- Up to 3 FREE Bottles Of Man-XL
-:- Highly secure 128bit order processing
See by yourself BEFORE & AFTER result by a customer
Buy This herbal EnlargementPills here [link to schoolisalways.com]

progress goes satisfaction,

Of which whois

Domain Name: SCHOOLISALWAYS.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN

Registrant/Administrative Contact/Technical Contact:
Name: Karin Patterson
Organization: Karin Patterson
Address: 408 McLaughlin Dr.
City: Santa Cruz
Country: US
Postal Code: 95064-1017
Email: karinpattersonmint@yahoo.com

Rolex spammers - intheworldseries.com

From: pokk8hmcy@starstream.net
Subject: Swiss Rolex, Patek Philippe, Panerai, Omega, Breitling, IWC, Tag Heuer From $199, Limited Stock! srbb
Date: June 6, 2007 8:07:03 PM GMT+01:00
To: [some email]
Return-Path:
Received: ...
from ioxemua (adsl-dyn12.91-127-77.t-com.sk [91.127.77.12]) by [isp] (Xserve/smtpin60/MantshX 4.0) with SMTP id l56I71Xh018208; Wed, 06 Jun 2007 11:07:26 -0700 (PDT)
Message-Id: <564r564p.6650732@starstream.net>
Mime-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Accept-Language: en-us, en
Domainkey-Signature: a=rsa-sha1; q=dns; c=nofws; s=surely.changed; d=starstream.net; b=QjJVeUfegyYhvqkLmVHoLomQcOrCDMssOAHyXiVaPuAoJWtvJfSoOBwehpNRjZvfMWYXVJxozeJWNeUT;
User-Agent: Mozilla Thunderbird 1.5 (Windows/20060111)
Original-Recipient: [email]

garden within know? using dark sudden bought,Swiss Watch Retailer
Special From $ 199
Bestseller Watches
A.Lange & Sohne
Audemars Piguet
Breitling
Bvlgari
Cartier
Chanel
Chopard
Franck Muller
IWC
Jaeger-Lecoultre
Omega
Panerai
Patek Philippe
Rolex Ladies
Rolex Mens
SWISS Rolex
Tag Heuer

Checkout the hottest watches now
circumstances know and mistress bad? favour your appearance blue?

had link to http://rymibryk.intheworldseries.com/

Of which we get very similar results than for the previous entry. Again real registrant hidden, but internet.bs is the domain used by the spammers. Once I find a third spammer using that domain, or a spam of a third different product and domain registered by that domain, I'll count that domain registry service as spammer operated as well.

Domain Name: INTHEWORLDSERIES.COM
Registrar: INTERNET.BS CORP.
Whois Server: whois.internet.bs
Referral URL: http://www.internet.bs
Name Server: NS1.ROCKETSKYROCK.COM
Name Server: NS2.ROCKETSKYROCK.COM
Name Server: NS3.ROCKETSKYROCK.COM
Name Server: NS4.ROCKETSKYROCK.COM
Name Server: NS5.ROCKETSKYROCK.COM
Status: clientTransferProhibited
Updated Date: 05-jun-2007
Creation Date: 05-jun-2007
Expiration Date: 05-jun-2008

Medicine spam - ceasarrare.com

From: reemphasizesblanching@protectfrogs.com
Subject: Don't know where to buy medications?
Date: March 2, 2007 8:52:51 PM GMT+00:00
To: [someone else's email]
Return-Path:
Received: [..] 66.249.83.27 (HELO ASPMX5.GOOGLEMAIL.com) by ispwith esmtp (1?IL-J<00>K1 +X3JT) id *2@0D*-R@@(LB-V= for [email]; Sat, 03 Mar 2007 00:52:51 +0400
Message-Id: <01c75d2e$451dd410$6c822ecf@reemphasizesblanching>
Mime-Version: 1.0
X-Mimeole: Produced By Microsoft MimeOLE V6.00.3790.2663
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0006_01C75CFB.FA836410"
Thread-Index: Aca6Q6+47R*F,05L4+X7-N*2X*96)U==

Dear valued member!

We are writing to inform you about the result of the recent research concerning the quality of the drugs sold on the Internet.

Not all the meds offered in numerous Web pharmacies are as qualitative as you might wish them to be. According to the results of the official research made by our Association only one (USDrugs) out of 46 online drugstores analyzed offers drugs of true generic quality.

Remember! Taking generic drugs you will secure yourself against poisoning!

Click here to learn more.

With Best Regards, Pierre Clarke
USDrugs B.V.
http://www.ceasarrare.com/

Of which whois :

Referral URL: http://www.dotregistrar.com
Registrant, administrative, technical contact :
Icek Pankovich (CEASARRARE-COM-DOM)
Sos. Mihai Bravu,No. 5
Bl. 4, Entr. 4, Apt. 9
Bucuresti, Sector 2 76101
Romania
+040.0212516407
+040.0212516407
icek_pankovich@yahoo.com

Domain servers in listed order:
Name Server: ns1.tonsilsbot.com
Name Server: ns2.groupron.com
Name Server: ns1.belikeyous.com

Lochers.com - underwear spammers with cmpgnr.com

From: info@lochers.com
Subject: Locher's New Darling Collection
Date: February 8, 2007 6:49:07 PM GMT+00:00
To: [my email]
Reply-To: Lochers_yyyvwv@cmpgnr.com
Return-Path:
Received: [...] from mta16br.cmpgnr.com (mta16br.cmpgnr.com [216.24.227.16]) by [isp] (Xserve/smtpin60/MantshX 4.0) with SMTP id l18Im31u005587for ; Thu, 08 Feb 2007 10:48:03 -0800 (PST)
Errors-To: gotb889308_888565_702191_931354833@cmpgnr.com
Message-Id: <1700222.1170960547062.KadaSegment.156.1@mta16br.cmpgnr.com>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_429433_18707296.1170960547062"
Bounces-To: somrandomnumbers@cmpgnr.com
X-Campaign: 889308.888565.702191.931354833
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Scanned: yes
Original-Recipient: [my email]

Just in time for Fashion Week in Paris, Locher's launches their new darling embroidery collection featuring tops embroidered with delicate flowers and "nasty sayings", (perfect for Valentine's Day, gift certificates also available).

The entire collection of 16 tops plus accessories is available online at http://www.lochers.com The photo shoot for this collection was shot by frequent Italian Vogue photographer Amedeo Volpe.
It would be surely nice to have you visit.
Bisous from Nicole

You are subscribed as [my email]. To unsubscribe please click here. (had a link to www.cmpgnr.com/ something)

Umh, what?
No, I have not subscribed to lochers.com. I'm not interested in women's underwear spamlist subscriptions. So let's see a bit further.

Domain Name.......... lochers.com
Creation Date........ 2004-06-10
Registration Date.... 2004-06-10
Expiry Date.......... 2007-06-10
Organisation Name.... Nicole Locher
Organisation Address. 188 rue championnet #122
Organisation Address.
Organisation Address. paris
Organisation Address. 75018
Organisation Address. TX
Organisation Address. FRANCE
Admin Name........... Nicole Locher
Admin Address........ 188 rue championnet #122
Admin Address........
Admin Address........ paris
Admin Address........ 75018
Admin Address........ TX
Admin Address........ FRANCE
Admin Email.......... unagidesign@yahoo.com
Admin Phone.......... +1.0698779484
Admin Fax............
Tech Name............ YahooDomains TechContact
Tech Address......... 701 First Ave.
Tech Address.........
Tech Address......... Sunnyvale
Tech Address......... 94089
Tech Address......... CA
Tech Address......... UNITED STATES
Tech Email........... domain.tech@YAHOO-INC.COM
Tech Phone........... +1.6198813096
Tech Fax.............
Name Server.......... yns1.yahoo.com
Name Server.......... yns2.yahoo.com

So wait ... Paris, TX, or Paris, France?
The address is invalid.
The phone number is invalid for at least being in France.

Second part, whois for this remove me-something part :

Registrant:
Got Corporation Inc.
685 Cathcart Street
Suite 300
Montreal, Quebec H3B 1M7
Canada
Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: CMPGNR.COM
Created on: 04-Oct-06
Expires on: 04-Oct-08
Last Updated on:

Administrative Contact:
Saibil, Jeremy it@gotcorp.com
Got Corporation Inc.
685 Cathcart Street
Suite 300
Montreal, Quebec H3B 1M7
Canada
5142820595 Fax -- 5142821908
Technical Contact:
Saibil, Jeremy it@gotcorp.com
Got Corporation Inc.
685 Cathcart Street
Suite 300
Montreal, Quebec H3B 1M7
Canada
5142820595 Fax -- 5142821908
Domain servers in listed order:
NS1.FST-DNS.ORG
NS2.FST-DNS.ORG
NS1.CAMPAIGNER.COM

Some companies don't just seem to get that faking that people would have subscribed to their spamlists is rude. Whatever rude would be in French.

Russian "Euro" casino, Eucas.org ..

Now I must admit I'm not used to casino ads. I've been getting them slowly every now and then .. and I kind of feel I shouldn't bother to give these ones a label - that would prove they are worth something. Maybe the casino owners weren't or aren't that bad themselves? But they send spam. Or pay someone else to send spam. And that is enough to really annoy me.

Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs114525qbf;
Fri, 2 Feb 2007 23:07:39 -0800 (PST)
Received: by 10.35.84.16 with SMTP id m16mr8501297pyl.1170486459919;
Fri, 02 Feb 2007 23:07:39 -0800 (PST)
Return-Path:
Received: from c-24-125-1-11.hsd1.va.comcast.net (c-24-125-1-11.hsd1.va.comcast.net [24.125.1.11])
by isp with ESMTP id 6si20143323nzn.2007.02.02.23.07.39;
Fri, 02 Feb 2007 23:07:39 -0800 (PST)
Received-SPF: pass (isp: domain of hslohnu@comcast.net designates 24.125.1.11 as permitted sender)
From: "Kasparov Chessmate"
To: [my email]
Subject: Fun and make money.
Date: Sat, 3 Feb 2007 02:07:38 +0500
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0000_01C74738.14045F40"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Thread-Index: AcdHOBQEyuj3lA1ISnOABPe4yNeWTA==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
Message-Id:

Only from the most noble of all
casinos you could except such a Regal gift:

300% Bonus on your First Deposit!!!

Deposit 100 €/$ and Play with 400 €/$!!!
And on top of that, a service at such a
level you would not find in the best
Royal Families of Europe.

<<<<< Come and play at Royal VIP Casino!!! >>>>> then link

Of where the link goes to we get with whois :

Domain ID:D138238728-LROR
Domain Name:EUCAS.ORG
Created On:26-Jan-2007 12:46:22 UTC
Last Updated On:02-Feb-2007 19:15:56 UTC
Expiration Date:26-Jan-2008 12:46:22 UTC
Sponsoring Registrar:OnlineNIC Inc. (R64-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:ONLC-2572694-4
Registrant Name:Sergey Ivanov
Registrant Organization:Personal Domens
Registrant Street1:Russia, Mikhailova st, 22-22
Registrant Street2:
Registrant Street3:
Registrant City:Moscow
Registrant State/Province:MO
Registrant Postal Code:109456
Registrant Country:RU
Registrant Phone:+7.4955184040
Registrant Phone Ext.:
Registrant FAX:+7.4955184040
Registrant FAX Ext.:
Registrant Email:maddreams2005@yandex.ru
Admin ID:ONLC-2572694-1
Admin Name:Sergey Ivanov
Admin Organization:Personal Domens
Admin Street1:Russia, Mikhailova st, 22-22
Admin Street2:
Admin Street3:
Admin City:Moscow
Admin State/Province:MO
Admin Postal Code:109456
Admin Country:RU
Admin Phone:+7.4955184040
Admin Phone Ext.:
Admin FAX:+7.4955184040
Admin FAX Ext.:
Admin Email:maddreams2005@yandex.ru
Tech ID:ONLC-2572694-2
Tech Name:Sergey Ivanov
Tech Organization:Personal Domens
Tech Street1:Russia, Mikhailova st, 22-22
Tech Street2:
Tech Street3:
Tech City:Moscow
Tech State/Province:MO
Tech Postal Code:109456
Tech Country:RU
Tech Phone:+7.4955184040
Tech Phone Ext.:
Tech FAX:+7.4955184040
Tech FAX Ext.:
Tech Email:maddreams2005@yandex.ru
Name Server:NS2.NSSERVISRU.RU
Name Server:NS3.NSSERVISRU.RU

Eucas? The last time I checked, Russia wasn't part of EU ...
And the name Sergey Ivanov is a bit boring but at least we get a few other spam related stuff with google for it.

Stupid scams: The fraud girl from Russia

Spam seems to follow a 'flavour of the month' pattern. Certain types of spam become popular for a period of time.

Nigerian scams had theirs. Recently 'cheap meds' had their moment. Now it seems it's time for the dating scams. Here's a recent example.

Dear friend,
I found youbr pictaureb on one of the websites, acan we talk to
each otaher? I might be coming to your place in few aweeks.
This would be a grbeat opportunity to meet each other.
Btw, I am a woman. I am 25. Drop me a line at [email removed]

I love the "Btw, I am a woman" line near the end. As if to say "If you speak to me, there's a good chance you'll get laid".

Typically here's what this scam is intended to do.

1) Lonely and gullible man receives email and wonders "Wow, who is this chick"?
2) Man responds to email.
3) 'Woman' responds to man. Probably sends pictures to show how hot she is.
4) Man thinks he's on to something and invites her to visit.
5) She needs help with her ticket. For some reason she can't buy the ticket herself but promises that if you send her the money for the ticket, she'll return the money when she arrives.
6) Man sends money and never hears from them again.

This site has a nice write-up of this type of scam.

Fraud girl from Russia

What is the most annoying type of spam?

I've been giving this some thought and I think I've arrived at an answer. The most annoying spam, in my opinion, is empty spam. This is an email where there is no subject or body - it's literally a blank email.

It's annoying enough when some sub-human mouth breather thinks it's okay to annoy millions of people to make money. In my opinion it's even more frustrating when it's pointless. The spammer can't even make money here. All they are doing is annoying a lot of people.

Nigerian scam emails are my person favourite because I can reply to them and string the scammers along for a while. Adverts for tablets are pretty entertaining as well since they tend to be written in diabolical English. Yes of course I'll take medical advice from someone for whom spelling a three-letter word is a herculean challenge.