Showing posts with label loan spams. Show all posts
Showing posts with label loan spams. Show all posts

Sunday, July 08, 2007

katizhalthh - loan spammers

From: MAILER-DAEMON@[my isp]
Subject: Returned mail: see transcript for details
Date: July 3, 2007 7:35:53 AM GMT+01:00
To: [my email]

The original message was received at Mon, 2 Jul 2007 23:35:46 -0700 (PDT)
from ppp-124.120.199.216.revip2.asianet.co.th [124.120.199.216]

----- The following addresses had permanent fatal errors -----
< some user >
(reason: 550 5.1.1 unknown or illegal alias: some user )
(expanded from: < some user >)

----- Transcript of session follows -----
... while talking to smtp-bounce.isp.com.:
DATA
<<< 550 5.1.1 unknown or illegal alias: some user
550 5.1.1 < some user >... User unknown
<<< 554 5.5.0 No recipients have been specified.
Reporting-MTA: dns; isp
Received-From-MTA: DNS; ppp-124.120.199.216.revip2.asianet.co.th
Arrival-Date: Mon, 2 Jul 2007 23:35:46 -0700 (PDT)

Final-Recipient: RFC822; some user
Action: failed
Status: 5.1.1
Remote-MTA: DNS; smtp-bounce.isp.com
Diagnostic-Code: SMTP; 550 5.1.1 unknown or illegal alias: [ some user ]
Last-Attempt-Date: Mon, 2 Jul 2007 23:35:53 -0700 (PDT)

From: "Wilda" < my email >
Date: July 3, 2007 7:38:53 AM GMT+01:00
To: "Concetta" < some user >
Subject: astounding loans for the usa!

Hello, Your refinance application has been accepted.
We are ready to give you a loan.
There is no obligation and this is a FREE quote
(o)Debt Consolidation.
(o)Refinancing.
(o)Second Mortgage.
(o)Equity Line of Credit.
(o)First Purchase.
Visit here for more information Expect to be contacted within 24 Hours.
http://katizhalthh.com


So the spammer has forged MY email address for at least some outgoing emails again.

Of the site that is being advertised, we can get the following :

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Domain name: katizhalthh.com

Registrant Contact:
PrivateDomainRegistrations
Gary Reed (garyreed07@fastmail.net)
+1.6047678695
Fax: +1.5555555555
150-3495 Cambie Street
Vancouver, BC V5Z 4R3
CA


Illegal phone numbers. And namecheap.com isn't the first time on the list ..

Thursday, June 14, 2007

Geneyratevideo.com - loam spam

From: conformal@bkkmail.com
Subject: Your refinan/ce application
Date: July 14, 2007 5:01:07 PM GMT+01:00
To: [another user's email]
Return-Path:
Received: ... 62.42.101.235.dyn.user.ono.com (62.42.101.235.dyn.user.ono.com [62.42.101.235]) by isp (Xserve/smtpin37/MantshX 4.0) with SMTP id l5DG0w9Q027096; Wed, 13 Jun 2007 09:01:20 -0700 (PDT)
Message-Id: <70355383.20280090@cherokee.com>
Mime-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Original-Recipient: [my email]

Hello.
Important information regarding your l()an: ID MLDU2376
Your refinan/ce application has been accepted. We are ready to you a l()an.
Please finalize everything by visitig our Secure Web-form.
http://geneyratevideo.com


Of which

Domain Name: GENEYRATEVIDEO.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com

Visit AboutUs.org for more information about geneyratevideo.com
a href="http://www.aboutus.org/geneyratevideo.com"AboutUs: geneyratevideo.com/a

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Domain name: geneyratevideo.com

Registrant/Administrative/Technical Contact:

metsales inc.
gordon metcalfe (gordomet@coldmail.ca)

+1.4033979426
Fax: +1.5555555555
7622 Elbow drive
calgary, AB T2V 1K2
CA

Wednesday, March 14, 2007

Loan spammers - onlycghjguff.com

From: preemption@guadalupano.com
Subject: Reduce your current loan rate!
Date: April 14, 2007 3:11:19 PM GMT+01:00
To: [some other email]
Return-Path:
Received: [..] from AAnnecy-157-1-132-158.w90-14.abo.wanadoo.fr (aannecy-157-1-132-158.w90-14.abo.wanadoo.fr [90.14.51.158]) by mac.com (Xserve/smtpin27/MantshX 4.0) with SMTP id l2EED2ci006049; Wed, 14 Mar 2007 07:13:03 -0700 (PDT)
Message-Id: <28384979.44116607@debut.com>

Hello!
We are glad to inform you about the way to save your money!
This way is so simple that you will be surprised! What is it, you wonder?
Stop overpaying mortgage rates!
You will save over 250 dollars a month by reducing your current loan.
You are only to fill the form which will take you 30 second.
It is a winning game!
http://onlycghjguff.com/
With deepest respect and best wishes,


Of which whois :

Domain Name: onlycghjguff.com
Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET

Registrant Contact
Name: Gary Reed
Address: 3495 Cambie street
150
Vancouver, BC V5Z 4R3 CA
Email Address: garyr@coldmail.ca
Phone Number: (604)767-8695
Administrative Contact
Name: Gary Reed
Address: 3495 Cambie street
150 Vancouver, BC V5Z 4R3 CA
Email Address: garyr@coldmail.ca
Phone Number: (604)767-8695
Technical Contact
Name: Gary Reed
Address: 3495 Cambie street
150 Vancouver, BC V5Z 4R3 CA
Email Address: garyr@coldmail.ca
Phone Number: (604)767-8695