Showing posts with label repetitive spam. Show all posts
Showing posts with label repetitive spam. Show all posts

Monday, December 10, 2007

Liu hui or cncliup@21cn.com, again and again

From: Betty Longoria [flatatom@yahoo.com]
Subject: Weapon
Date: November 6, 2007 5:37:56 PM GMT+00:00
To: [someone else's email]

buy all kind of med on a very cheap price.

pharmstopmachine.com.

Remove the dot from the end of the link to use it, thanks.


This is only entry #2 for Ivy, or Liu Hui or whatever he wants to be called, so he's still far behind Leo Kuvayev aka Alex Rodrigez. At least Liu Hui does not seem to have his own biography information on rokso.

But I have had dozens of these spams on my private and very private email address, several of them daily, and that has the tendency to piss me off very much. The style is always the same, much more repetitive than Kuvayev's.

Received: from [88.231.255.223] by e.mx.mail.yahoo.com


Domain Name: PHARMSTOPMACHINE.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN

Name: liu hui
Organization: liu hui
Address: nan chang
City: NanChang
Country: CN
Postal Code: 321000
Phone: +86.7913219002
Fax: +86.7913219002
Email: cncliup@21cn.com

Saturday, September 01, 2007

HOTXTINA again, this time searching for her fuckbuddies at pinpointthecoordinates.com

From : Increadible Dating
Reply-To : Doddering@84Ew095La.com
Sent : Thursday, August 2, 2007 3:18 PM
To : essiers@hotmail.com
Subject : Free Online Search

Received: from aN6zkES.com ([89.181.47.236]) by bay0-mc2-f8.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Thu, 2 Aug 2007 10:10:43 -0700
Received: from 84Ew095La.com ([89.181.47.236]) by bay0-mc2-f13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Thu, 2 Aug 2007 08:18:08 -0700
Received: by 84Ew095La.com id hm7qqk0afgkl for ; Thu, 2 Aug 2007 08:18:01 -0700 (envelope-from )
Received: by srv-000-95-000-95.84Ew095La.com (Postfix, from userid 0) id 269B17D7A73; Thu, 2 Aug 2007 08:18:01 -0700 (ART)
X-Message-Delivery: Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Info: g+YnDTwJTP4ObfgplAbNAybZSuhtVRrwl0n7RO1Zcvl3ODcrovgVXCiAm/ZwDjWNppd0o1mmeSk=
Errors-To: noreply@84Ew095La.com
Precedence: list
Return-Path: noreply@84Ew095La.com
X-Spam-Check: igzdqos.egd$kgfixfztk04=
X-OriginalArrivalTime: 02 Aug 2007 17:10:43.0819 (UTC) FILETIME=[0F76A3B0:01C7D528]



The same hotxtina that was in the other emails too..

whois for pinpointthecoordinates.com

Referral URL: http://www.dns.com.cn
Domain Name.......... pinpointthecoordinates.com
Creation Date........ 2007-07-12 23:13:51
Registration Date.... 2007-07-12 23:13:51
Expiry Date.......... 2008-07-12 23:13:51
Organisation Name.... wang jing
Organisation Address. NO.75 PINGTAN XIAN PU DONG ZHUANG
Organisation Address.
Organisation Address. Fuzhou
Organisation Address. 210222
Organisation Address. FJ
Organisation Address. CN

De lotto online - one more lottery scam, as original as all these yahoo microsoft msn aol lottery notifications out there

From : Info Desk < infodesk@lotto.nl >
Reply-To : claimsdepartmentstaatbv@yahoo.co.uk
Sent : Monday, August 20, 2007 11:35 PM
Subject : PP 3502 /8707-01.

MIME-Version: 1.0
Received: from swip.net ([212.247.154.108]) by bay0-mc5-f6.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Mon, 20 Aug 2007 16:35:05 -0700
Received: from [64.70.24.209] (account eu1371123@tele2.fr) by mailbe02.swip.net (CommuniGate Pro WEBUSER 5.1.10) with HTTP id 72853902; Tue, 21 Aug 2007 01:35:01 +0200
X-Message-Delivery: Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Info: N4u0pqWW+O2oFq5Mbu0IBjQaTW9L0ZrHRvLwX/O+wN8ZykD9/Fsx2lo6Y1tpc/6adDPdRJX7PTS83yuxE2yIDA==
X-Cloudmark-Score: 0.000000 []
X-Mailer: CommuniGate Pro WebUser v5.1.10
Organization: Info Desk
Return-Path: eu1371123@tele2.fr
X-OriginalArrivalTime: 20 Aug 2007 23:35:05.0855 (UTC) FILETIME=[BCF190F0:01C7E382]


De Lotto Nl Email Result;
INTERNATIONAL PROGRAM

Dear Email User,

We are pleased to inform you of the result of the last final annual
draw of our LOTTERY INTERNATIONAL Programs. De Lotto online
cyber lotto draws was conducted from an exclusive list of 25,000,000 e-
mail addresses of individuals and corporate institutions,picked by an
advanced automated random computer search from the internet.
No
tickets were sold.After this automated computer ballot, your e-mail
address emerged as a winner in the category "A" with the following
numbers Email Informations below.

Your prize award has been insured with your e-mail address and will be
transferred to you upon meeting our requirements,statutory
obligations,verifications, validations and satisfactory report.

It is important to note that your award information was released today
the 20th of August 2007 with the following particulars attached to it.

(I) Award numbers: TL 22/15409
(ii) Email ticket number: PP 3502 /8707-01.
(iii) Lotto code number: TL09622NL
(iv) The file Ref number: TL/0534/30/07

To file in for the processing of your prize winnings, you are advised
to contact our Certified and Accredited claims agent for category "A" winners with the information below To file for your claim, please contact our /your processing
agent.
**********************************************
Mr.Steve Litzin
DIRECTLINE: 0031-616-725-622
EMAIL:delottonl001@yahoo.co.uk
**********************************************

Sincerely,
SUSAN LU
Promotions Manager
Netherlands the Letter company
European promotions.



Dear Email User? Wow, is that me?

This is as bad and without imagination as these yahoo microsoft msn lotteries out there.

Yahoo.co.uk email address used for some big lottery in Netherlands? As likely as any bank manager anywhere on this planet sending you any email from yahoo or hotmail.

My favorite part in this one is though "De Lotto online
cyber lotto draws was conducted from an exclusive list of 25,000,000 e-
mail addresses of individuals and corporate institutions,picked by an
advanced automated random computer search from the internet.". So what they are effectively saying is that this big lottery used an email harvesting bot to get the addresses ...
I think what they should have said is that they sent this same email to these 25,000,000 email addresses.

CEPU spam, from mailing-list.it

From : Cepu
Reply-To : mailing@mailing-list.it
Sent : Tuesday, August 21, 2007 7:14 AM
To : [my email]
Subject : Cepu c'è! Nello studio è con te!

Quando ...

non riesci a superare un esame, Cepu c'è.
vuoi sentirti più sicuro, Cepu c'è.
vuoi acquisire un metodo di studio, Cepu c'è.
desideri un bel voto all'esame, Cepu c'è.
vuoi finire prima l'università, Cepu c'è.
sogni la laurea, Cepu c'è.
arrivi alla laurea, Cepu c'è.

... e gioisce con te.

Inoltre nelle sedi cepu trovi Campus Privati Universitari per le facoltà di Giurisprudenza, Psicologia, Ingegneria e Economia,
con stage, inglese, e pratica per la tua futura professione.

Messaggio inviato in ottemperanza al Decreto legislativo 196/03.
Clicca qui per cancellare la registrazione e non ricevere piu' messaggi.


With some link for the cancel. Sure.
You can say you are using whatever points behind Italian spam legislation. Nevertheless, I have never agreed to get a single CEPU spam from you. I have used mailing-list.it a few times while it didn't suck, that was over 5 years ago. Now the email is doomed in receiving still all these CEPU and other @#%%. I for sure have NEVER agreed to received even a single CEPU related notification. Oh did I mention the frequency I get the CEPU spam? It makes it qualify for hte annoying, repetitive category

More graphic spam containing male organs and Russian women measuring them

From: xversal.com@usedcompanycars.com
Subject: She will love you more than any other guy
Date: August 1, 2007 11:40:26 PM GMT+01:00
To: [my email


Contained a very gross graphic picture of a male organ, and a Russian looking black haired lady measuring said white male organ with a tape measure on it's right side. I don't feel like uploading that graphic to the web as it is just gross. Maybe some desperate males who want to attract money leeching Russian ladies who want to have a huge while male organ in addition to your wallet might like it, I'm obviously not in the target group.

The picture was linked to http://www.vetrib.com/.

Whois gives

Domain Name: VETRIB.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com

Registrant Contact:
liu dong
dong liu liug@greatchinausa.com
0891-32563256 fax: 0891-32563256
NO.23 xin road qiche xin road
haikou hainan 891000
cn


Well, at least it's Liu Dong and not a Dick Wang.

I have got several graphic spams about the same subject, always the same ugly male organ and that same Russian looking lady. Being exposed more to this graphic might make an average lady to turn lesbian rather than to order these male enhancement pills to their man. Since I'm not average and just not into ladies at all, this turns me off and very badly.

Voce recebeu um Tim VideoMensagem ! from phone number 99854211

From: supervisao_se@uol.com.br
Subject: Voce recebeu um Tim VideoMensagem !
Date: August 11, 2007 4:50:15 PM GMT+01:00
To: supervisao_se@uol.com.br
Reply-To: supervisao_se@uol.com.br

Você recebeu um TIM VideoMensagem!
VideoMensagem foi enviado de um celular para seu e-mail, do número
99854211.

visualizar

TIM agora do seu celular para seu e-mail.
Importante: VideoMensagem ficará disponível na Web durante 7 dias.
TIM - Viver sem fronteiras.


Brazilians seem to go crazy for these free video messages. I have been getting these at least one a day for the past month. Sure, to view your free video message all you need is to download and execute some shady http://www.c2ctrees.com/VideoMensagem.exe on your computer. Excellent idea.

Never mind even the fact that I have not subscribed ever to any service that would allow any video messages.

From: torpedos@tim.com.br
Subject: Voce recebeu um Tim VideoMensagem !
Date: August 9, 2007 7:38:51 AM GMT+01:00
To: torpedos@tim.com.br
Reply-To: torpedos@tim.com.br


Você recebeu um TIM VideoMensagem!
VideoMensagem foi enviado de um celular para seu e-mail, do número
99854211.

visualizar

TIM agora do seu celular para seu e-mail.
Importante: VideoMensagem ficará disponível na Web durante 7 dias.


All these free TIM video messages some Brazilian has left to my service that I have never even subscribed to allways appear coming from number 99854211.
How about for authenticity add some region code in the number? Just as good as getting a phone call from US from 123-4567. There are a few prefix options there you know.
Well, this number hasn't left messages only for me...
Oh, it has some graphics too, so it looks like the TIM messages, however I'm just too lazy to load any graphics on my emails unless they are from my manager.

Monday, July 23, 2007

Rodrigez aka Kuvayev again

From: timbergrovefarm.com@crossroadsmusicfestival.com
Subject: Corel Draw
Date: July 23, 2007 10:58:18 PM GMT+01:00
To: [my email]


OEM software means no CD/DVD, no packing case, no booklets and no overhead cost!
So OEM software is synonym for lowest price.

Buy directly from the manufacturer, pay for software ONLY and save 75-90%!

See discounts and special offers! Find software for home and office!
TOP POSITIONS


Windows XP Pro w/SP2 $49
MS Office Enterprise 2007 $79
Adobe Acrobat 8 Pro $79
Microsoft Windows Vista Ult $79
Macromedia Studio 8 $99
Adobe Premiere 2.0 $59
Corel Grafix Suite X3 $59
Adobe Illustrator CS2 $59
Macromedia Flash Prof 8 $49
Adobe Photoshop CS2 V9.0 $69
Macromedia Studio 8 $99
Autodesk Autocad 2007 $129
Adobe Creative Suite 2 $149
http://pnt.lalasoftb.com/?[random letters]
----
Top items for Mac:
Adobe Acrobat PR0 7 $69
Adobe After Effects $49
Macromedia Flash Pro 8 $49
Adobe Creative Suite 2 Prem $149
Ableton Live 5.0.1 $49
Adobe Photoshop CS $49
http://pnt.lalasoftb.com/[random letters]
----
Popular eBooks:
Home Networking For Dummies 3rd Edition $10
Windows XP Gigabook For Dummies $10
Adobe CS2 All in One Desk Reference For Dummies $10
Adobe Photoshop CS2 Classroom in a Book(Adobe Press) $10
----
Find more by these manufacturers:
Microsoft...Mac...Adobe...Borland...Macromedia...IBM
http://pnt.lalasoftb.com/?[random letters]
----



Brodick led the procession up
The Maitland home was at the t
Brodick dismounted with Alec i
The crowd silently pressed for
Alecs homecoming should be pri


OEM is illegal BS.

The companies listed in scams like these do NOT sell their software online by some shady resellers.

The OEM software spams are REALLY annoying, but they are way too numerous out there making that Adobe, Apple, IBM, Microsoft etc etc can't keep up to the speed of scamming.

Of the scammer URL we can get the following info

Domain Name: LALASOFTB.COM
Registrar: BIZCN.COM, INC.
Whois Server: whois.bizcn.com
Referral URL: http://www.bizcn.com

Creation Date: 04-jul-2007
Expiration Date: 04-jul-2008 -- these dates are one more indication of not being proper kosher. Recent registration, minimum registration validity time.

Domain name: lalasoftb.com

Registrant Contact:
-
Alex Rodrigez domains@surink1.com
+358-30-5563 fax:
po box 445
Laapentranta Laapentranta 12700
fi


Thus our friend Alex Rodrigez aka Leo Kuvayev again.
Again with an invalid Finnish address and invalid phone number.
What is his passion with Finland?

And surink1.com email?

Domain Name: SURINK1.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS1.GORLOK.NET

Creation Date: 21-jun-2007
Expiration Date: 21-jun-2008

Domain Name.......... surink1.com
Creation Date........ 2007-06-22 10:40:26
Registration Date.... 2007-06-22 10:40:26
Expiry Date.......... 2008-06-22 10:40:26
Organisation Name.... cheng mingfei
Organisation Address. NO.599 east road nanjing
Organisation Address.
Organisation Address. Nanchang
Organisation Address. 321100
Organisation Address. JX
Organisation Address. CN

Admin Name........... cheng mingjun
Admin Address........ NO.599 east road nanjing
Admin Address........
Admin Address........ Nanchang
Admin Address........ 321100
Admin Address........ JX
Admin Address........ CN
Admin Email.......... liuggg@surink1.com
Admin Phone.......... +86.7916316556
Admin Fax............ +86.7916316556


http://www.dns.com.cn gets listed on bad registrars list.
And Mr Kuvayev seems to do a lot of traffic with the Chinese lately.

Monday, December 04, 2006

Way too much spam is repetitive




How sad is this? Actually at the moment over 1500 spams in my gmail. And all are repetitive - there don't seem to be any entertaining ones.
As bad as hotmail, except the ones that arrive at all in gmail aren't all in remote or added .gif images but in text.

In hotmail spams there aren't many spam emails left that would have actual text - it's all remote or added images.

In gmail it's all about these [random letters].ph or .pk financial advice that don't have anything to do with the subject line, or fake rolexes, 10,000 creative ways of spelling viagra and cialis, or a number of ways to make my woman enjoy. Oh too bad I am not a lesbian. Or I could make my male body part 4" longer if I had one... however that seems to be a bit passe' as the spam object.

So among the few enjoyable subjects seems to be running whois on all these illegal software ads.