Friday, March 02, 2007

Medicine spam - ceasarrare.com

From: reemphasizesblanching@protectfrogs.com
Subject: Don't know where to buy medications?
Date: March 2, 2007 8:52:51 PM GMT+00:00
To: [someone else's email]
Return-Path:
Received: [..] 66.249.83.27 (HELO ASPMX5.GOOGLEMAIL.com) by ispwith esmtp (1?IL-J<00>K1 +X3JT) id *2@0D*-R@@(LB-V= for [email]; Sat, 03 Mar 2007 00:52:51 +0400
Message-Id: <01c75d2e$451dd410$6c822ecf@reemphasizesblanching>
Mime-Version: 1.0
X-Mimeole: Produced By Microsoft MimeOLE V6.00.3790.2663
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0006_01C75CFB.FA836410"
Thread-Index: Aca6Q6+47R*F,05L4+X7-N*2X*96)U==

Dear valued member!

We are writing to inform you about the result of the recent research concerning the quality of the drugs sold on the Internet.

Not all the meds offered in numerous Web pharmacies are as qualitative as you might wish them to be. According to the results of the official research made by our Association only one (USDrugs) out of 46 online drugstores analyzed offers drugs of true generic quality.

Remember! Taking generic drugs you will secure yourself against poisoning!

Click here to learn more.

With Best Regards, Pierre Clarke
USDrugs B.V.
http://www.ceasarrare.com/


Of which whois :
Referral URL: http://www.dotregistrar.com
Registrant, administrative, technical contact :
Icek Pankovich (CEASARRARE-COM-DOM)
Sos. Mihai Bravu,No. 5
Bl. 4, Entr. 4, Apt. 9
Bucuresti, Sector 2 76101
Romania
+040.0212516407
+040.0212516407
icek_pankovich@yahoo.com

Domain servers in listed order:
Name Server: ns1.tonsilsbot.com
Name Server: ns2.groupron.com
Name Server: ns1.belikeyous.com

And a second "auditor" of Bank of Scotland in one day

X-Apparently-To: [my email]
X-Originating-IP: [212.216.176.109]
Return-Path:
Authentication-Results: mta246.mail.mud.yahoo.com from=virgilio.it; domainkeys=neutral (no sig)
Received: ... from pswm13.cp.tin.it (192.168.70.37) by vsmtp21.tin.it (7.2.072.1) id 45D4389D0024FD02; Fri, 2 Mar 2007 04:30:34 +0100
Message-ID: <11110b2ef9d.wills008@virgilio.it>
Date: Fri, 2 Mar 2007 04:30:34 +0100 (GMT+01:00)
From: "Mr.Larry Bodricks" Add to Address Book Add Mobile Alert
Reply-to: mrlarry_bodricks2@yahoo.co.uk
Subject: From Mr.Larry Bodricks/Business Relationship
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: 195.175.37.71

From Mr.Larry Bodricks/Business Relationship

I am contacting you
individually for a business transaction involving GBP £30 Million and I
hope that you will contact me at your earliest convenient for this
possible business transaction.

I am the Auditor General, and Chairman,
Audit Committee of Bank of Scotland, with your sincere assistant and
co-
operation,I have determined to work this deal with you if you can do
the business.

At the moment,I am constrained to issue more details
about this business until your positive response is received.

Please
take a moment of your time schedules to read this and send your
response or better call me with this mobile number : +44 704 57 06187
for further information concerning this transaction.

I assure you that
this deal is worth taking and highly profitable.

Thank you for your
time and attention.
Yours truly,
........................
Mr. Larry
Bodricks,
Auditor General,
Bank Of Scotland Plc.
Tel: +44 704 57 06187
Email: mrlarry_bodricks3@yahoo.co.uk


Wow. Another Bank of Scotland auditor general and chairman who is offering me to transfer 30 million UK pounds to my account within one day.
Neither of these guys is using their bankofscotland.co.uk email address. Both use a mobile phone number, not even a landline. Same mobile phone number even.
I think the Bank of Scotland might be interested in these scam attempts .. if I get a third one today, I will do something about it.

Mr Hobson - Bank of Scotland scam try

X-Apparently-To: [my email] via 206.190.48.154; Thu, 01 Mar 2007 22:18:41 -0800
X-Originating-IP: [212.216.176.109]
Return-Path:
Authentication-Results: mta240.mail.re3.yahoo.com from=virgilio.it; domainkeys=neutral (no sig)
Received: [..[ from pswm13.cp.tin.it (192.168.70.37) by vsmtp21.tin.it (7.2.072.1) id 45D4389D00253205; Fri, 2 Mar 2007 07:13:02 +0100
Message-ID: <1111147afca.johnsonsaka@virgilio.it>
Date: Fri, 2 Mar 2007 07:13:02 +0100 (GMT+01:00)
From: "Mr. Anthony Hobson"
Reply-to: mrhobson1111@yahoo.co.uk
Subject: Goodday/Call me
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: 195.175.37.71


Goodday/Call me

I am contacting you individually for a business
transaction involving transfer of GBP £30 Million and hope that you
will reply back at your convenient time for this possible business
transaction.

I am the Auditor General, and Chairman, Audit Committee
of Bank of Scotland, with your sincere assistant and co-operation,I
have determined to work this deal with you if you can do the business.

At the moment,I am constrained to issue more details about this
business until your positive response is received.

Please take a
moment of your time schedules to read this and send your response via
mrhobson2222@yahoo.co.uk or call me with this mobile number : +44 704
570 6187 for further information concerning this transaction.

I assure
you that this deal is worth taking and highly profitable.

Thank you
for your time and attention.

Yours truly,
........................
Mr. Anthony Hobson,
Auditor General,
Bank Of Scotland Plc.
Tel: +44 704
570 6187
Email: mrhobson2222@yahoo.co.uk



The originating IP address is in Washington, USA.
The email address used indicates faking to be in Italy.
If you actually were from Bank of Scotland, why would you use an Italian / yahoo UK address and not your bankofscotland.co.uk email address? And why on earth would you have a mobile phone number only, Mf Hobson?

InstantQuotes aka Jalbabyfood.com - loan spams

From: esprit@access-one.com
Subject: Re: loan request
Date: March 1, 2007 5:55:35 PM GMT+00:00
To: [somebody else's email than mine address listed]

Shop hundreds of lenders...
..with just ONE click!
Step 1... Answer a few questions
Step 2... Lenders compete for your business
Step 3... See how much YOU can save!

Refinance NOW while rates are still low. You could save Hundreds per month!

There is no obligation and this is a FREE quote!
• Debt Consolidation
• Home Improvement
• Refinancing
• Second Mortgage
• Equity Line of Credit

Please visit http://jalbabyfood.com/ for short application


Of which

Domain Name: jalbabyfood.com
Registrar: THE NAME IT CORPORATION DBA
NAMESERVICES.NET

Registrant, Administrative, Technical Contact:
Name: Gary Reed
Address: 3495 Cambie street
150 Vancouver, BC V5Z 4R3, CA
Email Address: garyr@coldmail.ca
Phone Number: (604)767-8695


Once visited that website, it shows some fancy text and graphics for being spam-can compliant .. well - I have never in my life asked to get ANY loan quotes. That means I don't care for "remove me" when I don't want to get them in the first place.
This "Jalbabyfoods.com" aka "InstantQuotes" does also not have any kind of about them. Very reassuring.

Felicia Samson - UK millionaire scamming from CHARITIES

Another less than credible one ...
A female millionaire in London who is offering 20 $ of her millions of dollars that she does not want to give to CHARITIES because she has a cancer. If she had millions of pounds, she'd be dumb to waste away spamming unknown people when she could just cure herself.

From: fciasaonm@rediffmail.com
Subject: can i trust you ?
Date: February 21, 2007 7:39:08 PM GMT+00:00
To: fciasaonm@rediffmail.com
Return-Path:
Received: [...] (qmail 10952 invoked by uid 510); Wed, 21 Feb 2007 19:39:08 +0000 [..]
Domainkey-Signature: a=rsa-sha1; q=dns; c=nofws; s=redf; d=rediffmail.com; b=d+HtN1XoiglkoGgr/3LWWpCdJj4H/ZLZDFu8S+1ju7rmx9NMeAO3NgIsuoPkseddxd/A3qdgoc9yVHtUbT9k7fp04qFtpNM06FPIvXMha3AQSLjx2I494IctU9kAK4iaFOXjxKOa8HzNsCqHQPu8TLp4wEAX5uk7SUBGJfjig1s= ;
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Scanned: yes
Original-Recipient: [my email]


Hello,

You may be surprised to receive this mail, as you read this, don't feel so sorry for me because I know everyone will die someday.

My name is Mrs. Felicia Samson, a business woman in London. I have been diagnosed with esophageal cancer which was discovered very late due to my laxity in caring for my health. It has defiled all forms of medication right now and I have only few hours left to live, according to medical experts. I have never particularly lived my life so well as I never really cared for anyone not even me but my business. Though I am very rich, but I was never generous, I was always hostile to people and I only focus on my business as that was the only thing I cared for in my life. But now I regret all this as I now know that there is more to life than just wanting to have or make all the money in the world. I believed when God gives me a second chance to come to this world I would live my life in a different way from how I have lived now, but now tha God has called me through this way I willed most of my properties and access to my immediate and extended family and as well as few close friends.

I want God to be merciful to me and accept my soul and so with that reason I decided to give alms to CHARITY ORGANISATIONS, as I want this to be one of the last good deed I did on earth, so far I have distributed money to some Charity Organization in countries like India and Africa. Now that my health has deteriorated so badly, I cannot do this myself anymore.

I once asked my family members to close one of my accounts and distribute the funds which I have there to CHARITY ORGANSATION in Rwanda and Pakistan; they refused and kept the money to themselves. Hence, I do not trust them anymore, as they seem not to be contended with what I have left for them. The last of the funds which no one knows of, is the cash deposit in one of the banks here. I want to know if you can be of good help to dispatch these funds to CHARITY organizati ns. I have set aside 20% of the total amount $1,500,000.00 One million five hundred thousand dollars) for you and your time and patience for carrying out this duties. This means you will keep $300,000 (three hundred thousand dollars) for yourself and donate the rest to any charity organisation. May God be with you as you have decided to take a bold step to heal the world with me or even in my demise. I am going in for an operation now, and I don’t think I will make it. And this hurts.

If you can give me this assistance, you can then contact my lawyer who will assist you in getting the funds to you in my absence if i die or not. He would give you more details. His name is Barr. Harry Wesley and his email address is: ( barrhwesleyy@aim.com ) He would guide you through receiving the funds.

Best Regards,
Felicia Samson

Thursday, February 08, 2007

Lochers.com - underwear spammers with cmpgnr.com

From: info@lochers.com
Subject: Locher's New Darling Collection
Date: February 8, 2007 6:49:07 PM GMT+00:00
To: [my email]
Reply-To: Lochers_yyyvwv@cmpgnr.com
Return-Path:
Received: [...] from mta16br.cmpgnr.com (mta16br.cmpgnr.com [216.24.227.16]) by [isp] (Xserve/smtpin60/MantshX 4.0) with SMTP id l18Im31u005587for ; Thu, 08 Feb 2007 10:48:03 -0800 (PST)
Errors-To: gotb889308_888565_702191_931354833@cmpgnr.com
Message-Id: <1700222.1170960547062.KadaSegment.156.1@mta16br.cmpgnr.com>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_429433_18707296.1170960547062"
Bounces-To: somrandomnumbers@cmpgnr.com
X-Campaign: 889308.888565.702191.931354833
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Scanned: yes
Original-Recipient: [my email]


Just in time for Fashion Week in Paris, Locher's launches their new darling embroidery collection featuring tops embroidered with delicate flowers and "nasty sayings", (perfect for Valentine's Day, gift certificates also available).

The entire collection of 16 tops plus accessories is available online at http://www.lochers.com The photo shoot for this collection was shot by frequent Italian Vogue photographer Amedeo Volpe.
It would be surely nice to have you visit.
Bisous from Nicole

You are subscribed as [my email]. To unsubscribe please click here.
(had a link to www.cmpgnr.com/ something)


Umh, what?
No, I have not subscribed to lochers.com. I'm not interested in women's underwear spamlist subscriptions. So let's see a bit further.

Domain Name.......... lochers.com
Creation Date........ 2004-06-10
Registration Date.... 2004-06-10
Expiry Date.......... 2007-06-10
Organisation Name.... Nicole Locher
Organisation Address. 188 rue championnet #122
Organisation Address.
Organisation Address. paris
Organisation Address. 75018
Organisation Address. TX
Organisation Address. FRANCE
Admin Name........... Nicole Locher
Admin Address........ 188 rue championnet #122
Admin Address........
Admin Address........ paris
Admin Address........ 75018
Admin Address........ TX
Admin Address........ FRANCE
Admin Email.......... unagidesign@yahoo.com
Admin Phone.......... +1.0698779484
Admin Fax............
Tech Name............ YahooDomains TechContact
Tech Address......... 701 First Ave.
Tech Address.........
Tech Address......... Sunnyvale
Tech Address......... 94089
Tech Address......... CA
Tech Address......... UNITED STATES
Tech Email........... domain.tech@YAHOO-INC.COM
Tech Phone........... +1.6198813096
Tech Fax.............
Name Server.......... yns1.yahoo.com
Name Server.......... yns2.yahoo.com


So wait ... Paris, TX, or Paris, France?
The address is invalid.
The phone number is invalid for at least being in France.

Second part, whois for this remove me-something part :

Registrant:
Got Corporation Inc.
685 Cathcart Street
Suite 300
Montreal, Quebec H3B 1M7
Canada
Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: CMPGNR.COM
Created on: 04-Oct-06
Expires on: 04-Oct-08
Last Updated on:

Administrative Contact:
Saibil, Jeremy it@gotcorp.com
Got Corporation Inc.
685 Cathcart Street
Suite 300
Montreal, Quebec H3B 1M7
Canada
5142820595 Fax -- 5142821908
Technical Contact:
Saibil, Jeremy it@gotcorp.com
Got Corporation Inc.
685 Cathcart Street
Suite 300
Montreal, Quebec H3B 1M7
Canada
5142820595 Fax -- 5142821908
Domain servers in listed order:
NS1.FST-DNS.ORG
NS2.FST-DNS.ORG
NS1.CAMPAIGNER.COM


Some companies don't just seem to get that faking that people would have subscribed to their spamlists is rude. Whatever rude would be in French.

Wednesday, February 07, 2007

French bank scam

Ah ah.
One more bank scam.
This time ah so European version.
Oh I'm a French bank this and that and I want to offer you 15 million UK pounds, just nevermind that my IP is Italy, and you want me to anser to a Polish email addy, not your work email address.
So we just found this random Gerard Stone that is a relative of yours so do you want to get all this free money?
Free money, sounds all good doesn't it?


X-Apparently-To: [my email] via 206.190.48.158; Wed, 07 Feb 2007 01:11:27 -0800
X-Originating-IP: [212.216.176.223] [that IP resides in Arese, Lombardia, Italy]
Return-Path:
Authentication-Results: mta332.mail.re4.yahoo.com from=virgilio.it; domainkeys=neutral (no sig)
Received: from 212.216.176.223 (EHLO vsmtp3.tin.it) (212.216.176.223) by mta332.mail.re4.yahoo.com with SMTP; Wed, 07 Feb 2007 01:11:22 -0800
Received: from pswm3.cp.tin.it (192.168.70.17) by vsmtp3.tin.it (7.2.072.1) id 45ACADE60045A30C; Wed, 7 Feb 2007 10:11:12 +0100
Message-ID: <1109b788a4a.b13_richard@virgilio.it>
Date: Wed, 7 Feb 2007 10:11:12 +0100 (GMT+01:00)
From: "Mr Richard"
Reply-to: bob_richard@o2.pl
Subject: From Richard
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: 86.62.6.162
Content-Length: 790



Dear,
Do accept my sincere apologies if my mail does not meet your
personal ethics.I introduce myself as Richard a staff in the accounts
management Section of a well-known bank here in France.One of our
foreign accounts with holding balance of £15,000,000(Fifteen Million
British Pounds) has been dormant and last operated in the past 5 years.
From my investigations and confirmations, the owner of this account is
a Foreigner by name Gerald Stone died on the 4th of January 2002 on a
planecrash in Birmingham faraway United Kingdom.Since then nobody has
done anything as regards the claiming of this moneyas he has no family
Member who is aware of the existence of either the account nor the
Funds.Information from the National Immigration also states that he was
single on entry into France.I have confidentially discussed this issue
with some of the bank officials and we have agreed to find a reliable
foreign partner to deal with. We thus propose to do business with you,
standing in as the next of kin of the deceased and have the funds
released to you after due processes have been followed.This transaction
is totally free of risk and troubles as the fund is Legitimate and does
not originate from drug, money laundry, terrorism or any othe rIllegal
act.On your interest, let me hear from you.
Regards,
Mr Richard

Monday, February 05, 2007

Private Urgent Message from Citibank

How urgent can it be? I don't even have an account at them.

citibank scam attempt

The link went to http://www.citi.com.globalportal.id2508058396.cpurn.biz/app instead.

Of which whois :
Domain Name: CPURN.BIZ
Domain ID: D16251490-BIZ
Sponsoring Registrar: MONIKER ONLINE SERVICES, LLC
Sponsoring Registrar IANA ID: 228
Domain Status: clientDeleteProhibited
Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Registrant ID: MONIKER344946
Registrant Name: hostmaster
Registrant Organization: Domain Park Limited
Registrant Address1: Vaea Street
Registrant Address2: Level 2, Lotemau Centre
Registrant City: Apia
Registrant State/Province: Samoa
Registrant Postal Code: 0815
Registrant Country: Samoa
Registrant Country Code: WS
Registrant Phone Number: +42.0603822657
Registrant Email: hostmaster@domainparkltd.com
Administrative Contact ID: MONIKER344946


Citibank's report fraudulent and suspicious emails instructions. Needless to say, they got some email ...

Mr John Michael - 419 once in a while

How weird. Mr Businessman who is now emailing me that he has stored my $ 750,000 that are ready for me .. is 1) using a hotmail address, not his work address, 2) my name is not in the To : field .. last time I checked my name wasn't "undisclosed-recipients", and 3) for some reason, the work email's spam filters didn't catch this. Oh, and his secretary has a walla.com email address instead of a professional one. Or is it maybe that the only time I have ever seen anyone use any walla.com email address is for professional African scammers?

From: jmmichael19@hotmail.com
Subject: COMPENSATION
Date: February 3, 2007 11:31:08 AM GMT+00:00
To: undisclosed-recipients: ;
Reply-To: jnmichael007@yahoo.com
Return-Path:
Received: [...]
Received: from hotmail.com ([65.54.162.47]) by bay0-omc3-s20.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Sat, 03 Feb 2007 03:31:12 -0800
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Sat, 03 Feb 2007 03:31:12 -0800
Received: from 65.54.162.200 by by108fd.bay108.hotmail.msn.com with HTTP; Sat, 03 Feb 2007 11:31:08 +0000 (GMT)
X-Originating-Ip: [196.29.120.70]
X-Sender: jmmichael19@hotmail.com
Message-Id:
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-Auditid: 1148853b-acc1abb00000638b-2b-45c47281fc09
X-Originating-Email: [jmmichael19@hotmail.com]
X-Brightmail-Tracker: AAAAAA==
Original-Recipient: [my email]
X-Originalarrivaltime: 03 Feb 2007 11:31:12.0417 (UTC) FILETIME=[CECE6110:01C74786]

Dear Friend,

I'm happy to inform you about my success in getting those Funds transferred under the cooperation of a new partner from Trinidad and Tobago. Presently I'm in Switzerland for investment Projects with my own share of the total sum. Meanwhile, I didn't forget your past efforts and attempts to assist me in transferring those funds despite that it failed us some how.

Now contact my confidential secretary, his name is Mr. George Okoye on this e-mail address:- secretary_sgeorge@walla.com ask him to send you the total of USD$750,000.00 which I kept for your compensation for all the past efforts and attempts to assist me in this matter in the past. I appreciated your efforts at that time very much. So feel free and get in touch with my secretary Mr. George Okoye and instruct him where to send the amount to you.

Please do let me know immediately you receive it so that we can share the joy after all the sufferness at that time. In the moment, I am very busy here because of the Investment projects which me and the new partner are having at hand. Finally, Remember that I had forwarded instruction to the secretary on your behalf to receive that money, so feel free to get in touch with Mr. George Okoye, he will send the amount to you without any delay.

Regards,
Mr. John Michael.

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

Sunday, February 04, 2007

Alex Rodrigez - how long until he gets a Wikipedia entry?

Someone found be searching for Alex Rodrigez some time ago.
Interesting.
Also interesting to find a blog with the same interests than mine, where of course I found some sites of this Alex Rodrigez again. (Except what I have noticed Mr Rodrigez more for is Mac software .. not just Office).
Since he seems to be quite famous .. I wonder how long before someone bothers to make a wikipedia entry for him?

Russian "Euro" casino, Eucas.org ..

Now I must admit I'm not used to casino ads. I've been getting them slowly every now and then .. and I kind of feel I shouldn't bother to give these ones a label - that would prove they are worth something. Maybe the casino owners weren't or aren't that bad themselves? But they send spam. Or pay someone else to send spam. And that is enough to really annoy me.

Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs114525qbf;
Fri, 2 Feb 2007 23:07:39 -0800 (PST)
Received: by 10.35.84.16 with SMTP id m16mr8501297pyl.1170486459919;
Fri, 02 Feb 2007 23:07:39 -0800 (PST)
Return-Path:
Received: from c-24-125-1-11.hsd1.va.comcast.net (c-24-125-1-11.hsd1.va.comcast.net [24.125.1.11])
by isp with ESMTP id 6si20143323nzn.2007.02.02.23.07.39;
Fri, 02 Feb 2007 23:07:39 -0800 (PST)
Received-SPF: pass (isp: domain of hslohnu@comcast.net designates 24.125.1.11 as permitted sender)
From: "Kasparov Chessmate"
To: [my email]
Subject: Fun and make money.
Date: Sat, 3 Feb 2007 02:07:38 +0500
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0000_01C74738.14045F40"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Thread-Index: AcdHOBQEyuj3lA1ISnOABPe4yNeWTA==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
Message-Id:

Only from the most noble of all
casinos you could except such a Regal gift:

300% Bonus on your First Deposit!!!

Deposit 100 €/$ and Play with 400 €/$!!!
And on top of that, a service at such a
level you would not find in the best
Royal Families of Europe.

<<<<< Come and play at Royal VIP Casino!!! >>>>>
then link

Of where the link goes to we get with whois :

Domain ID:D138238728-LROR
Domain Name:EUCAS.ORG
Created On:26-Jan-2007 12:46:22 UTC
Last Updated On:02-Feb-2007 19:15:56 UTC
Expiration Date:26-Jan-2008 12:46:22 UTC
Sponsoring Registrar:OnlineNIC Inc. (R64-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:ONLC-2572694-4
Registrant Name:Sergey Ivanov
Registrant Organization:Personal Domens
Registrant Street1:Russia, Mikhailova st, 22-22
Registrant Street2:
Registrant Street3:
Registrant City:Moscow
Registrant State/Province:MO
Registrant Postal Code:109456
Registrant Country:RU
Registrant Phone:+7.4955184040
Registrant Phone Ext.:
Registrant FAX:+7.4955184040
Registrant FAX Ext.:
Registrant Email:maddreams2005@yandex.ru
Admin ID:ONLC-2572694-1
Admin Name:Sergey Ivanov
Admin Organization:Personal Domens
Admin Street1:Russia, Mikhailova st, 22-22
Admin Street2:
Admin Street3:
Admin City:Moscow
Admin State/Province:MO
Admin Postal Code:109456
Admin Country:RU
Admin Phone:+7.4955184040
Admin Phone Ext.:
Admin FAX:+7.4955184040
Admin FAX Ext.:
Admin Email:maddreams2005@yandex.ru
Tech ID:ONLC-2572694-2
Tech Name:Sergey Ivanov
Tech Organization:Personal Domens
Tech Street1:Russia, Mikhailova st, 22-22
Tech Street2:
Tech Street3:
Tech City:Moscow
Tech State/Province:MO
Tech Postal Code:109456
Tech Country:RU
Tech Phone:+7.4955184040
Tech Phone Ext.:
Tech FAX:+7.4955184040
Tech FAX Ext.:
Tech Email:maddreams2005@yandex.ru
Name Server:NS2.NSSERVISRU.RU
Name Server:NS3.NSSERVISRU.RU


Eucas? The last time I checked, Russia wasn't part of EU ...
And the name Sergey Ivanov is a bit boring but at least we get a few other spam related stuff with google for it.

Another retro sex spam - herbal-kings.com

Another retro sexual enhancement spam ...
The text is so bad .. really, do any guys believe claims like that??
(For once without full headers since for once I am entertained just by the stupidity of the texts)

From: Haydon
To: [my email]
Date: Jan 6, 2007 8:22 PM
Subject: FWD[82]:

Our Penis Enlargement Pills Will Expand, Lengthen And Enlarge Your Penis Up to 3+ Inches. 100% Satisfaction Guaranteed! Or Your Money Back!

Our team of expert Doctors have spent years developing a product that will safely and effectively add length, width, and strength to any man's penis. The work has created a product that has been shown to significantly increase penis length, provide stronger erections, improve sexual endurance, and increase ejaculation volume. ManXL has been labeled a "Medical Breakthrough" with over 1,500,000 bottles sold worldwide. ManXL is the only penis enlargement pill that has been manufactured in a FDA Approved laboratory.

click here >>>>>
(with link)


Ha. Now if this ManXL was a medical breakthrough, you'd think it would have become as famous as all these viagras and cialis. And it probably would have been sold and produced by a pharmaceutical company, not by some herbal-kings.com ...
Hm.. also, if it was approved by FDA, why would the registrants be located in Mexico?

Whois :
Referral URL: http://www.joker.com
domain: herbal-kings.com
owner: Eduardo Macias
organization: TOLMEN STAR ENTERPRISES LTD
email: admin@querendamx.com
address: Querenda No. 353, Fracc. Bosque Camelinas
city: Michoacan
postal-code: 58290
country: MX
phone: +52.443655187
fax: +52.443655187
admin-c: CCOM-477954 admin@querendamx.com
tech-c: CCOM-477954 admin@querendamx.com
billing-c: CCOM-477954 admin@querendamx.com
nserver: ns1.main-dns3.com 59.188.23.77
nserver: ns2.main-dns3.com 218.188.64.134
nserver: ns3.main-dns3.com 210.245.160.139
status: lock
created: 2007-01-06 05:20:40 UTC
modified: 2007-01-23 07:23:16 UTC
expires: 2008-01-06 05:20:40 UTC

contact-hdl: CCOM-477954
person: Eduardo Macias
organization: TOLMEN STAR ENTERPRISES LTD
email: admin@querendamx.com
address: Querenda No. 353, Fracc. Bosque Camelinas
city: Michoacan
postal-code: 58290
country: MX
phone: +52.443655187


Oh wait - the best part - their testimonials :

I've played on and off with pumps, weights, and exercises for the last few years and have never gained one centimeter. I recently began ManXL and was pleasantly surprised to see that this product actually works. I have been on the product 2 months now and I have already gained 1 inch. Its fantastic! My new girlfriend is really impressed with my size and stamina.
J.C. Raleigh, NC


This is going to sound weird but I was never really embarrassed of my penis size in front of my wife. However, I always wished that I was bigger and I was embarrassed of my size when I was in the locker room. I felt that guys would look at me and secretly make fun of me. With ManXL I have gained 1.5 inches and appear quite thick when flaccid. I am no longer embarrassed in the locker room and I feel that I am a solid size now. My wife also loves my new size.
P.J. Holly, MI


Men are going to stand up and clap their hands at these penis enlargement capsules. It has produced remarkable results that have never been seen before with NO negative side effects. These penis enlargement capsules offer women what they really want, more to play with! Those extra inches really do make the difference!
AngelStar - PornStar

Retro viagra and cialis spam - Progenyid.com

They still spam for viagra?
Amazing but they do.
Getting some of these creative spelling viagra-cialis-spams makes me feel retro fuzzy, just as if I was using hotmail 12 years ago.
Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs22459qbf;
Wed, 31 Jan 2007 09:38:25 -0800 (PST)
Received: by 10.49.20.5 with SMTP id x5mr2879040nfi.1170265105219;
Wed, 31 Jan 2007 09:38:25 -0800 (PST)
Return-Path:
Received: from landheim-schondorf.de (p54AAEBB6.dip.t-dialin.net [84.170.235.182])
by isp with SMTP id y23si6893734nfb.2007.01.31.09.38.24;
Wed, 31 Jan 2007 09:38:25 -0800 (PST)
Received-SPF: neutral (isp: 84.170.235.182 is neither permitted nor denied by best guess record for domain of manyasum@iapdatacom.net)
Message-ID: <01c7455e$9934b880$6401a8c0@pentium4>
Reply-To: "Eutimio Pritt"
From: "Eutimio Pritt"
To: "Katsuro Morello" [my email]
Subject: Re: VIAcihGRA
Date: Wed, 31 Jan 2007 18:38:20 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106

Good day,

Viav_gra $1, 80
Ciav_lis $3, 00
Leviv_tra $3, 35

http://www.progenyid!.com ( Important Remove "!" )

--
You believe I didnt do it, then? said Harry, concealing with
difficulty the rush of gratitude he felt at Hagrids words.
Course I do, Hagrid grunted. Yeh say it wasn you, an I believe



So what do we get with good whois? At least the registrants phone number is invalid .. which probably should matter to dotregistrar.com if they weren't bulk domin registrants.

Referral URL: http://www.dotregistrar.com
Registrant:
arnette (PROGENYID-COM-DOM)
gibson

4271 Nw 5th
Plantation, FL 33317
USA
+332.7188767449
arnettegibson@yahoo.com
Domain Name: PROGENYID.COM
Administrative Contact:
arnette arnettegibson@yahoo.com
4271 Nw 5th
Plantation, FL 33317
USA
+332.7188767449
Technical Contact, Zone Contact:
arnette arnettegibson@yahoo.com
4271 Nw 5th
Plantation, FL 33317
USA
+332.7188767449
Record last updated on 19-Jan-2007.
Record expires on 10-Jan-2008.
Record created on 10-Jan-2007.
Domain servers in listed order:
Name Server: in.indusfk.com
Name Server: fk.indusfk.com

Exquisitereplicas

I never realized the fake watches was such a big business. I considered it to be a thing of the past, a thing of the wannabe beach lions beach rolexes from the 1980s .. but they still seem to exist, and they seem to be getting more numerous. First the beautifulswiss thing, now this.
This is getting a bit boring...

Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs129766qbf;
Sat, 3 Feb 2007 13:26:23 -0800 (PST)
Received: by 10.49.42.5 with SMTP id u5mr182529nfj.1170537983204;
Sat, 03 Feb 2007 13:26:23 -0800 (PST)
Return-Path:
Received: from localhost.localdomain (cpe-66-68-88-166.austin.res.rr.com [66.68.88.166])
by isp with SMTP id o45si20601923nfa.2007.02.03.13.26.18;
Sat, 03 Feb 2007 13:26:23 -0800 (PST)
Received-SPF: neutral (isp: 66.68.88.166 is neither permitted nor denied by best guess record for domain of iramey@mailbox.sk)
Message-ID: <5ba501c747d9$b6afc8b7$2621bc89@mailbox.sk>
From: Bvlgari Watches
To: [my email]
Subject: Exquisite Replica
Date: Sun, 04 Feb 2007 00:20:33 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0000_3D3E90D7.57FB7D65"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express V6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

QUALITY REPLICAS!

Rolex Watches
Cartier Watches
Breitling Watches
Bvlgari Watches
Omega Watches
Tag Heuer Watches
Officine Panerai Watches
A.Lange & Sohne Watches
Franck Muller Watches
Chopard watches
Hermes watches
Jacob & Co. watches

Get 25% off when buying 2 watches!

VISIT OUR ONLINE SHOP!
with the link ...

Of which some whois and we have the registrant :

Domain Name: newdsannysongg.com
Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET
Registrant Contact
Name: paul gregoire
Address: 175 Montreal Road
304
vanier, on K1L 6E4
CA
Email Address: paulgregoire@coldmail.ca
Phone Number: (613)255-2162
Administrative Contact
Name: paul gregoire
Address: 175 Montreal Road
304
vanier, on K1L 6E4
CA
Email Address: paulgregoire@coldmail.ca
Phone Number: (613)255-2162
Technical Contact
Name: paul gregoire
Address: 175 Montreal Road
304
vanier, on K1L 6E4
CA
Email Address: paulgregoire@coldmail.ca
Phone Number: (613)255-2162
Record Created on........ 2007-02-01 17:15:16.057
Expire on................ 2008-02-01 17:25:04.000
Domain servers in listed order:
ns1.hairyolddns.com
ns2.hairyolddns.com


Needless to say .. I wouldn't buy from these if I was in the market for a watch.
First - the domain exists for the past 3 days.
Second - and biggest : these people could get sued by the copyright country of any civilized and semicivilized country, probably including even Romania.
Third - wtf is it with the routings of this email? Austin, TX, or Slovakia .. for a Canadian registered site? sure. Now if only I would bother to forward the details to Bvlgari and all these other companies that would be really interested in infringing their name ...

And the first Microsoft Vista Scammers are here ..

Microsoft Vista pirate scammers ... now that didn't take that long that these would start to appear, did it?

Delivered-To: [my email]
Received: by 10.64.185.8 with SMTP id i8cs140932qbf;
Sun, 4 Feb 2007 06:48:42 -0800 (PST)
Received: by 10.90.34.3 with SMTP id h3mr7634002agh.1170600522592;
Sun, 04 Feb 2007 06:48:42 -0800 (PST)
Return-Path:
Received: from 200.209.221.130 ([200.209.221.130])
by [isp] with SMTP id 8si7572771agd.2007.02.04.06.48.36;
Sun, 04 Feb 2007 06:48:42 -0800 (PST)
Received-SPF: neutral (isp: 200.209.221.130 is neither permitted nor denied by best guess record for domain of matkueuo@vinorumcodex.com)
From: "Jackie Mueller"
Reply-To: "Jackie Mueller"
Message-ID: <9700665285.3600826893@vinorumcodex.com>
Date: Sun, 4 Feb 2007 08:51:01 -0600
To: [my email]
Subject: Windows Vista Business ready to download
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

The most comprehensive edition of Windows Vista, Vista Business Upgrade (DVD-ROM) is the first operating system that combines all of the advanced infrastructure features of a business-focused operating system, all of the management and efficiency features of a mobility-focused operating system, and all of the digital entertainment features of a consumer-focused operating system. For the person who wants one operating system that is great for working from home, working on the road, and for entertainment, Vista Business is a no-compromise operating system that lets you have it all. Windows Vista Business contains a number of new features, the most notable of which are: Windows Vista Business combines all the features of a business-focused operating system, all the efficiency features of a mobility-focused operating system, and all of the digital entertainment features of a consumer-focused operating system; Remotely connect to business networks; Windows BitLocker Drive Encryptiption provides improve levels of protection against theft for your important business data whether you are at home, on the road, or in the office; Delivers all of the entertainment features available in Vista Home Premium; includes everything you need to enjoy the latest in digital photography, music, movies, analog TV, or even HDTV; Upgrade from your current edition of Microsoft Windows XP or Windows 2000 (including Windows XP Professional, Windows XP Home, Windows XP Media Center, Windows XP Tablet PC, Windows XP Professional x64, Windows 2000)
Windows Vista Business Upgrade (DVD-ROM)
Retail Price $299.00
Our Price $79.95
You save $219.05
http://juvenileoccupeble.org
Please note, that there will be more special offers available for our constant customers. Every effort has been made to ensure the accuracy of all information contained herein. DS Team makes no warranty expressed or implied with respect to accuracy of the information, including price, product editorials or product specifications. Product and manufacturer names are used only for the purpose of identification. We appreciate your cooperation with us and we'll be glad to see you as our clients in the future.


Microsoft for surely will like this. So I forwarded their piracy department the whole shabang, and meanwhile made some tracing ... So if the registrant details would be correct, these scammers would be in Bulgaria.

Domain ID:D138853446-LROR
Domain Name:JUVENILEOCCUPEBLE.ORG
Created On:03-Feb-2007 21:36:39 UTC
Last Updated On:03-Feb-2007 21:36:42 UTC
Expiration Date:03-Feb-2008 21:36:39 UTC
Sponsoring Registrar:Direct Information PVT Ltd dba PublicDomainRegistry.com (R27-LROR)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:DI_5117152
Registrant Name:Manny Pull
Registrant Organization:Manny Pull
Registrant Street1:1u second st
Registrant Street2:
Registrant Street3:
Registrant City:Sophia
Registrant State/Province:
Registrant Postal Code:B-1050
Registrant Country:BG
Registrant Phone:+032.32653777
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:geraworkman@inbox.com
Admin ID:DI_5117152
Admin Name:Manny Pull
Admin Organization:Manny Pull
Admin Street1:1u second st
Admin Street2:
Admin Street3:
Admin City:Sophia
Admin State/Province:
Admin Postal Code:B-1050
Admin Country:BG
Admin Phone:+032.32653777
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:geraworkman@inbox.com
Tech ID:DI_5117152
Tech Name:Manny Pull
Tech Organization:Manny Pull
Tech Street1:1u second st
Tech Street2:
Tech Street3:
Tech City:Sophia
Tech State/Province:
Tech Postal Code:B-1050
Tech Country:BG
Tech Phone:+032.32653777
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:geraworkman@inbox.com
Name Server:NS1.KROLOBUL.COM
Name Server:NS2.KROLOBUL.COM
Name Server:NS3.KROLOBUL.COM
Name Server:NS4.KROLOBUL.COM
Name Server:NS5.KROLOBUL.COM

Another peculiarity that probably should be taken into account .. the URL redirects after clicking on it to http://www.pozdravloem.com/. Of which we get one of our favorite spammer and scammer bulk domain registration services, pacnames.org, and some scammer who cares for his privacy (as you see the fancy email).
Needless to say ... Microsoft Windows is not legally sold in downloadable format anywhere on this planet.


Domain name: POZDRAVLOEM.COM
Registrar: PacNames
Referral URL: http://www.pacnames.com/
Domain Registrant: (Private Contact) (pws.ad952b82efb7219@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Administrative, Technical Contact: (Private Contact) (pws.ad952b82efb7219@shieldedwhois.com)
Shielded Whois
Shielded WHOIS
PO Box 2076
Arvada CO 80001
US
Telephone: +1.5016348793
Fax:
Name Server: NS1.SRUL5.COM
Name Server: NS2.SRUL5.COM
Domain creation date: 2007-01-19 21:44:58.0
Domain expiration date: 2008-01-20 02:58:07.0

Amina Togar .. another African millionaire?

Let me guess...
Another poor millionaire at a concentration camp with fast speed internet access, offering me millions since I am such a reliable and honest person, whom they found in the internet and trust me more than they would trust their mother...

Oh, and wait - this Liberian guy/gal who is in Senegal has for some reason an Italian IP address, close to Bergamo in the far Northern Italy, and a bit too good English.

From: amina4togar@yahoo.com
Subject: Greetings From Africa [random letters]
Date: February 4, 2007 [some time]
To: [my email]
Return-Path:
Received: [..]
Received: from mx4.hotmail.com ([196.207.197.65]) by [isp] (Xserve/smtpin18/MantshX 4.0) with ESMTP id l14FRx9S022174for ; Sun, 04 Feb 2007 10:06:40 -0800 (PST)
Message-Id: <200702041806.l14FRx9S022174@isp>
X-Mimeole: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
Content-Type: text/plain
X-Msmail-Priority: Normal
X-Spam-Flag: Suspected Spam
Original-Recipient: [email]


Hello,

I am writing you from Africa and I know you will be surprised to receieve a mail from a stranger....Please, don't be surprised...I got your contact from peoples search and decided to share an important issue with you...My name is Amina Togar and I am originally from Liberia, but do reside in Senegal...I am single, 26 years old and I would like you to spare me your time to know and discuss an important issue with you , which in my opinion will be of interest to you and hopefully, we would get to know from there....

Please confirm the receipt of this short mail and I will get back to you with a more detailed mail about myself and what I actually want to share with you....

You may reach me on yahoo messenger with the following id; amina4togar@yahoo.com or you can reply to the email above...

Thanks for your time and hope to hear from you soon...

Amina...

Monday, January 08, 2007

Great responses aol, bol and namecheap.com .. nada

It has been two weeks since I first got my inboxes of email killed by the bounces of the emails sent by the spammers marketing for Beautifulswiss.net or .com.
It has been two weeks since I contacted TOSREPORTS@aol.com, abuse@bol.com.br, and support@namecheap.com. No answers, from any of them.

These beautifulswiss, fineswiss and so on people or someone they pay to do the dirty job, send these spams. My email address is still occasionally showing as the reply-to field, so the undelivered spam bounces to me. Great.

AOL have clear TOS about not using its sites for marketing illegal stuff. Even if AOL would shut down these sites that host the redirects to this site (or its clones), it's still killing them slowly, one by one ... AOL hasn't answered to any TOS report. Fantastic customer service.

Namecheap.com is the domain registrant that has something fancy in their TOS agreement ... But as if they would give a shiitake... allow bulk site registrations, and suddenly any bulk registration site doesn't really care. Your WG Domain or the content found at any associated IP address infringes upon or conflicts with the legal rights of any third party or any third party's trademark or trade name. You also warrant that neither the WG Services nor WG Domain(s) will not be used in connection with any illegal or morally objectionable activity (as defined below in section 5), or, in connection with the transmission of unsolicited commercial email ("Spam"). " Or show me one bulk registration site that cares.

There we go. No answer from any of the TOS breaking and abuse complaints, and the mailboxes still get more bounced shiitake by these same people.
This gives a great image of AOL TOS reports handling people, BOL abuse, and of this bulk spam domain registrant namecheap.com.
Maybe time to write an angry letter to that Mr Maduro if the email address he used in these domain bulk registrations is even valid.
Or one day, time to just get a new email address... it is very frustrating when the address they kill by this shiitake are not the free email addresses but something you actually pay to use. The email provider, as usual, hasn't done anything more than AOL TOS reports on this ...

Tuesday, December 26, 2006

Beautifulswiss.com War - Part II

Beautifulswiss.com War - Part I

Today 8 AM : discovery that this spammer has invaded my inbox, using my email address as his reply-to.
First spam reports and TOS violations were reported hours ago; no reply yet.

Today 9 PM :
Second round of war.
More spam on my inbox.
Again I am used as reply-to fields. F-ers.


Again as in the previous spam post, again the beautifulswiss.com domain.
This time the only difference : the spammer has used a new aol account to spam :

Message-ID: <0AB1981F.70D59CEA@mac.com>
Date: Wed, 27 Dec 2006 02:53:26 +0600
From: "King, Catherine"
User-Agent: eGroups Message Poster
MIME-Version: 1.0
To: "Daniel"
Subject: ROLEX at unbelievable prices cu
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit

High Quality Rrol,x Re*lica

Worldwide Fast Shipping -- Meticulous Design -- Inexpensive

An additonal 15% off when you purchase two or more re.lica watches.

http://members.aol.com/amandagld/

Their stone, nursing a baby in the paradise, wasn't tearfully wax.
Her devil, crying in the toolbox, is silently piggy.



Today around 10 PM,
my response to this last spam attack :


From: me
Subject: Fwd: Undeliverable Mail
Date: December 26, 2006 9:56:17 PM GMT+00:00
To: spam@my email provider, TOSReports@aol.com, support@namecheap.com

This spammer (http://members.aol.com/amandagld/ ) continues to abuse my email address.
My email address in the reply-to field, making me angry...

This aol account forwards to http://beautifulswiss.com/

of which whois:

Visit AboutUs.org for more information about beautifulswiss.com
a href="http://www.aboutus.org/beautifulswiss.com"AboutUs: beautifulswiss.com/a

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: beautifulswiss.com

Registrant Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Administrative Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Technical Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Status: Locked

Name Servers:
ns1.beautifulswiss.com
ns2.beautifulswiss.com

Creation date: 25 Dec 2006 14:49:57
Expiration date: 25 Dec 2007 14:49:57
=-=-=-=

Domain registrant,
TOS of cheapnames.com would also prohibit this spamming activity; http://www.namecheap.com/legal/reg-agreement.asp has : "Your WG Domain or the content found at any associated IP address infringes upon or conflicts with the legal rights of any third party or any third party's trademark or trade name. You also warrant that neither the WG Services nor WG Domain(s) will not be used in connection with any illegal or morally objectionable activity (as defined below in section 5), or, in connection with the transmission of unsolicited commercial email ("Spam"). "
Cheapnames.com, please consider canceling the account of this user. The domain is selling illegal products, and clearly violates your TOS by sending SPAM.

Cheapnames.com, please deactivate.

Mac.com, please do something to help deactivate these irrelevant spam forwards.

Angrily,

ME

[with full spam and its headers followed]

Beautifulswiss.com - invading my emails means WAR

Dear spammers, the fact that you use MY email address in your spams reply-to field means war.

War, 8 AM on 26 December 2006.
My inbox :


From: Postmaster@post4.tele.dk
Subject: Mail System Error - Returned Mail
Date: December 26, 2006 8:50:43 AM GMT+00:00
To: [my email]
Reply-To: Postmaster@post4.tele.dk
Return-Path: <>
Received: from mac.com (smtpin11-en2 [10.13.10.81]) by ms121.mac.com (iPlanet Messaging Server 5.2 HotFix 2.08 (built Sep 22 2005)) with ESMTP id <0JAV005BHHXQ11@ms121.mac.com> for [my email]; Tue, 26 Dec 2006 00:51:26 -0800 (PST)
Received: from fep34.mail.dk (fep34.mail.dk [80.160.76.198]) by mac.com (Xserve/smtpin11/MantshX 4.0) with ESMTP id kBQ8oj0D023645for ; Tue, 26 Dec 2006 00:50:46 -0800 (PST)
Message-Id:
Mime-Version: 1.0
Content-Type: multipart/report; Boundary="===========================_ _= 6371765(15235)1167123043"; report-type=delivery-status
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Scanned: yes
Original-Recipient: [my email]

This Message was undeliverable due to the following reason:

Dansk forklaring, klik her:
http://tdc.mail.dk/cgi-bin/redirect.pl?MsLimitNumMsgs

The user(s) account is temporarily over quota.



Please reply to
if you feel this message to be in error.
Reporting-MTA: dns; fep34.mail.dk
Arrival-Date: Tue, 26 Dec 2006 09:50:42 +0100
Received-From-MTA: dns; fep24.mail.dk (211.59.78.182)

Final-Recipient: RFC822;
Action: failed
Status: 4.2.2

From: "Williams, Joyce"
Date: December 27, 2006 1:56:02 AM GMT+00:00
To: "Brown, Julie" , "Karen" < some user @post4.tele.dk>, "Lisa Davis" , "Smith, Margaret" , "Andrew" , "Anthony Brown" , "White, Brenda"
Subject: An Affordable Rolex [random letters]
Reply-To: "Johnson, Joseph"

High Quality Rro*ex Rep*ica

Worldwide Fast Shipping -- Meticulous Design -- Inexpensive

An additonal 15% off when you purchase two or more repl,ca watches.

http://hometown.aol.com/steed249/

Her vampire, ruling the world in the Shire, nicely nasty.
Her devil, crying in the toolbox, is silently piggy.

The paper, sitting under the roof, was briefly hellish.
His programmer, standing in your house, is quietly slim.
Her ancestor, stealing money in the shadows, isn't perseveringly yellow.

Your dancer, talking crap behind the window, wasn't generously barren.


War, 11 AM
My response :

From: [my email]
Subject: SPAM Fwd: Mail System Error - Returned Mail
Date: December 26, 2006 5:42:26 PM GMT+00:00
To: TOSREPORTS@aol.com, abuse@bol.com.br, support@namecheap.com
Mime-Version: 1.0 (Apple Message framework v752.2)
Message-Id:
Content-Type: multipart/alternative; boundary=Apple-Mail-1--130814484
References: <20061226085043.somenumbers.fep34.mail.dk@fep34>

I forward this spam report to you AOL Tosreports since it IS relevant.

Someone - user steed249 - is forging my email to be used for sending out these emails. the emails with forget details are in the bottom of this email.
I have received several of these emails today.

The URL http://hometown.aol.com/steed249/ is in this spam advertising.
User steed249 is breaking his TOS.
The site is forwarding to replicas of brand products and that is a violation of your TOS, http://help.aol.com/aimhelp/search.do?cmd=displayKC&docType=kc&externalId=http--helpchannelsaolcom-kjumpadparticleId219305&sliceId=&dialogID=63390544&stateId=1%200%2063416598

Needless to say, I am angry that my email is used in these spams as reply-to.

And bol.com.br and the bulk domain support used for registering these domain are in to field too.
I would think that the TOS of cheapnames.com would also prohibit this spamming activity; http://www.namecheap.com/legal/reg-agreement.asp has : "Your WG Domain or the content found at any associated IP address infringes upon or conflicts with the legal rights of any third party or any third party's trademark or trade name. You also warrant that neither the WG Services nor WG Domain(s) will not be used in connection with any illegal or morally objectionable activity (as defined below in section 5), or, in connection with the transmission of unsolicited commercial email ("Spam"). "
Cheapnames.com, please consider canceling the account of this user. The domain is selling illegal products, and clearly violates your TOS by sending SPAM.

Here are the registrant details I have found out using whois searches for who registered the domains that website redirects to :

Domain Name: FINESWISS.NET
Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: fineswiss.net

Registrant Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Administrative Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Technical Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Status: Locked

Name Servers:
ns1.mygoodswiss.net
ns2.mygoodswiss.net

Creation date: 30 Oct 2006 12:12:26
Expiration date: 30 Oct 2007 12:12:26

It also redirects to :
Domain Name: BEAUTIFULSWISS.COM
[whois.enom.com]
=-=-=-=
Visit AboutUs.org for more information about beautifulswiss.com
a href="http://www.aboutus.org/beautifulswiss.com"AboutUs: beautifulswiss.com/a

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Visit: http://www.namecheap.com/

Domain name: beautifulswiss.com

Registrant Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Administrative Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Technical Contact:
Merengue do Brasil Ltda
Marco Maduro (mmaduro2007@bol.com.br)
+55.4330267732
Fax: +1.
R Marcel Proust, 54
Apucarana, ST 86010
BR

Status: Locked

Name Servers:
ns1.beautifulswiss.com
ns2.beautifulswiss.com

Creation date: 25 Dec 2006 14:49:57
Expiration date: 25 Dec 2007 14:49:57
=-=-=-=
The data in this whois database is provided to you for information
purposes only, that is, to assist you in obtaining information about or
related to a domain name registration record. We make this information
available "as is," and do not guarantee its accuracy. By submitting a
whois query, you agree that you will use this data only for lawful
purposes and that, under no circumstances will you use this data to: (1)
enable high volume, automated, electronic processes that stress or load
this whois database system providing you this information; or (2) allow,
enable, or otherwise support the transmission of mass unsolicited,
commercial advertising or solicitations via direct mail, electronic
mail, or by telephone. The compilation, repackaging, dissemination or
other use of this data is expressly prohibited without prior written
consent from us.

[and in the bottom the full full headers and full text of the spam I had bounced in my email inbox]

Regards,

ME

----- to be continued as soon as I get answers for this spam.

Saturday, December 16, 2006

Nomarriage.com isn't that much about hating women than it's about making money

Nomarriage.com is funny on the first look. And to a big percent I agree on what's the point of marrying anyway. Well - the valid points to marry would be ... getting a visa or visas for either or both,or getting a socially acceptable environment for the reproductional needs, or to just get the tax breaks of the married people, or just to go public with the relationship itself.

But reading thru even the titles on the links of the main page of that site is depressing and disturbing on the same time. So the men are all victims, and all American women are the evil? All men are innocent, and all the American women are just trying to get married, pop out a kid or two, only to become severely post-partum depressed psycho bitches who will force their poor victim husband go years with no sex with them and thus get these East European girlfriends to satisfy the bodily needs... ummh, yea.

But the opinions are interesting.. they tell a lot about the author too. Not that I would have had a real need to run whois on the domain, I was still curious who would want to have his name behind all these opinions. The site was registered by someone called Jan Herzog, whose address was in Venice CA, and contact address in Austin, TX. A geek or a scam for a long time for sure to be also able to own a 3-letter domain as well (never mind its content). Further digging around found some weird results with this relatively unique name, such as some text on Church of Seven Dolors, Minnesota website. And a lot about the family tree, and a listing of 2005 Teacher of the Year nominees for the area of Austin, TX. So an elementary school honor teacher at Huey, or a Montessori school at Wichita Falls? And doesn't this veganism all the carnivores are teh evil-style speech sound comparable to no marriage site? My favorite type of vegetarians and vegans is the one that tolerates other people and their opinions, not the vegenazi. And I think I can use that word in this case after reading all these pearls in nomarriage site, as below. You'd think they have fired teachers for less diverse opinions ... even though here he says he doesn't have kids and on the school website he has a daughter. Well, it could be all miracles and coincidences that there are three people with the same name in the same area, with the exact same rant style too. -- and some other searches found another variant for spelling his name actually as Jon Herzog, and being a Russian or ex Soviet born emigrant residing nevertheless in Austin area.

Why marriage no longer makes sense : "Traditional marriage balances different privileges and obligations for men and women. Modern woman wants all the benefits of "equality" without any of the responsibilities. " and so on. Hm. Why is it that not 100 % of men that I know take the full responsibility of their life? Or maybe those who do take it, are not attracted to women who don't.
Any American man can find a good foreign girlfriend or wife - umh. These men whose identities have been covered look all so perfect.

"Give me one good reason why a man should sign the marriage contact with an American woman. With a foreign bride, I guess you need to sign the marriage contract so she can get her green card and move to the United States." Ok, fine.
"But with an American woman, why not just live with her and fuck her. Verbally commit for life if you want."
"The ONLY thing that signing that marriage contract will do is ensure that the man receives a solid ass raping in divorce court if the relationship doesn't work out. And since American-American marriages have a 60% divorce rate, that's a very real possibility."

What your future wife will be thinking a few years after you have children. .. why marry a leech like these anyway? The mere existence of the people thinking like that would be enough to turn me a gay if I was male.
Majority of American women have Histrionic and Narcissistic disorders - and the majority of the men are sane and angels in comparison...

"The one constant of life is that women, after you marry them, will always change. You think they are sexy and fair now? They will probably change after the wedding.
That's just the way it is, folks, no way to change it. Best thing is to look at the women's mom, married sisters, and how she was raised. That is a much better indicator than what she says when you date her
." (and this would not be the same for the advertised foreigner women? Or look at the dad and married brothers of the broom ... all look sane, happy, in shape and not to be too psychos...) "Do you ever sense that your wife sees you as a means to an end rather than a person? Sometimes I feel like my wife loves me for what I can do for her (kids, security, whatever) but does not really care about me specifically. Many woman who are getting older want to get married, but who they marry seems less important than actually being married." Wise hint for you mr Herzog then : don't ever marry a German wife either. The reason you just gave above is why another American divorced of the German... not being a person anymore, only a tool. It was all about her, her, her...

"It's amazing how many people think that a guy looking for a good woman should do what's "fair" or what's socially responsible. Fuck that. It's each guy's responsibility to find a woman that's the best possible choice for HIM. Who will make HIM happy. This one time, when he's choosing his future wife, he needs to focus exclusively on his own needs and making sure they are satisfied." ... "The "wifely" skills are those that the woman needs to have, or learn darned quick, if she's going to make you happy." (which explained are : Cooking, cleaning, mothering, nurturing, wants kids, loves kids, loyal, trustworthy.) Ha. Your opinion on these wifey skills makes you a breeder. Go on, please marry these foreign, mothering, nurturing, breeder women. Or just make money telling other people how to.

More pearls : "99.9% of the single women in this country are not even marriageable.
Take away the women beyond the marriageable age (over 30).
Take away the fat women.
Take away the ugly women.
Take away the psycho Zoloft / Prozac women.
Take away the raped women.
Take away the women with STDs / HIV.
Take away the women who can't cook.
Take away the women who already have kids.
And you've eliminated 99.9% of the single women in this country."
while on the same page preaching big that "So quite honestly, it doesn't matter if they're fat/skinny/ugly. It's not about what's fair. It's about what you can get. American men get what they want" So it doesn't matter if YOU, the MAN, is ugly, old sick psycho but the womb you want to marry MUST be under 30, a certain attractiveness, weight, size, shape, color, ...

Other pearls - there is a link in the source to fireyourwife.com. It doesn't come as any surprise that this site as well is registered by this same Jan Herzog, this time with the registrant addresses in Silver Spring, MD, and in Austin, TX.

And the big great ass banner to singleabroad.com is registered by Jan Herzog, Silver Spring, MD, and Austin, TX. So it's all about making money, sir Herzog. Somehow I have NEVER seen lusers like you get women like this, this, this, this (ever seen an Eastern European girl like these? I haven't), this, or this ... ONLY for the sake of your passport. And the womben you have added in the pictures are probably not that likely type of being mothering, nurturing, breeder type you were just advocating for. You are only doing this preaching for money. For selling your books (that are that successful that even amazon.com hasn't heard of you??), and your web services. But never mind Amazon since the people's need of love is usually even bigger than their need of religion, I'm sure you will not run out of business. And you sure keep trying and entertaining people, even traditionalwife.com is yours as it appears on whois.
But that is enough for digging out the weird people and ideas and products in the Internet for one evening.



So it's not all about hating American women, it's about making money.