The following URL domains were present in the sample email
and at the time of processing resolved as indicated:

  p7.hostingprod.com as 216.39.58.74
  More info http://www.blockalert.com/?view=arin&level=1&start=216.039.048.000

It is possible that the following email was not actually
spam or that some domains present in it do not represent
willingly spamvertized destination sites.

-- S A M P L E  F O L L O W S --

Return-Path: <certain6^msn.com>
Received: from 70.107.255.231 (static-70-107-255-231.ny325.east.verizon.net [70.107.255.231])
        by www.***.*** (Postfix) with SMTP id 33F3B11E82
        for <***^***.***>; Tue, 18 Apr 2006 03:59:10 -0400 (EDT)
Received: from 51.28.3.60 by web488.mail.yahoo.com; Tue, 18 Apr 2006 13:54:11 +0500
Message-ID: <UXYNBAWZKFBVNDDLBLEUIH^msn.com>
From: "Arlene Carr" <certain6^msn.com>
To: ***^***.***
Subject: about your offer
Date: Tue, 18 Apr 2006 07:54:11 -0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="--273101125051307"
X-CS-IP: 44.162.226.226

----273101125051307
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable

Hello ***^***.***,

For the first time we are allowing businesses like yours to expose your of=
fer to all our subscribers worldwide. Our members have expressly accepted =
to receive commercial material from our clients. So, your ad will be welco=
me.

Take advantage of this great opportunity and generate more revenues throug=
hout the year.

null://p7.hostingprod.com/^ptragetnet.com/pt

Regards,

PTarget Network / Sales Dept.
3506 24th Street, LIC, NY 11106

_________________________________________________________
No more:
null://p7.hostingprod.com/^ptragetnet.com/no.html

----273101125051307--

.

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators.  All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

        http://www.killfile.org/~tskirvin/nana/

The following URL domains were present in the sample email
and at the time of processing resolved as indicated:

  p7.hostingprod.com as 216.39.58.74
  More info http://www.blockalert.com/?view=arin&level=1&start=216.039.048.000

It is possible that the following email was not actually
spam or that some domains present in it do not represent
willingly spamvertized destination sites.

-- S A M P L E  F O L L O W S --

Return-Path: <respondent0^hotmail.com>
Received: from 70.107.255.231 (static-70-107-255-231.ny325.east.verizon.net [70.107.255.231])
        by www.***.*** (Postfix) with SMTP id 3F14411E82
        for <***^***.***>; Wed, 19 Apr 2006 20:10:55 -0400 (EDT)
Received: from 48.152.144.66 by web915.mail.yahoo.com; Wed, 19 Apr 2006 20:10:55 -0500
Message-ID: <DYJRWPQDWLIVGCBKSMSI^yahoo.com>
From: "Holly Fernandez" <respondent0^hotmail.com>
To: ***^***.***
Subject: about your offer
Date: Wed, 19 Apr 2006 21:06:55 -0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="--868710046194593208"
X-CS-IP: 14.156.185.149

----868710046194593208
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable

Hello ***^***.***,

For the first time we are allowing businesses like yours to expose your of=
fer to all our subscribers worldwide. Our members have expressly accepted =
to receive commercial material from our clients. So, your ad will be welco=
me.

Take advantage of this great opportunity and generate more revenues throug=
hout the year.

null://p7.hostingprod.com/^boostingyourtraffic.com/cher

Regards,

Boosting YourTraffic / Sales Dept.
250W 46TH Street, New York, NY 10018

_________________________________________________________
No more:
null://p7.hostingprod.com/^boostingyourtraffic.com/nofurther.html

----868710046194593208--

.

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators.  All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

        http://www.killfile.org/~tskirvin/nana/

The following URL domains were present in the sample email
and at the time of processing resolved as indicated:

  p7.hostingprod.com as 216.39.58.74
  More info http://www.blockalert.com/?view=arin&level=1&start=216.039.048.000

It is possible that the following email was not actually
spam or that some domains present in it do not represent
willingly spamvertized destination sites.

-- S A M P L E  F O L L O W S --

Return-Path: <sedimentary0^earthlink.net>
Received: from 70.107.255.231 (static-70-107-255-231.ny325.east.verizon.net [70.107.255.231])
        by www.***.*** (Postfix) with SMTP id 0544D11E82
        for <***^***.***>; Sat, 22 Apr 2006 02:06:34 -0400 (EDT)
Received: from 118.136.78.242 by ; Sat, 22 Apr 2006 09:03:36 +0200
Message-ID: <NIGBZLVZNYEAOPCOJBCGKLDB^msn.com>
From: "Paula Hayes" <sedimentary0^earthlink.net>
Reply-To: "Paula Hayes" <sedimentary0^earthlink.net>
To: ***^***.***
Subject: about your offer
Date: Sat, 22 Apr 2006 06:03:36 -0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="--68778523370655605254"
X-Webmail-Time: Sat, 22 Apr 2006 02:57:36 -0400

----68778523370655605254
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable

Hi,
Check out this page. Lot's of interesting things to download.
null://p7.hostingprod.com/^allinonedirectories.com/loanofficers

******************************************

No further emails?
null://p7.hostingprod.com/^allinonedirectories.com/nofurther.html

----68778523370655605254--

.

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators.  All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

        http://www.killfile.org/~tskirvin/nana/