[email] :o)

NANAS Spam Report

unread,

Aug 1, 2008, 4:08:10 AM8/1/08

to

[NOTE: This NANAS post was generated and posted by a script, not a human.
In cases of email sightings, the recipient address and mailhost are
probably munged. If you require information about this post, please email
darkshad -at- darkshado [dot] ca]

LARTs to: kornet_ip {at} kt'com, abuse {at} kornet'net, abuse {at} kt'com,
postmaster {at} kt'com, contact {at} mizuwork'net, abuse {at}
mizuwork'net,
postmaster {at} mizuwork'net, root {at} mizuwork'net, webmaster {at}
mizuwork'net, hostmaster {at} mizuwork'net, noc {at} mizuwork'net, support
{at} mizuwork'net, hostmaster {at} vqbn'com, abuse {at} asianetcom'com,
abuse {at} vqbn'com, postmaster {at} vqbn'com, postmaster {at}
superdsl'com'sg, abuse {at} superdsl'com'sg, abuse {at} enom'com, abuse
{at} internap'com

spam was sent from 203.251.66.150

08/01/08 14:27:04 dns 203.251.66.150
nslookup 203.251.66.150
No reverse DNS (WSANO_DATA)

08/01/08 14:27:20 whois 203.251...@whois.krnic.net

whois -h whois.krnic.net 203.251.66.150 ...

query: 203.251.66.150

# KOREAN

Á¶È¸°á°ú´Â ¾Æ·¡¿Í °°À¸¸ç, ½ÇÁ¦ Á¤º¸¿Í
»óÀÌÇÃ' ¼ö ÀÃ--½À´Ï´ÃTM.

IPv4ÁÃ--¼Ã' : 203.251.66.128-203.251.66.191
³Ã--Æ®¿öÃ...© ÀÌ¸§ : KORNET-INFRA000001
¿¬°á ISP¸í : KORNET
ÇÃ'´ç³»¿ª µî·ÏÀÏ : 20060405
ÇÃ'´çÁ¤º¸ °ø°³¿©ºÎ : N

[ IPv4ÁÃ--¼Ã' »ç¿ë ±â°ü Á¤º¸ ]
±â°ü°íÀ¯¹øÈ£ : ORG1600
±â°ü¸í : ÁÃ--½ÄÈ¸»ç ÄÉÀÌÆ¼
ÁÃ--¼Ã' : ¼º³²½Ã ºÐ´ç±¸ Á¤ÀÚµ¿
¿ìÆí¹øÈ£ : 463-711

[ ³Ã--Æ®¿öÃ...© ´ã´çÀÚ ÀÎ¹° Á¤º¸ ]
±â°ü¸í : KORNET
ÁÃ--¼Ã' : ¼º³²½Ã ºÐ´ç±¸ Á¤ÀÚµ¿
¿ìÆí¹øÈ£ : 463-711
ÀüÀÚ¿ìÆí : korn...@kt.com

--------------------------------------------------------------------------------

¸¸¾à À§ÀÇ IPv4ÁÃ--¼Ã' »ç¿ë±â°ü Á¤º¸°¡
¿Ã¹ÃTM¸£Áö ¾ÊÀ» °æ¿ì
¾Æ·¡ÀÇ ÇØ´ç ¿¬°á ISP ´ã´çÀÚ¿¡°Ã"
¹®ÀÇÇÏ½Ã±â ¹ÃTM¶ø´Ï´ÃTM.

[ ¿¬°áISPÀÇ IPv4ÁÃ--¼Ã' Ã¥ÀÃ"ÀÚ Á¤º¸ ]
ÀÌ¸§ : IPÁÃ--¼Ã'°ü¸®ÀÚ
ÀüÈ¹øÈ£ : +82-2-3674-5708
ÀüÀÚ¿ìÆí : korn...@kt.com

[ ¿¬°áISPÀÇ IPv4ÁÃ--¼Ã' ´ã´çÀÚ Á¤º¸ ]
ÀÌ¸§ : IPÁÃ--¼Ã'´ã´çÀÚ
ÀüÈ¹øÈ£ : +82-2-3674-5708
ÀüÀÚ¿ìÆí : korn...@kt.com

[ ¿¬°áISPÀÇ Network Abuse ´ã´çÀÚ Á¤º¸ ]
ÀÌ¸§ : ½ºÆÃ"/ÇØÃ...·´ã´ç
ÀüÈ¹øÈ£ : +82-2-100-0000
ÀüÀÚ¿ìÆí : ab...@kornet.net

# ENGLISH

KRNIC is not an ISP but a National Internet Registry similar to APNIC.
The following is organization information that is using the IPv4 address.

IPv4 Address : 203.251.66.128-203.251.66.191
Network Name : KORNET-INFRA000001
Connect ISP Name : KORNET
Registration Date : 20060405
Publishes : N

[ Organization Information ]
Organization ID : ORG1600
Org Name : Korea Telecom
Address : Jungja-dong, Bundang-gu, Sungnam-ci
Zip Code : 463-711

[ Technical Contact Information ]
Org Name : Korea Telecom
Address : Jungja-dong, Bundang-gu, Sungnam-ci
Zip Code : 463-711
E-Mail : korn...@kt.com

--------------------------------------------------------------------------------

If the above contacts are not reachable, please contact following ISP
for further information.

[ ISP IPv4 Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-3674-5708
E-Mail : korn...@kt.com

[ ISP IPv4 Tech Contact Information ]
Name : IP Manager
Phone : +82-2-3674-5708
E-Mail : korn...@kt.com

[ ISP Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-100-0000
E-Mail : ab...@kornet.net

spamvertised website is located at
http://WWW.LOUSNE.COM

08/01/08 14:28:16 dns WWW.LOUSNE.COM
Canonical name: LOUSNE.COM
Aliases:
WWW.LOUSNE.COM
Addresses:
203.202.239.55

08/01/08 14:28:42 whois 203.202...@whois.apnic.net

whois -h whois.apnic.net 203.202.239.55 ...
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 203.202.236.0 - 203.202.239.255
netname: MIZUNET
descr: 20 MAXWELL ROAD #09-17
country: SG
admin-c: MNna1-AP
tech-c: MNna1-AP
status: ASSIGNED PORTABLE
mnt-by: APNIC-HM
mnt-routes: MAINT-MIZUNET-SG
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-ch...@apnic.net 20080618
source: APNIC

role: MIZU NETWORK - network administrator
address: 20 MAXWELL ROAD #09-17, MAXWELL HOUSE
country: SG
phone: +65-93360581
e-mail: con...@mizuwork.net
admin-c: MNna1-AP
tech-c: MNna1-AP
nic-hdl: MNna1-AP
mnt-by: MAINT-MIZUNET-SG
changed: hm-ch...@apnic.net 20080618
source: APNIC
changed: hm-ch...@apnic.net 20080618

08/01/08 14:29:37 Abuse address lookup for mizuwork.net

whois -h whois.abuse.net mizuwork.net ...

hostm...@vqbn.com (for mizuwork.net)
postm...@mizuwork.net (for mizuwork.net)
ab...@asianetcom.com (for mizuwork.net)
ab...@vqbn.com (for mizuwork.net)
postm...@vqbn.com (for mizuwork.net)
postm...@superdsl.com.sg (for mizuwork.net)
ab...@enom.com (for mizuwork.net)
ab...@internap.com (for mizuwork.net)

X-UIDL: dbbe0ffce2b0c7fe6394ca35f6adc09f.1217559933.22
Return-Path: <dai...@refdesign.com>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.7-deb (2006-10-05) on
gateway.darkshado.lan
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.4 required=5.0 tests=BAYES_99,HTML_90_100,
HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,HTML_TITLE_EMPTY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,RAZOR2_CHECK,
RCVD_IN_XBL autolearn=no version=3.1.7-deb
X-Spam-Report:
* 0.1 HTML_90_100 BODY: Message is 90% to 100% HTML
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.2 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar to
background
* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 0.2 HTML_TITLE_EMPTY BODY: HTML title contains no text
* 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
* above 50%
* [cf: 65]
* 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
* 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
* [cf: 65]
* 3.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
* [203.251.66.150 listed in sbl-xbl.spamhaus.org]
X-Original-To: spam@localhost
Delivered-To: spam@localhost
Received: from gateway (localhost [127.0.0.1])
by gateway.darkshado.lan (Postfix) with ESMTP id 1AC817EC07B
for <spam@localhost>; Thu, 31 Jul 2008 22:58:25 -0400 (EDT)
Delivered-To: lovec...@darkshado.ca
Received: from gmail-pop.l.google.com [72.14.205.109]
by gateway with POP3 (fetchmail-6.3.9-rc2)
for <spam@localhost> (single-drop); Thu, 31 Jul 2008 22:58:25 -0400
(EDT)
Received: by 10.103.8.11 with SMTP id l11cs180039mui;
Thu, 31 Jul 2008 18:32:29 -0700 (PDT)
Received: by 10.142.158.17 with SMTP id
g17mr3524360wfe.196.1217554348886;
Thu, 31 Jul 2008 18:32:28 -0700 (PDT)
Received: from vvsx.wlfcny.com ([203.251.66.150])
by mx.google.com with SMTP id
32si807433wfc.12.2008.07.31.18.32.26;
Thu, 31 Jul 2008 18:32:28 -0700 (PDT)
Received-SPF: neutral (google.com: 203.251.66.150 is neither permitted nor
denied by best guess record for domain of dai...@refdesign.com)
client-ip=203.251.66.150;
Authentication-Results: mx.google.com; spf=neutral (google.com:
203.251.66.150 is neither permitted nor denied by best guess record for
domain of dai...@refdesign.com) smtp.mail=dai...@refdesign.com
Date: Fri, 01 Aug 2008 01:32:32 +0000
From: "Frugoli Vardeman" <dai...@refdesign.com>
X-Mailer: The Bat! (3.72.01) Professional
Reply-To: Frugoli Vardeman <dai...@refdesign.com>
X-Priority: 3 (Normal)
Message-ID: <5269074725.2...@refdesign.com>
Subject: :o)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------3C6E75B04B607C"
X-EsetId: D39316FAF3E6373180D0

------------3C6E75B04B607C
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Guten Tag, =20
=20
=09
=20

------------3C6E75B04B607C
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
=09<html> <head> <title></title>
<META http-equiv=3DContent-Type content=3D"text/html;
charset=3D"iso-8859-1=
"> =20
</head>=20
<body>=20

Guten Tag, 
 <table width=3D"118" border=3D"7">
<tr>
=09<td align=3D"center" bgcolor=3D"#BCC2F0"
nowrap=3D"nowrap">=09V=
q </td>
<td valign=3D"baseline" bgcolor=3D"#F0BCE3" align=3D"center">
I=09</td>
<td align=3D"left" valign=3D"baseline" bgcolor=3D"#D1BCF0">
A </td>
<td bgcolor=3D"#F0D3BC" bordercolor=3D"#EAC722" nowrap=3D"nowrap"
valign=
=3D"baseline">
G </td>
<td valign=3D"baseline" nowrap=3D"nowrap"
bgcolor=3D"#BCD3F0">R<f=
ont color=3D"#BBD3F0">a</td>
<td bordercolor=3D"#89D855" nowrap=3D"nowrap" valign=3D"top"
bgcolor=3D"=
#F0D6BC"> sA </td>
=09</tr>
=09</table>

WWW LOUSNE COM 
<sp=
an> 
<a name=3D"#trtt"> </a>
</body></html>
------------3C6E75B04B607C--

--
All postings to news.admin.net-abuse.sightings are unconfirmed and unverified
unless stated otherwise by the moderators. All opinions expressed above are
considered the opinions of the original poster, not the moderators or their
respective employers. For a copy of the guidelines to this group, see:
http://www.killfile.org/~tskirvin/nana/

NANAS Spam Report

unread,

Aug 1, 2008, 4:08:26 AM8/1/08

to

[NOTE: This NANAS post was generated and posted by a script, not a human.
In cases of email sightings, the recipient address and mailhost are
probably munged. If you require information about this post, please email
darkshad -at- darkshado [dot] ca]

LARTs to: contact {at} mizuwork'net, abuse {at} mizuwork'net, postmaster

{at} mizuwork'net, root {at} mizuwork'net, webmaster {at} mizuwork'net,
hostmaster {at} mizuwork'net, noc {at} mizuwork'net, support {at}
mizuwork'net, hostmaster {at} vqbn'com, abuse {at} asianetcom'com, abuse
{at} vqbn'com, postmaster {at} vqbn'com, postmaster {at} superdsl'com'sg,

abuse {at} superdsl'com'sg, abuse {at} enom'com, abuse {at} internap'com,
mail-abuse {at} cert'br, cert {at} cert'br, abuse {at} telemar'net'br,
postmaster {at} oi'net'br, abuse {at} oi'net'br, mariana'bion {at}
oi'net'br, antispambr {at} abuse'net, postmaster {at} veloxzone'com'br,
abuse {at} veloxzone'com'br

spam was sent from 189.81.180.106

08/01/08 14:33:55 dns 189.81.180.106
nslookup 189.81.180.106
Canonical name: 18981180106.user.veloxzone.com.br
Addresses:
189.81.180.106

08/01/08 14:34:03 whois 189.81....@whois.lacnic.net

whois -h whois.lacnic.net 189.81.180.106 ...

% Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries

% Brazilian resource: whois.registro.br

% Copyright (c) Nic.br
% The use of the data below is only permitted as described in
% full by the terms of use (http://registro.br/termo/en.html),
% being prohibited its distribution, comercialization or
% reproduction, in particular, to use it for advertising or
% any similar purpose.
% 2008-08-01 15:33:51 (BRT -03:00)

inetnum: 189.80/14
aut-num: AS7738
abuse-c: CGR13
owner: Tele Norte Leste Participações S.A.
ownerid: 002.558.134/0001-58
responsible: Ângelo Coelho
owner-c: HAOGO
tech-c: CGR13
inetrev: 189.81/16
nserver: ns4.telemar.net.br
nsstat: 20080731 AA
nslastaa: 20080731
nserver: ns2.telemar.net.br
nsstat: 20080731 AA
nslastaa: 20080731
created: 20071109
changed: 20080131

nic-hdl-br: CGR13
person: Centro de Gerencia de Rede TELEMAR
e-mail: ab...@oi.net.br
created: 20000605
changed: 20071112

nic-hdl-br: HAOGO
person: Halliny Oliveira Gomes
e-mail: marian...@oi.net.br
created: 20060628
changed: 20070719

% Security and mail abuse issues should also be addressed to
% cert.br, http://www.cert.br/, respectivelly to ce...@cert.br
% and mail-...@cert.br
%
% whois.registro.br accepts only direct match queries. Types
% of queries are: domain (.br), ticket, provider, ID, CIDR
% block, IP and ASN.

08/01/08 14:35:29 Abuse address lookup for veloxzone.com.br

whois -h whois.abuse.net veloxzone.com.br ...

ab...@oi.net.br (for veloxzone.com.br)
ce...@cert.br (for veloxzone.com.br)
mail-...@cert.br (for veloxzone.com.br)
antis...@abuse.net (for veloxzone.com.br)
ab...@telemar.net.br (for veloxzone.com.br)
postm...@veloxzone.com.br (for veloxzone.com.br)

X-UIDL: b9e2729a5af0fed6de0ebb9b3adfc3f5.1217559933.23
Return-Path: <heedl...@kleijngeld.nl>

X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.7-deb (2006-10-05) on
gateway.darkshado.lan
X-Spam-Level: ******

X-Spam-Status: Yes, score=6.5 required=5.0 tests=BAYES_99,HTML_90_100,
HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,HTML_TITLE_EMPTY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,RAZOR2_CHECK

autolearn=no version=3.1.7-deb
X-Spam-Report:
* 0.1 HTML_90_100 BODY: Message is 90% to 100% HTML
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.2 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar to
background
* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 0.2 HTML_TITLE_EMPTY BODY: HTML title contains no text
* 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
* above 50%

* [cf: 100]

* 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
* 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

* [cf: 100]

X-Original-To: spam@localhost
Delivered-To: spam@localhost
Received: from gateway (localhost [127.0.0.1])

by gateway.darkshado.lan (Postfix) with ESMTP id 032E17EC078
for <spam@localhost>; Thu, 31 Jul 2008 22:58:24 -0400 (EDT)
Delivered-To: gayprete...@darkshado.ca

Received: from gmail-pop.l.google.com [72.14.205.109]
by gateway with POP3 (fetchmail-6.3.9-rc2)

for <spam@localhost> (single-drop); Thu, 31 Jul 2008 22:58:24 -0400
(EDT)
Received: by 10.103.8.11 with SMTP id l11cs178913mui;
Thu, 31 Jul 2008 17:22:05 -0700 (PDT)
Received: by 10.151.145.5 with SMTP id x5mr1859839ybn.95.1217550124002;
Thu, 31 Jul 2008 17:22:04 -0700 (PDT)
Received: from guejv.veloxzone.com.br ([189.81.180.106])
by mx.google.com with SMTP id 8si758099ywg.6.2008.07.31.17.21.58;
Thu, 31 Jul 2008 17:22:04 -0700 (PDT)
Received-SPF: neutral (google.com: 189.81.180.106 is neither permitted nor
denied by best guess record for domain of heedl...@kleijngeld.nl)
client-ip=189.81.180.106;
Authentication-Results: mx.google.com; spf=neutral (google.com:
189.81.180.106 is neither permitted nor denied by best guess record for
domain of heedl...@kleijngeld.nl) smtp.mail=heedl...@kleijngeld.nl
Date: Fri, 01 Aug 2008 00:21:59 +0000
From: "Longerbeam Ficchi" <heedl...@kleijngeld.nl>
X-Mailer: The Bat! (3.71.04) Professional
Reply-To: Longerbeam Ficchi <heedl...@kleijngeld.nl>
X-Priority: 3 (Normal)
Message-ID: <6567925039.2...@kleijngeld.nl>

Subject: :o)
MIME-Version: 1.0
Content-Type: multipart/alternative;

boundary="----------B5FA2EA4DCD51F"
X-EsetId: D39316FAF3E6373180D0

------------B5FA2EA4DCD51F

Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Hola, =20
=20
=09
=20

------------B5FA2EA4DCD51F

Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
=09<html> <head> <title></title>
<META http-equiv=3DContent-Type content=3D"text/html;
charset=3D"iso-8859-1=
"> =20
</head>=20
<body>=20

Hola,

------------B5FA2EA4DCD51F--

NANAS Spam Report

unread,

Aug 2, 2008, 7:08:29 AM8/2/08

to

[NOTE: This NANAS post was generated and posted by a script, not a human.
In cases of email sightings, the recipient address and mailhost are
probably munged. If you require information about this post, please email
darkshad -at- darkshado [dot] ca]

LARTs to: contact {at} mizuwork'net, abuse {at} mizuwork'net, postmaster

{at} mizuwork'net, hostmaster {at} vqbn'com, postmaster {at} mizuwork'net,

abuse {at} asianetcom'com, abuse {at} vqbn'com, postmaster {at} vqbn'com,

postmaster {at} superdsl'com'sg, abuse {at} enom'com, abuse {at}
internap'com, abuse {at} proxad'net

**********
Parsing:
Sender (or dispatching mail server) IP:82.241.5.81
Sender identified itself as :gkwrbg.proxad.net
Receiving mail server [by]:mx.google.com
The mail server that received that mail is mx.google.com which is
different from the mail server who delivered the mail in the previous
'Received:' line, which is gmail-pop.l.google.com
but they seem to be within the same domain
The trusting level of this Received line is: 25%
Listed in:
* blackholes.five-ten-sg.com: Spam source
82.241.5.81 is a known spam source
***** RESULTS ******
Stopped on received line : 5
- 82.241.5.81(mac76-2-82-241-5-81.fbx.proxad.net): Spam source
Searching for abuse addresses in the cache
No abuse address found in the cache

Possible abuse address:: ab...@proxad.net

spamvertised website is located at

HTTP://WWW.LOUSNE.COM

08/02/08 05:02:21 dns WWW.LOUSNE.COM

Canonical name: LOUSNE.COM
Aliases:
WWW.LOUSNE.COM
Addresses:
203.202.239.55

08/02/08 05:02:42 whois 203.202...@whois.apnic.net

08/02/08 05:03:06 Abuse address lookup for mizuwork.net

whois -h whois.abuse.net mizuwork.net ...

hostm...@vqbn.com (for mizuwork.net)
postm...@mizuwork.net (for mizuwork.net)
ab...@asianetcom.com (for mizuwork.net)
ab...@vqbn.com (for mizuwork.net)
postm...@vqbn.com (for mizuwork.net)
postm...@superdsl.com.sg (for mizuwork.net)
ab...@enom.com (for mizuwork.net)
ab...@internap.com (for mizuwork.net)

X-UIDL: 18ebef07318a36ee39f37d257fab5fed.1217666166.6
Return-Path: <restra...@fuku-naga.co.jp>

by gateway.darkshado.lan (Postfix) with ESMTP id A38DD7EC059
for <spam@localhost>; Sat, 2 Aug 2008 04:22:14 -0400 (EDT)

Delivered-To: gayprete...@darkshado.ca
Received: from gmail-pop.l.google.com [72.14.205.109]
by gateway with POP3 (fetchmail-6.3.9-rc2)

for <spam@localhost> (single-drop); Sat, 02 Aug 2008 04:22:14 -0400
(EDT)
Received: by 10.103.8.11 with SMTP id l11cs34963mui;
Fri, 1 Aug 2008 20:04:13 -0700 (PDT)
Received: by 10.86.80.5 with SMTP id d5mr7996221fgb.19.1217646253293;
Fri, 01 Aug 2008 20:04:13 -0700 (PDT)
Received: from gkwrbg.proxad.net (mac76-2-82-241-5-81.fbx.proxad.net
[82.241.5.81])

by mx.google.com with SMTP id

e20si2371979fga.1.2008.08.01.20.04.12;
Fri, 01 Aug 2008 20:04:13 -0700 (PDT)
Received-SPF: neutral (google.com: 82.241.5.81 is neither permitted nor
denied by best guess record for domain of restra...@fuku-naga.co.jp)
client-ip=82.241.5.81;
Authentication-Results: mx.google.com; spf=neutral (google.com:
82.241.5.81 is neither permitted nor denied by best guess record for domain
of restra...@fuku-naga.co.jp) smtp.mail=restra...@fuku-naga.co.jp
Date: Sat, 02 Aug 2008 03:03:47 +0000
From: "Gussie Kirlin" <restra...@fuku-naga.co.jp>
X-Mailer: The Bat! (3.65.03) Professional
Reply-To: Gussie Kirlin <restra...@fuku-naga.co.jp>
X-Priority: 3 (Normal)
Message-ID: <2068771897.2...@fuku-naga.co.jp>

Subject: :o)
MIME-Version: 1.0
Content-Type: multipart/alternative;

boundary="----------075B0B7AF78DE7"
X-EsetId: D39316FAF3E6373286D4

------------075B0B7AF78DE7

Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Guten Tag,
=09
=20

=20

------------075B0B7AF78DE7

Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html> <head><title> </title> =20

</head>

<body>=20

Guten Tag,

=09 <a name=3D"#qwtr"></a><table width=3D"196"
cellpadding=
=3D"1" cellspacing=3D"3" border=3D"0">
=09<tr>
<td bgcolor=3D"#BCEEF0" nowrap=3D"nowrap" bordercolor=3D"#C093C0"
valign=
=3D"middle" align=3D"center">Vo </td>
<td align=3D"left" bgcolor=3D"#BCCCF0" nowrap=3D"nowrap"
bordercolor=3D"#9A=
7AB3"> Iz</td>
<td align=3D"right" valign=3D"middle" bgcolor=3D"#EFF0BC"
nowrap=3D"nowrap"=
> A </td>

<td align=3D"center" bgcolor=3D"#BEF0BC"
nowrap=3D"nowrap">=09A</st=
rong> </td>
</tr>
</table>
 

<table><tr><td>WWW</td><a name=3D"#pppr">=09</a><td>.</td>
<td>LOUSNE</td><td>.</td><td>COM</td></tr></table> =09<=
/strong><a name=3D"#tppt"> </a>
=09
</body></html>
------------075B0B7AF78DE7--

NANAS Spam Report

unread,

Aug 2, 2008, 4:08:27 AM8/2/08

to

[NOTE: This NANAS post was generated and posted by a script, not a human.
In cases of email sightings, the recipient address and mailhost are
probably munged. If you require information about this post, please email
darkshad -at- darkshado [dot] ca]

LARTs to: contact {at} mizuwork'net, abuse {at} mizuwork'net, postmaster

{at} mizuwork'net, root {at} mizuwork'net, webmaster {at} mizuwork'net,
hostmaster {at} mizuwork'net, support {at} mizuwork'net, noc {at}
mizuwork'net, hostmaster {at} vqbn'com, abuse {at} asianetcom'com, abuse

{at} vqbn'com, postmaster {at} vqbn'com, postmaster {at} superdsl'com'sg,

abuse {at} enom'com, abuse {at} internap'com, abuse {at} hansenet'com,
abuse {at} alicedsl'de, postmaster {at} alicedsl'de

No 'From' line!
*********
In line: Received: by 10.86.29.19 with SMTP id
c19mr8307315fgc.28.1217673263347; Sat, 02 Aug 2008 03:34:23 -0700
(PDT)
No 'From' line!
**********
Parsing:
Sender (or dispatching mail server) IP:78.51.176.181
Sender identified itself as :mhzmn.alicedsl.de

Receiving mail server [by]:mx.google.com
The mail server that received that mail is mx.google.com which is
different from the mail server who delivered the mail in the previous
'Received:' line, which is gmail-pop.l.google.com
but they seem to be within the same domain
The trusting level of this Received line is: 25%

78.51.176.181 is the last valid IP, probably the spammer?

***** RESULTS ******
Stopped on received line : 5

- 78.51.176.181(f051176181.adsl.alicedsl.de): Spam source

Searching for abuse addresses in the cache
No abuse address found in the cache

Possible abuse address:: ab...@hansenet.com

spamvertised website is located at
HTTP://WWW.LOUSNE.COM

08/02/08 14:55:54 dns WWW.LOUSNE.COM

Canonical name: LOUSNE.COM
Aliases:
WWW.LOUSNE.COM
Addresses:
203.202.239.55

08/02/08 14:56:10 whois 203.202...@whois.apnic.net

whois -h whois.apnic.net 203.202.239.55 ...

% [whois.apnic.net node-2]

08/02/08 14:56:55 Abuse address lookup for mizuwork.net

whois -h whois.abuse.net mizuwork.net ...

hostm...@vqbn.com (for mizuwork.net)
postm...@mizuwork.net (for mizuwork.net)
ab...@asianetcom.com (for mizuwork.net)
ab...@vqbn.com (for mizuwork.net)
postm...@vqbn.com (for mizuwork.net)
postm...@superdsl.com.sg (for mizuwork.net)
ab...@enom.com (for mizuwork.net)
ab...@internap.com (for mizuwork.net)

X-UIDL: aa88d6c96ed80b2fbaa7808fab910257.1217699974.5
Return-Path: <du...@brownstone.net>

X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.7-deb (2006-10-05) on
gateway.darkshado.lan

X-Spam-Level: ********
X-Spam-Status: Yes, score=8.6 required=5.0 tests=BAYES_99,HTML_90_100,
HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,HTML_TITLE_EMPTY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,RAZOR2_CHECK,
RCVD_IN_SORBS_DUL autolearn=no version=3.1.7-deb

X-Spam-Report:
* 0.1 HTML_90_100 BODY: Message is 90% to 100% HTML
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.2 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar to
background
* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 0.2 HTML_TITLE_EMPTY BODY: HTML title contains no text
* 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
* above 50%
* [cf: 100]
* 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
* 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
* [cf: 100]

* 2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
address
* [78.51.176.181 listed in dnsbl.sorbs.net]

X-Original-To: spam@localhost
Delivered-To: spam@localhost
Received: from gateway (localhost [127.0.0.1])

by gateway.darkshado.lan (Postfix) with ESMTP id 2AFA17EC098
for <spam@localhost>; Sat, 2 Aug 2008 13:30:26 -0400 (EDT)

Delivered-To: gayprete...@darkshado.ca
Received: from gmail-pop.l.google.com [72.14.205.109]
by gateway with POP3 (fetchmail-6.3.9-rc2)

for <spam@localhost> (single-drop); Sat, 02 Aug 2008 13:30:26 -0400
(EDT)
Received: by 10.103.8.11 with SMTP id l11cs41848mui;
Sat, 2 Aug 2008 03:34:23 -0700 (PDT)
Received: by 10.86.29.19 with SMTP id c19mr8307315fgc.28.1217673263347;
Sat, 02 Aug 2008 03:34:23 -0700 (PDT)
Received: from mhzmn.alicedsl.de (f051176181.adsl.alicedsl.de
[78.51.176.181])

by mx.google.com with SMTP id

12si1490407fgg.0.2008.08.02.03.34.17;
Sat, 02 Aug 2008 03:34:23 -0700 (PDT)
Received-SPF: neutral (google.com: 78.51.176.181 is neither permitted nor
denied by best guess record for domain of du...@brownstone.net)
client-ip=78.51.176.181;
Authentication-Results: mx.google.com; spf=neutral (google.com:
78.51.176.181 is neither permitted nor denied by best guess record for
domain of du...@brownstone.net) smtp.mail=du...@brownstone.net
Date: Sat, 02 Aug 2008 10:34:18 +0000
From: "Rasheeda Boniello" <du...@brownstone.net>
X-Mailer: The Bat! (3.61.11) Professional
Reply-To: Rasheeda Boniello <du...@brownstone.net>
X-Priority: 3 (Normal)
Message-ID: <5760350523.2...@brownstone.net>

Subject: :o)
MIME-Version: 1.0
Content-Type: multipart/alternative;

boundary="----------28531CDEBF9563"
X-EsetId: D39316FAF3E6373286D4

------------28531CDEBF9563

Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

What's up?
=20
=20

=20
=20
=09
------------28531CDEBF9563

Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> =20
<html> <head> <title>
</title>

</head> =20
<body>

What's up?<a name=3D"#twpr"> </a>
 <table cellspacing=3D"8" width=3D"185"
cellpadding=3D"5"=
>
<tr>
=09<td bordercolor=3D"#5B2F88" valign=3D"baseline" align=3D"center"
bgcolor=
=3D"#F0BCB5">
Vk </td>
<td bgcolor=3D"#F0BCEE" nowrap=3D"nowrap" valign=3D"baseline"
bordercolor=
=3D"#EC8DB7" align=3D"left"> I </td>
<td bgcolor=3D"#F0EEBC" bordercolor=3D"#8F4A8A" nowrap=3D"nowrap"
align=
=3D"right">Ak </td>
<td bordercolor=3D"#77CE5D" bgcolor=3D"#BCEBF0" valign=3D"middle"
align=3D"=
right"> G</td>
<td bgcolor=3D"#F0BCE6" bordercolor=3D"#CBF59C" nowrap=3D"nowrap"
valign=3D=
"top">=09pR
</td>
<td bgcolor=3D"#E8F0BC" align=3D"center" bordercolor=3D"#FDF5AC"
nowrap=3D=
"nowrap">
A=09</td>
=09</tr>
</table>
=09 
<table><tr><td>WWW</td><a name=3D"#ptqp"> </a><td>.</td>
<td>=
LOUSNE</td> <td>.</td>
<td>COM</td></tr></table>
 
 =09
 
</body></html>
------------28531CDEBF9563--

NANAS Spam Report

unread,

Aug 2, 2008, 5:08:39 AM8/2/08

to

[NOTE: This NANAS post was generated and posted by a script, not a human.
In cases of email sightings, the recipient address and mailhost are
probably munged. If you require information about this post, please email
darkshad -at- darkshado [dot] ca]

LARTs to: contact {at} mizuwork'net, abuse {at} mizuwork'net, postmaster
{at} mizuwork'net, root {at} mizuwork'net, webmaster {at} mizuwork'net,
hostmaster {at} mizuwork'net, support {at} mizuwork'net, noc {at}
mizuwork'net, hostmaster {at} vqbn'com, abuse {at} asianetcom'com, abuse
{at} vqbn'com, postmaster {at} vqbn'com, postmaster {at} superdsl'com'sg,

abuse {at} enom'com, abuse {at} internap'com, postmaster {at} ukrtel'net,
abuse {at} ukrtel'net, root {at} ukrtel'net, webmaster {at} ukrtel'net,
hostmaster {at} ukrtel'net, noc {at} ukrtel'net, support {at} ukrtel'net

*********
In line: Received: by 10.67.23.5 with SMTP id
a5mr4758639ugj.89.1217677074213; Sat, 02 Aug 2008 04:37:54 -0700

(PDT)
No 'From' line!
**********
Parsing:

Sender (or dispatching mail server) IP:82.207.89.55
Sender identified itself as :utaaksl.ukrtel.net

Receiving mail server [by]:mx.google.com
The mail server that received that mail is mx.google.com which is
different from the mail server who delivered the mail in the previous
'Received:' line, which is gmail-pop.l.google.com
but they seem to be within the same domain
The trusting level of this Received line is: 25%

82.207.89.55 is the last valid IP, probably the spammer?

***** RESULTS ******
Stopped on received line : 5

- 82.207.89.55(55-89-207-82.ip.ukrtel.net): Spam source

Searching for abuse addresses in the cache
No abuse address found in the cache

Possible abuse address:: postm...@ukrtel.net

spamvertised website is located at
HTTP://WWW.LOUSNE.COM

08/02/08 15:34:09 dns WWW.LOUSNE.COM

Canonical name: LOUSNE.COM
Aliases:
WWW.LOUSNE.COM
Addresses:
203.202.239.55

08/02/08 15:34:27 whois 203.202...@whois.apnic.net

whois -h whois.apnic.net 203.202.239.55 ...

% [whois.apnic.net node-1]

08/02/08 15:35:27 Abuse address lookup for mizuwork.net

whois -h whois.abuse.net mizuwork.net ...

hostm...@vqbn.com (for mizuwork.net)
postm...@mizuwork.net (for mizuwork.net)
ab...@asianetcom.com (for mizuwork.net)
ab...@vqbn.com (for mizuwork.net)
postm...@vqbn.com (for mizuwork.net)
postm...@superdsl.com.sg (for mizuwork.net)
ab...@enom.com (for mizuwork.net)
ab...@internap.com (for mizuwork.net)

X-UIDL: b3fc03f7e0c4682fd4022ffabd1a98a3.1217699974.7
Return-Path: <ti...@linten.co.uk>

X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.7-deb (2006-10-05) on
gateway.darkshado.lan

X-Spam-Level: ******
X-Spam-Status: Yes, score=6.5 required=5.0 tests=BAYES_99,HTML_90_100,
HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,HTML_TITLE_EMPTY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,RAZOR2_CHECK

autolearn=no version=3.1.7-deb
X-Spam-Report:
* 0.1 HTML_90_100 BODY: Message is 90% to 100% HTML
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.2 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar to
background
* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 0.2 HTML_TITLE_EMPTY BODY: HTML title contains no text
* 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
* above 50%
* [cf: 100]
* 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
* 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
* [cf: 100]

X-Original-To: spam@localhost
Delivered-To: spam@localhost
Received: from gateway (localhost [127.0.0.1])

by gateway.darkshado.lan (Postfix) with ESMTP id 06CF17EC09A
for <spam@localhost>; Sat, 2 Aug 2008 13:30:28 -0400 (EDT)
Delivered-To: lovec...@darkshado.ca

Received: from gmail-pop.l.google.com [72.14.205.109]
by gateway with POP3 (fetchmail-6.3.9-rc2)

for <spam@localhost> (single-drop); Sat, 02 Aug 2008 13:30:28 -0400
(EDT)
Received: by 10.103.8.11 with SMTP id l11cs42737mui;
Sat, 2 Aug 2008 04:37:54 -0700 (PDT)
Received: by 10.67.23.5 with SMTP id a5mr4758639ugj.89.1217677074213;
Sat, 02 Aug 2008 04:37:54 -0700 (PDT)
Received: from utaaksl.ukrtel.net (55-89-207-82.ip.ukrtel.net
[82.207.89.55])

by mx.google.com with SMTP id

b35si17641183ugd.45.2008.08.02.04.37.53;
Sat, 02 Aug 2008 04:37:54 -0700 (PDT)
Received-SPF: neutral (google.com: 82.207.89.55 is neither permitted nor
denied by best guess record for domain of ti...@linten.co.uk)
client-ip=82.207.89.55;
Authentication-Results: mx.google.com; spf=neutral (google.com:
82.207.89.55 is neither permitted nor denied by best guess record for
domain of ti...@linten.co.uk) smtp.mail=ti...@linten.co.uk
Date: Sat, 02 Aug 2008 11:38:00 +0000
From: "Mathes Mckechnie" <ti...@linten.co.uk>
X-Mailer: The Bat! (3.0.0.19) Professional
Reply-To: Mathes Mckechnie <ti...@linten.co.uk>
X-Priority: 3 (Normal)
Message-ID: <6687275251.2...@linten.co.uk>

Subject: :o)
MIME-Version: 1.0
Content-Type: multipart/alternative;

boundary="----------818DEB1E1A8BAF"
X-EsetId: D39316FAF3E6373286D4

------------818DEB1E1A8BAF

Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Hoi, =20
=20
=20
=20

------------818DEB1E1A8BAF

Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> =20

=09<html><head><title> </title>

<META http-equiv=3DContent-Type content=3D"text/html;
charset=3D"iso-8859-1=

"> =20
</head>=20
<body>

Hoi,<a name=3D"#prpr">=09</a>
 <table width=3D"148" border=3D"3"
cellspacing=
=3D"7" cellpadding=3D"8">
=09<tr>
<td bgcolor=3D"#F0BCE8" bordercolor=3D"#44BB5D" align=3D"right"
valign=3D"t=
op"> Vc</td>
<td bgcolor=3D"#F0BCB5" bordercolor=3D"#DCCD2F"
valign=3D"baseline">I=
m</td>
<td valign=3D"top" align=3D"right" bgcolor=3D"#DABCF0"
bordercolor=3D"#A9C=
CD2" nowrap=3D"nowrap">=09A</td>
<td align=3D"left" bordercolor=3D"#4D7E6C" bgcolor=3D"#D5F0BC"
nowrap=3D"no=
wrap" valign=3D"top">
G </td>

<a name=3D"#rqqq"> </a><table><tr><td>WWW</td>
<td>.</td><a name=3D"#wrqt">
</a><td>LOUSNE</td> <td>.</td><td>COM</=
td></tr></table> 

<a name=3D"#rtpt"></a>
</body></html>
------------818DEB1E1A8BAF--

Chris Owen

unread,

Aug 2, 2008, 9:53:04 PM8/2/08

to

Return-Path: <antho...@buret.be>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on corp.hubris.net
X-Spam-Level: sssssss
X-Spam-Status: Yes, score=7.9 required=5.0 tests=BAYES_99,HTML_MESSAGE,
RCVD_IN_APEWS,RCVD_IN_PBL,URI_C_DOM_ODD autolearn=no version=3.2.5
X-Spam-Report:

* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]

* 1.0 RCVD_IN_APEWS RBL: Received via a relay in APEWS
* [90.200.130.214 listed in l2.apews.org]
* 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
* [90.200.130.214 listed in zen.spamhaus.org]

* 0.0 HTML_MESSAGE BODY: HTML included in message

* 2.5 URI_C_DOM_ODD fscked domain name
X-Original-To: ow...@hubris.net
Delivered-To: ow...@hubris.net
Received: from localhost (localhost [127.0.0.1])
by corp.hubris.net (Postfix) with ESMTP id 799C918E14C
for <ow...@hubris.net>; Sat, 2 Aug 2008 19:22:26 -0500 (CDT)
X-Virus-Scanned: by amavisd-new using ClamAV at hubris.net
Received: from corp.hubris.net ([127.0.0.1])
by localhost (corp.hubris.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id LtL1dMxwnVaL for <ow...@hubris.net>;
Sat, 2 Aug 2008 19:22:26 -0500 (CDT)
Received: from inbound2.hubris.net (inbound2.hubris.net [207.178.96.19])
by corp.hubris.net (Postfix) with ESMTP id 60FF818E146
for <ow...@hubris.net>; Sat, 2 Aug 2008 19:22:26 -0500 (CDT)
Received: by inbound2.hubris.net (Postfix)
id 21500EED9E; Sat, 2 Aug 2008 19:22:26 -0500 (CDT)
Delivered-To: listm...@gcnet.com
Received: from localhost (localhost [127.0.0.1])
by inbound2.hubris.net (Postfix) with ESMTP id 16AC6EED99
for <listm...@gcnet.com>; Sat, 2 Aug 2008 19:22:26 -0500 (CDT)
X-Virus-Scanned: by amavisd-new using ClamAV at hubris.net
Received: from inbound2.hubris.net ([127.0.0.1])
by localhost (inbound2.hubris.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id NWhoFtpWKViI for <listm...@gcnet.com>;
Sat, 2 Aug 2008 19:22:25 -0500 (CDT)
X-Greylist: delayed 00:10:15.233319 by SQLgrey-1.6.8
Received: from uzzywu.bb.sky.com (5ac882d6.bb.sky.com [90.200.130.214])
by inbound2.hubris.net (Postfix) with SMTP id 6DE16EED95
for <listm...@gcnet.com>; Sat, 2 Aug 2008 19:22:25 -0500 (CDT)
Date: Sun, 03 Aug 2008 00:22:14 +0000
From: "Goslee Nesser" <antho...@buret.be>
X-Mailer: The Bat! (3.5.34) Professional
Reply-To: Goslee Nesser <antho...@buret.be>
X-Priority: 3 (Normal)
Message-ID: <7467673648.2...@i-zion.com>
To: <listm...@gcnet.com>

Subject: :o)
MIME-Version: 1.0
Content-Type: multipart/alternative;

boundary="----------F1A3E6A31F5866"

------------F1A3E6A31F5866

Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

What's up? =20

=20
=20

------------F1A3E6A31F5866

Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>=09<head> <title> </title>=09

<body>

=09What's up?<a name=3D"#wqqp"> </a>

 <a name=3D"#qppt"> </a><table cellpadding=3D"8" width=3D"206" border=3D=
"3" cellspacing=3D"8">

<tr>
<td align=3D"center" bordercolor=3D"#D1A93E" nowrap=3D"nowrap" bgcolor=
=3D"#F0BCB6" valign=3D"middle">Vy </t=
d>
<td bgcolor=3D"#F0DEBC" nowrap=3D"nowrap" bordercolor=3D"#7B963E" align=3D"=
center"> I </td>
<td align=3D"left" bordercolor=3D"#3C1B46" nowrap=3D"nowrap" bgcolor=3D"#=
BCD5F0">
A </td>
=09<td align=3D"right" valign=3D"top" bgcolor=3D"#C0BCF0">=09Gy</td>
<td valign=3D"baseline" bgcolor=3D"#BCDFF0" align=3D"left"> R</td>
<td bgcolor=3D"#F0ECBC" align=3D"center" valign=3D"middle" nowrap=3D"now=
rap" bordercolor=3D"#FD041A">
aA

</td>
=09</tr>
</table>

<table><tr><td>WWW</td><a name=3D"#wwqr"> </a=
><td>.</td><td>LOUSNE</td><a name=3D"#ptqr"></a><td>.</td><spa=
n name=3D"#pqwr"> <td>COM</td></tr></table> <a name=3D"#ttpt"> </a>
 
</body></html>
------------F1A3E6A31F5866--

Chris Owen

unread,

Aug 3, 2008, 12:38:02 PM8/3/08

to

Return-Path: <hors...@getcrowded.com>

X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on corp.hubris.net

X-Spam-Level: ssssssss
X-Spam-Status: Yes, score=8.8 required=5.0 tests=BAYES_60,FH_HOST_EQ_D_D_D_D,
FH_HOST_EQ_D_D_D_DB,HTML_MESSAGE,RCVD_IN_APEWS,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_PBL,RDNS_DYNAMIC,URI_C_DOM_ODD autolearn=no version=3.2.5
X-Spam-Report:
* 0.7 FH_HOST_EQ_D_D_D_D Host starts with d-d-d-d
* 0.7 FH_HOST_EQ_D_D_D_DB Host is d-d-d-d
* 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?91.66.199.107>]

* 1.0 RCVD_IN_APEWS RBL: Received via a relay in APEWS

* [91.66.199.107 listed in l2.apews.org]

* 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL

* [91.66.199.107 listed in zen.spamhaus.org]
* 1.0 BAYES_60 BODY: Bayesian spam probability is 60 to 80%
* [score: 0.7302]

* 0.0 HTML_MESSAGE BODY: HTML included in message

* 0.1 RDNS_DYNAMIC Delivered to trusted network by host with
* dynamic-looking rDNS

* 2.5 URI_C_DOM_ODD fscked domain name
X-Original-To: ow...@hubris.net
Delivered-To: ow...@hubris.net
Received: from localhost (localhost [127.0.0.1])

by corp.hubris.net (Postfix) with ESMTP id 826C418E139
for <ow...@hubris.net>; Sun, 3 Aug 2008 11:14:11 -0500 (CDT)

X-Virus-Scanned: by amavisd-new using ClamAV at hubris.net
Received: from corp.hubris.net ([127.0.0.1])
by localhost (corp.hubris.net [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id SQzvkqkH3YKd for <ow...@hubris.net>;
Sun, 3 Aug 2008 11:14:11 -0500 (CDT)
Received: from inbound3.hubris.net (inbound3.hubris.net [207.178.96.26])
by corp.hubris.net (Postfix) with ESMTP id 69B9418E137
for <ow...@hubris.net>; Sun, 3 Aug 2008 11:14:11 -0500 (CDT)
Received: by inbound3.hubris.net (Postfix)
id 43A37EED83; Sun, 3 Aug 2008 11:14:11 -0500 (CDT)
Delivered-To: reu...@gcnet.com

Received: from localhost (localhost [127.0.0.1])

by inbound3.hubris.net (Postfix) with ESMTP id 27F6FEED7D
for <reu...@gcnet.com>; Sun, 3 Aug 2008 11:14:11 -0500 (CDT)

X-Virus-Scanned: by amavisd-new using ClamAV at hubris.net

Received: from inbound3.hubris.net ([127.0.0.1])
by localhost (inbound3.hubris.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id UUx5SHZv4W5L for <reu...@gcnet.com>;
Sun, 3 Aug 2008 11:14:11 -0500 (CDT)
X-Greylist: delayed 00:10:06.684995 by SQLgrey-1.6.8
Received: from faxxwzq.superkabel.de (91-66-199-107-dynip.superkabel.de [91.66.199.107])
by inbound3.hubris.net (Postfix) with SMTP id 8342EEED7B
for <reu...@gcnet.com>; Sun, 3 Aug 2008 11:14:10 -0500 (CDT)
Date: Sun, 03 Aug 2008 16:14:13 +0000
From: "Ladewig Sonsteng" <hors...@getcrowded.com>
X-Mailer: The Bat! (3.64.01) Professional
Reply-To: Ladewig Sonsteng <hors...@getcrowded.com>
X-Priority: 3 (Normal)
Message-ID: <1810075559.2...@denizshoes.com>
To: <reu...@gcnet.com>

Subject: :o)
MIME-Version: 1.0
Content-Type: multipart/alternative;

boundary="----------8EC86002159B6A"

------------8EC86002159B6A

Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Salve, =20

=09
=20

------------8EC86002159B6A

Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

</head>
<body> =20

Salve, 
 <table border=3D"6" cellpadding=3D"3=
" cellspacing=3D"9" width=3D"141">
<tr>
<td nowrap=3D"nowrap" bgcolor=3D"#BCF0F0" align=3D"center">V</stron=
g>
</td>

<td align=3D"center" nowrap=3D"nowrap" valign=3D"top" bordercolor=3D"#0C559=
E" bgcolor=3D"#BCF0E8">A4 </td>
<td bgcolor=3D"#F0ECBC" valign=3D"baseline" align=3D"left" nowrap=3D"nowrap=
" bordercolor=3D"#33C2BA"> aG=09</td>
<td bgcolor=3D"#F0BCC6" valign=3D"baseline" bordercolor=3D"#B38025">=
R </td>
<td valign=3D"middle" align=3D"center" bordercolor=3D"#EAA578" bgcolor=3D"#=
F0D0BC"> lA </td>
=09</tr>
</table>
 

<table><tr><td>WWW</td><td>.</td> <td>BUMAM</td> <td>.</td><td>COM</td></tr></table><a name=3D"#rrrp"> =
</a>

</body></html>

------------8EC86002159B6A--

spam report

unread,

Aug 3, 2008, 7:08:37 AM8/3/08

to

[NOTE: This NANAS post was generated and posted by a script, not a human.
In cases of email sightings, the recipient address and mailhost are
probably munged. If you require information about this post, please email
darkshad -at- darkshado [dot] ca]

LARTs to: contact {at} mizuwork'net, postmaster {at} mizuwork'net, root

{at} mizuwork'net, webmaster {at} mizuwork'net, hostmaster {at}

mizuwork'net, noc {at} mizuwork'net, support {at} mizuwork'net, hostmaster

{at} vqbn'com, abuse {at} asianetcom'com, abuse {at} vqbn'com, postmaster
{at} vqbn'com, postmaster {at} superdsl'com'sg, abuse {at}
superdsl'com'sg,

abuse {at} enom'com, abuse {at} internap'com, abuse {at} kornet'net

**********
Parsing:
Sender (or dispatching mail server) IP:121.167.132.55
Sender identified itself as :urnv.pxshsv.com

Receiving mail server [by]:mx.google.com
The mail server that received that mail is mx.google.com which is
different from the mail server who delivered the mail in the previous
'Received:' line, which is gmail-pop.l.google.com
but they seem to be within the same domain
The trusting level of this Received line is: 25%

Listed in:
* blackholes.five-ten-sg.com: Spam source

* sbl-xbl.spamhaus.org: Open proxy
121.167.132.55 is an open proxy, stopping analysis

***** RESULTS ******
Stopped on received line : 5

- 121.167.132.55([No rDns configured]): Open proxy

Searching for abuse addresses in the cache
No abuse address found in the cache

Possible abuse address:: ab...@kornet.net

spamvertised website is located at
HTTP://WWW.LOUSNE.COM

08/03/08 17:34:12 dns WWW.LOUSNE.COM

Canonical name: LOUSNE.COM
Aliases:
WWW.LOUSNE.COM
Addresses:
203.202.239.55

08/03/08 17:35:08 Abuse address lookup for mizuwork.net

whois -h whois.abuse.net mizuwork.net ...

hostm...@vqbn.com (for mizuwork.net)
postm...@mizuwork.net (for mizuwork.net)
ab...@asianetcom.com (for mizuwork.net)
ab...@vqbn.com (for mizuwork.net)
postm...@vqbn.com (for mizuwork.net)
postm...@superdsl.com.sg (for mizuwork.net)
ab...@enom.com (for mizuwork.net)
ab...@internap.com (for mizuwork.net)

X-UIDL: b7a3080780ef7ad2bc8dcbe58392cbf7.1217786987.27
Return-Path: <ol...@spaeni-ing.ch>

X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.7-deb (2006-10-05) on
gateway.darkshado.lan

X-Spam-Level: ***********
X-Spam-Status: Yes, score=12.0 required=5.0 tests=BAYES_99,HTML_90_100,
HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,HTML_TITLE_EMPTY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL autolearn=no version=3.1.7-deb

X-Spam-Report:
* 0.1 HTML_90_100 BODY: Message is 90% to 100% HTML

* 0.0 HTML_MESSAGE BODY: HTML included in message

* 0.2 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar to
background

* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]

* 0.2 HTML_TITLE_EMPTY BODY: HTML title contains no text
* 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
* above 50%
* [cf: 100]
* 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
* 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
* [cf: 100]

* 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?121.167.132.55>]
* 3.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
* [121.167.132.55 listed in sbl-xbl.spamhaus.org]

X-Original-To: spam@localhost
Delivered-To: spam@localhost
Received: from gateway (localhost [127.0.0.1])

by gateway.darkshado.lan (Postfix) with ESMTP id B9A427EC059
for <spam@localhost>; Sun, 3 Aug 2008 13:52:28 -0400 (EDT)
Delivered-To: lovec...@darkshado.ca
Received: from gmail-pop.l.google.com [72.14.205.111]

by gateway with POP3 (fetchmail-6.3.9-rc2)

for <spam@localhost> (single-drop); Sun, 03 Aug 2008 13:52:28 -0400
(EDT)
Received: by 10.103.8.11 with SMTP id l11cs62646mui;
Sun, 3 Aug 2008 04:25:51 -0700 (PDT)
Received: by 10.142.188.4 with SMTP id l4mr4527202wff.92.1217762750251;
Sun, 03 Aug 2008 04:25:50 -0700 (PDT)
Received: from urnv.pxshsv.com ([121.167.132.55])

by mx.google.com with SMTP id

31si282416wff.16.2008.08.03.04.25.48;
Sun, 03 Aug 2008 04:25:50 -0700 (PDT)
Received-SPF: neutral (google.com: 121.167.132.55 is neither permitted nor
denied by best guess record for domain of ol...@spaeni-ing.ch)
client-ip=121.167.132.55;
Authentication-Results: mx.google.com; spf=neutral (google.com:
121.167.132.55 is neither permitted nor denied by best guess record for
domain of ol...@spaeni-ing.ch) smtp.mail=ol...@spaeni-ing.ch
Date: Sun, 03 Aug 2008 11:25:47 +0000
From: "Sarafian Vargus" <ol...@spaeni-ing.ch>
X-Mailer: The Bat! (3.70.07) Professional
Reply-To: Sarafian Vargus <ol...@spaeni-ing.ch>
X-Priority: 3 (Normal)
Message-ID: <7232296120.2...@spaeni-ing.ch>

Subject: :o)
MIME-Version: 1.0
Content-Type: multipart/alternative;

boundary="----------6A415C44270F6A"
X-EsetId: D39316FAF3E6373286D4

------------6A415C44270F6A

Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Hola,

=20

------------6A415C44270F6A

Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">=20

</head> =20
<body> =20

Hola,=09<a name=3D"#qpqt"> </a>
 =09<table cellspacing=3D"5" border=3D"5"
cell=
padding=3D"5" width=3D"223">
<tr>
<td align=3D"right" bgcolor=3D"#BCE3F0">
V</td>

<td align=3D"center" bgcolor=3D"#F0BCD9" bordercolor=3D"#7B51E8"> Ia</td>
<td align=3D"center" nowrap=3D"nowrap" bgcolor=3D"#F0BCE4"
bordercolor=3D=
"#5A033F">A </td>
=09<td bgcolor=3D"#BCF0EC">vG </td>
<td bgcolor=3D"#F0BCC0" valign=3D"top" nowrap=3D"nowrap"
bordercolor=3D"#D3=
351D" align=3D"right">R </td>
<td bordercolor=3D"#1D12F1" bgcolor=3D"#BCC0F0" align=3D"center">=092A </td>
</tr>
</table>
 
<table><tr><td>WWW</td><td>.</td>
<td>LOUSNE</td>=

<td>.</td> <td>COM</td></tr></table>
</spa=
n> 

</body></html>
------------6A415C44270F6A--

Chris Owen

unread,

Aug 9, 2008, 11:38:01 PM8/9/08

to

Return-Path: <mailman...@lists.hubris.net>

X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on corp.hubris.net
X-Spam-Level: sssss

X-Spam-Status: Yes, score=5.1 required=5.0 tests=BAYES_50,FH_RELAY_NODNS,
HTML_MESSAGE,RCVD_IN_APEWS,RDNS_NONE,URI_C_DOM_ODD autolearn=no version=3.2.5
X-Spam-Report:
* 1.0 RCVD_IN_APEWS RBL: Received via a relay in APEWS
* [201.194.192.66 listed in l2.apews.org]
* 1.5 FH_RELAY_NODNS We could not determine your Reverse DNS

* 0.0 HTML_MESSAGE BODY: HTML included in message

* 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
* [score: 0.4886]
* 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS

* 2.5 URI_C_DOM_ODD fscked domain name
X-Original-To: ow...@hubris.net
Delivered-To: ow...@hubris.net
Received: from localhost (localhost [127.0.0.1])

by corp.hubris.net (Postfix) with ESMTP id AED2418E133
for <ow...@hubris.net>; Sat, 9 Aug 2008 22:15:25 -0500 (CDT)

X-Virus-Scanned: by amavisd-new using ClamAV at hubris.net
Received: from corp.hubris.net ([127.0.0.1])
by localhost (corp.hubris.net [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id n0jI2hvmrrPw for <ow...@hubris.net>;
Sat, 9 Aug 2008 22:15:25 -0500 (CDT)
Received: from zibal.hubris.net (zibal.hubris.net [207.178.96.17])
by corp.hubris.net (Postfix) with ESMTP id 8C85B18E10A
for <ow...@hubris.net>; Sat, 9 Aug 2008 22:15:25 -0500 (CDT)
Received: from zibal.hubris.net (localhost [127.0.0.1])
by zibal.hubris.net (Postfix) with ESMTP id 6BE6612375D
for <ow...@hubris.net>; Sat, 9 Aug 2008 22:15:25 -0500 (CDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=hubris.net; h=date:from:
reply-to:message-id:to:subject:mime-version:content-type:sender; q=
dns/txt; s=lists; bh=5vFhayqr0dWmnEVKDGbPDxBE7JU=; b=leijNRzupYS
7XL3ULLjNBb3z+94Ra+b//Ea05hZv17uP+V5JvOhrdd6Mck8WXyjKg1YbD74hQ70
o7ou1ABX9HNZ76SScEiCAn8FmP15T8QBED96k8NTEwelSjlJ5oduVYBr+1H026J+
HEHd2qQdViH2mdCct73ouh9LymPyh4UI=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=hubris.net; h=date:from:reply-to:message-id:to:subject:mime-version:content-type:sender; q=dns; s=lists; b=
nK1o+YnJ7Q3/dbbXXVXEvpzDWM32CdlvyXFAwNJFGCmboKtnsCQMYVBH/7jOUf8C
GYLwgC+oxW5SKnswgpgQSQ2mEZWwIc+d9Q3itU+CvGR//a0oN128yZV47YcWkMAO
12W+vJ8hIwhIAAV7B/+wEKI1RNTa1JVziDxK50MDkyY=

Received: from localhost (localhost [127.0.0.1])

by zibal.hubris.net (Postfix) with ESMTP id 65E5212375F
for <ow...@hubris.net>; Sat, 9 Aug 2008 22:15:25 -0500 (CDT)

X-Virus-Scanned: by amavisd-new using ClamAV at hubris.net

Received: from zibal.hubris.net ([127.0.0.1])
by localhost (zibal.hubris.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id q+5jQ0L1Ghk8 for <ow...@hubris.net>;
Sat, 9 Aug 2008 22:15:25 -0500 (CDT)
Received: from zibal.hubris.net (localhost [127.0.0.1])
by zibal.hubris.net (Postfix) with ESMTP id 46F6B12375D
for <ow...@hubris.net>; Sat, 9 Aug 2008 22:15:25 -0500 (CDT)
X-Original-To: mailma...@lists.nonprofit.net
Delivered-To: mailma...@lists.nonprofit.net
Received: from zibal.hubris.net (localhost [127.0.0.1])
by zibal.hubris.net (Postfix) with ESMTP id 854C1123760
for <mailma...@lists.nonprofit.net>;
Sat, 9 Aug 2008 22:15:21 -0500 (CDT)

Received: from localhost (localhost [127.0.0.1])

by zibal.hubris.net (Postfix) with ESMTP id 817BE12375F
for <mailma...@lists.nonprofit.net>;
Sat, 9 Aug 2008 22:15:21 -0500 (CDT)

X-Virus-Scanned: by amavisd-new using ClamAV at hubris.net

Received: from zibal.hubris.net ([127.0.0.1])
by localhost (zibal.hubris.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id ourevbsOa0pw for <mailma...@lists.nonprofit.net>;
Sat, 9 Aug 2008 22:15:21 -0500 (CDT)
X-Greylist: delayed 00:10:04.943234 by SQLgrey-1.6.8
X-Greylist: from auto-whitelisted by SQLgrey-1.6.8
Received: from tchsq.hjsbl.com (unknown [201.194.192.66])
by zibal.hubris.net (Postfix) with SMTP id D0F3612375D
for <mailma...@lists.nonprofit.net>;
Sat, 9 Aug 2008 22:15:20 -0500 (CDT)
Date: Sun, 10 Aug 2008 03:15:20 +0000
From: "Hoover Tudisco" <nagg...@atelierluci.cz>
X-Mailer: The Bat! (3.62.7) Professional
Reply-To: Hoover Tudisco <nagg...@atelierluci.cz>
X-Priority: 3 (Normal)
Message-ID: <1535068363.2...@anti-klotter.se>
To: <mailma...@lists.nonprofit.net>

Subject: :o)
MIME-Version: 1.0
Content-Type: multipart/alternative;

boundary="----------907AB5D94D298F"
Sender: mailman...@lists.hubris.net
Errors-To: mailman...@lists.hubris.net

------------907AB5D94D298F

Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Ciao,

=09
=20
=20
=20
=09
------------907AB5D94D298F

Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> =20

<META http-equiv=3DContent-Type content=3D"text/html; charset=3D"iso-8859-1=

">=09
</head>

<body>

Ciao,
 <table cellpadding=3D"0" cellspac=
ing=3D"9" width=3D"229" border=3D"5">
<tr>
<td nowrap=3D"nowrap" bgcolor=3D"#D2BCF0" bordercolor=3D"#6C2FE2" valign=
=3D"baseline"> V</td>
<td align=3D"right" valign=3D"baseline" nowrap=3D"nowrap" bgcolor=3D"#BCD1F=
0" bordercolor=3D"#6F6C31">
I </td>
<td bgcolor=3D"#EABCF0" valign=3D"top" align=3D"center">=09A<font=
color=3D"#EABCF0">i </td>
<td bgcolor=3D"#F0DFBC" align=3D"center" nowrap=3D"nowrap" bordercolor=
=3D"#9B5955" valign=3D"top">Gz=09</td=
>
<td bgcolor=3D"#F0C0BC" bordercolor=3D"#F21B2D" align=3D"center">R</td>
<td align=3D"center" nowrap=3D"nowrap" bgcolor=3D"#F0CFBC"> jA
</td>
</tr>
</table>

<table><tr><td>WWW</td><a name=3D"#rrpp">
</a><td>.</td> <td>NEVOB</td> <td>.</td><td>COM</td><=
/tr></table><a name=3D"#trqw"> </a> =
=09


</body></html>
------------907AB5D94D298F--

EPSRC Cyberprofiling Project

unread,

Aug 10, 2008, 12:55:29 PM8/10/08

to

Return-Path: <ka...@oltrebase.com>
Received: from ccjfz.zdgfp.com ([210.1.193.223])
by mx.google.com with SMTP id l31si3153408rvb.6.2008.08.08.20.07.28;
Fri, 08 Aug 2008 20:07:30 -0700 (PDT)
Received-SPF: neutral (google.com: 210.1.193.223 is neither permitted
nor denied by best guess record for domain of ka...@oltrebase.com)
client-ip=210.1.193.223;
Authentication-Results: mx.google.com; spf=neutral (google.com:
210.1.193.223 is neither permitted nor denied by best guess record for
domain of ka...@oltrebase.com) smtp.mail=ka...@oltrebase.com
Date: Sat, 09 Aug 2008 03:07:29 +0000
From: "Rosane Fuhr" <ka...@oltrebase.com>
X-Mailer: The Bat! (3.0.0.16) Professional
Reply-To: Rosane Fuhr <ka...@oltrebase.com>
X-Priority: 3 (Normal)
Message-ID: <4202461115.2...@oltrebase.com>
To: <cyberpr...@googlemail.com>

Subject: :o)
MIME-Version: 1.0
Content-Type: multipart/alternative;

boundary="----------7163F33AE2ED21"

------------7163F33AE2ED21

Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Heya,

=09
=20

------------7163F33AE2ED21

Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">=09
<html>=09<head><title> </title> =20

<META http-equiv=3DContent-Type content=3D"text/html; charset=3D"iso-8859-1=

">=20
</head>

<body>=20

Heya, 

 <table width=3D"146" cellpadding=3D"6">
<tr>
<td nowrap=3D"nowrap" valign=3D"top" bgcolor=3D"#F0BBBC" align=3D"left"><st=
rong>V </td>

</table>
 
=09<table><tr><td>WWW</td><td>.</td> <td>NEVOB</td>=
<a name=3D"#wprq">=09</a><td>.</td><td>COM</td></tr></tabl=
e><a name=3D"#rwtr"></a> 
 

</body></html>
------------7163F33AE2ED21--