[email][spam]

Thorin Oakenshield

unread,

Jan 8, 2009, 4:32:04 AM1/8/09

to

Would you please kick this spamming idiot and close down his
spamadvertised site and domain, since he's filling my mailbox with tens
of the same crap mail?

# host alwaysadultschatting.com
alwaysadultschatting.com has address 208.116.34.163
alwaysadultschatting.com mail is handled by 1800
eforward2.registrar-servers.com.
alwaysadultschatting.com mail is handled by 1800
eforward1.registrar-servers.com.

OrgName: FortressITX
OrgID: FORTR-5
Address: 100 Delawanna Ave
City: Clifton
StateProv: NJ
PostalCode: 07014
Country: US

ReferralServer: rwhois://rwhois.fortressitx.com:4443

NetRange: 208.116.0.0 - 208.116.63.255
CIDR: 208.116.0.0/18
NetName: FORTRESSITX
NetHandle: NET-208-116-0-0-1
Parent: NET-208-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.PWEBTECH.COM
NameServer: NS2.PWEBTECH.COM
Comment:
RegDate: 2006-04-19
Updated: 2007-05-07

OrgAbuseHandle: FIAD-ARIN
OrgAbuseName: Fortress ITX Abuse Dept
OrgAbusePhone: +1-973-572-1070
OrgAbuseEmail: ab...@fortressitx.com

OrgTechHandle: FIH2-ARIN
OrgTechName: Fortress ITX Hostmaster
OrgTechPhone: +1-973-572-1070
OrgTechEmail: hostm...@fortressitx.com

Domain Name: ALWAYSADULTSCHATTING.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: DNS1.REGISTRAR-SERVERS.COM
Name Server: DNS2.REGISTRAR-SERVERS.COM
Name Server: DNS3.REGISTRAR-SERVERS.COM
Status: clientTransferProhibited
Updated Date: 27-dec-2008
Creation Date: 27-dec-2008
Expiration Date: 27-dec-2009

Delivered-To: suc...@yourface.myass,org
Received: by 10.181.57.13 with SMTP id j13cs662423bkk;
Thu, 8 Jan 2009 01:16:46 -0800 (PST)
Received: by 10.210.87.19 with SMTP id k19mr2789937ebb.141.1231406206334;
Thu, 08 Jan 2009 01:16:46 -0800 (PST)
Return-Path: <ro...@mailinator.com>
Received: from 216.55.169.94 (216-55-169-94.dedicated.abac.net
[216.55.169.94])
by mx.google.com with SMTP id
4si50444871ewy.59.2009.01.08.01.16.43;
Thu, 08 Jan 2009 01:16:46 -0800 (PST)
Received-SPF: neutral (google.com: 216.55.169.94 is neither permitted
nor denied by best guess record for domain of ro...@mailinator.com)
client-ip=216.55.169.94;
Authentication-Results: mx.google.com; spf=neutral (google.com:
216.55.169.94 is neither permitted nor denied by best guess record for
domain of ro...@mailinator.com) smtp.mail=ro...@mailinator.com
Message-Id: <4965c47e.0467f10a.7...@mx.google.com>
From: "RON" <ro...@mailinator.com>
Reply-To: "RON" <ro...@mailinator.com>
To: suc...@yourface.myass,org
Subject: Come JOIN US Today.
Date: Thu, 08 Jan 2009 04:15:42 -0500
X-Mailer: QUALCOMM Windows Eudora Version 5.1
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--79110109166019545"
X-Priority: 3
X-MSMail-Priority: Normal

----79110109166019545
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable

Hey Guys!

Ron here, I've just discovered an awesome new chat site with a great
community. It's very responsive and there is always someone available
to chat with you.

You guys should really check this out!

Go here right now --> http://alwaysadultschatting.com

Click on the Channels tab and a room list will open. Join us all in
#Always_Adults_Chatting room!

Fot those of you running MIRC:

Description: Alwaysadultschatting.com
IRCServer: irc.alwaysadultschatting.com
Port:6667

This is absolutely great, if you've been looking for the ultimate
adult chatting experience then you really should drop everything
you're doing and log on now!

It's just opened and is fairly new but I already feel like I'm part
of the family.

Let me know guys, I'll see you inside!

----79110109166019545--

--
All postings to news.admin.net-abuse.sightings are unconfirmed and unverified
unless stated otherwise by the moderators. All opinions expressed above are
considered the opinions of the original poster, not the moderators or their
respective employers. For a copy of the guidelines to this group, see:
http://www.killfile.org/~tskirvin/nana/

Thorin Oakenshield

unread,

Jan 8, 2009, 10:36:55 AM1/8/09

to

ReferralServer: rwhois://rwhois.fortressitx.com:4443

Delivered-To: suc...@yourface.myass,org
Received: by 10.181.57.13 with SMTP id j13cs662711bkk;
Thu, 8 Jan 2009 01:28:35 -0800 (PST)
Received: by 10.210.142.6 with SMTP id p6mr28462675ebd.100.1231406914654;
Thu, 08 Jan 2009 01:28:34 -0800 (PST)

Return-Path: <ro...@mailinator.com>
Received: from 216.55.169.94 (216-55-169-94.dedicated.abac.net
[216.55.169.94])
by mx.google.com with SMTP id

4si50454342ewy.59.2009.01.08.01.28.31;
Thu, 08 Jan 2009 01:28:34 -0800 (PST)

Received-SPF: neutral (google.com: 216.55.169.94 is neither permitted
nor denied by best guess record for domain of ro...@mailinator.com)
client-ip=216.55.169.94;
Authentication-Results: mx.google.com; spf=neutral (google.com:
216.55.169.94 is neither permitted nor denied by best guess record for
domain of ro...@mailinator.com) smtp.mail=ro...@mailinator.com

Message-Id: <4965c742.0467f10a.7...@mx.google.com>

From: "RON" <ro...@mailinator.com>
Reply-To: "RON" <ro...@mailinator.com>

To: suc...@yourface.myass,org, suc...@yourface.myass,org,
jdec...@gmail.com, ryan.d...@gmail.com, ryan.d...@gmail.com

Subject: Come JOIN US Today.

Date: Thu, 08 Jan 2009 08:20:30 -0100
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--00390904941398129"
X-Priority: 3
X-MSMail-Priority: Normal

----00390904941398129
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable

Hey Guys!

Ron here, I've just discovered an awesome new chat site with a great
community. It's very responsive and there is always someone available
to chat with you.

You guys should really check this out!

Go here right now --> http://alwaysadultschatting.com

Click on the Channels tab and a room list will open. Join us all in
#Always_Adults_Chatting room!

Fot those of you running MIRC:

Description: Alwaysadultschatting.com
IRCServer: irc.alwaysadultschatting.com
Port:6667

This is absolutely great, if you've been looking for the ultimate
adult chatting experience then you really should drop everything
you're doing and log on now!

It's just opened and is fairly new but I already feel like I'm part
of the family.

Let me know guys, I'll see you inside!

----00390904941398129--

Thorin Oakenshield

unread,

Jan 9, 2009, 2:07:09 PM1/9/09

to

Someone please kick this spamming assh0le, close his spamadvertised site
and domain, then explain him I'm not interested in Nintendo WIIs.

Nth Air, Inc. NTHAIRNET (NET-69-64-16-0-1)
69.64.16.0 - 69.64.31.255
Jactom Ad Consulting BMST-69-64-30-24 (NET-69-64-30-0-1)
69.64.30.0 - 69.64.30.255

OrgName: Jactom Ad Consulting
OrgID: JACTO
Address: 27 N WACKER DR
City: CHICAGO
StateProv: IL
PostalCode: 60606
Country: US

NetRange: 69.64.30.0 - 69.64.30.255
CIDR: 69.64.30.0/24
OriginAS: AS10963
NetName: BMST-69-64-30-24
NetHandle: NET-69-64-30-0-1
Parent: NET-69-64-16-0-1
NetType: Reassigned
NameServer: NS01.NTHAIR.COM
NameServer: NS02.NTHAIR.COM
Comment:
RegDate: 2008-10-01
Updated: 2008-10-01

RAbuseHandle: HOSTM1290-ARIN
RAbuseName: Hostmaster
RAbusePhone: +1-312-372-2727
RAbuseEmail: hostm...@imigatorcom.com

$ host u-hous.net
u-hous.net has address 69.64.30.68
u-hous.net mail is handled by 10 u-hous.net.

Return-Path: <ret...@ndebeque.com>
X-Original-To: pee...@lexsucks.org
Delivered-To: pee...@lexsucks.org
Received: from mta1.spennamelo.net (mta1b.spennamelo.net [147.123.1.115])
by mithrillo.lexsucks.org (Postfix) with ESMTP id 417F46007A
for <pee...@lexsucks.org>; Thu, 8 Jan 2009 18:11:19 +0100 (CET)
Received: from zmoor.com (unknown [69.64.30.10])
by mta1.spennamelo.net (Postfix) with ESMTP id 6E7AF8002
for <pee...@lexsucks.org>; Thu, 8 Jan 2009 18:11:18 +0100 (CET)
Received: by zmoor.com (Postfix) with SMTP id 38B9060663C
for <pee...@lexsucks.org>; Thu, 8 Jan 2009 11:30:28 -0500 (EST)
Subject: New Nintendo Wii Testers wanted
From: Your Reward Inside <YourRewa...@ndebeque.com>
Reply-to: <YourRewa...@ndebeque.com>
To: pee...@lexsucks.org
X-Priority: 5
X-Mailer: Everest V1.6
Content-Type: text/html; charset=us-ascii;
Content-Disposition: inline
Message-Id: <2009010816302...@zmoor.com>
Date: Thu, 8 Jan 2009 11:30:28 -0500 (EST)
X-Null-Tag: df6446c69fdd6568a216940530710f23

<HTML>
<BODY>
<CENTER>
<TABLE><A

href="http://u-hous.net/r137.html?u7=198rprmowii_oth.o918M.W74.216fb4s"><IMG

src="http://u-hous.net/f0c92c1e6/ca4b158.jpg" border=0></A>
<DIV align=center><A

href="http://u-hous.net/r137.html?u7=198rproutmowii.o918M.W74.216fb4s"><IMG
src="http://u-hous.net/f0c92c1e6/57d83.gif"
border=0></A></DIV></TD></TR></TBODY>
<TBODY></TBODY></TABLE></CENTER>

Thorin Oakenshield

unread,

Jan 9, 2009, 2:14:05 PM1/9/09

to

PLease kick this spamming idiot and close his spamadvertised site and
domain.

# host www.netstarcasino.com
www.netstarcasino.com has address 116.125.56.219

inetnum: 58.10.0.0 - 58.10.255.255
netname: TRUENET
descr: True Internet Co., Ltd.
descr: Internet Service Provider
descr: Bangkok, Thailand.
country: TH
admin-c: TIA6-AP
tech-c: TIA6-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-AP-TRUEINTERNET
changed: ipa...@trueinternet.co.th 20070425
source: APNIC

role: TRUE IP ADMINISTRATION
address: 1 Fortune Town, 14th, 27th Floor,
address: Ratchadapisek Road, Din Daeng
address: Din Daeng, Bangkok 10400.
country: TH
phone: +662 6200400
fax-no: +662 6421557
e-mail: ipa...@trueinternet.co.th
trouble: ab...@trueinternet.co.th
admin-c: AC1013-AP
admin-c: WP1-AP
tech-c: PY184-AP
tech-c: RT271-AP
nic-hdl: TIA6-AP
notify: ipa...@trueinternet.co.th
changed: ipa...@trueinternet.co.th 20081105
mnt-by: MAINT-AP-TRUEINTERNET
source: APNIC

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs17564fga;
Fri, 9 Jan 2009 01:00:42 -0800 (PST)
Received: by 10.103.11.5 with SMTP id o5mr9098048mui.132.1231491642421;
Fri, 09 Jan 2009 01:00:42 -0800 (PST)
Return-Path: <dytji...@politico.com>
Received: from politico.com (ppp-58-10-65-107.revip2.asianet.co.th
[58.10.65.107])

by mx.google.com with SMTP id

j10si42784649mue.33.2009.01.09.01.00.25;
Fri, 09 Jan 2009 01:00:41 -0800 (PST)
Received-SPF: fail (google.com: domain of dytji...@politico.com does
not designate 58.10.65.107 as permitted sender) client-ip=58.10.65.107;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain
of dytji...@politico.com does not designate 58.10.65.107 as permitted
sender) smtp.mail=dytji...@politico.com
Message-ID: <2F363B45...@politico.com>
Date: Fri, 09 Jan 2009 05:00:29 -0500
From: "Royal Casino" <dytji...@politico.com>
To: <etc_s...@people.it>
Subject: Tutti i nuovi membri ricevono 555 Euro gratis
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>

<title>Royal Club Casino: tutti i nuovi membri ricevono </title>

</head>

Royal Club Casino: tutti i nuovi membri ricevono €555 gratis!
<o:p></o:p>

<o:p> </o:p>

Davvero il Royal Club sta attualmente offrendo €555 ad ogni singolo
nuovo membro che varca la soglia del casinò online. Su ognuno dei
tuoi
primi 3 depositi riceverai un generoso deposito partita che tutto per tutto
sommato fa €555. Immagina quante più chance di vincere avresti
con tutto quel denaro extra con cui giocare!<o:p></o:p>

<o:p> </o:p>

E allora non
importa quale gioco scegli. Avrai un sacco di soldi in contanti per giocare
sia che si tratti di video poker, multi-reel slot o altri giochi da tavolo
più tradizionali. Inoltre Royal Club garantisce di giocare online
in maniera sicura in un gran numero di lingue: inglese, olandese, polacco,
portoghese, danese, ceco, russo, svedese, ungherese, italiano, spagnolo e
francese!<o:p></o:p>

<o:p> </o:p>

Contatta Royal Club Casino oggi per maggiori informazioni su questa offerta
speciale.<o:p></o:p>

<o:p> </o:p>

<a href="http://www.netstarcasino.com/it/">
http://www.netstarcasino.com/it/</a><o:p></o:p>

</div>

</body>

</html>

Thorin Oakenshield

unread,

Jan 9, 2009, 2:26:32 PM1/9/09

to

What the hell of an abuse contact is an address @msn.com? I had to write
to these small rats upstreams, just to be sure to be listened to. And
more, is there any hope to have the Korean CERT kick once for all the
Hanaro spamming rats? I got two different casino crap mail both pointing
to the same Hanaro.com's spamadvertised site. AM i asking too much??

# host www.topworldgambling.net
www.topworldgambling.net has address 116.125.56.219

Domain Name: TOPWORLDGAMBLING.NET
Registrar: THE REGISTRY AT INFO AVENUE D/B/A IA REGISTRY
Whois Server: whois.iaregistry.com
Referral URL: http://www.spiritdomains.com
Name Server: NS1.NAME-CAZINO.COM
Name Server: NS1.TOPCAZINONAME.COM
Name Server: NS2.CAZINOTOPNAME.COM
Name Server: NS2.NAME-CAZINO.COM
Name Server: NS3.CAZINO-NAME.COM
Name Server: NS3.NAME-CAZINO.COM
Status: clientTransferProhibited
Updated Date: 07-jan-2009
Creation Date: 07-jan-2009
Expiration Date: 07-jan-2010

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs40527fga;
Thu, 8 Jan 2009 02:36:25 -0800 (PST)
Received: by 10.65.191.19 with SMTP id t19mr17531931qbp.61.1231410980714;
Thu, 08 Jan 2009 02:36:20 -0800 (PST)
Return-Path: <pitome...@jaydemail.com>
Received: from jaydemail.com ([80.69.63.126])

by mx.google.com with SMTP id

s12si41428730qbs.30.2009.01.08.02.36.00;
Thu, 08 Jan 2009 02:36:20 -0800 (PST)
Received-SPF: fail (google.com: domain of pitome...@jaydemail.com
does not designate 80.69.63.126 as permitted sender) client-ip=80.69.63.126;

Authentication-Results: mx.google.com; spf=hardfail (google.com: domain

of pitome...@jaydemail.com does not designate 80.69.63.126 as
permitted sender) smtp.mail=pitome...@jaydemail.com
Message-ID: <11373C0D...@jaydemail.com>
Date: Thu, 08 Jan 2009 01:15:34 -1000
From: "Euro-Dice-Casino" <pitome...@jaydemail.com>
To: <claudia...@people.it>,
<maidi...@people.it>,
<theo...@people.it>,
<mailing_ma...@people.it>,
<ad...@people.it>,
<jas...@people.it>,
<la...@people.it>,
<ba...@people.it>,
<vin...@people.it>,
<etc_s...@people.it>,
<suc...@yourface.myass.org>,
<sla...@people.it>,
<p.men...@people.it>,
<mart...@people.it>,
<ru...@people.it>
Subject: Il Migliore e piu' Generoso dei Casino' e' online! mdo

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>

<title>Se cerchi un'emozione, tira il dado all'Euro </title>

</head>

<span lang=IT style='font-size:14.0pt;mso-ansi-language:

IT'>Se cerchi un'emozione, tira il dado all'Euro Dice Casino.

<o:p></o:p>

<span lang=IT style='font-size:14.0pt;mso-ansi-language:

IT'><a href="http://www.topworldgambling.net/it/">
http://www.topworldgambling.net/it/</a><o:p></o:p>

</div>

<o:p> </o:p>

<o:p> </o:p>

<o:p> </o:p>

Xszzemu?
Emijaaupoq welji huguc f gyfnptoy shagkma ;)
Voeuyjompr ukoxlypiq iniaeav caadejnrv gazcnidi?
Qqaxqxi eg luwosope hkkyaeyt :)
Iey gxcebyxyj wuaboonyq

Thorin Oakenshield

unread,

Jan 11, 2009, 3:43:22 AM1/11/09

to

Any hope of seeing Google closing this spamadvertised site and Korean
CERT doing something these sons of Knornet spammers?

Return-Path: <adrienneco...@hotmail.com>
Delivered-To: suc...@yourface.myass.org
Received: from localhost (ispin01.email.it [127.0.0.1])
by ispin01.email.it (Postfix) with ESMTP id B61FF568053
for <suc...@yourface.myass.org>; Fri, 9 Jan 2009 11:45:38 +0100 (CET)
X-Virus-Scanned: amavisd-new at email.it
X-Spam-Score: -2.168
X-Spam-Level:
X-Spam-Status: No, score=-2.168 tagged_above=-100 required=5
tests=[BAYES_00=-2.312, FREE_PORN=0.143, HTML_MESSAGE=0.001]
Received: from ispin01.email.it ([127.0.0.1])
by localhost (ispin01.email.it [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id YE0sneSuAQGx for <suc...@yourface.myass.org>;
Fri, 9 Jan 2009 11:45:37 +0100 (CET)
Received: from blu0-omc1-s28.blu0.hotmail.com
(blu0-omc1-s28.blu0.hotmail.com [65.55.116.39])
by ispin01.email.it (Postfix) with ESMTP id BE28E56804B
for <suc...@yourface.myass.org>; Fri, 9 Jan 2009 11:45:36 +0100 (CET)
Received: from BLU126-W41 ([65.55.116.9]) by
blu0-omc1-s28.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 9 Jan 2009 02:45:36 -0800
Message-ID: <BLU126-W410058394...@phx.gbl>
Content-Type: multipart/alternative;
boundary="_4a096793-2e51-494e-83b4-2841c53ba80b_"
X-Originating-IP: [121.254.47.67]
From: Adrienne Costello <adrienneco...@hotmail.com>
To: <evild...@hotmail.com>
Subject: Take your fantasy to the next level with HD technology. Up to
1280x720 hi-def videos.
Date: Fri, 9 Jan 2009 10:45:36 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 09 Jan 2009 10:45:36.0154 (UTC)
FILETIME=[678147A0:01C97247]

--_4a096793-2e51-494e-83b4-2841c53ba80b_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

Join for free - no tricks=2C 100% free. 500 FREE adult channels!http://darc=
iehinds308.googlegroups.com/web/index.html?gda=3DOtC_QzwAAACFuVTC-NH6-zFw3Z=
5AXJfd9cMmgAFsmABjVQheIv81Bls2J23Br1X3GJDAub4Hu3r9Wm-ajmzVoAFUlE7c_fAt&gsc=
=3DPYajhxYAAACxCITO_SY0eO3I_CZlfB_IS7ibph5ftdNh9K_-frBgDg=20
_________________________________________________________________
Windows Live=99: Keep your life in sync.
http://windowslive.com/explore?ocid=3DTXT_TAGLM_WL_t1_allup_explore_012009=

--_4a096793-2e51-494e-83b4-2841c53ba80b_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<style>
.hmmessage P
{
margin:0px=3B
padding:0px
}
body.hmmessage
{
font-size: 10pt=3B
font-family:Verdana
}
</style>
</head>
<body class=3D'hmmessage'>
Join for free - no tricks=2C 100% free. 500 FREE adult channels! <A href=
=3D"http://darciehinds308.googlegroups.com/web/index.html?gda=3DOtC_QzwAAAC=
FuVTC-NH6-zFw3Z5AXJfd9cMmgAFsmABjVQheIv81Bls2J23Br1X3GJDAub4Hu3r9Wm-ajmzVoA=
FUlE7c_fAt&gsc=3DPYajhxYAAACxCITO_SY0eO3I_CZlfB_IS7ibph5ftdNh9K_-frBgDg">ht=
tp://darciehinds308.googlegroups.com/web/index.html?gda=3DOtC_QzwAAACFuVTC-=
NH6-zFw3Z5AXJfd9cMmgAFsmABjVQheIv81Bls2J23Br1X3GJDAub4Hu3r9Wm-ajmzVoAFUlE7c=
_fAt&gsc=3DPYajhxYAAACxCITO_SY0eO3I_CZlfB_IS7ibph5ftdNh9K_-frBgDg</A> <hr />Windows Live=99: Keep your life in sync. <a
href=3D'http://windowsli=
ve.com/explore?ocid=3DTXT_TAGLM_WL_t1_allup_explore_012009' target=3D'_new'=
>Check it out.</a></body>

</html>=

--_4a096793-2e51-494e-83b4-2841c53ba80b_--

Thorin Oakenshield

unread,

Jan 11, 2009, 3:57:59 AM1/11/09

to

Besides the usual unuseful, stupid automatic reply in chinese from
ab...@antispam.cn which I would not obviously be able to understand, any
hope of seeing dns.com.cn and Hanaro.com closeing this spamadvertised
site and domain?

$ host zula.padlane.com
zula.padlane.com has address 116.125.56.213

Domain Name: PADLANE.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS3.DEYEM.COM
Name Server: NS4.DEYEM.COM
Status: clientTransferProhibited
Updated Date: 06-jan-2009
Creation Date: 06-jan-2009
Expiration Date: 06-jan-2010

Return-Path: <kefxb...@xbox.cz>

Delivered-To: suc...@yourface.myass.org
Received: from localhost (ispin01.email.it [127.0.0.1])

by ispin01.email.it (Postfix) with ESMTP id F340756804B;
Fri, 9 Jan 2009 20:04:26 +0100 (CET)
X-Virus-Scanned: amavisd-new at email.it
X-Spam-Score: 3.929
X-Spam-Level: ***
X-Spam-Status: No, score=3.929 tagged_above=-100 required=5
tests=[BAYES_50=0.001, HTML_20_30=1.053, HTML_MESSAGE=0.001,
SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062]

Received: from ispin01.email.it ([127.0.0.1])
by localhost (ispin01.email.it [127.0.0.1]) (amavisd-new, port 10024)

with LMTP id LEmAjn5p+dqp; Fri, 9 Jan 2009 20:04:26 +0100 (CET)
Received: from 5ad61071.bb.sky.com (5ad61071.bb.sky.com [90.214.16.113])
by ispin01.email.it (Postfix) with ESMTP id BD9EA568020;
Fri, 9 Jan 2009 20:04:25 +0100 (CET)
Received: from [90.214.16.113] by mx2.xbox.cz; Fri, 9 Jan 2009 19:04:25
+0000
Date: Fri, 9 Jan 2009 19:04:25 +0000
From: "Charlotte Meade" <kefxb...@xbox.cz>
X-Mailer: The Bat! (v2.00.5) Personal
Reply-To: kefxb...@xbox.cz
X-Priority: 3 (Normal)
Message-ID: <022321445.79...@xbox.cz>
To: ess...@infinito.it
Subject: It is an excellent gift + economy of time and money!
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------05136E80C59E80C5"

------------05136E80C59E80C5
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit

Do not hesitate. We do our best to satisfy our customers and ensure fast
delivery and excellent service. If you receive a damaged watch we will
ship another one to you free of charge.

You have been considering buying a replica watch but are afraid that
somebody might discover your secret? We can assure you that ordering
online is more convenient and safer. We guarantee you complete privacy
by using 124 bit encryption programs. So you can tell your friends that
you bought your brand new watch in an expensive jewelery store.

Save up to 40% compared to the cost of other replicas

Click here! ... http://zula.padlane.com/?yzq
------------05136E80C59E80C5
Content-Type: text/html; charset=iso-8859-2
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>

<html>
<body>
Do not hesitate. We do our best to satisfy our customers and ensure fast
delivery and excellent service. If you receive a damaged watch we will
ship another one to you free of charge. 
You have been considering buying a replica watch but are afraid that
somebody might discover your secret? We can assure you that ordering
online is more convenient and safer. We guarantee you complete privacy
by using 124 bit encryption programs. So you can tell your friends that
you bought your brand new watch in an expensive jewelery store.

Save up to 40% compared to the cost of other replicas 
<a href="http://zula.padlane.com/?yzq">Click here! ...
http://zula.padlane.com/?yzq</a>
</body>
</html>

</BODY></HTML>
------------05136E80C59E80C5--

Thorin Oakenshield

unread,

Jan 11, 2009, 3:52:08 AM1/11/09

to

Once again we have an Hotmail spammer using a Googlegroups
spamadvertised site: any hope of some action from Google? I'm sure
Hotmail will do, as they're doing since some time to now, everything to
close the spammer's account but Google? Are they still sleeping?

Return-Path: <jamievon.t...@hotmail.com>
Delivered-To: suc...@yourface.myass.org
Received: from localhost (ispmaster.email.it [127.0.0.1])
by ispmaster.email.it (Postfix) with ESMTP id B4852250124
for <suc...@yourface.myass.org>; Fri, 9 Jan 2009 04:43:39 +0100 (CET)
X-Virus-Scanned: amavisd-new at email.it
X-Spam-Score: -1.07
X-Spam-Level:
X-Spam-Status: No, score=-1.07 tagged_above=-100 required=5
tests=[BAYES_00=-2.312, HTML_MESSAGE=0.001, LIVE_PORN=0.782,
SUBJ_ALL_CAPS=0.459, UPPERCASE_25_50=0]
Received: from ispmaster.email.it ([127.0.0.1])
by localhost (ispmaster.email.it [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id NcOFIM0B2GVO for <suc...@yourface.myass.org>;
Fri, 9 Jan 2009 04:43:39 +0100 (CET)
Received: from blu0-omc3-s21.blu0.hotmail.com
(blu0-omc3-s21.blu0.hotmail.com [65.55.116.96])
by ispmaster.email.it (Postfix) with ESMTP id 456C0250104
for <suc...@yourface.myass.org>; Fri, 9 Jan 2009 04:43:39 +0100 (CET)
Received: from BLU130-W34 ([65.55.116.74]) by
blu0-omc3-s21.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 8 Jan 2009 19:43:38 -0800
Message-ID: <BLU130-W34747B92C...@phx.gbl>
Content-Type: multipart/alternative;
boundary="_97f71f22-8b5e-4c50-b8b4-1903d7f86762_"
X-Originating-IP: [118.71.74.154]
From: Jamie Von Tungeln <jamievon.t...@hotmail.com>
To: <evildu...@aim.com>
Subject: FREELIFITEIME APPROVED HI-DEF VIDS
Date: Fri, 9 Jan 2009 03:43:38 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 09 Jan 2009 03:43:38.0736 (UTC)
FILETIME=[7525DF00:01C9720C]

--_97f71f22-8b5e-4c50-b8b4-1903d7f86762_

Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

Real live cam girls! WELCOME TO THE FREE FOR LIFE WAYhttp://julia_ehuffman3=
74.googlegroups.com/web/index.html?gda=3DzQCbqTwAAAC95cDj5DuYJKcsk-N3UpY0nm=
GYwW0_0U8ll2xCHixjWVs2J23Br1X3GJDAub4Hu3r9Wm-ajmzVoAFUlE7c_fAt&gsc=3DhKtW_x=
YAAABkNgTeYRxN-ZKm15cpXmb7S7ibph5ftdNh9K_-frBgDg=20
_________________________________________________________________
Windows Live=99: Keep your life in sync.=20
http://windowslive.com/explore?ocid=3DTXT_TAGLM_WL_t1_allup_explore_012009=

--_97f71f22-8b5e-4c50-b8b4-1903d7f86762_

Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<style>
.hmmessage P
{
margin:0px=3B
padding:0px
}
body.hmmessage
{
font-size: 10pt=3B
font-family:Verdana
}
</style>
</head>
<body class=3D'hmmessage'>

Real live cam girls! WELCOME TO THE FREE FOR LIFE WAY <A href=3D"http://=
julia_ehuffman374.googlegroups.com/web/index.html?gda=3DzQCbqTwAAAC95cDj5Du=
YJKcsk-N3UpY0nmGYwW0_0U8ll2xCHixjWVs2J23Br1X3GJDAub4Hu3r9Wm-ajmzVoAFUlE7c_f=
At&gsc=3DhKtW_xYAAABkNgTeYRxN-ZKm15cpXmb7S7ibph5ftdNh9K_-frBgDg">http://jul=
ia_ehuffman374.googlegroups.com/web/index.html?gda=3DzQCbqTwAAAC95cDj5DuYJK=
csk-N3UpY0nmGYwW0_0U8ll2xCHixjWVs2J23Br1X3GJDAub4Hu3r9Wm-ajmzVoAFUlE7c_fAt&=
gsc=3DhKtW_xYAAABkNgTeYRxN-ZKm15cpXmb7S7ibph5ftdNh9K_-frBgDg</A> <hr =
/>Windows Live=99: Keep your life in sync. <a href=3D'http://windowslive.c=
om/explore?ocid=3DTXT_TAGLM_WL_t1_allup_explore_012009' target=3D'_new'>Che=

ck it out.</a></body>

</html>=

--_97f71f22-8b5e-4c50-b8b4-1903d7f86762_--

Thorin Oakenshield

unread,

Jan 11, 2009, 4:11:00 AM1/11/09

to

Any hope of seeing Hanaro closing this spamadvertised site which is also
involved in many spam mails I'm getting.. what has the Korean CERT to do
about this?
I am also asking Moniker to close the spamadvertised domain too...

# host www.richgamingtime.com
www.richgamingtime.com has address 116.125.56.219

Domain Name: RICHGAMINGTIME.COM
Registrar: MONIKER ONLINE SERVICES, INC.
Whois Server: whois.moniker.com
Referral URL: http://www.moniker.com/whois.html
Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 09-jan-2009
Creation Date: 09-jan-2009
Expiration Date: 09-jan-2010

Return-Path: <yboxaz...@jstor.org>
Delivered-To: suc...@yourface.myass.org

Received: from localhost (ispin01.email.it [127.0.0.1])

by ispin01.email.it (Postfix) with ESMTP id AABD356804F;
Sun, 11 Jan 2009 08:53:32 +0100 (CET)
X-Virus-Scanned: amavisd-new at email.it
X-Spam-Score: 1.54
X-Spam-Level: *
X-Spam-Status: No, score=1.54 tagged_above=-100 required=5
tests=[BAYES_20=-0.74, HTML_FONT_LOW_CONTRAST=1.89,
HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.389]
Received: from ispin01.email.it ([127.0.0.1])
by localhost (ispin01.email.it [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id CRluWMn78xuY; Sun, 11 Jan 2009 08:53:32 +0100 (CET)
Received: from jstor.org (163-124.optical-network.balttelecom.net
[78.155.163.124])
by ispin01.email.it (Postfix) with SMTP id 2A2EF568020;
Sun, 11 Jan 2009 08:53:19 +0100 (CET)
Message-ID: <9527794B...@jstor.org>
Date: Sun, 11 Jan 2009 16:50:22 +0800
From: "Casino Exclusive Club" <yboxaz...@jstor.org>
To: <suc...@yourface.myass.org>,
<paolo...@infinito.it>,
<ghid...@infinito.it>,
<elenac...@infinito.it>,
<nag...@infinito.it>,
<ilde...@infinito.it>
Subject: Non scendere a nessun compromesso.

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

<html>

<title>I migliori giochi, i migliori bōnus e le migliori occasioni d=
i
gioco</title>

<style>

<!--
/* Font Definitions */
@font-face

=09=7Bfont-family:"MS Mincho";
=09panose-1:2 2 6 9 4 2 5 8 3 4;
=09mso-font-alt:"MS Mincho";
=09mso-font-charset:128;
=09mso-generic-font-family:modern;
=09mso-font-pitch:fixed;
=09mso-font-signature:-1610612033 1757936891 16 0 131231 0;=7D
@font-face
=09=7Bfont-family:"=5C@MS Mincho";
=09panose-1:2 2 6 9 4 2 5 8 3 4;
=09mso-font-charset:128;
=09mso-generic-font-family:modern;
=09mso-font-pitch:fixed;
=09mso-font-signature:-1610612033 1757936891 16 0 131231 0;=7D

/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal

=09=7Bmso-style-parent:"";
=09margin:0cm;
=09margin-bottom:.0001pt;
=09mso-pagination:widow-orphan;
=09font-size:12.0pt;
=09font-family:"Times New Roman";
=09mso-fareast-font-family:"MS Mincho";=7D
a:link, span.MsoHyperlink
=09=7Bcolor:blue;
=09text-decoration:underline;
=09text-underline:single;=7D
a:visited, span.MsoHyperlinkFollowed
=09=7Bcolor:purple;
=09text-decoration:underline;
=09text-underline:single;=7D
@page Section1
=09=7Bsize:595.3pt 841.9pt;
=09margin:2.0cm 42.5pt 2.0cm 3.0cm;
=09mso-header-margin:35.4pt;
=09mso-footer-margin:35.4pt;
=09mso-paper-source:0;=7D
div.Section1
=09=7Bpage:Section1;=7D
-->
</style>

</head>

I mig=
liori
giochi, i migliori bōnus e le migliori occasioni di gioco.<o:p></o:p=
>

<o:p>=

</o:p>

Non s=
cendere a
compromessi! Excl&#=
363;sive
Clūb Cāsinō.<o:p></o:p>

<o:p>=

</o:p>

<a
href=3D"http://www.richgamingtime.com/it/">http://www.richgamingtime.com/it/</a><o:p></o:p>

<o:p>=

</o:p>

<o:p>=

</o:p>

<o:p>=

</o:p>

Luoo n :)<o:p></o:p>

<span lang=3DIT style=3D'font-size:9.0pt;color:#FFFF=
99;

mso-ansi-language:IT'><o:p> </o:p>

Zlispywo.<o:p></o:p>

<o:p>=

</o:p>

</div>

</body>

</html>

Thorin Oakenshield

unread,

Jan 11, 2009, 11:50:02 AM1/11/09

to

As expected, Hanaro hasn't still done nothing to close this
spamadvertised site (is the Korea CERT sleeping??) and more, as I was
saying to my contact in Romanian CERT, the Jump.ro spamming rats need
again to be taught how the world goes (that's why I wrote to their
direct upstreams, telefonica-wholesale.com, hoping in some action from
them too).

inetnum: 89.41.24.0 - 89.41.24.255
netname: SC-CONYSAT-SA
descr: SC CONYSAT SA
descr: Fraternitatii Nr 2
descr: Galati Romania 800028
country: ro
admin-c: TL1810-RIPE
tech-c: HI121-RIPE
status: ASSIGNED PA
remarks: Registered through http://www.jump.ro/ip.html
mnt-by: RO-MNT
mnt-lower: RO-MNT
mnt-routes: ARTELECOM-MNT
changed: hostm...@jump.ro 20070213
source: RIPE

person: TIRU LUMINITA
address: SC CCC Blue Telecom SA Galati
address: Fraternitatii, nr. 9
address: Galati Galati 800016
phone: +40-746-054203
fax-no: +40-236-411042
e-mail: off...@blueintel.ro
nic-hdl: TL1810-RIPE
notify: off...@blueintel.ro
mnt-by: CONYSAT-MNT
changed: off...@blueintel.ro 20060921
source: RIPE

# host www.richgamingtime.com
www.richgamingtime.com has address 116.125.56.219

inetnum: 116.120.0.0 - 116.127.255.255
netname: HANANET
descr: Hanaro Telecom
descr: Shindongah Bldg, 43, Taepyeongno2-ga,
descr: Jung-gu, Seoul
descr: ***********************************
descr: Allocated to KRNIC Member.
descr: If you would like to find assignment
descr: information in detail please refer to
descr: the KRNIC Whois Database at:
descr: http://whois.nic.or.kr/english/index.htm
descr: ***********************************
country: KR
admin-c: HL196-AP
tech-c: JK250-AP
status: Allocated Portable
remarks: www.hanaro.com
mnt-by: MNT-KRNIC-AP
mnt-lower: MNT-KRNIC-AP
changed: hm-ch...@apnic.net 20070521
source: APNIC

Domain Name: RICHGAMINGTIME.COM
Registrar: MONIKER ONLINE SERVICES, INC.
Whois Server: whois.moniker.com
Referral URL: http://www.moniker.com/whois.html
Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Updated Date: 09-jan-2009
Creation Date: 09-jan-2009
Expiration Date: 09-jan-2010

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs63231fga;
Sun, 11 Jan 2009 00:06:14 -0800 (PST)
Received: by 10.103.245.18 with SMTP id x18mr9883726mur.62.1231661174442;
Sun, 11 Jan 2009 00:06:14 -0800 (PST)
Return-Path: <peife...@linuxmail.org>
Received: from linuxmail.org ([89.41.24.9])

by mx.google.com with SMTP id

j6si8561966mue.59.2009.01.11.00.05.57;
Sun, 11 Jan 2009 00:06:14 -0800 (PST)
Received-SPF: neutral (google.com: 89.41.24.9 is neither permitted nor
denied by best guess record for domain of peife...@linuxmail.org)
client-ip=89.41.24.9;
Authentication-Results: mx.google.com; spf=neutral (google.com:
89.41.24.9 is neither permitted nor denied by best guess record for
domain of peife...@linuxmail.org) smtp.mail=peife...@linuxmail.org
Message-ID: <54564381...@linuxmail.org>
Date: Sat, 10 Jan 2009 22:53:34 -1000
From: "Exclusive Casino" <peife...@linuxmail.org>
To: <moron...@people.it>
Cc: <flav...@people.it>,
<chanceth...@people.it>,
<itor.ch...@people.it>,
<m.be...@people.it>,
<um...@people.it>,
<djm...@people.it>,

<claudia...@people.it>,
<maidi...@people.it>,
<theo...@people.it>,
<mailing_ma...@people.it>,
<ad...@people.it>,
<jas...@people.it>,
<la...@people.it>,
<ba...@people.it>,
<vin...@people.it>,
<etc_s...@people.it>,
<suc...@yourface.myass.org>,
<sla...@people.it>,
<p.men...@people.it>

<html>

</head>

mso-ansi-language:IT'>Ctucoavera rezkira.<o:p></o:p>

<o:p> </o:p>

<span lang=3DIT style=3D'font-size:9.0pt;color:#FFFF=
99;

mso-ansi-language:IT'>Gasy ;)<o:p></o:p>

Thorin Oakenshield

unread,

Jan 11, 2009, 12:09:46 PM1/11/09

to

Don't want to insult no more the Hanaro spamming rats.. I just hope the
Korean CERT will wake up soon and kick their asses ASAP!

# host www.starhitplaying.com
www.starhitplaying.com has address 116.125.56.219

Domain Name: STARHITPLAYING.COM
Registrar: UK2 GROUP LTD.
Whois Server: whois.hostingservicesinc.net
Referral URL: http://http://www.uk2group.com/

Name Server: NS1.NAME-CAZINO.COM
Name Server: NS1.TOPCAZINONAME.COM
Name Server: NS2.CAZINOTOPNAME.COM
Name Server: NS2.NAME-CAZINO.COM
Name Server: NS3.CAZINO-NAME.COM
Name Server: NS3.NAME-CAZINO.COM
Status: clientTransferProhibited

Updated Date: 05-jan-2009
Creation Date: 04-jan-2009
Expiration Date: 04-jan-2010

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs68762fga;
Sun, 11 Jan 2009 03:17:20 -0800 (PST)
Received: by 10.140.226.14 with SMTP id y14mr13812705rvg.59.1231672638784;
Sun, 11 Jan 2009 03:17:18 -0800 (PST)
Return-Path: <etuvyqy...@dbzmail.com>
Received: from dbzmail.com (adsl196-95-163-217-196.adsl196-14.iam.net.ma
[196.217.163.95])

by mx.google.com with SMTP id

g31si10223960rvb.4.2009.01.11.03.16.41;
Sun, 11 Jan 2009 03:17:17 -0800 (PST)
Received-SPF: neutral (google.com: 196.217.163.95 is neither permitted

nor denied by best guess record for domain of

etuvyqy...@dbzmail.com) client-ip=196.217.163.95;
Authentication-Results: mx.google.com; spf=neutral (google.com:
196.217.163.95 is neither permitted nor denied by best guess record for
domain of etuvyqy...@dbzmail.com) smtp.mail=etuvyqy...@dbzmail.com
Message-ID: <DF849BE2...@dbzmail.com>
Date: Sun, 11 Jan 2009 18:51:26 +0700
From: "Vegas Club Casino" <etuvyqy...@dbzmail.com>
To: <jas...@people.it>
Subject: =?iso-8859-1?Q?Riceverà_sino_a_555_Euro_in_bonus_di_benvenuto!?MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>

<title>Bisogno di valide ragioni per registrarsi su Vegas Club</title>

<style>
<!--

/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal

{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";

mso-fareast-font-family:"Times New Roman";
mso-ansi-language:EN-US;
mso-fareast-language:EN-US;}

a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
@page Section1
{size:595.3pt 841.9pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>

</head>

Bisogno
di valide ragioni per registrarsi su Vegas Club Casino? Cosa ne direbbe di
555 ragioni?!<o:p></o:p>

<o:p> </o:p>

Diventi un membro del club di gioco
on-line più elitario, riceverà sino a 555€ in bonus di
benvenuto:<o:p></o:p>

<o:p> </o:p>

1o deposito – 200% di bonus sino a
200€<o:p></o:p>

2°deposito – 100% di bonus sino a
100€<o:p></o:p>

3°deposito – 155% di bonus, sino a
155€<o:p></o:p>

4°deposito – 100% di bonus, sino a
100€<o:p></o:p>

<o:p> </o:p>

Vegas Club le offre un ambiente
sicuro ed
affidabile , dove poter giocare ai suoi giochi di carte preferiti , tavoli e
slot machine, ciascuno offre alte probabilità di vincita e ricchi
guadagni.

<o:p> </o:p>

<a href="http://www.starhitplaying.com/it/">
http://www.starhitplaying.com/it/</a>

<o:p> </o:p>

Vegas Club, ti porta il meglio di Las
Vegas, ovunque tu sia…

Thorin Oakenshield

unread,

Jan 12, 2009, 10:20:19 AM1/12/09

to

I see the Korean CERT is still sleeping and is not taking seriously my
multiple complaints against the Hanaro spamming rats.. Anyway I hope at
least the Romanian CERT will kick the ilink.ro's spamming rats' asses ASAP!

# host www.topsuperplaying.net
www.topsuperplaying.net has address 116.125.56.219

Domain Name: TOPSUPERPLAYING.NET

Registrar: UK2 GROUP LTD.
Whois Server: whois.hostingservicesinc.net
Referral URL: http://http://www.uk2group.com/

Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM

Status: clientTransferProhibited
Updated Date: 11-jan-2009
Creation Date: 11-jan-2009
Expiration Date: 11-jan-2010

inetnum: 89.35.168.0 - 89.35.175.255
netname: SC-BV-SRL
descr: SC BV SRL
descr: str. Dudului bl 508 ap 9
descr: Giurgiu Giurgiu
country: ro
admin-c: SN1272-RIPE
tech-c: SN1272-RIPE

status: ASSIGNED PA
remarks: Registered through http://www.jump.ro/ip.html
mnt-by: RO-MNT
mnt-lower: RO-MNT

mnt-routes: BVNET-MNT
source: RIPE # Filtered

person: Sorin Nicolaescu
address: SC BV SRL
address: str. Dudului bl 508 ap 9
address: Giurgiu Romania
phone: +40-744-333194
fax-no: +40-246-212747
e-mail: off...@bvnet.ro
nic-hdl: SN1272-RIPE
mnt-by: BVNET-MNT

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs118287fga;
Mon, 12 Jan 2009 02:58:13 -0800 (PST)
Received: by 10.67.116.18 with SMTP id t18mr1084669ugm.52.1231757893255;
Mon, 12 Jan 2009 02:58:13 -0800 (PST)
Return-Path: <kmehfe...@asistencia.org>
Received: from asistencia.org ([89.35.171.175])

by mx.google.com with SMTP id

y7si71241228ugc.53.2009.01.12.02.57.48;
Mon, 12 Jan 2009 02:58:13 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning
kmehfe...@asistencia.org does not designate 89.35.171.175 as
permitted sender) client-ip=89.35.171.175;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain
of transitioning kmehfe...@asistencia.org does not designate
89.35.171.175 as permitted sender) smtp.mail=kmehfe...@asistencia.org
Message-ID: <BEC7AF01...@asistencia.org>
Date: Mon, 12 Jan 2009 07:54:58 -0400
From: "Dice Casino" <kmehfe...@asistencia.org>
To: <ba...@people.it>
Subject: Qualcuno ha tirato il dado per te. hy

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>

<title>Qualcuno ha tirato il dado per te</title>

{font-family:"MS Mincho";

panose-1:2 2 6 9 4 2 5 8 3 4;

mso-font-alt:"MS Mincho";
mso-font-charset:128;
mso-generic-font-family:modern;
mso-font-pitch:fixed;

mso-font-signature:-1610612033 1757936891 16 0 131231 0;}

@font-face
{font-family:"Comic Sans MS";
panose-1:3 15 7 2 3 3 2 2 2 4;
mso-font-charset:204;
mso-generic-font-family:script;
mso-font-pitch:variable;
mso-font-signature:647 0 0 0 159 0;}
@font-face
{font-family:"\@MS Mincho";

panose-1:2 2 6 9 4 2 5 8 3 4;

mso-font-charset:128;
mso-generic-font-family:modern;
mso-font-pitch:fixed;

mso-font-signature:-1610612033 1757936891 16 0 131231 0;}

/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";

mso-fareast-font-family:"MS Mincho";}

a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
@page Section1
{size:595.3pt 841.9pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>

</head>

Qualcuno ha tirato il dado per te. Vieni a vedere cos'hai vinto all'Euro
Dice Casino.<o:p></o:p>

<a href="http://www.topsuperplaying.net/it/">
http://www.topsuperplaying.net/it/</a><o:p></o:p>

<o:p> </o:p>

<o:p> </o:p>

Yeyebohri tinimo ui?

<o:p></o:p>

Ioxiguuge rzukye ;)

<o:p></o:p>

Vzua

<o:p></o:p>

</div>

Thorin Oakenshield

unread,

Jan 12, 2009, 10:25:55 AM1/12/09

to

What to say more? Insults for the Hanaro spam factory?

# host www.richgamblingtime.com
www.richgamblingtime.com has address 116.125.56.219

Domain Name: RICHGAMBLINGTIME.COM

Registrar: UK2 GROUP LTD.
Whois Server: whois.hostingservicesinc.net
Referral URL: http://http://www.uk2group.com/
Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM
Status: clientTransferProhibited
Updated Date: 11-jan-2009

Creation Date: 09-jan-2009
Expiration Date: 09-jan-2010

inetnum: 62.135.0.0 - 62.135.63.255
netname: LINK
descr: Link Egypt
country: EG
admin-c: MG7699
tech-c: AK7379-AFRINIC
tech-c: MG7699
status: ASSIGNED PA
mnt-by: MAINT-LINK
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered
parent: 62.135.0.0 - 62.135.127.255

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs96435fga;
Sun, 11 Jan 2009 16:36:51 -0800 (PST)
Received: by 10.100.128.2 with SMTP id a2mr14862496and.158.1231720609872;
Sun, 11 Jan 2009 16:36:49 -0800 (PST)
Return-Path: <elu...@historycentral.com>
Received: from historycentral.com ([62.135.51.212])

by mx.google.com with SMTP id

b14si20985594ana.52.2009.01.11.16.36.05;
Sun, 11 Jan 2009 16:36:49 -0800 (PST)
Received-SPF: neutral (google.com: 62.135.51.212 is neither permitted
nor denied by best guess record for domain of elu...@historycentral.com)
client-ip=62.135.51.212;
Authentication-Results: mx.google.com; spf=neutral (google.com:
62.135.51.212 is neither permitted nor denied by best guess record for
domain of elu...@historycentral.com) smtp.mail=elu...@historycentral.com
Message-ID: <A2782C35...@historycentral.com>
Date: Mon, 12 Jan 2009 11:26:07 +1000
From: "Euro Club Gaming" <elu...@historycentral.com>
To: <ad...@people.it>
Subject:
=?iso-8859-1?Q?L'iscrizione_all'Euro_Club_comporta_moltissimi_privilegi?=
=?iso-8859-1?Q?=2C_per_essere_precisi_400_Euros!_?=

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>

<title>L’iscrizione all’Euro Club comporta moltissimi </title>

<style>
<!--

/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";

mso-fareast-font-family:"Times New Roman";}

a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
@page Section1
{size:595.3pt 841.9pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>

</head>

L’iscrizione all’Euro Club comporta moltissimi privilegi, per
essere precisi €400! <o:p></o:p>

<o:p> </o:p>

L’Euro
Club Casino non solo offre ai membri il sistema di casinò online
più sicuro e la più vasta selezione di giochi, ma ora offre
anche un fantastico bonus di benvenuto di €400 a tutti i nuovi
giocatori.<o:p></o:p>

<o:p> </o:p>

Per
richiedere
il tuo bonus sono necessari solo 5 minuti per aprire il tuo conto ed
effettuare il deposito. Euro Club ti darà un bonus corrispondente al
100% sui tuoi primi 4 depositi, ognuno del valore di €100!

<o:p></o:p>

<o:p> </o:p>

Deposita

€400 in totale e gioca con €800 all’Euro Club
Casinò!

<o:p></o:p>

<o:p> </o:p>

<a href="http://www.richgamblingtime.com/it/">Per maggiori informazioni
clicca
qui… http://www.richgamblingtime.com/it/<o:p></o:p></a>

<o:p> </o:p>

</div>

Thorin Oakenshield

unread,

Jan 12, 2009, 10:31:08 AM1/12/09

to

# host www.topsungambling.net
www.topsungambling.net has address 116.125.56.219

Domain Name: TOPSUNGAMBLING.NET

Registrar: MONIKER ONLINE SERVICES, INC.
Whois Server: whois.moniker.com
Referral URL: http://www.moniker.com/whois.html

Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM

Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited

Updated Date: 11-jan-2009
Creation Date: 11-jan-2009
Expiration Date: 11-jan-2010

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs134066fga;
Mon, 12 Jan 2009 06:02:40 -0800 (PST)
Received: by 10.103.24.17 with SMTP id b17mr10494823muj.112.1231768959982;
Mon, 12 Jan 2009 06:02:39 -0800 (PST)
Return-Path: <ass...@jalopnik.com>
Received: from jalopnik.com ([121.173.184.247])

by mx.google.com with SMTP id

6si81537246ewy.63.2009.01.12.06.02.12;
Mon, 12 Jan 2009 06:02:39 -0800 (PST)

Received-SPF: softfail (google.com: domain of transitioning

ass...@jalopnik.com does not designate 121.173.184.247 as permitted
sender) client-ip=121.173.184.247;

Authentication-Results: mx.google.com; spf=softfail (google.com: domain

of transitioning ass...@jalopnik.com does not designate 121.173.184.247
as permitted sender) smtp.mail=ass...@jalopnik.com
Message-ID: <FE6BAB88...@jalopnik.com>
Date: Mon, 12 Jan 2009 05:50:29 -0900
From: "Fiesta Casino Club" <ass...@jalopnik.com>
To: <m.be...@people.it>
Subject: Partecipa alla festa con la fantastica offerta: 555 Euro gratis!

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>

<title>FIESTA 555</title>

</head>

FIESTA 555!<o:p></o:p>

<o:p> </o:p>

Partecipa alla festa con la fantastica offerta di Fiesta Club Casino:
555€ gratis! Cosa devi fare per ricevere questo grande bonus?
Non molto a dire il vero: saranno necessari solo 5 minuti per aprire
un conto Fiesta Club e riceverai un bonus partita di almeno il 100% su
ognuno dei tuoi primi 4 depositi presso la cassa del casinò.

<o:p></o:p>

<o:p> </o:p>

Puoi usare i tuoi bonus con una vastissima varietà di giochi
realistici ed eccitanti, tutti disegnati per offrirti la migliore
esperienza di gioco possibile<o:p></o:p>

<o:p> </o:p>

Clicca qui per registrarti su Fiesta Club Casino ora!

<o:p></o:p>

<o:p> </o:p>

<a href="http://www.topsungambling.net/it/">
http://www.topsungambling.net/it/</a>

<o:p></o:p>

Thorin Oakenshield

unread,

Jan 12, 2009, 10:44:04 AM1/12/09

to

Please kick this spamming assh0le ASAP!

# host ddl-extreme.com
ddl-extreme.com has address 69.72.207.130
ddl-extreme.com mail is handled by 0 ddl-extreme.com.

Domain Name: EXTREME.COM
Registrar: EPAG DOMAINSERVICES GMBH
Whois Server: whois.enterprice.net
Referral URL: http://www.enterprice.net
Name Server: DNS1.INODE.AT
Name Server: DNS2.INODE.AT
Status: ok
Updated Date: 30-aug-2008
Creation Date: 30-aug-1994
Expiration Date: 29-aug-2009

Return-Path: <andre.r...@email.com>
Delivered-To: suc...@yourface.myass.org

Received: from localhost (ispmaster.email.it [127.0.0.1])

by ispmaster.email.it (Postfix) with ESMTP id 5585625010F
for <suc...@yourface.myass.org>; Mon, 12 Jan 2009 00:28:25 +0100 (CET)
X-Virus-Scanned: amavisd-new at email.it
X-Spam-Score: -0.499
X-Spam-Level:
X-Spam-Status: No, score=-0.499 tagged_above=-100 required=5
tests=[BAYES_00=-2.312, RCVD_ILLEGAL_IP=1.813]
Received: from ispmaster.email.it ([127.0.0.1])
by localhost (ispmaster.email.it [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id V62rXzoyc0Mx for <suc...@yourface.myass.org>;
Mon, 12 Jan 2009 00:28:25 +0100 (CET)
Received: from mail.r17982.ovh.net (rps4449.ovh.net [94.23.15.146])
by ispmaster.email.it (Postfix) with ESMTP id 38ED6250104
for <suc...@yourface.myass.org>; Mon, 12 Jan 2009 00:28:25 +0100 (CET)
Received: from r17982.ovh.net (unknown [127.0.0.7])
by mail.r17982.ovh.net (Postfix) with ESMTP id 179BE4C5EA
for <suc...@yourface.myass.org>; Mon, 12 Jan 2009 00:27:14 +0100 (CET)
Message-ID: <009f86ee$39825$4c7e018...@r17982.ovh.net>
Reply-To: "Andrea Ristorni" <andre.r...@email.com>
From: "Andrea Ristorni" <andre.r...@email.com>
To: suc...@yourface.myass.org
Subject: Nuovo sistema
Date: Mon, 12 Jan 2009 00:27:15 +0100
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: My e-mail client v1.0
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028

ciao, questa email ti arriva in quanto sei registrato al nostro forum.

anche se natale è già passato, come nostro membro ti facciamo un regalo..
segui questo collegamento..
http://ddl-extreme.com/soloxmembriforum.html

ps. sei pregato di non diffondere questo sistema in quanto una troppa
pubblicità potrebbe invalidare il sistema :D

--
Arrivederci DDL-T34M

Thorin Oakenshield

unread,

Jan 12, 2009, 11:03:40 AM1/12/09

to

Please kcik this spamming assh0le ASAP and close his spamadvertised site.

# host richelleleanne.com
richelleleanne.com has address 65.254.55.130
richelleleanne.com mail is handled by 0 richelleleanne.com.

Return-Path: <andrewed...@btinternet.com>
Delivered-To: suc...@yourface.myass.org

Received: from localhost (ispin01.email.it [127.0.0.1])

by ispin01.email.it (Postfix) with ESMTP id B371456804E
for <suc...@yourface.myass.org>; Mon, 12 Jan 2009 06:15:15 +0100 (CET)
X-Virus-Scanned: amavisd-new at email.it
X-Spam-Score: 3.306
X-Spam-Level: ***
X-Spam-Status: No, score=3.306 tagged_above=-100 required=5
tests=[BAYES_50=0.001, MAILTO_TO_SPAM_ADDR=0.446,
REPTO_OVERQUOTE_THEBAT=2.628, TW_AV=0.077, TW_FD=0.077, TW_JP=0.077]
Received: from ispin01.email.it ([127.0.0.1])
by localhost (ispin01.email.it [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id Qs1-uyspoX0W for <suc...@yourface.myass.org>;
Mon, 12 Jan 2009 06:15:15 +0100 (CET)
Received: from mars.mediacatch.com (mars.mediacatch.com [204.15.8.12])
by ispin01.email.it (Postfix) with SMTP id 412A056804B
for <suc...@yourface.myass.org>; Mon, 12 Jan 2009 06:15:14 +0100 (CET)
Received: from ppk (192.82.6.134)
by mars.mediacatch.com; Mon, 12 Jan 2009 00:15:15 -0500
Date: Mon, 12 Jan 2009 00:15:15 -0500
From: "Bert Scannell" <andrewed...@btinternet.com>
X-Mailer: The Bat! (v2.01)
Reply-To: "Bernard Mesa" <usmc...@hotmail.com>
X-Priority: 2 (High)
Message-ID: <4571830511.2...@btinternet.com>
To: Evildwarf <suc...@yourface.myass.org>
Subject: Important information for you!
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------F13382161C0"

------------F13382161C0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

Cdoavfdst

Hey Jason Reinstedler,

Y WELCOME TO PRIVATE ZONE: Q

I http://richelleleanne.com/free N

Zblcvjzux
W TO unsubscribe from our service your e-mail:suc...@yourface.myass.org
G click on the following link:
K http://richelleleanne.com/free/?unsubscribe
Zusajpjpd

Good regards,
Juan Dejesus "Benjamin Komer" <donal...@gmail.com>
Jose Casal "Azmat Tanauli" <qpark...@cox.net>

Nuulczqcd
------------F13382161C0--

Thorin Oakenshield

unread,

Jan 12, 2009, 2:06:25 PM1/12/09

to

Spiegate a questo furbone il concetto di spam?

# host www.contattaci.it
www.contattaci.it is an alias for w-05.th.seeweb.it.
w-05.th.seeweb.it has address 217.64.195.229
www.contattaci.it is an alias for w-05.th.seeweb.it.
w-05.th.seeweb.it has IPv6 address 2001:4b78:1001::501
www.contattaci.it is an alias for w-05.th.seeweb.it.

Path:
news.motzarella.org!motzarella.org!feeder.erje.net!feeder2.ecngs.de!ecngs!feeder.ecngs.de!130.59.10.21.MISMATCH!kanaga.switch.ch!switch.ch!newsserver.news.garr.it!feeder.news.tin.it!spool.news.tin.it!not-for-mail
From: "news.tin.it" <in...@helpbit.it>
Newsgroups: it.comp.os.linux.software
Subject: PER LE TUE RISPOSTE; www.contattaci.it
Date: Mon, 12 Jan 2009 17:41:31 +0100
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
X-RFC2646: Format=Flowed; Original
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
Lines: 9
Message-ID: <496b72aa$0$1109$4faf...@reader4.news.tin.it>
Organization: TIN.IT (http://www.tin.it)
X-Comments: Please send technical notifications to newsm...@tin.it
NNTP-Posting-Host: 79.39.50.160
X-Trace: 1231778475 reader4.news.tin.it 1109 79.39.50.160:9121
X-Complaints-To: Please send abuse reports to ab...@retail.telecomitalia.it
Xref: news.motzarella.org it.comp.os.linux.software:840

Buonasera a tutti,
per ogni curiosità, domanda, acquisto On-line visita il sito
www.contattaci.it
il sito utile per il Commercio e l' Assistenza Tecnica On-line che Vi
aiuterà a risolvere i Vs problemi direttamente da casa.
L'iscrizione è gratuita, come la prima richiesta di Assistenza.
CIAO.

Thorin Oakenshield

unread,

Jan 13, 2009, 2:42:07 AM1/13/09

to

And again the Korea CERT is sleeping leaving the Hanaro spam factory
undisturbed...

# host www.2009slots.com
www.2009slots.com has address 116.125.56.219

inetnum: 116.120.0.0 - 116.127.255.255
netname: HANANET
descr: Hanaro Telecom
descr: Shindongah Bldg, 43, Taepyeongno2-ga,
descr: Jung-gu, Seoul
descr: ***********************************
descr: Allocated to KRNIC Member.
descr: If you would like to find assignment
descr: information in detail please refer to
descr: the KRNIC Whois Database at:
descr: http://whois.nic.or.kr/english/index.htm
descr: ***********************************
country: KR
admin-c: HL196-AP
tech-c: JK250-AP
status: Allocated Portable
remarks: www.hanaro.com

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs181996fga;
Mon, 12 Jan 2009 17:01:48 -0800 (PST)
Received: by 10.66.239.16 with SMTP id m16mr1685448ugh.36.1231808507722;
Mon, 12 Jan 2009 17:01:47 -0800 (PST)
Return-Path: <nokeup...@deportista.com>
Received: from deportista.com (74-61-32-140.sea.clearwire-dns.net
[74.61.32.140])
by mx.google.com with SMTP id 31si309504ugg.8.2009.01.12.17.01.34;
Mon, 12 Jan 2009 17:01:47 -0800 (PST)

Received-SPF: softfail (google.com: domain of transitioning

nokeup...@deportista.com does not designate 74.61.32.140 as
permitted sender) client-ip=74.61.32.140;

Authentication-Results: mx.google.com; spf=softfail (google.com: domain

of transitioning nokeup...@deportista.com does not designate
74.61.32.140 as permitted sender) smtp.mail=nokeup...@deportista.com
Message-ID: <383187E2...@deportista.com>
Date: Mon, 12 Jan 2009 23:48:50 -0200
From: "Royal Casino" <nokeup...@deportista.com>
To: <mailing_ma...@people.it>,

<ad...@people.it>,
<jas...@people.it>,
<la...@people.it>,
<ba...@people.it>,
<vin...@people.it>,
<etc_s...@people.it>,
<suc...@yourface.myass.org>,
<sla...@people.it>,

<p.men...@people.it>,
<mart...@people.it>,
<ru...@people.it>

Subject: Richiedi un bonus GRATUITO per un valore di 555 Euro

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>

<title>Richiedi un bonus GRATUITO per un valore di </title>

</head>

Richiedi
un bonus GRATUITO per un valore di €555 presso il Royal Club
Casino<o:p></o:p>

<o:p> </o:p>

Conosciuto
per l’eccellente selezione di giochi e per il servizio clienti
professionale, il Royal Club Casino merita la sua reputazione di primario
casinò online. Royal Club offre i più grandi jackpot
progressivi (valgono milioni!) ma anche le promozioni più
generose, inclusa l’eccezionale serie di bonus di benvenuto di
€555:<o:p></o:p>

<o:p> </o:p>

1°
deposito: 300% fino a 300€<o:p></o:p>

2°
deposito: 100% fino a 100€<o:p></o:p>

3°
deposito: 155%fino a 155€<o:p></o:p>

<o:p></o:p>

Il processo di registrazione è molto semplice e ci vorranno
solo pochi minuti del tuo tempo. Clicca qui per richiederlo oggi
e gioca con i soldi del Royal Club!<o:p></o:p>

<o:p> </o:p>

<a href="http://www.2009slots.com/it/">
http://www.2009slots.com/it/</a><o:p></o:p>

</div>

</body>

</html>

Thorin Oakenshield

unread,

Jan 13, 2009, 3:03:47 AM1/13/09

to

Please kick this spamming assh0le and close his spamadvertised site ASAP!

# host www.goldsungaming.com
www.goldsungaming.com has address 116.125.56.219

Domain Name: GOLDSUNGAMING.COM

Registrar: UK2 GROUP LTD.
Whois Server: whois.hostingservicesinc.net
Referral URL: http://http://www.uk2group.com/

Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM

Status: clientTransferProhibited
Updated Date: 12-jan-2009
Creation Date: 12-jan-2009
Expiration Date: 12-jan-2010

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs193167fga;
Mon, 12 Jan 2009 23:05:25 -0800 (PST)
Received: by 10.141.98.18 with SMTP id a18mr15129291rvm.194.1231830323134;
Mon, 12 Jan 2009 23:05:23 -0800 (PST)
Return-Path: <widh...@presidentiallife.com>
Received: from presidentiallife.com ([210.206.41.108])

by mx.google.com with SMTP id

f42si7393464rvb.5.2009.01.12.23.05.01;
Mon, 12 Jan 2009 23:05:22 -0800 (PST)
Received-SPF: neutral (google.com: 210.206.41.108 is neither permitted
nor denied by best guess record for domain of
widh...@presidentiallife.com) client-ip=210.206.41.108;
Authentication-Results: mx.google.com; spf=neutral (google.com:
210.206.41.108 is neither permitted nor denied by best guess record for
domain of widh...@presidentiallife.com)
smtp.mail=widh...@presidentiallife.com
Message-ID: <F3904578...@presidentiallife.com>
Date: Tue, 13 Jan 2009 09:42:43 +0200
From: "EuroPrime Casino" <widh...@presidentiallife.com>
To: <vin...@people.it>,

<etc_s...@people.it>,
<suc...@yourface.myass.org>,
<sla...@people.it>,
<p.men...@people.it>,
<mart...@people.it>,

<ru...@people.it>,
<kim...@people.it>,
<lep...@people.it>,
<v1...@people.it>,
<capo...@people.it>,
<pao...@people.it>,
<nut...@people.it>,
<uomo_i...@people.it>,
<doriann...@people.it>,
<pap...@people.it>,
<malmo...@people.it>
Subject:
=?Windows-1252?Q?Congratulazioni=2C_hai_vinto_300_Euro_di_chip_per_il_Cas?=
=?Windows-1252?Q?in=F2_!_snimo?=
MIME-Version: 1.0
Content-Type: text/html;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit

<html>

mso-ansi-language:EN-US;
mso-fareast-language:EN-US;
mso-bidi-language:HE;
layout-grid-mode:line;}
a:link, span.MsoHyperlink
{font-family:"Times New Roman";
mso-bidi-font-family:"Times New Roman";

color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
@page Section1
{size:595.3pt 841.9pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>

</head>

Gioca e richiedi subito i tuoi 300€, fai clic
qui:<o:p></o:p>

<a href="http://www.goldsungaming.com/it/">
http://www.goldsungaming.com/it/</a>

<o:p></o:p>

<o:p> </o:p>

<o:p> </o:p>

Rver jyaxdoru heoukoj sbxoskqdm uwyhayhea xqsyzhizn?

<o:p></o:p>

Wjyn usiqxuuwk eyzxov sucytdqo humfbur :)
Lsardelosu wjiosapo ponhuitor qibaaboy :)
Oqkeyomdza do xikkshawo?

Thorin Oakenshield

unread,

Jan 14, 2009, 4:21:41 AM1/14/09

to

# host www.redcasinoclub.com
www.redcasinoclub.com has address 116.125.56.219

Domain Name: REDCASINOCLUB.COM
Registrar: XIN NET TECHNOLOGY CORPORATION
Whois Server: whois.paycenter.com.cn
Referral URL: http://www.xinnet.com

Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM

Status: ok
Updated Date: 14-jan-2009
Creation Date: 13-jan-2009
Expiration Date: 13-jan-2010

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs258568fga;
Wed, 14 Jan 2009 00:35:33 -0800 (PST)
Received: by 10.223.109.199 with SMTP id k7mr3309390fap.45.1231922132647;
Wed, 14 Jan 2009 00:35:32 -0800 (PST)
Return-Path: <filice...@wikipedia.org>
Received: from wikipedia.org ([93.186.1.76])

by mx.google.com with SMTP id

35si23411763fkt.36.2009.01.14.00.35.21;
Wed, 14 Jan 2009 00:35:32 -0800 (PST)
Received-SPF: neutral (google.com: 93.186.1.76 is neither permitted nor
denied by best guess record for domain of filice...@wikipedia.org)
client-ip=93.186.1.76;
Authentication-Results: mx.google.com; spf=neutral (google.com:
93.186.1.76 is neither permitted nor denied by best guess record for
domain of filice...@wikipedia.org) smtp.mail=filice...@wikipedia.org
Message-ID: <011A46C8...@wikipedia.org>
Date: Wed, 14 Jan 2009 19:15:04 +1000
From: "Royal Casino" <filice...@wikipedia.org>

To: <mailing_ma...@people.it>,
<ad...@people.it>,
<jas...@people.it>,
<la...@people.it>,
<ba...@people.it>,

<vin...@people.it>,
<etc_s...@people.it>,
<suc...@yourface.myass.org>,
<sla...@people.it>,
<p.men...@people.it>,
<mart...@people.it>,
<ru...@people.it>,
<kim...@people.it>,
<lep...@people.it>,
<v1...@people.it>

Subject: Richiedi un bonus GRATUITO per un valore di 555 Euro
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 7bit

<html>

<head>

<title>Richiedi un bonus GRATUITO per un valore di </title>

<style>

<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}

a:link, span.MsoHyperlink
{color:blue;

text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
@page Section1
{size:595.3pt 841.9pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>

</head>

Richiedi

un bonus GRATUITO per un valore di €555 presso il Royal Club

Casino<o:p></o:p>

<o:p> </o:p>

Conosciuto

per l’eccellente selezione di giochi e per il servizio clienti
professionale, il Royal Club Casino merita la sua reputazione di primario
casinò online. Royal Club offre i più grandi jackpot
progressivi (valgono milioni!) ma anche le promozioni più
generose, inclusa l’eccezionale serie di bonus di benvenuto di

€555:<o:p></o:p>

<o:p> </o:p>

1°

deposito: 300% fino a 300€<o:p></o:p>

2°
deposito: 100% fino a 100€<o:p></o:p>

3°
deposito: 155%fino a 155€<o:p></o:p>

<o:p></o:p>

Il processo di registrazione è molto semplice e ci vorranno
solo pochi minuti del tuo tempo. Clicca qui per richiederlo oggi

e gioca con i soldi del Royal Club!<o:p></o:p>

<o:p> </o:p>

<a href="http://www.redcasinoclub.com/it/">
http://www.redcasinoclub.com/it/</a><o:p></o:p>

Thorin Oakenshield

unread,

Jan 14, 2009, 4:27:10 AM1/14/09

to

Still Xin net, the Korean ROTFL-Cert and Hanaro go on giving a fu** of
my complaints: how long?

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs251755fga;
Tue, 13 Jan 2009 20:23:45 -0800 (PST)
Received: by 10.67.90.10 with SMTP id s10mr2404974ugl.8.1231907025033;
Tue, 13 Jan 2009 20:23:45 -0800 (PST)
Return-Path: <sy...@address.com>
Received: from address.com ([89.34.68.241])

by mx.google.com with SMTP id

b39si3441532ugf.38.2009.01.13.20.23.27;
Tue, 13 Jan 2009 20:23:44 -0800 (PST)
Received-SPF: error (google.com: error in processing during lookup of
sy...@address.com: DNS timeout) client-ip=89.34.68.241;
Authentication-Results: mx.google.com; spf=temperror (google.com: error
in processing during lookup of sy...@address.com: DNS timeout)
smtp.mail=sy...@address.com
Message-ID: <4EDE0735...@address.com>
Date: Wed, 14 Jan 2009 09:57:46 +0500
From: "Exclusive Club" <sy...@address.com>
To: <mailing_ma...@people.it>
Subject: Roba top secret

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

<html>

<title>Questo posto è così esclusivo, come ti sei procurato=
l'invito</title>

=09=7Bfont-family:"MS Mincho";
=09panose-1:2 2 6 9 4 2 5 8 3 4;
=09mso-font-alt:"MS Mincho";
=09mso-font-charset:128;
=09mso-generic-font-family:modern;
=09mso-font-pitch:fixed;
=09mso-font-signature:-1610612033 1757936891 16 0 131231 0;=7D
@font-face
=09=7Bfont-family:"=5C@MS Mincho";

=09panose-1:2 2 6 9 4 2 5 8 3 4;

=09mso-font-charset:128;
=09mso-generic-font-family:modern;
=09mso-font-pitch:fixed;

=09mso-font-signature:-1610612033 1757936891 16 0 131231 0;=7D

/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal

</head>

Quest=
o posto è
così esclusivo, come ti sei procurato l'invito...??<o:p></o:p></sp=
an>

<o:p>=

</o:p>

Exclu=
sive Club
Casino. Solo i migliori vengono a giocare quì.<o:p></o:p></=
p>

<o:p>=

</o:p>

<a
href=3D"http://www.primevipcasine.com/it/">http://www.primevipcasine.com/=

it/</a><o:p></o:p>

<o:p>=

</o:p>

<o:p>=

</o:p>

<o:p>=

</o:p>

Qricipuxut iy=
numiua pusnbnqeq ormynoi kev fiqifyy!<o:p></o:p>

Thorin Oakenshield

unread,

Jan 14, 2009, 4:47:06 PM1/14/09

to

# host www.highenergycasino.com
www.highenergycasino.com has address 116.125.56.219

Domain Name: HIGHENERGYCASINO.COM

Registrar: XIN NET TECHNOLOGY CORPORATION
Whois Server: whois.paycenter.com.cn
Referral URL: http://www.xinnet.com
Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM
Status: ok
Updated Date: 14-jan-2009
Creation Date: 13-jan-2009
Expiration Date: 13-jan-2010

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs283145fga;
Wed, 14 Jan 2009 08:55:36 -0800 (PST)
Received: by 10.215.66.15 with SMTP id t15mr447664qak.321.1231952136078;
Wed, 14 Jan 2009 08:55:36 -0800 (PST)
Return-Path: <pidecuc...@reuters.com>
Received: from reuters.com ([89.110.192.198])

by mx.google.com with SMTP id

4si36388682qyk.66.2009.01.14.08.54.50;
Wed, 14 Jan 2009 08:55:35 -0800 (PST)
Received-SPF: neutral (google.com: 89.110.192.198 is neither permitted
nor denied by domain of pidecuc...@reuters.com)
client-ip=89.110.192.198;
Authentication-Results: mx.google.com; spf=neutral (google.com:
89.110.192.198 is neither permitted nor denied by domain of
pidecuc...@reuters.com) smtp.mail=pidecuc...@reuters.com
Message-ID: <BBFBA1A1...@reuters.com>
Date: Wed, 14 Jan 2009 17:49:59 +0000
From: "Top Euro Casino" <pidecuc...@reuters.com>
To: <m.be...@people.it>,

<um...@people.it>,
<djm...@people.it>,
<claudia...@people.it>,
<maidi...@people.it>,
<theo...@people.it>,

<mailing_ma...@people.it>,
<ad...@people.it>,
<jas...@people.it>,
<la...@people.it>,
<ba...@people.it>,
<vin...@people.it>,
<etc_s...@people.it>,
<suc...@yourface.myass.org>,
<sla...@people.it>,
<p.men...@people.it>

Subject:
=?iso-8859-1?Q?L'iscrizione_all'Euro_Club_comporta_moltissimi_privilegi?=
=?iso-8859-1?Q?=2C_per_essere_precisi_400_Euros!_?=

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 7bit

<html>

<title>L’iscrizione all’Euro Club comporta moltissimi </title>

<style>
<!--

/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal

</head>

L’iscrizione all’Euro Club comporta moltissimi privilegi, per

essere precisi €400! <o:p></o:p>

<o:p> </o:p>

L’Euro
Club Casino non solo offre ai membri il sistema di casinò online
più sicuro e la più vasta selezione di giochi, ma ora offre
anche un fantastico bonus di benvenuto di €400 a tutti i nuovi

giocatori.<o:p></o:p>

<o:p> </o:p>

Per
richiedere
il tuo bonus sono necessari solo 5 minuti per aprire il tuo conto ed
effettuare il deposito. Euro Club ti darà un bonus corrispondente al
100% sui tuoi primi 4 depositi, ognuno del valore di €100!

<o:p></o:p>

<o:p> </o:p>

Deposita
€400 in totale e gioca con €800 all’Euro Club
Casinò!

<o:p></o:p>

<o:p> </o:p>

<a href="http://www.highenergycasino.com/it/">Per maggiori informazioni
clicca
qui… http://www.highenergycasino.com/it/<o:p></o:p></a>

<o:p> </o:p>

Thorin Oakenshield

unread,

Jan 15, 2009, 8:56:55 AM1/15/09

to

Please kick this spamming idiot and close his spamadvertised site (I
expect some cohoperation from KR-CERT and NIC). It seeme the spamming
domain has already been locked down by Signdomains but complaining is
anyway a duty.

# host www.winteamcasino.com
www.winteamcasino.com has address 114.141.10.231

inetnum: 114.141.0.0 - 114.141.31.255
netname: HCLC
descr: HCLC
descr: 395-65 Korea Computer BLDG F3 Sindaebang-dong Dongjak-gu Seoul
descr: *********************************

descr: Allocated to KRNIC Member.
descr: If you would like to find assignment
descr: information in detail please refer to
descr: the KRNIC Whois Database at:
descr: http://whois.nic.or.kr/english/index.htm
descr: *********************************

country: KR
admin-c: SY1751-AP
tech-c: SY1751-AP
status: Allocated Portable
remarks: www.hclc.co.kr
mnt-by: MNT-KRNIC-AP
mnt-lower: MNT-KRNIC-AP
changed: hostm...@nida.or.kr 20080613
source: APNIC

Domain Name: WINTEAMCASINO.COM
Registrar: VISESH INFOTECNICS LTD
Whois Server: whois.signdomains.com
Referral URL: http://www.signdomains.com

Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM

Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited

Updated Date: 15-jan-2009
Creation Date: 14-jan-2009
Expiration Date: 14-jan-2010

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs324508fga;
Thu, 15 Jan 2009 03:00:08 -0800 (PST)
Received: by 10.86.53.8 with SMTP id b8mr1289709fga.58.1232017206625;
Thu, 15 Jan 2009 03:00:06 -0800 (PST)
Return-Path: <bud...@wikipedia.org>
Received: from wikipedia.org (vpn-pppoe-88-213-212-7.campus-bg.com
[88.213.212.7])
by mx.google.com with SMTP id e11si5508fga.2.2009.01.15.03.00.00;
Thu, 15 Jan 2009 03:00:06 -0800 (PST)
Received-SPF: neutral (google.com: 88.213.212.7 is neither permitted nor
denied by best guess record for domain of bud...@wikipedia.org)
client-ip=88.213.212.7;
Authentication-Results: mx.google.com; spf=neutral (google.com:
88.213.212.7 is neither permitted nor denied by best guess record for
domain of bud...@wikipedia.org) smtp.mail=bud...@wikipedia.org
Message-ID: <FEBAF485...@wikipedia.org>
Date: Thu, 15 Jan 2009 11:34:21 +0000
From: "Fiesta Club Casino" <bud...@wikipedia.org>
To: <ad...@people.it>
Subject: Sei nella nostra lista.

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>

<title>Sei nella lista degli invitati</title>

{font-family:"MS Mincho";

panose-1:2 2 6 9 4 2 5 8 3 4;

mso-font-alt:"MS Mincho";
mso-font-charset:128;
mso-generic-font-family:modern;
mso-font-pitch:fixed;

mso-font-signature:-1610612033 1757936891 16 0 131231 0;}

@font-face
{font-family:Century;
panose-1:2 4 6 4 5 5 5 2 3 4;
mso-font-charset:204;
mso-generic-font-family:roman;

mso-font-pitch:variable;
mso-font-signature:647 0 0 0 159 0;}
@font-face
{font-family:"\@MS Mincho";

panose-1:2 2 6 9 4 2 5 8 3 4;

mso-font-charset:128;
mso-generic-font-family:modern;
mso-font-pitch:fixed;

mso-font-signature:-1610612033 1757936891 16 0 131231 0;}

/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";

mso-fareast-font-family:"MS Mincho";}

a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
@page Section1
{size:595.3pt 841.9pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>

</head>

Sei nella lista degli invitati!<o:p></o:p>

Accedi ora al Fiesta Club Casino per giocare al
più invitante casino in circolazione.<o:p></o:p>

<a href="http://www.winteamcasino.com/it/">
http://www.winteamcasino.com/it/</a><o:p></o:p>

<o:p> </o:p>

</div>

Bylyu vogadeoy q gyxoe ipaahypho?

<o:p></o:p>

Weg uhhjaal acyajxbaj liauhgalu
Qurohiiad cnteft mnypho ;)

<o:p></o:p>

<span lang=IT

style='font-size:7.0pt;mso-ansi-language:IT'>
Fduygcaiie a ;)
Mvesixe ;)

<o:p></o:p>

</div>

Thorin Oakenshield

unread,

Jan 16, 2009, 3:27:48 AM1/16/09

to

PLease kick this spamming idiot.. any hope of seeing jsinfo.net closing
his spamadvertised site too?

# host www.gamingwinteam.net
www.gamingwinteam.net has address 61.155.140.117

inetnum: 61.155.0.0 - 61.155.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostm...@ns.chinanet.cn.net 20020209
changed: hostm...@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC

route: 61.155.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: i...@jsinfo.net 20030414
source: APNIC

Domain Name: GAMINGWINTEAM.NET

Registrar: UK2 GROUP LTD.
Whois Server: whois.hostingservicesinc.net
Referral URL: http://http://www.uk2group.com/

Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM

Status: clientTransferProhibited
Updated Date: 15-jan-2009
Creation Date: 15-jan-2009
Expiration Date: 15-jan-2010

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs372124fga;
Thu, 15 Jan 2009 20:28:07 -0800 (PST)
Received: by 10.151.6.15 with SMTP id j15mr5373134ybi.45.1232080086884;
Thu, 15 Jan 2009 20:28:06 -0800 (PST)
Return-Path: <eyxwue...@huhmail.com>
Received: from huhmail.com ([189.77.180.160])
by mx.google.com with SMTP id 3si310723gxk.14.2009.01.15.20.27.52;
Thu, 15 Jan 2009 20:28:06 -0800 (PST)
Received-SPF: neutral (google.com: 189.77.180.160 is neither permitted
nor denied by best guess record for domain of eyxwue...@huhmail.com)
client-ip=189.77.180.160;
Authentication-Results: mx.google.com; spf=neutral (google.com:
189.77.180.160 is neither permitted nor denied by best guess record for
domain of eyxwue...@huhmail.com) smtp.mail=eyxwue...@huhmail.com
Message-ID: <2D8A53B7...@huhmail.com>
Date: Fri, 16 Jan 2009 06:23:25 +0100
From: "Vegas Club Casino" <eyxwue...@huhmail.com>
To: <vin...@people.it>
Cc: <etc_s...@people.it>,
<suc...@yourface.myass.org>,
<sla...@people.it>,

<p.men...@people.it>,
<mart...@people.it>,
<ru...@people.it>,
<kim...@people.it>,
<lep...@people.it>,

<v1...@people.it>,
<capo...@people.it>,
<pao...@people.it>,
<nut...@people.it>,
<uomo_i...@people.it>,
<doriann...@people.it>,
<pap...@people.it>,
<malmo...@people.it>

Subject: Vegas Club, sii tutto quello che puoi!

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>

<title>Vegas Club, sii tutto quello che puoi</title>

<style>
<!--

/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";

mso-fareast-font-family:"Times New Roman";
mso-ansi-language:EN-US;
mso-fareast-language:EN-US;}

a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
@page Section1
{size:595.3pt 841.9pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>

</head>

Vegas Club, sii tutto quello che puoi!<o:p></o:p>

<o:p> </o:p>

Se adori Las Vegas, ma non puoi prendere una vacanza per partire, allora
Vegas
Club Casino e` la risposta. <o:p></o:p>

<o:p> </o:p>

Per darle un benvenuto degno di questo nome Vegas Club le offer un Bonus
eccezionale di 555€, nessun casino` le puo` offrire un’offerta
cosi`, neanche a Las Vegas!<o:p></o:p>

<o:p> </o:p>

Si iscriva oggi, e sia sicuro che ricevera` la migliore, piu` sicura, e
piu`
eccitante esperienza di gioco online disponibile.<o:p></o:p>

<o:p> </o:p>

<a href="http://www.gamingwinteam.net/it/">
http://www.gamingwinteam.net/it/</a><o:p></o:p>

Thorin Oakenshield

unread,

Jan 16, 2009, 8:53:04 AM1/16/09

to

I was quite missing the RCS-RDS spamming rats: I hope Romanian CERT will
kick their asses ASAP to make remember them why spamming is bad.

# host www.gamblingwinteam.com
www.gamblingwinteam.com has address 61.155.140.117

inetnum: 61.155.0.0 - 61.155.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostm...@ns.chinanet.cn.net 20020209
changed: hostm...@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC

Domain Name: GAMBLINGWINTEAM.COM
Registrar: AUSTRALIAN STYLE PTY LTD
Whois Server: whois.australianstyle.com.au
Referral URL: http://www.australianstyle.com.au

Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM
Status: clientTransferProhibited
Updated Date: 15-jan-2009
Creation Date: 15-jan-2009
Expiration Date: 15-jan-2010

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs382688fga;
Fri, 16 Jan 2009 01:48:19 -0800 (PST)
Received: by 10.67.116.16 with SMTP id t16mr167778ugm.51.1232099298291;
Fri, 16 Jan 2009 01:48:18 -0800 (PST)
Return-Path: <hzeqyke...@weather.com>
Received: from weather.com ([82.79.151.86])
by mx.google.com with SMTP id k1si986498ugf.3.2009.01.16.01.48.02;
Fri, 16 Jan 2009 01:48:18 -0800 (PST)
Received-SPF: neutral (google.com: 82.79.151.86 is neither permitted nor
denied by best guess record for domain of hzeqyke...@weather.com)
client-ip=82.79.151.86;
Authentication-Results: mx.google.com; spf=neutral (google.com:
82.79.151.86 is neither permitted nor denied by best guess record for
domain of hzeqyke...@weather.com) smtp.mail=hzeqyke...@weather.com
Message-ID: <EA88A1C2...@weather.com>
Date: Fri, 16 Jan 2009 18:46:40 +0800
From: "Euro Casino" <hzeqyke...@weather.com>
To: <um...@people.it>,

<djm...@people.it>,
<claudia...@people.it>,
<maidi...@people.it>,
<theo...@people.it>,
<mailing_ma...@people.it>,
<ad...@people.it>,
<jas...@people.it>,
<la...@people.it>,
<ba...@people.it>,
<vin...@people.it>,

<etc_s...@people.it>,
<suc...@yourface.myass.org>,
<sla...@people.it>,
<p.men...@people.it>,
<mart...@people.it>,
<ru...@people.it>,
<kim...@people.it>

Subject: Qualcuno ha tirato il dado per te. b

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>

<title>Qualcuno ha tirato il dado per te</title>

{font-family:"Comic Sans MS";
panose-1:3 15 7 2 3 3 2 2 2 4;
mso-font-charset:204;
mso-generic-font-family:script;

mso-font-pitch:variable;
mso-font-signature:647 0 0 0 159 0;}
@font-face
{font-family:"\@MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;
mso-font-charset:128;
mso-generic-font-family:modern;
mso-font-pitch:fixed;
mso-font-signature:-1610612033 1757936891 16 0 131231 0;}

/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";

mso-fareast-font-family:"MS Mincho";}

a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
@page Section1
{size:595.3pt 841.9pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>

</head>

Qualcuno ha tirato il dado per te. Vieni a vedere cos'hai vinto all'Euro

Dice Casino.<o:p></o:p>

<a href="http://www.gamblingwinteam.com/it/">
http://www.gamblingwinteam.com/it/</a><o:p></o:p>

<o:p> </o:p>

<o:p> </o:p>

<span lang=IT

style='font-size:8.0pt;mso-ansi-language:IT'>

Ylcpxa nofepazeb asebazioi koif ca zyatvyku.

<o:p></o:p>

Yqqusxu siagcuoba zjpwacp zasomev amyihuy.

<o:p></o:p>

Leoitoasa uyauzyiqo virqusu esiwnlog

Thorin Oakenshield

unread,

Jan 17, 2009, 3:45:27 AM1/17/09

to

It seems China firmy wants to maintain the throne of best (or worst)
spamming country in the world since no one takes seriously complaints,
but sending stupid unuseful automatic replies in chinese which they only
can unserstand. Anyway I hope at least in Romanian CERT to kick these
spamming rats' asses to teach them the good rules of living..

inetnum: 89.120.0.0 - 89.120.255.255
netname: ROMTELECOM
descr: Romtelecom Data Network
country: RO
admin-c: AL3618-RIPE
tech-c: ANOC7-RIPE
status: ASSIGNED PA
mnt-by: MNT-ARTELECOM-LIR
mnt-lower: MNT-ARTELECOM-LIR
mnt-domains: MNT-ARTELECOM-LIR
mnt-routes: MNT-ARTELECOM-LIR
source: RIPE # Filtered

role: ARtelecom LIR
address: Garlei 1B sector 1 013721 Bucuresti Romania
abuse-mailbox: ab...@romtelecom.ro
admin-c: DC478-RIPE
tech-c: CD297-RIPE
mnt-by: MNT-ARTELECOM-LIR
nic-hdl: AL3618-RIPE
source: RIPE # Filtered

# host www.feelcasinoclub.com
www.feelcasinoclub.com has address 61.155.140.117

inetnum: 61.155.0.0 - 61.155.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Jie-Kou-Wai Street
descr: Beijing 100088
country: CN
admin-c: CH93-AP
tech-c: CJ186-AP
mnt-by: MAINT-CHINANET
mnt-lower: MAINT-CHINANET-JS
mnt-routes: maint-chinanet-js
changed: hostm...@ns.chinanet.cn.net 20020209
changed: hostm...@ns.chinanet.cn.net 20030306
status: ALLOCATED non-PORTABLE
source: APNIC

route: 61.155.0.0/16

descr: CHINANET jiangsu province network

country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
changed: i...@jsinfo.net 20030414
source: APNIC

Domain Name: FEELCASINOCLUB.COM

Registrar: XIN NET TECHNOLOGY CORPORATION
Whois Server: whois.paycenter.com.cn
Referral URL: http://www.xinnet.com

Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM

Status: ok
Updated Date: 15-jan-2009
Creation Date: 13-jan-2009
Expiration Date: 13-jan-2010

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs4463fga;
Fri, 16 Jan 2009 16:19:12 -0800 (PST)
Received: by 10.103.217.7 with SMTP id u7mr1459045muq.125.1232151552153;
Fri, 16 Jan 2009 16:19:12 -0800 (PST)
Return-Path: <ykxvi...@wikipedia.org>
Received: from wikipedia.org ([89.120.228.231])
by mx.google.com with SMTP id 25si3109427mul.8.2009.01.16.16.19.04;
Fri, 16 Jan 2009 16:19:12 -0800 (PST)
Received-SPF: neutral (google.com: 89.120.228.231 is neither permitted
nor denied by best guess record for domain of ykxvi...@wikipedia.org)
client-ip=89.120.228.231;
Authentication-Results: mx.google.com; spf=neutral (google.com:
89.120.228.231 is neither permitted nor denied by best guess record for
domain of ykxvi...@wikipedia.org) smtp.mail=ykxvi...@wikipedia.org
Message-ID: <E1F00DCF...@wikipedia.org>
Date: Sat, 17 Jan 2009 09:13:52 +0800
From: "Royal Casino" <ykxvi...@wikipedia.org>
To: <la...@people.it>
Cc: <ba...@people.it>,

<vin...@people.it>,
<etc_s...@people.it>,
<suc...@yourface.myass.org>,
<sla...@people.it>,
<p.men...@people.it>,
<mart...@people.it>,
<ru...@people.it>,

<kim...@people.it>,
<lep...@people.it>,
<v1...@people.it>

Subject: Gioca con 555 Euro del Royal Club Casino

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>

<title>Gioca con €555 del Royal Club Casino</title>

</head>

Gioca con €555 del Royal Club Casino! <o:p></o:p>

<o:p> </o:p>

E’ vero! Il Royal Club Casino sta regalando i propri soldi e oggi
tocca a te averne una parte. Apri un conto con il Royal Club e riceverai
fino
a €555 gratis! Ecco come funziona:<o:p></o:p>

<o:p> </o:p>

primo deposito: 300% bonus per un valore fino a €300

<o:p></o:p>

secondo deposito: 100% bonus per un valore fino a €100

<o:p></o:p>

terzo deposito: 155% bonus per un valore fino a €155

<o:p></o:p>

<o:p> </o:p>

Non solo riceverai questo bonus principesco, ma avrai anche la più
vasta scelta di giochi realistici ed eccitanti al momento presenti sul
mercato, incluse slot, video poker, roulette e blackjack.

<o:p></o:p>

<o:p> </o:p>

<a href="http://www.feelcasinoclub.com/it/">
http://www.feelcasinoclub.com/it/</a><o:p></o:p>

<o:p> </o:p>

Clicca qui ora e riceverai il trattamento regale che meriti!

Thorin Oakenshield

unread,

Jan 17, 2009, 12:47:31 PM1/17/09

to

It seems some romainan spamming rats woke up and started again spreading
their crap so I am asking again the Romanian CERT to kick their asses,
GBLX as jsinfo.net's upstreams to do the same since these yellow rats do
not seem to take complaints seriously and, at last, uk2group to close
the spamadvertised domain too.

# host www.royalteamgaming.net
www.royalteamgaming.net has address 61.155.140.117

Domain Name: ROYALTEAMGAMING.NET

Registrar: UK2 GROUP LTD.
Whois Server: whois.hostingservicesinc.net
Referral URL: http://http://www.uk2group.com/

Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM

Status: clientTransferProhibited
Updated Date: 16-jan-2009
Creation Date: 16-jan-2009
Expiration Date: 16-jan-2010

Registration Service Provided By: RESELL.BIZ
Contact: +1.3124476810
Website: http://Resell.biz

Domain Name: ROYALTEAMGAMING.NET

Registrant:
Michael Benskin
Michael Benskin (pum...@consultant.com)
46-154 Lilipuna Rd.
Kaneohe
Hawaii,96744
US
Tel. +4.8083815854

Creation Date: 16-Jan-2009
Expiration Date: 16-Jan-2010

Domain servers in listed order:
ns3.webvipbets.com
ns2.webvipbets.com
ns1.webvipbets.com
ns3.bettingline1.com
ns2.cazino-name.com
ns1.cazinotopname.com

[..]
Technical Contact:
Michael Benskin
Michael Benskin (pum...@consultant.com)
46-154 Lilipuna Rd.
Kaneohe
Hawaii,96744
US
Tel. +4.8083815854

Billing Contact:
Michael Benskin
Michael Benskin (pum...@consultant.com)
46-154 Lilipuna Rd.
Kaneohe
Hawaii,96744
US
Tel. +4.8083815854

Status:ACTIVE

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs29974fga;
Sat, 17 Jan 2009 07:50:05 -0800 (PST)
Received: by 10.214.45.16 with SMTP id s16mr4562363qas.215.1232207404736;
Sat, 17 Jan 2009 07:50:04 -0800 (PST)
Return-Path: <ziassp...@joystiq.com>
Received: from joystiq.com ([78.97.9.186])
by mx.google.com with SMTP id 6si5260411yxg.33.2009.01.17.07.49.51;
Sat, 17 Jan 2009 07:50:04 -0800 (PST)
Received-SPF: neutral (google.com: 78.97.9.186 is neither permitted nor
denied by best guess record for domain of ziassp...@joystiq.com)
client-ip=78.97.9.186;
Authentication-Results: mx.google.com; spf=neutral (google.com:
78.97.9.186 is neither permitted nor denied by best guess record for
domain of ziassp...@joystiq.com) smtp.mail=ziassp...@joystiq.com
Message-ID: <EB97F2F6...@joystiq.com>
Date: Sat, 17 Jan 2009 17:33:57 +0100
From: "Fiesta Club" <ziassp...@joystiq.com>
To: <claudia...@people.it>,

<maidi...@people.it>,
<theo...@people.it>,
<mailing_ma...@people.it>,
<ad...@people.it>,
<jas...@people.it>,
<la...@people.it>,

<ba...@people.it>,
<vin...@people.it>,
<etc_s...@people.it>,
<suc...@yourface.myass.org>,
<sla...@people.it>,
<p.men...@people.it>,
<mart...@people.it>,
<ru...@people.it>,
<kim...@people.it>,
<lep...@people.it>,

<v1...@people.it>,
<capo...@people.it>

Subject: Sei nella nostra lista.

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>

<title>Sei nella lista degli invitati</title>

{font-family:Century;
panose-1:2 4 6 4 5 5 5 2 3 4;
mso-font-charset:204;
mso-generic-font-family:roman;

mso-font-pitch:variable;
mso-font-signature:647 0 0 0 159 0;}

</head>

<span lang=IT

style='font-size:14.0pt;font-family:Century;

mso-ansi-language:IT'>Sei nella lista degli invitati!<o:p></o:p>

<span lang=IT

style='font-size:14.0pt;font-family:Century;
mso-ansi-language:IT'>Accedi ora al Fiesta Club Casino per giocare al

più invitante casino in circolazione.<o:p></o:p>

<a href="http://www.royalteamgaming.net/it/">
http://www.royalteamgaming.net/it/</a><o:p></o:p>

<o:p> </o:p>

</div>

Sdisyez foo?

<o:p></o:p>

Yvexaqaugy?
Ps ht tyozhuga ymsggu hobytuhbl arsomuafo.

<o:p></o:p>

<span lang=IT

style='font-size:7.0pt;mso-ansi-language:IT'>
Jxssdetewu yusnhoq bibofiyiv uv fu :)
Gcejeayyoy vlohzoryv sty anezbiooi!

Thorin Oakenshield

unread,

Jan 17, 2009, 12:58:16 PM1/17/09

to

Please kick this spamming assh0le and close his spamadvertised site and
domain. I hope GBLX will, as jsinfo.net spamming rats' upstream will
take some action against them, for they keep on ignoring complaints.

# host www.royalplayingteam.net
www.royalplayingteam.net has address 61.155.140.117

Domain Name: ROYALPLAYINGTEAM.NET

Registrar: AUSTRALIAN STYLE PTY LTD
Whois Server: whois.australianstyle.com.au
Referral URL: http://www.australianstyle.com.au

Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM
Status: clientTransferProhibited
Updated Date: 16-jan-2009
Creation Date: 16-jan-2009
Expiration Date: 16-jan-2010

Delivered-To: suc...@yourface.myass.org
Received: by 10.86.53.14 with SMTP id b14cs16078fga;
Sat, 17 Jan 2009 00:17:44 -0800 (PST)
Received: by 10.141.98.13 with SMTP id a13mr1679512rvm.20.1232180262502;
Sat, 17 Jan 2009 00:17:42 -0800 (PST)
Return-Path: <qiibyo...@boston.com>
Received: from boston.com ([59.6.88.91])
by mx.google.com with SMTP id k2si4569733rvb.6.2009.01.17.00.17.28;
Sat, 17 Jan 2009 00:17:42 -0800 (PST)
Received-SPF: neutral (google.com: 59.6.88.91 is neither permitted nor
denied by best guess record for domain of qiibyo...@boston.com)
client-ip=59.6.88.91;
Authentication-Results: mx.google.com; spf=neutral (google.com:
59.6.88.91 is neither permitted nor denied by best guess record for
domain of qiibyo...@boston.com) smtp.mail=qiibyo...@boston.com
Message-ID: <6C7783A3...@boston.com>
Date: Sat, 17 Jan 2009 21:13:46 +1200
From: "Exclusive Club Casino" <qiibyo...@boston.com>
To: <m.be...@people.it>
Subject: Roba top secret

MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

<html>

<title>Questo posto è così esclusivo, come ti sei procurato=

l'invito</title>

=09=7Bfont-family:"MS Mincho";
=09panose-1:2 2 6 9 4 2 5 8 3 4;
=09mso-font-alt:"MS Mincho";
=09mso-font-charset:128;
=09mso-generic-font-family:modern;
=09mso-font-pitch:fixed;
=09mso-font-signature:-1610612033 1757936891 16 0 131231 0;=7D
@font-face
=09=7Bfont-family:"=5C@MS Mincho";

=09panose-1:2 2 6 9 4 2 5 8 3 4;

=09mso-font-charset:128;
=09mso-generic-font-family:modern;
=09mso-font-pitch:fixed;

=09mso-font-signature:-1610612033 1757936891 16 0 131231 0;=7D

/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal

</head>

</o:p>

Exclu=

sive Club
Casino. Solo i migliori vengono a giocare quì.<o:p></o:p></=
p>

<o:p>=

</o:p>

<a
href=3D"http://www.royalplayingteam.net/it/">http://www.royalplayingteam.=

net/it/</a><o:p></o:p>

<o:p>=

</o:p>

<o:p>=

</o:p>

<o:p>=

</o:p>

Ejeumarano qi=
.<o:p></o:p>

Thorin Oakenshield

unread,

Jan 17, 2009, 12:57:49 PM1/17/09

to

Please kick this spamming assh0le and close his spamadvertised site and
domain. I hope GBLX will, as jsinfo.net spamming rats' upstream will
take some action against them, for they keep on ignoring complaints.

# host www.royalplayingteam.net
www.royalplayingteam.net has address 61.155.140.117

Domain Name: ROYALPLAYINGTEAM.NET
Registrar: AUSTRALIAN STYLE PTY LTD
Whois Server: whois.australianstyle.com.au
Referral URL: http://www.australianstyle.com.au
Name Server: NS1.CAZINOTOPNAME.COM
Name Server: NS1.WEBVIPBETS.COM
Name Server: NS2.CAZINO-NAME.COM
Name Server: NS2.WEBVIPBETS.COM
Name Server: NS3.BETTINGLINE1.COM
Name Server: NS3.WEBVIPBETS.COM
Status: clientTransferProhibited
Updated Date: 16-jan-2009
Creation Date: 16-jan-2009
Expiration Date: 16-jan-2010

--