Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 00:05:15 2004 -0000 a message was received from
66.205.222.164 (United States) which said HELO as heerenveennet.nl
and left the following turdlet for all to see:
Received: from [66.205.222.164] (HELO heerenveennet.nl) (66.205.222.164)
by ScubaSteve with SMTP; Wed Jun 23 00:05:15 2004 -0000
Received: from 129.234.234.173 by smtp.ikon.com.tr;
Wed, 23 Jun 2004 00:08:06 +0000
Message-ID: <572f01c458b6$53616e4f$c07c...@heerenveennet.nl>
From: "Celia G. Richards" <celia_gri...@ikon.com.tr>
To: jenny....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 00:07:46 +0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Hi,
I have a special offer available for you at our casino.
$20 to try our internet casino, no deposit is necessary!
At the casino software's cashier enter bonus code: FR93P
$200 bonus on your first deposit!
At the casino software's cashier enter bonus code: FMJKU
Allow us to show you our quality operation, fast payouts,
generous bonuses, and super friendly around-the-clock
customer support.
Click here: http://gozealgaming.com
Best regards,
Jamie Zawinsky
No thanks: http://izealgaming.biz/u
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
<URL:http://www.killfile.org/~tskirvin/nana/>
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 00:39:12 2004 -0000 a message was received from
64.19.110.248 (United States) which said HELO as sovavsiti.cz
and left the following turdlet for all to see:
Received: from [64.19.110.248] (HELO sovavsiti.cz) (64.19.110.248)
by ScubaSteve with SMTP; Wed Jun 23 00:39:12 2004 -0000
Received: from 129.88.31.75 by smtp.chikinki.co.uk;
Wed, 23 Jun 2004 00:41:10 +0000
Message-ID: <5df201c458ba$55c3dc18$9010...@sovavsiti.cz>
From: "Harold Barry" <harold....@chikinki.co.uk>
To: josef...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 08:40:45 +0800
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 00:52:06 2004 -0000 a message was received from
210.221.116.94 (Korea, Republic of) which said HELO as mactastic.co.uk
and left the following turdlet for all to see:
Received: from [210.221.116.94] (HELO mactastic.co.uk) (210.221.116.94)
by ScubaSteve with SMTP; Wed Jun 23 00:52:06 2004 -0000
Received: from 48.202.78.142 by smtp.demesne.ie;
Wed, 23 Jun 2004 00:55:24 +0000
Message-ID: <282101c458bc$23a24bcb$2a1b...@mactastic.co.uk>
From: "Blaine Kelly" <b_ke...@demesne.ie>
To: judi.h...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Tue, 22 Jun 2004 18:54:53 -0600
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 00:53:43 2004 -0000 a message was received from
220.176.195.71 (China) which said HELO as sex.at
and left the following turdlet for all to see:
Received: from [220.176.195.71] (HELO sex.at) (220.176.195.71)
by ScubaSteve with SMTP; Wed Jun 23 00:53:43 2004 -0000
Received: from 73.134.132.78 by smtp.hauser.de;
Wed, 23 Jun 2004 00:56:43 +0000
Message-ID: <c71601c458bc$ed76c366$aac5...@sex.at>
From: "Sherri J. Connor" <sherri_c...@hauser.de>
To: juliet.h...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Tue, 22 Jun 2004 23:56:14 -0100
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:00:08 2004 -0000 a message was received from
212.44.98.170 (Cuba) which said HELO as tectro.de
and left the following turdlet for all to see:
Received: from [212.44.98.170] (HELO tectro.de) (212.44.98.170)
by ScubaSteve with SMTP; Wed Jun 23 01:00:08 2004 -0000
Received: from 139.168.152.176 by smtp.cervantes.es;
Wed, 23 Jun 2004 01:04:03 +0000
Message-ID: <b59d01c458bd$f8e3f030$91a3...@tectro.de>
From: "Ruben Erickson" <r_eric...@cervantes.es>
To: kade....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 03:03:55 +0200
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:00:36 2004 -0000 a message was received from
201.128.213.7 (Mexico) which said HELO as bibliothek.uni-kassel.de
and left the following turdlet for all to see:
Received: from [201.128.213.7] (HELO bibliothek.uni-kassel.de) (201.128.213.7)
by ScubaSteve with SMTP; Wed Jun 23 01:00:36 2004 -0000
Received: from 248.251.177.154 by smtp.horvat.nl;
Wed, 23 Jun 2004 00:51:25 +0000
Message-ID: <3d3001c458bc$18fd4314$6f79...@bibliothek.uni-kassel.de>
From: "Rosendo G. Hodge" <rhod...@horvat.nl>
To: kaleb...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 08:51:07 +0800
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:05:48 2004 -0000 a message was received from
221.140.66.225 (Korea, Republic of) which said HELO as netcom.co.il
and left the following turdlet for all to see:
Received: from [221.140.66.225] (HELO netcom.co.il) (221.140.66.225)
by ScubaSteve with SMTP; Wed Jun 23 01:05:48 2004 -0000
Received: from 35.223.48.210 by smtp.pobox.ch;
Wed, 23 Jun 2004 01:07:19 +0000
Message-ID: <405901c458be$48398eb1$5bd9...@netcom.co.il>
From: "Coy S. Warren" <cswar...@pobox.ch>
To: kathlee...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 00:06:55 -0100
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:07:57 2004 -0000 a message was received from
203.52.14.203 (Australia) which said HELO as pr.senai.br
and left the following turdlet for all to see:
Received: from [203.52.14.203] (HELO pr.senai.br) (203.52.14.203)
by ScubaSteve with SMTP; Wed Jun 23 01:07:57 2004 -0000
Received: from 44.194.117.250 by smtp.roguewave.nl;
Wed, 23 Jun 2004 01:10:14 +0000
Message-ID: <d5c601c458be$8a89dae8$b8a8...@pr.senai.br>
From: "Emil Hager" <ehag...@roguewave.nl>
To: kayleigh....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 06:09:51 +0500
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:05:54 2004 -0000 a message was received from
220.69.197.85 (Korea, Republic of) which said HELO as e-trade.nl
and left the following turdlet for all to see:
Received: from [220.69.197.85] (HELO e-trade.nl) (220.69.197.85)
by ScubaSteve with SMTP; Wed Jun 23 01:05:54 2004 -0000
Received: from 211.150.209.144 by smtp.microlise.co.uk;
Wed, 23 Jun 2004 01:07:50 +0000
Message-ID: <337501c458be$d966a1ad$aa20...@e-trade.nl>
From: "Trent Denton" <tden...@microlise.co.uk>
To: katerina....@123webhosting.org, katelin.van...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 00:07:26 -0100
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:19:24 2004 -0000 a message was received from
4.40.5.75 (United States) which said HELO as alariel.de
and left the following turdlet for all to see:
Received: from [4.40.5.75] (HELO alariel.de) (4.40.5.75)
by ScubaSteve with SMTP; Wed Jun 23 01:19:24 2004 -0000
Received: from 93.4.224.154 by smtp.equifax.com.sv;
Wed, 23 Jun 2004 01:19:45 +0000
Message-ID: <0e7601c458c0$e2b0ae7a$25a8...@alariel.de>
From: "Nikki Chase" <ncha...@equifax.com.sv>
To: kiara....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 00:19:44 -0100
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:34:57 2004 -0000 a message was received from
65.35.1.65 (United States) which said HELO as braunschweig.de
and left the following turdlet for all to see:
Received: from [65.35.1.65] (HELO braunschweig.de) (65.35.1.65)
by ScubaSteve with SMTP; Wed Jun 23 01:34:57 2004 -0000
Received: from 90.138.56.210 by smtp.bizinf.co.nz;
Wed, 23 Jun 2004 01:27:10 +0000
Message-ID: <cc7901c458c1$40c073d8$6572...@braunschweig.de>
From: "German Carlton" <germanc...@bizinf.co.nz>
To: krystle....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Tue, 22 Jun 2004 18:26:47 -0700
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:45:42 2004 -0000 a message was received from
68.184.70.196 (United States) which said HELO as sfu.ca
and left the following turdlet for all to see:
Received: from [68.184.70.196] (HELO sfu.ca) (68.184.70.196)
by ScubaSteve with SMTP; Wed Jun 23 01:45:42 2004 -0000
Received: from 170.29.58.81 by smtp.jokkmokk.se;
Wed, 23 Jun 2004 01:47:48 +0000
Message-ID: <9d6e01c458c4$d6ce8466$10f5...@sfu.ca>
From: "Elisa Francis" <elisafr...@jokkmokk.se>
To: laurel.h...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 05:47:30 +0400
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:52:57 2004 -0000 a message was received from
69.15.66.146 (United States) which said HELO as cc.fh-lippe.de
and left the following turdlet for all to see:
Received: from [69.15.66.146] (HELO cc.fh-lippe.de) (69.15.66.146)
by ScubaSteve with SMTP; Wed Jun 23 01:52:57 2004 -0000
Received: from 29.36.146.203 by smtp.ctt.upv.es;
Wed, 23 Jun 2004 01:44:30 +0000
Message-ID: <fc5a01c458c3$f68b609f$5782...@cc.fh-lippe.de>
From: "Eliseo Diaz" <edia...@ctt.upv.es>
To: lesia...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Tue, 22 Jun 2004 21:44:15 -0400
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:56:26 2004 -0000 a message was received from
66.241.86.29 (United States) which said HELO as csportneuf.qc.ca
and left the following turdlet for all to see:
Received: from [66.241.86.29] (HELO csportneuf.qc.ca) (66.241.86.29)
by ScubaSteve with SMTP; Wed Jun 23 01:56:26 2004 -0000
Received: from 24.210.92.240 by smtp.controlp.es;
Wed, 23 Jun 2004 01:59:54 +0000
Message-ID: <136b01c458c5$a4540232$1736...@csportneuf.qc.ca>
From: "Gina J. Schroeder" <ginajsch...@controlp.es>
To: lidia.bo...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 08:59:42 +0700
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:49:22 2004 -0000 a message was received from
66.142.90.169 (United States) which said HELO as reinhold-ellenrieder-forum.de
and left the following turdlet for all to see:
Received: from [66.142.90.169] (HELO reinhold-ellenrieder-forum.de) (66.142.90.169)
by ScubaSteve with SMTP; Wed Jun 23 01:49:22 2004 -0000
Received: from 140.115.77.115 by smtp.infoweb.co.kr;
Wed, 23 Jun 2004 01:51:54 +0000
Message-ID: <3a7101c458c4$6f398173$d5cd...@reinhold-ellenrieder-forum.de>
From: "Thurman Gonzalez" <t.gonz...@infoweb.co.kr>
To: leah....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Tue, 22 Jun 2004 23:51:41 -0200
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:59:18 2004 -0000 a message was received from
69.212.244.156 () which said HELO as ccmaresme.es
and left the following turdlet for all to see:
Received: from [69.212.244.156] (HELO ccmaresme.es) (69.212.244.156)
by ScubaSteve with SMTP; Wed Jun 23 01:59:18 2004 -0000
Received: from 78.71.240.214 by smtp.elgi.hu;
Wed, 23 Jun 2004 02:00:20 +0000
Message-ID: <c83701c458c5$9692bf2e$dc3b...@ccmaresme.es>
From: "Sydney Downs" <s.dow...@elgi.hu>
To: linnie....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 00:00:07 -0200
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:47:16 2004 -0000 a message was received from
68.161.4.225 (United States) which said HELO as izfp.fhg.de
and left the following turdlet for all to see:
Received: from [68.161.4.225] (HELO izfp.fhg.de) (68.161.4.225)
by ScubaSteve with SMTP; Wed Jun 23 01:47:16 2004 -0000
Received: from 161.18.7.50 by smtp.nuthouse.gen.nz;
Wed, 23 Jun 2004 01:50:11 +0000
Message-ID: <67c701c458c4$b783d815$8003...@izfp.fhg.de>
From: "Fredrick Puckett" <f.puc...@nuthouse.gen.nz>
To: lavada...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 07:49:59 +0600
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 01:53:35 2004 -0000 a message was received from
200.203.196.194 (Brazil) which said HELO as joeco.com.cn
and left the following turdlet for all to see:
Received: from [200.203.196.194] (HELO joeco.com.cn) (200.203.196.194)
by ScubaSteve with SMTP; Wed Jun 23 01:53:35 2004 -0000
Received: from 100.199.117.246 by smtp.poligon.lv;
Wed, 23 Jun 2004 01:57:41 +0000
Message-ID: <184501c458c5$76977670$459d...@joeco.com.cn>
From: "Gus Winston" <wins...@poligon.lv>
To: leota.sc...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 01:57:35 +0000
From ste...@ff-oberviechtach.de Wed Jun 23 04:16:12 2004
Return-Path: <ste...@ff-oberviechtach.de>
X-Original-To: lyle....@oryx.com
Received: by kalyani.oryx.com (Postfix, from userid 1005)
id 7A2891BDED7; Wed, 23 Jun 2004 04:16:12 +0200 (CEST)
Received: from danieldevroey.isabel.be (unknown [220.234.111.165])
by kalyani.oryx.com (Postfix) with SMTP id 0E04F1BDED4
for <lyle....@oryx.com>; Wed, 23 Jun 2004 04:16:07 +0200 (CEST)
Received: from 254.178.32.20 by smtp.ff-oberviechtach.de;
Wed, 23 Jun 2004 02:16:57 +0000
Message-ID: <4d8201c458c8$5bed6806$f3b6...@danieldevroey.isabel.be>
From: "Donna Stein" <ste...@ff-oberviechtach.de>
To: lyle....@oryx.com
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 10:16:53 +0800
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 02:28:15 2004 -0000 a message was received from
166.82.131.165 (United States) which said HELO as multimedia2002.de
and left the following turdlet for all to see:
Received: from [166.82.131.165] (HELO multimedia2002.de) (166.82.131.165)
by ScubaSteve with SMTP; Wed Jun 23 02:28:15 2004 -0000
Received: from 119.68.179.91 by smtp.swisscom.ch;
Wed, 23 Jun 2004 02:29:03 +0000
Message-ID: <6af401c458c9$b6a52e3b$727f...@multimedia2002.de>
From: "Joe Devine" <joe_de...@swisscom.ch>
To: mar...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 00:28:47 -0200
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 02:31:16 2004 -0000 a message was received from
68.51.53.50 (United States) which said HELO as avis.ne.jp
and left the following turdlet for all to see:
Received: from [68.51.53.50] (HELO avis.ne.jp) (68.51.53.50)
by ScubaSteve with SMTP; Wed Jun 23 02:31:16 2004 -0000
Received: from 69.50.197.232 by smtp.posti.fak.fi;
Wed, 23 Jun 2004 02:24:17 +0000
Message-ID: <6cf201c458c9$2f51edad$2664...@avis.ne.jp>
From: "Mack Nicholson" <mack.nic...@posti.fak.fi>
To: mariel...@123webhosting.org, mariann...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 10:23:46 +0800
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 02:42:32 2004 -0000 a message was received from
67.175.5.49 (United States) which said HELO as gn-racing.co.uk
and left the following turdlet for all to see:
Received: from [67.175.5.49] (HELO gn-racing.co.uk) (67.175.5.49)
by ScubaSteve with SMTP; Wed Jun 23 02:42:32 2004 -0000
Received: from 25.132.94.216 by smtp.xs4all.hacktic.nl;
Wed, 23 Jun 2004 02:43:30 +0000
Message-ID: <d50101c458cb$90031516$4fb8...@gn-racing.co.uk>
From: "Elnora Sneed" <elnoras...@xs4all.hacktic.nl>
To: mattie.b...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 08:43:00 +0600
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 02:29:18 2004 -0000 a message was received from
212.239.216.95 (Belgium) which said HELO as propellersystem.de
and left the following turdlet for all to see:
Received: from [212.239.216.95] (HELO propellersystem.de) (212.239.216.95)
by ScubaSteve with SMTP; Wed Jun 23 02:29:18 2004 -0000
Received: from 234.91.199.155 by smtp.acco-europe.co.uk;
Wed, 23 Jun 2004 02:32:28 +0000
Message-ID: <fe3f01c458ca$f5996713$d122...@propellersystem.de>
From: "Haley Cantrell" <cantr...@acco-europe.co.uk>
To: marcial...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 05:32:13 +0300
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 03:01:59 2004 -0000 a message was received from
64.161.226.172 (United States) which said HELO as smartobjects.co.uk
and left the following turdlet for all to see:
Received: from [64.161.226.172] (HELO smartobjects.co.uk) (64.161.226.172)
by ScubaSteve with SMTP; Wed Jun 23 03:01:59 2004 -0000
Received: from 99.162.9.69 by smtp.demogr.mpg.de;
Wed, 23 Jun 2004 02:53:45 +0000
Message-ID: <f26a01c458cd$216f37c1$aae6...@smartobjects.co.uk>
From: "Gwendolyn Spivey" <gwendolyn...@demogr.mpg.de>
To: misa...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Tue, 22 Jun 2004 19:53:34 -0700
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 03:09:59 2004 -0000 a message was received from
12.40.168.94 (United States) which said HELO as hpc-ag.de
and left the following turdlet for all to see:
Received: from [12.40.168.94] (HELO hpc-ag.de) (12.40.168.94)
by ScubaSteve with SMTP; Wed Jun 23 03:09:59 2004 -0000
Received: from 112.88.123.55 by smtp.entitysolutions.com.au;
Wed, 23 Jun 2004 03:14:27 +0000
Message-ID: <25e501c458d0$7d579fb3$e6c3...@hpc-ag.de>
From: "Courtney R. Stark" <courtneyr...@entitysolutions.com.au>
To: monroe...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 06:14:22 +0300
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 03:45:21 2004 -0000 a message was received from
66.95.243.229 (United States) which said HELO as utesc.br
and left the following turdlet for all to see:
Received: from [66.95.243.229] (HELO utesc.br) (66.95.243.229)
by ScubaSteve with SMTP; Wed Jun 23 03:45:21 2004 -0000
Received: from 89.57.216.218 by smtp.psychsociety.com.au;
Wed, 23 Jun 2004 03:50:11 +0000
Message-ID: <861401c458d5$0eeb7357$a4d4...@utesc.br>
From: "Pam Hilliard" <pam_hil...@psychsociety.com.au>
To: olaf.i...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 00:49:48 -0300
The address this was sent to has NEVER been
opted-in to anything.
Received: from wurst.de (pool-141-150-235-95.delv.east.verizon.net [141.150.235.95])
by mail.nwsup.com (8.12.11/8.12.11) with SMTP id i5N3dsa1006514;
Tue, 22 Jun 2004 23:39:55 -0400
Received: from 134.52.51.213 by smtp.telefonica.es;
Wed, 23 Jun 2004 03:30:07 +0000
Message-ID: <af2801c458d2$96db95f6$0645...@wurst.de>
From: "Reinaldo Hickey" <rhic...@telefonica.es>
To: mun...@nwsup.com, mun...@nwsup.com
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 09:29:36 +0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Virus-Scanned: clamd / ClamAV version 0.72, clamav-milter version 0.72
on localhost
X-Virus-Status: Clean
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 03:50:28 2004 -0000 a message was received from
200.47.140.161 (Venezuela) which said HELO as nasuinfo.or.jp
and left the following turdlet for all to see:
Received: from [200.47.140.161] (HELO nasuinfo.or.jp) (200.47.140.161)
by ScubaSteve with SMTP; Wed Jun 23 03:50:28 2004 -0000
Received: from 167.163.38.237 by smtp.sit.be;
Wed, 23 Jun 2004 03:54:11 +0000
Message-ID: <855a01c458d5$84994a79$99cd...@nasuinfo.or.jp>
From: "Wilford L. Henry" <wilford_...@sit.be>
To: otis.co...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Tue, 22 Jun 2004 23:53:56 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Hi,
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 04:23:17 2004 -0000 a message was received from
200.206.159.32 (Brazil) which said HELO as banis.nl
and left the following turdlet for all to see:
Received: from [200.206.159.32] (HELO banis.nl) (200.206.159.32)
by ScubaSteve with SMTP; Wed Jun 23 04:23:17 2004 -0000
Received: from 233.84.87.125 by smtp.gudhorst.de;
Wed, 23 Jun 2004 04:25:26 +0000
Message-ID: <42e001c458da$92ca2336$f60b...@banis.nl>
From: "Matilda Kenney" <m.ken...@gudhorst.de>
To: preciou...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 09:24:58 +0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Hi,
The address this was sent to was harvested
from Usenet.
Received: from stift-zwettl.co.at ([210.22.70.254])
by mail.nwsup.com (8.12.11/8.12.11) with SMTP id i5N4p9mi006781
for <mun...@nwsup.com>; Wed, 23 Jun 2004 00:51:12 -0400
Received: from 107.230.96.196 by smtp.graz.spardat.at;
Wed, 23 Jun 2004 04:54:33 +0000
Message-ID: <69d001c458de$8b6b0102$84a8...@stift-zwettl.co.at>
From: "Edgardo Webster" <e_webs...@graz.spardat.at>
To: mun...@nwsup.com
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 10:54:20 +0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Virus-Scanned: clamd / ClamAV version 0.72, clamav-milter version 0.72
on localhost
X-Virus-Status: Clean
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 04:46:07 2004 -0000 a message was received from
210.104.126.75 (Korea, Republic of) which said HELO as compco.co.uk
and left the following turdlet for all to see:
Received: from [210.104.126.75] (HELO compco.co.uk) (210.104.126.75)
by ScubaSteve with SMTP; Wed Jun 23 04:46:07 2004 -0000
Received: from 254.146.220.31 by smtp.netsource.co.nz;
Wed, 23 Jun 2004 04:50:43 +0000
Message-ID: <5bce01c458dd$40581eb5$912a...@compco.co.uk>
From: "Noemi Mendoza" <noemime...@netsource.co.nz>
To: retta.wa...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Tue, 22 Jun 2004 23:50:40 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Hi,
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 04:59:41 2004 -0000 a message was received from
82.225.205.141 () which said HELO as nellys-zwergkaninchen.de
and left the following turdlet for all to see:
Received: from [82.225.205.141] (HELO nellys-zwergkaninchen.de) (82.225.205.141)
by ScubaSteve with SMTP; Wed Jun 23 04:59:41 2004 -0000
Received: from 131.237.26.186 by smtp.tripamer.at;
Wed, 23 Jun 2004 05:01:56 +0000
Message-ID: <a5ca01c458df$63a66d23$be9e...@nellys-zwergkaninchen.de>
From: "Georgia Martinez" <georgia_m...@tripamer.at>
To: robin....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 02:01:44 -0300
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 05:03:03 2004 -0000 a message was received from
69.70.133.55 () which said HELO as geeks.it
and left the following turdlet for all to see:
Received: from [69.70.133.55] (HELO geeks.it) (69.70.133.55)
by ScubaSteve with SMTP; Wed Jun 23 05:03:03 2004 -0000
Received: from 166.21.34.209 by smtp.visionet.com.br;
Wed, 23 Jun 2004 05:08:03 +0000
Message-ID: <cf4901c458e0$fd2f66df$4842...@geeks.it>
From: "Roderick Craig" <r_cr...@visionet.com.br>
To: rodger...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Tue, 22 Jun 2004 23:07:47 -0600
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 05:02:59 2004 -0000 a message was received from
64.122.111.60 (United States) which said HELO as student.fontys.nl
and left the following turdlet for all to see:
Received: from [64.122.111.60] (HELO student.fontys.nl) (64.122.111.60)
by ScubaSteve with SMTP; Wed Jun 23 05:02:59 2004 -0000
Received: from 229.160.41.71 by smtp.cso.at;
Wed, 23 Jun 2004 04:55:17 +0000
Message-ID: <be1e01c458de$821d88e0$4559...@student.fontys.nl>
From: "Augusta Arthur" <augustaa...@cso.at>
To: romaine....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 06:55:15 +0200
Illegal (in the U.S.) online casino.
Promoted (software download) at IP address 66.201.76.13
on cybercon.com/1stchoiceinternational.com.
---
Spam FROM: adsl-63-207-131-2.dsl.sndg02.pacbell.net [63.207.131.2]
sbc-...@sbc.com,sup...@pacbell.net,ab...@pacbell.net
Spamvertized URL: http://gozealgaming.com
a hostname using name-services.com's redirection service
ab...@name-services.com,in...@name-services.com,
postm...@name-services.com,sup...@name-services.com,
ab...@enom.com,ab...@internap.com,he...@name-services.com,
in...@name-services.com,ad...@name-services.com
which redirects to the:
Spamvertized CLICK-THROUGH: http://219.153.5.203/AidDownload.php?affid=788
on Chinanet/Chongqing
ab...@cta.cq.cn,hostm...@ns.chinanet.cn.net,anti...@ns.chinanet.cn.net,
sp...@ctsi.com.cn,JIEL...@IX.NETCOM.COM,CTSU...@special.abuse.net,
postm...@cta.cq.cn,wan...@public.cta.cq.cn,zh...@public.cta.cq.cn,
sy...@ctsi.com.cn,dns...@public.cta.cq.cn,ab...@publicf.bta.net.cn,
anti...@chinanet.cn.net,postm...@chinanet.cn.net
which has one thing on it. A "DOWNLOAD" button sending one on to the:
Spamvertized SITE: http://66.201.76.13/dl/TrackDownload/TrackDownload.exe?DID=119475&RTGURL=http%3A%2F%2F66%2E201%2E76%2E13%2Fdl%2FTrackDownload%2FTrackDownload%2Eexe%3FDID%3D119475
on cybercon.com/1stchoiceinternational.com [*]
ab...@cybercon.com,n...@cybercon.com,
ab...@1stchoiceinternational.com,sup...@1stchoiceinternational.com
spam...@level3.net,ab...@level3.net,ab...@level3.com,
webm...@cybercon.com,hostm...@cybercon.com,
webm...@1stchoiceinternational.com,hostm...@1stchoiceinternational.com
ad...@1stChoiceInternational.com,he...@1stchoiceinternational.com
*: 1stchoiceinternational.com takes the interesting position (in their reply -
after all, this spam has been reported before ... 3+ times already)
claiming that they are not hosting the spamvertized site or file.
Apparently if the spam had:
"CLICK HERE TO GET THE SOFTWARE"
with the link to "http://66.201.76.13/dl/TrackDownload/TrackDownload.exe?[...]"
then that *would* be the spamvertized site/file
BUT if the spammer hacks another system, uses a free webhosting site, or gets
hosting for a single page and the spam's
"CLICK HERE TO GET THE SOFTWARE"
links to that hacked system or freewebhosting whose single page has one thing on it
- a button:
"DOWNLOAD BUTTON"
which sends one to "http://66.201.76.13/dl/TrackDownload/TrackDownload.exe?[...]"
then http://66.201.76.13/dl/TrackDownload/TrackDownload.exe?[...]
is *not* a spamvertized site/file, but just a clever and ethical business.
==========
[DETAILS:]
SPAM FROM: adsl-63-207-131-2.dsl.sndg02.pacbell.net [63.207.131.2]
OrgName: Pac Bell Internet Services
OrgID: PACB
NetRange: 63.192.0.0 - 63.207.255.255
TechEmail: IPAdm...@sbcis.sbc.com
OrgNOCEmail: sup...@pacbell.net
OrgAbuseEmail: ab...@pacbell.net
[whois.abuse.net]
sbc-...@sbc.com (for sbc.com)
SPAMVERTIZED URL: http://gozealgaming.com
'Click here: http://gozealgaming.com'
This uses name-services.com as a redirector (using their
multiple IP addressed sites):
=============================================================
For the host:
"gozealgaming.com"
NAMESERVERS listed in the root servers for gozealgaming.com:
------------------------------------------------------------
gozealgaming.com NS dns1.name-services.com
gozealgaming.com NS dns2.name-services.com
gozealgaming.com NS dns3.name-services.com
gozealgaming.com NS dns4.name-services.com
gozealgaming.com NS dns5.name-services.com
dns1.name-services.com A 63.251.163.102
dns2.name-services.com A 216.52.184.230
dns3.name-services.com A 63.251.83.36
dns4.name-services.com A 64.74.96.242
dns5.name-services.com A 212.118.243.118
[extract from dig]
------------------
dig @63.251.163.102
gozealgaming.com
A +noqu +noadd +noau +norec
;; flags: qr aa <-- AUTHORITATIVE and NON-RECURSIVE
gozealgaming.com A 63.251.163.112
dig @216.52.184.230
gozealgaming.com
A +noqu +noadd +noau +norec
;; flags: qr aa <-- AUTHORITATIVE and NON-RECURSIVE
gozealgaming.com A 216.52.184.239
dig @63.251.83.36
gozealgaming.com
A +noqu +noadd +noau +norec
;; flags: qr aa <-- AUTHORITATIVE and NON-RECURSIVE
gozealgaming.com A 63.251.83.54
dig @64.74.96.242
gozealgaming.com
A +noqu +noadd +noau +norec
;; flags: qr aa <-- AUTHORITATIVE and NON-RECURSIVE
gozealgaming.com A 64.74.96.249
dig @212.118.243.118
gozealgaming.com
A +noqu +noadd +noau +norec
;; flags: qr aa <-- AUTHORITATIVE and NON-RECURSIVE
gozealgaming.com A 212.118.243.114
=============================================================
[whois.abuse.net]
ab...@enom.com (for name-services.com)
ab...@internap.com (for name-services.com)
Each and every one of those IP addresses (using the hostname gozealgaming.com)
returns the same redirection:
HTTP/1.1 302 Found
Location: http://219.153.5.203/AidDownload.php?affid=788
to the:
SPAMVERTIZED CLICK_THROUGH: http://219.153.5.203/AidDownload.php?affid=788
inetnum: 219.151.128.0 - 219.153.255.255
netname: CHINANET-CQ
descr: CHINANET Chongqing province network
trouble: send spam reports to ab...@cta.cq.cn
e-mail: hostm...@ns.chinanet.cn.net
e-mail: anti...@ns.chinanet.cn.net
[whois.abuse.net]
sp...@ctsi.com.cn (for cta.cq.cn)
JIEL...@IX.NETCOM.COM (for cta.cq.cn)
CTSU...@special.abuse.net (for cta.cq.cn)
postm...@cta.cq.cn (for cta.cq.cn)
wan...@public.cta.cq.cn (for cta.cq.cn)
zh...@public.cta.cq.cn (for cta.cq.cn)
sy...@ctsi.com.cn (for cta.cq.cn)
dns...@public.cta.cq.cn (for cta.cq.cn)
ab...@publicf.bta.net.cn (for cta.cq.cn)
anti...@chinanet.cn.net (for chinanet.cn.net)
postm...@chinanet.cn.net (for chinanet.cn.net)
ctsu...@special.abuse.net (for chinanet.cn.net)
which returns the redirection:
[META HTTP-EQUIV="Refresh" CONTENT="0;
URL=http://219.153.5.203//index.html"]
(gee, no longer on a hacked system at QIQIHAER-NURSE-COLLEGE)
This page is nothing but a click-through redirector.
It has a download link (form button - one gives one's email address)
as well as a popup with download button (form button - same action,
but in this case, the "email" value is simply set equal to "popup")
which submits the tiny amount of data to:
http://219.153.5.203/SmartDownload.php
As usual, this is just a redirector to the same site as before
(and before that, and before that, and before that, and ...)
HTTP/1.1 302 Found
Location: http://66.201.76.13/dl/TrackDownload/TrackDownload.exe?DID=119475&RTGURL=http%3A%2F%2F66%2E201%2E76%2E13%2Fdl%2FTrackDownload%2FTrackDownload%2Eexe%3FDID%3D119475
at the actual:
SPAMVERTIZED SITE: http://66.201.76.13/dl/TrackDownload/TrackDownload.exe?DID=119475&RTGURL=http%3A%2F%2F66%2E201%2E76%2E13%2Fdl%2FTrackDownload%2FTrackDownload%2Eexe%3FDID%3D119475
which sends the casino software (actually, the downloader for the software):
HTTP/1.1 200 OK
Content-type: application/octet-stream; name=SmartDownload.exe
Content-disposition: inline; filename=SmartDownload.exe
so, we have the illegal online casino's software downloader
provided at IP address 66.201.76.13
OrgName: CYBERCON, INC.
OrgID: CBCN
CIDR: 66.201.64.0/18
OrgAbuseEmail: ab...@cybercon.com
OrgTechEmail: n...@cybercon.com
OrgName: 1st Choice International
CIDR: 66.201.76.0/25
OrgAbuseEmail: ab...@1stchoiceinternational.com
OrgTechEmail: sup...@1stchoiceinternational.com
[whois.abuse.net]
spam...@level3.net (for cybercon.com)
ab...@level3.net (for cybercon.com)
n...@cybercon.com (for cybercon.com)
ab...@cybercon.com (for cybercon.com)
postm...@cybercon.com (for cybercon.com)
--------------------------------------------------------------
Decompressing the UPX compressed binary file results in one with the
following strings:
12.129.69.226
20000
Cleopatra's Casino
Cleopatra's Casino
Cleopatra's Casino
Cleopatra's Casino
Visit our website for news and promotional offers - www.cleopatras-casino.com
and what does one find at "http://www.cleopatras-casino.com"?
This page is nothing but a click-through redirector.
It has a download link (form button - one gives one's email address)
as well as a popup with download button (form button - same action,
but in this case, the "email" value is simply set equal to "popup")
which submits the tiny amount of data to:
http://www.cleopatras-casino.com/SmartDownload.asp
(Hmmm ... *.asp here, *.php at the spamvertized click-through)
and what does it do?
HTTP/1.1 302 Object moved
Location: http://66.201.76.13/dl/TrackDownload/TrackDownload.exe?...
so, the file is a downloader for the www.cleopatras-casino.com
software where www.cleopatras-casino.com has address 196.40.45.206
OrgName: Radiografica Costarricense S.A.
OrgID: RADO
CIDR: 196.40.0.0/18, 196.40.64.0/19
NetName: RACSA
listed, of course, in SPEWS.
--------------------------------------------------------------
================
[ORIGINAL SPAM:]
Return-Path: <m_harr...@bmi.co.za>
Received: from eka.com.ar (adsl-63-207-131-2.dsl.sndg02.pacbell.net [63.207.131.2])
by _my_isp_ (xxx) with SMTP id i5N0NuFn060790;
Tue, 22 Jun 2004 20:23:58 -0400 (EDT)
(envelope-from m_harr...@bmi.co.za)
Received: from 25.48.2.172 by smtp.bmi.co.za;
Wed, 23 Jun 2004 00:26:51 +0000
Message-ID: <16e301c458b8$c9eafbbd$09ec...@eka.com.ar>
From: "Mollie Harrell" <m_harr...@bmi.co.za>
To: <xxx>
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 07:26:47 +0700
xxxMIME-Version: 1.0
xxxContent-Type: text/plain;
xxx charset="iso-8859-1"
xxxContent-Transfer-Encoding: 8bit
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on _my_isp_
X-Spam-DCC: Servercave: _my_isp_ 1183; Body=many Fuz1=many Fuz2=many
X-Spam-Report:
* 2.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 1.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence between 51 and 100
* [cf: 100]
* 0.1 BIZ_TLD URI: Contains a URL in the BIZ top-level domain
* 1.0 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
* 2.9 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
* 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
* [63.207.131.2 listed in dnsbl.sorbs.net]
* 1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?63.207.131.2>]
* 1.0 RCVD_IN_DYNABLOCK RBL: Sent directly from dynamic IP address
* [63.207.131.2 listed in dnsbl.sorbs.net]
* 0.1 CLICK_BELOW Asks you to click below
X-Spam-Status: Yes, hits=10.4 required=6.0 tests=BAYES_99,BIZ_TLD,CLICK_BELOW,
DCC_CHECK,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_DYNABLOCK,RCVD_IN_SORBS autolearn=no version=2.63
X-Spam-Level: **********
X-UIDL: %!""!%7d"!K`g!!O2[!!
Status: RO
X-Status:
X-Keywords:
X-UID: 25
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 05:41:16 2004 -0000 a message was received from
82.37.195.187 (United Kingdom) which said HELO as klingenmuenster.de
and left the following turdlet for all to see:
Received: from [82.37.195.187] (HELO klingenmuenster.de) (82.37.195.187)
by ScubaSteve with SMTP; Wed Jun 23 05:41:16 2004 -0000
Received: from 229.127.17.219 by smtp.oldschool.de;
Wed, 23 Jun 2004 05:43:26 +0000
Message-ID: <a70501c458e4$575f7327$a797...@klingenmuenster.de>
From: "Lucille Hanna" <lucille_...@oldschool.de>
To: seymour...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 06:43:22 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Hi,
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 05:46:59 2004 -0000 a message was received from
82.226.197.167 () which said HELO as bice.cl
and left the following turdlet for all to see:
Received: from [82.226.197.167] (HELO bice.cl) (82.226.197.167)
by ScubaSteve with SMTP; Wed Jun 23 05:47:01 2004 -0000
Received: from 193.192.152.154 by smtp.latitudesolutions.co.uk;
Wed, 23 Jun 2004 05:49:27 +0000
Message-ID: <e23901c458e5$dd534f14$5a3d...@bice.cl>
From: "Marcia Mackey" <m_mac...@latitudesolutions.co.uk>
To: shelva.h...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 05:49:16 +0000
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 05:50:16 2004 -0000 a message was received from
218.57.67.68 (China) which said HELO as dc.sote.hu
and left the following turdlet for all to see:
Received: from [218.57.67.68] (HELO dc.sote.hu) (218.57.67.68)
by ScubaSteve with SMTP; Wed Jun 23 05:50:16 2004 -0000
Received: from 62.7.2.39 by smtp.anet.ro;
Wed, 23 Jun 2004 05:52:20 +0000
Message-ID: <0b4001c458e6$f367a82a$38bc...@dc.sote.hu>
From: "Priscilla Valdez" <priscilla...@anet.ro>
To: shond...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 13:52:11 +0800
Return-path: <jc.dun...@fcedu.alvkarleby.se>
Delivery-date: Tue, 22 Jun 2004 19:45:57 -0500
Received: from adsl-83-150-116.mco.bellsouth.net ([65.83.150.116]
helo=clarion.com.au)
by ******** with smtp (Exim 4.24)
id 1Bcvu2-000667-4E; Tue, 22 Jun 2004 19:46:14 -0500
Received: from 123.46.192.193 by smtp.fcedu.alvkarleby.se;
Wed, 23 Jun 2004 00:38:14 +0000
Message-ID: <719001c458ba$a1ab4386$fa76...@clarion.com.au>
From: "Josue C. Dunham" <jc.dun...@fcedu.alvkarleby.se>
To: ***@********, ***@********, ***@********, ***@********
Subject: Get $200 bonus at our Casino!
Date: Tue, 22 Jun 2004 23:38:00 -0100
MIME-Version: 1.0
Content-Type: text/plain
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 06:25:09 2004 -0000 a message was received from
218.239.153.213 (Korea, Republic of) which said HELO as swanbookshop.co.uk
and left the following turdlet for all to see:
Received: from [218.239.153.213] (HELO swanbookshop.co.uk) (218.239.153.213)
by ScubaSteve with SMTP; Wed Jun 23 06:25:09 2004 -0000
Received: from 155.229.109.120 by smtp.kanazawa-gu.ac.jp;
Wed, 23 Jun 2004 06:19:07 +0000
Message-ID: <9e6701c458e9$8f916492$d511...@swanbookshop.co.uk>
From: "Betsy Dalton" <betsy.d...@kanazawa-gu.ac.jp>
To: suzette...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 08:18:38 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 06:27:51 2004 -0000 a message was received from
212.251.97.174 (Greece) which said HELO as email.de
and left the following turdlet for all to see:
Received: from [212.251.97.174] (HELO email.de) (212.251.97.174)
by ScubaSteve with SMTP; Wed Jun 23 06:27:51 2004 -0000
Received: from 162.57.169.166 by smtp.deckerweb.de;
Wed, 23 Jun 2004 06:30:07 +0000
Message-ID: <e9c801c458eb$484d10c5$f60a...@email.de>
From: "Ora Downs" <odow...@deckerweb.de>
To: sydni...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 07:30:05 +0100
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 06:52:47 2004 -0000 a message was received from
217.225.144.133 (Germany) which said HELO as ges.co.in
and left the following turdlet for all to see:
Received: from [217.225.144.133] (HELO ges.co.in) (217.225.144.133)
by ScubaSteve with SMTP; Wed Jun 23 06:52:47 2004 -0000
Received: from 124.90.163.168 by smtp.lfgroup.co.uk;
Wed, 23 Jun 2004 06:55:49 +0000
Message-ID: <af7301c458ef$00dc2174$fcc5...@ges.co.in>
From: "Jan Reynolds" <jan_rey...@lfgroup.co.uk>
To: tonia....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Tue, 22 Jun 2004 23:55:47 -0700
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 06:57:55 2004 -0000 a message was received from
216.255.123.190 (United States) which said HELO as region-hannover.de
and left the following turdlet for all to see:
Received: from [216.255.123.190] (HELO region-hannover.de) (216.255.123.190)
by ScubaSteve with SMTP; Wed Jun 23 06:57:55 2004 -0000
Received: from 11.91.129.65 by smtp.svc.com.pe;
Wed, 23 Jun 2004 07:01:12 +0000
Message-ID: <11f601c458ef$5ef2fc1f$9855...@region-hannover.de>
From: "Geneva B. Marsh" <gb.ma...@svc.com.pe>
To: tre.th...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 12:00:50 +0500
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 06:56:31 2004 -0000 a message was received from
210.114.151.109 (Korea, Republic of) which said HELO as 3adizayn.com.tr
and left the following turdlet for all to see:
Received: from [210.114.151.109] (HELO 3adizayn.com.tr) (210.114.151.109)
by ScubaSteve with SMTP; Wed Jun 23 06:56:31 2004 -0000
Received: from 247.236.23.242 by smtp.ecsoft.nl;
Wed, 23 Jun 2004 06:57:44 +0000
Message-ID: <111501c458ef$e7a4fe46$b963...@3adizayn.com.tr>
From: "Murray Moore" <murray...@ecsoft.nl>
To: traci...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 00:57:20 -0600
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 06:58:51 2004 -0000 a message was received from
81.65.182.95 (France) which said HELO as und.ringkhs.dk
and left the following turdlet for all to see:
Received: from [81.65.182.95] (HELO und.ringkhs.dk) (81.65.182.95)
by ScubaSteve with SMTP; Wed Jun 23 06:58:51 2004 -0000
Received: from 113.123.175.201 by smtp.trs.es;
Wed, 23 Jun 2004 07:02:44 +0000
Message-ID: <cd1001c458f0$85652020$0a25...@und.ringkhs.dk>
From: "Earnest Vega" <eveg...@trs.es>
To: trena...@123webhosting.org, trena....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 06:02:34 -0100
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 06:58:42 2004 -0000 a message was received from
68.167.185.250 (United States) which said HELO as forskningsradet.no
and left the following turdlet for all to see:
Received: from [68.167.185.250] (HELO forskningsradet.no) (68.167.185.250)
by ScubaSteve with SMTP; Wed Jun 23 06:58:42 2004 -0000
Received: from 43.60.183.201 by smtp.crustpunk.de;
Wed, 23 Jun 2004 07:03:29 +0000
Message-ID: <091b01c458f0$e1c21a2d$24a7...@forskningsradet.no>
From: "Roman Slater" <r.sla...@crustpunk.de>
To: tricia.r...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 03:03:16 -0400
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 06:59:27 2004 -0000 a message was received from
218.162.55.116 (Taiwan) which said HELO as paradise.net.nz
and left the following turdlet for all to see:
Received: from [218.162.55.116] (HELO paradise.net.nz) (218.162.55.116)
by ScubaSteve with SMTP; Wed Jun 23 06:59:27 2004 -0000
Received: from 11.161.165.28 by smtp.igs1.agric.za;
Wed, 23 Jun 2004 07:04:09 +0000
Message-ID: <8adf01c458f0$d9a7c309$7c35...@paradise.net.nz>
From: "Iva Gates" <i.ga...@igs1.agric.za>
To: tristen....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 00:04:02 -0700
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 07:32:06 2004 -0000 a message was received from
24.125.45.103 (United States) which said HELO as httx.com.cn
and left the following turdlet for all to see:
Received: from [24.125.45.103] (HELO httx.com.cn) (24.125.45.103)
by ScubaSteve with SMTP; Wed Jun 23 07:32:06 2004 -0000
Received: from 90.144.34.243 by smtp.scdplanet.com.ar;
Wed, 23 Jun 2004 07:33:15 +0000
Message-ID: <a11901c458f4$3045cd7b$af51...@httx.com.cn>
From: "Myrtle Figueroa" <myrtle.f...@scdplanet.com.ar>
To: wendi....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 07:33:00 +0000
Microsoft Mail Internet Headers Version 2.0
Received: from saarlaender.de ([82.127.132.19]) by myserver with Microsoft
SMTPSVC(5.0.2195.6713);
Wed, 23 Jun 2004 04:31:39 +0100
Received: from 6.149.222.250 by smtp.ingrammicro.ca;
Wed, 23 Jun 2004 03:35:24 +0000
Message-ID: <58cc01c458d3$ff0c0929$00e6...@saarlaender.de>
From: "Preston Newman" <preston....@ingrammicro.ca>
To: me@mydomain
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 03:35:05 +0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Return-Path: preston....@ingrammicro.ca
X-OriginalArrivalTime: 23 Jun 2004 03:31:40.0588 (UTC)
FILETIME=[98F66EC0:01C458D2]
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:39:10 2004 -0000 a message was received from
203.187.207.206 (India) which said HELO as tolky.de
and left the following turdlet for all to see:
Received: from [203.187.207.206] (HELO tolky.de) (203.187.207.206)
by ScubaSteve with SMTP; Wed Jun 23 08:39:10 2004 -0000
Received: from 170.34.223.42 by smtp.jakob.at;
Wed, 23 Jun 2004 08:42:34 +0000
Message-ID: <230a01c458fe$5fc4584c$669c...@tolky.de>
From: "Rosa Courtney" <rosa_co...@jakob.at>
To: aabar...@ak.123webhosting.org, aa...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 08:42:30 +0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Hi,
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:41:16 2004 -0000 a message was received from
66.245.180.20 (United States) which said HELO as rathenow.de
and left the following turdlet for all to see:
Received: from [66.245.180.20] (HELO rathenow.de) (66.245.180.20)
by ScubaSteve with SMTP; Wed Jun 23 08:41:16 2004 -0000
Received: from 230.46.73.8 by smtp.pegbt.unizar.es;
Wed, 23 Jun 2004 08:45:35 +0000
Message-ID: <d31201c458fe$417f1e14$8b8e...@rathenow.de>
From: "Rosanna Dunlap" <r_dun...@pegbt.unizar.es>
To: ab...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 16:45:11 +0800
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:25:37 2004 -0000 a message was received from
220.248.28.186 (China) which said HELO as skima.is
and left the following turdlet for all to see:
Received: from [220.248.28.186] (HELO skima.is) (220.248.28.186)
by ScubaSteve with SMTP; Wed Jun 23 08:25:37 2004 -0000
Received: from 108.45.211.109 by smtp.techwriterplacements.com.au;
Wed, 23 Jun 2004 08:29:42 +0000
Message-ID: <f97001c458fc$83aeb694$bef5...@skima.is>
From: "Maryann Simons" <maryann....@techwriterplacements.com.au>
To: 0fh...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 12:29:18 +0400
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:42:27 2004 -0000 a message was received from
218.48.149.20 (Korea, Republic of) which said HELO as emoka.ro
and left the following turdlet for all to see:
Received: from [218.48.149.20] (HELO emoka.ro) (218.48.149.20)
by ScubaSteve with SMTP; Wed Jun 23 08:42:27 2004 -0000
Received: from 139.72.176.108 by smtp.northampton.ac.uk;
Wed, 23 Jun 2004 08:35:27 +0000
Message-ID: <84ff01c458fd$0d37191e$11dc...@emoka.ro>
From: "Rosanne N. Holder" <rosanne.n...@northampton.ac.uk>
To: a...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 14:35:25 +0600
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:27:44 2004 -0000 a message was received from
70.240.4.93 () which said HELO as tcbworld.de
and left the following turdlet for all to see:
Received: from [70.240.4.93] (HELO tcbworld.de) (70.240.4.93)
by ScubaSteve with SMTP; Wed Jun 23 08:27:44 2004 -0000
Received: from 37.88.97.73 by smtp.calcna.ab.ca;
Wed, 23 Jun 2004 08:29:35 +0000
Message-ID: <510901c458fc$d3dd5933$2026...@tcbworld.de>
From: "Boris L. Dolan" <bdol...@calcna.ab.ca>
To: 3cmur...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 09:29:07 +0100
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:26:45 2004 -0000 a message was received from
80.179.14.90 (Israel) which said HELO as redcats.co.uk
and left the following turdlet for all to see:
Received: from [80.179.14.90] (HELO redcats.co.uk) (80.179.14.90)
by ScubaSteve with SMTP; Wed Jun 23 08:26:45 2004 -0000
Received: from 20.31.97.236 by smtp.greenhead.co.uk;
Wed, 23 Jun 2004 08:30:54 +0000
Message-ID: <30e701c458fc$dc949d3d$280f...@redcats.co.uk>
From: "Rocky Jackson" <rjack...@greenhead.co.uk>
To: 20fh...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 04:30:45 -0400
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:41:17 2004 -0000 a message was received from
68.74.77.14 (United States) which said HELO as tp.telepac.pt
and left the following turdlet for all to see:
Received: from [68.74.77.14] (HELO tp.telepac.pt) (68.74.77.14)
by ScubaSteve with SMTP; Wed Jun 23 08:41:17 2004 -0000
Received: from 76.5.73.248 by smtp.samed.ir;
Wed, 23 Jun 2004 08:42:10 +0000
Message-ID: <8c1701c458fd$b7688d36$eb75...@tp.telepac.pt>
From: "Numbers Hargrove" <numbersh...@samed.ir>
To: a...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 06:42:09 -0200
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:25:51 2004 -0000 a message was received from
194.204.244.165 (Morocco) which said HELO as luc.ac.be
and left the following turdlet for all to see:
Received: from [194.204.244.165] (HELO luc.ac.be) (194.204.244.165)
by ScubaSteve with SMTP; Wed Jun 23 08:25:51 2004 -0000
Received: from 42.143.38.226 by smtp.123mail.cl;
Wed, 23 Jun 2004 08:16:24 +0000
Message-ID: <5b3001c458fa$168d09a6$c56f...@luc.ac.be>
From: "Jo Tatum" <j_tat...@123mail.cl>
To: 1fh...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 09:16:19 +0100
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:47:56 2004 -0000 a message was received from
80.236.39.66 (France) which said HELO as bmgricordi.it
and left the following turdlet for all to see:
Received: from [80.236.39.66] (HELO bmgricordi.it) (80.236.39.66)
by ScubaSteve with SMTP; Wed Jun 23 08:47:56 2004 -0000
Received: from 194.185.140.94 by smtp.lanzone.de;
Wed, 23 Jun 2004 08:50:43 +0000
Message-ID: <098401c458ff$71c7a5ed$5c0f...@bmgricordi.it>
From: "Leann Guerrero" <l_guer...@lanzone.de>
To: a...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 08:50:12 +0000
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:42:00 2004 -0000 a message was received from
61.33.76.135 (Korea, Republic of) which said HELO as camera.it
and left the following turdlet for all to see:
Received: from [61.33.76.135] (HELO camera.it) (61.33.76.135)
by ScubaSteve with SMTP; Wed Jun 23 08:42:00 2004 -0000
Received: from 82.184.99.205 by smtp.marknet.ee;
Wed, 23 Jun 2004 08:43:46 +0000
Message-ID: <bb4d01c458fe$4b5ee545$d3ef...@camera.it>
From: "Theresa F. Wheeler" <theresaf_...@marknet.ee>
To: abe....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 12:43:29 +0400
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:41:43 2004 -0000 a message was received from
4.3.88.84 (United States) which said HELO as cgpt.de
and left the following turdlet for all to see:
Received: from [4.3.88.84] (HELO cgpt.de) (4.3.88.84)
by ScubaSteve with SMTP; Wed Jun 23 08:41:43 2004 -0000
Received: from 128.160.179.180 by smtp.gmc.com.au;
Wed, 23 Jun 2004 08:42:53 +0000
Message-ID: <f1d201c458fe$c59001d4$2128...@cgpt.de>
From: "Aileen Erickson" <aileener...@gmc.com.au>
To: abe3...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 02:42:40 -0600
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:41:57 2004 -0000 a message was received from
68.191.63.28 (United States) which said HELO as rr-grenen.nl
and left the following turdlet for all to see:
Received: from [68.191.63.28] (HELO rr-grenen.nl) (68.191.63.28)
by ScubaSteve with SMTP; Wed Jun 23 08:41:57 2004 -0000
Received: from 85.132.41.246 by smtp.unitynet.co.uk;
Wed, 23 Jun 2004 08:44:49 +0000
Message-ID: <3b7b01c458fe$e74bac43$ca3d...@rr-grenen.nl>
From: "Karin McGill" <k_mcG...@unitynet.co.uk>
To: a...@ak.123webhosting.org, abe...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 08:44:25 +0000
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:49:12 2004 -0000 a message was received from
212.83.249.44 (Netherlands) which said HELO as pcharlton.co.uk
and left the following turdlet for all to see:
Received: from [212.83.249.44] (HELO pcharlton.co.uk) (212.83.249.44)
by ScubaSteve with SMTP; Wed Jun 23 08:49:12 2004 -0000
Received: from 184.22.16.219 by smtp.webline.co.uk;
Wed, 23 Jun 2004 08:50:37 +0000
Message-ID: <f8cf01c458ff$4d3a2aa0$ebc0...@pcharlton.co.uk>
From: "Cameron Potts" <cameron...@webline.co.uk>
To: a...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 01:50:32 -0700
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:49:52 2004 -0000 a message was received from
218.3.40.137 (China) which said HELO as altsports.co.uk
and left the following turdlet for all to see:
Received: from [218.3.40.137] (HELO altsports.co.uk) (218.3.40.137)
by ScubaSteve with SMTP; Wed Jun 23 08:49:52 2004 -0000
Received: from 37.51.105.17 by smtp.4thcontact.co.uk;
Wed, 23 Jun 2004 08:51:46 +0000
Message-ID: <838b01c458ff$a1a4fafc$61ed...@altsports.co.uk>
From: "Daren Salinas" <dsali...@4thcontact.co.uk>
To: ade...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 08:51:34 +0000
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:50:40 2004 -0000 a message was received from
82.83.143.31 (Germany) which said HELO as icona.it
and left the following turdlet for all to see:
Received: from [82.83.143.31] (HELO icona.it) (82.83.143.31)
by ScubaSteve with SMTP; Wed Jun 23 08:50:40 2004 -0000
Received: from 206.225.166.42 by smtp.numerica.it;
Wed, 23 Jun 2004 08:54:22 +0000
Message-ID: <316b01c458ff$d9b7495c$a938...@icona.it>
From: "Josh McFadden" <mcFad...@numerica.it>
To: a...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 11:54:09 +0300
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:39:48 2004 -0000 a message was received from
69.37.244.45 (United States) which said HELO as cpoj.cz
and left the following turdlet for all to see:
Received: from [69.37.244.45] (HELO cpoj.cz) (69.37.244.45)
by ScubaSteve with SMTP; Wed Jun 23 08:39:48 2004 -0000
Received: from 58.185.47.15 by smtp.chilton-trinity.co.uk;
Wed, 23 Jun 2004 08:42:15 +0000
Message-ID: <70d001c458fd$881efa4b$7781...@cpoj.cz>
From: "Consuelo McCabe" <cmcC...@chilton-trinity.co.uk>
To: aard...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 12:42:06 +0400
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:41:19 2004 -0000 a message was received from
67.66.120.148 (United States) which said HELO as fremihs.dk
and left the following turdlet for all to see:
Received: from [67.66.120.148] (HELO fremihs.dk) (67.66.120.148)
by ScubaSteve with SMTP; Wed Jun 23 08:41:19 2004 -0000
Received: from 137.42.139.252 by smtp.cpl.ie;
Wed, 23 Jun 2004 08:43:15 +0000
Message-ID: <326801c458fe$1d480afa$f673...@fremihs.dk>
From: "Tara J. Jamison" <t_jami...@cpl.ie>
To: abart...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 06:42:47 -0200
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:49:25 2004 -0000 a message was received from
66.142.13.1 (United States) which said HELO as cyber.domino.de
and left the following turdlet for all to see:
Received: from [66.142.13.1] (HELO cyber.domino.de) (66.142.13.1)
by ScubaSteve with SMTP; Wed Jun 23 08:49:25 2004 -0000
Received: from 114.220.113.49 by smtp.bumi.net.id;
Wed, 23 Jun 2004 08:52:37 +0000
Message-ID: <470e01c458ff$1a6e6ea7$f685...@cyber.domino.de>
From: "Horacio Peoples" <hpeop...@bumi.net.id>
To: a...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 03:52:19 -0500
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:42:29 2004 -0000 a message was received from
211.55.148.41 (Korea, Republic of) which said HELO as m-p.dk
and left the following turdlet for all to see:
Received: from [211.55.148.41] (HELO m-p.dk) (211.55.148.41)
by ScubaSteve with SMTP; Wed Jun 23 08:42:29 2004 -0000
Received: from 85.187.139.144 by smtp.sex.at;
Wed, 23 Jun 2004 08:47:35 +0000
Message-ID: <209901c458fe$06c01e31$4e3e...@m-p.dk>
From: "Tyrone Ferris" <ferr...@sex.at>
To: abi...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 06:47:25 -0200
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:38:46 2004 -0000 a message was received from
24.76.130.247 (Canada) which said HELO as mv-st-christina.de
and left the following turdlet for all to see:
Received: from [24.76.130.247] (HELO mv-st-christina.de) (24.76.130.247)
by ScubaSteve with SMTP; Wed Jun 23 08:38:46 2004 -0000
Received: from 241.54.59.181 by smtp.rihsc.bc.ca;
Wed, 23 Jun 2004 08:43:30 +0000
Message-ID: <44c401c458fe$2e37a8b6$8019...@mv-st-christina.de>
From: "Rosemary R. Ledbetter" <rledbe...@rihsc.bc.ca>
To: aa...@ak.123webhosting.org, aaaar...@ak.123webhosting.org, aaa...@ak.123webhosting.org, aaa...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 05:43:27 -0300
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:49:22 2004 -0000 a message was received from
69.151.21.221 (United States) which said HELO as medisin.ntnu.no
and left the following turdlet for all to see:
Received: from [69.151.21.221] (HELO medisin.ntnu.no) (69.151.21.221)
by ScubaSteve with SMTP; Wed Jun 23 08:49:22 2004 -0000
Received: from 198.224.255.118 by smtp.newhorizons.ac.cr;
Wed, 23 Jun 2004 08:39:14 +0000
Message-ID: <b2ff01c458fd$d0891b1e$26fc...@medisin.ntnu.no>
From: "Joanne Suarez" <joannes...@newhorizons.ac.cr>
To: adelbert...@123webhosting.org, adela...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 03:39:03 -0500
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:41:38 2004 -0000 a message was received from
200.211.91.132 (Brazil) which said HELO as globalweb.it
and left the following turdlet for all to see:
Received: from [200.211.91.132] (HELO globalweb.it) (200.211.91.132)
by ScubaSteve with SMTP; Wed Jun 23 08:41:38 2004 -0000
Received: from 0.119.74.23 by smtp.westfalia.com.pl;
Wed, 23 Jun 2004 08:44:09 +0000
Message-ID: <f18601c458fe$ba3382e8$ef70...@globalweb.it>
From: "Gino Roman" <grom...@westfalia.com.pl>
To: ab...@ak.123webhosting.org, abb...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 16:43:53 +0800
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:49:16 2004 -0000 a message was received from
68.144.188.100 (Canada) which said HELO as morh.hr
and left the following turdlet for all to see:
Received: from [68.144.188.100] (HELO morh.hr) (68.144.188.100)
by ScubaSteve with SMTP; Wed Jun 23 08:49:16 2004 -0000
Received: from 191.149.240.245 by smtp.better.net.au;
Wed, 23 Jun 2004 08:51:31 +0000
Message-ID: <7ace01c458ff$ded211e7$f3c9...@morh.hr>
From: "Aisha Newton" <anewt...@better.net.au>
To: ada...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 02:51:21 -0600
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:47:14 2004 -0000 a message was received from
24.232.204.183 (Argentina) which said HELO as boesec.co.za
and left the following turdlet for all to see:
Received: from [24.232.204.183] (HELO boesec.co.za) (24.232.204.183)
by ScubaSteve with SMTP; Wed Jun 23 08:47:14 2004 -0000
Received: from 103.183.46.148 by smtp.prolab.co.uk;
Wed, 23 Jun 2004 08:49:36 +0000
Message-ID: <762001c458ff$40f370a9$e7eb...@boesec.co.za>
From: "Chi Franco" <fran...@prolab.co.uk>
To: acor...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 07:49:32 -0100
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:51:09 2004 -0000 a message was received from
80.109.129.47 (Sweden) which said HELO as adcom.biz.pl
and left the following turdlet for all to see:
Received: from [80.109.129.47] (HELO adcom.biz.pl) (80.109.129.47)
by ScubaSteve with SMTP; Wed Jun 23 08:51:09 2004 -0000
Received: from 139.206.122.189 by smtp.tkg.ca;
Wed, 23 Jun 2004 08:43:03 +0000
Message-ID: <fe0601c458fe$aaee0a68$c19c...@adcom.biz.pl>
From: "Reginald Jenkins" <rjenk...@tkg.ca>
To: a...@aa.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 04:42:48 -0400
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:48:23 2004 -0000 a message was received from
80.8.102.140 (France) which said HELO as tdm.com.mx
and left the following turdlet for all to see:
Received: from [80.8.102.140] (HELO tdm.com.mx) (80.8.102.140)
by ScubaSteve with SMTP; Wed Jun 23 08:48:23 2004 -0000
Received: from 162.228.235.22 by smtp.hunts.de;
Wed, 23 Jun 2004 08:52:08 +0000
Message-ID: <69db01c458ff$07937b2c$99da...@tdm.com.mx>
From: "Guillermo Clements" <guillermo....@hunts.de>
To: ad...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 09:52:07 +0100
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:04:57 2004 -0000 a message was received from
4.43.184.164 (United States) which said HELO as cyberhost.com.na
and left the following turdlet for all to see:
Received: from [4.43.184.164] (HELO cyberhost.com.na) (4.43.184.164)
by ScubaSteve with SMTP; Wed Jun 23 09:04:57 2004 -0000
Received: from 182.56.223.49 by smtp.lan-platform.co.uk;
Wed, 23 Jun 2004 08:55:10 +0000
Message-ID: <f4f601c458ff$afa48daf$9010...@cyberhost.com.na>
From: "Dolores A. Gregg" <greg...@lan-platform.co.uk>
To: albertine...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 12:55:02 +0400
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:04:52 2004 -0000 a message was received from
64.86.46.36 (Canada) which said HELO as ugenstilbud.dk
and left the following turdlet for all to see:
Received: from [64.86.46.36] (HELO ugenstilbud.dk) (64.86.46.36)
by ScubaSteve with SMTP; Wed Jun 23 09:04:52 2004 -0000
Received: from 134.25.103.136 by smtp.tidaholm.se;
Wed, 23 Jun 2004 09:05:19 +0000
Message-ID: <15b401c45901$8e8b0083$e413...@ugenstilbud.dk>
From: "Eula Christensen" <echrist...@tidaholm.se>
To: alanis...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 09:05:16 +0000
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 08:42:20 2004 -0000 a message was received from
162.84.217.110 (United States) which said HELO as kao.co.jp
and left the following turdlet for all to see:
Received: from [162.84.217.110] (HELO kao.co.jp) (162.84.217.110)
by ScubaSteve with SMTP; Wed Jun 23 08:42:20 2004 -0000
Received: from 240.224.227.82 by smtp.genie.co.uk;
Wed, 23 Jun 2004 08:44:32 +0000
Message-ID: <d1d501c458fe$e6b3088d$3f4c...@kao.co.jp>
From: "Lon L. Clifton" <l_l_cl...@genie.co.uk>
To: a...@aa.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 01:44:11 -0700
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:12:23 2004 -0000 a message was received from
211.214.24.114 (Korea, Republic of) which said HELO as simu.co.nz
and left the following turdlet for all to see:
Received: from [211.214.24.114] (HELO simu.co.nz) (211.214.24.114)
by ScubaSteve with SMTP; Wed Jun 23 09:12:23 2004 -0000
Received: from 236.177.112.178 by smtp.crc.po.my;
Wed, 23 Jun 2004 09:15:45 +0000
Message-ID: <836701c45902$b1cc59a3$25cb...@simu.co.nz>
From: "Dannie Plummer" <danniep...@crc.po.my>
To: al...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 15:15:26 +0600
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:00:09 2004 -0000 a message was received from
218.50.72.134 (Korea, Republic of) which said HELO as garbanicap.de
and left the following turdlet for all to see:
Received: from [218.50.72.134] (HELO garbanicap.de) (218.50.72.134)
by ScubaSteve with SMTP; Wed Jun 23 09:00:09 2004 -0000
Received: from 234.107.251.57 by smtp.calumet.yorku.ca;
Wed, 23 Jun 2004 09:04:09 +0000
Message-ID: <805901c45901$afe3a938$15d9...@garbanicap.de>
From: "Earlene Barrett" <barr...@calumet.yorku.ca>
To: aisha....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 14:03:52 +0500
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:12:44 2004 -0000 a message was received from
221.149.183.161 (Korea, Republic of) which said HELO as hello.to
and left the following turdlet for all to see:
Received: from [221.149.183.161] (HELO hello.to) (221.149.183.161)
by ScubaSteve with SMTP; Wed Jun 23 09:12:44 2004 -0000
Received: from 104.190.23.3 by smtp.wassenaar.nl;
Wed, 23 Jun 2004 09:02:12 +0000
Message-ID: <416e01c45900$aaae3482$aa01...@hello.to>
From: "Louise Nicholas" <louiseni...@wassenaar.nl>
To: al...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 17:02:01 +0800
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:12:59 2004 -0000 a message was received from
201.129.99.108 (Mexico) which said HELO as terra.com.sv
and left the following turdlet for all to see:
Received: from [201.129.99.108] (HELO terra.com.sv) (201.129.99.108)
by ScubaSteve with SMTP; Wed Jun 23 09:12:59 2004 -0000
Received: from 233.19.86.158 by smtp.utb.hb.se;
Wed, 23 Jun 2004 09:16:45 +0000
Message-ID: <3de001c45902$d273904e$1d6c...@terra.com.sv>
From: "Philip Wyatt" <philip_...@utb.hb.se>
To: a...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 04:16:17 -0500
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:13:20 2004 -0000 a message was received from
210.115.230.170 (Korea, Republic of) which said HELO as mrn.co.uk
and left the following turdlet for all to see:
Received: from [210.115.230.170] (HELO mrn.co.uk) (210.115.230.170)
by ScubaSteve with SMTP; Wed Jun 23 09:13:20 2004 -0000
Received: from 173.77.175.131 by smtp.dpd.ceylife.lk;
Wed, 23 Jun 2004 09:15:32 +0000
Message-ID: <463101c45902$fc5d8cc5$040c...@mrn.co.uk>
From: "Brandon McMillan" <brandon_m...@dpd.ceylife.lk>
To: alp...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 07:15:07 -0200
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:07:58 2004 -0000 a message was received from
24.202.116.22 (Canada) which said HELO as groupama-ig3m.fr
and left the following turdlet for all to see:
Received: from [24.202.116.22] (HELO groupama-ig3m.fr) (24.202.116.22)
by ScubaSteve with SMTP; Wed Jun 23 09:07:58 2004 -0000
Received: from 218.99.125.137 by smtp.autinform.de;
Wed, 23 Jun 2004 09:09:37 +0000
Message-ID: <e3cd01c45901$96cc6d44$0c4c...@groupama-ig3m.fr>
From: "Twila Gilbert" <twilagi...@autinform.de>
To: alexandr...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 07:09:28 -0200
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:04:03 2004 -0000 a message was received from
211.209.142.157 (Korea, Republic of) which said HELO as iservice.bg
and left the following turdlet for all to see:
Received: from [211.209.142.157] (HELO iservice.bg) (211.209.142.157)
by ScubaSteve with SMTP; Wed Jun 23 09:04:03 2004 -0000
Received: from 57.35.51.26 by smtp.nsc.bishkek.su;
Wed, 23 Jun 2004 09:05:55 +0000
Message-ID: <8eda01c45901$4c884a8d$a69b...@iservice.bg>
From: "Alana Fish" <fis...@nsc.bishkek.su>
To: al...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 03:05:37 -0600
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:17:13 2004 -0000 a message was received from
67.101.75.210 (United States) which said HELO as mail.sapo.pt
and left the following turdlet for all to see:
Received: from [67.101.75.210] (HELO mail.sapo.pt) (67.101.75.210)
by ScubaSteve with SMTP; Wed Jun 23 09:17:13 2004 -0000
Received: from 197.96.235.60 by smtp.wennmacher.de;
Wed, 23 Jun 2004 09:06:46 +0000
Message-ID: <1d4d01c45901$1b6a2fc4$8888...@mail.sapo.pt>
From: "Wiley C. Holman" <w_hol...@wennmacher.de>
To: am...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 14:06:34 +0500
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:13:20 2004 -0000 a message was received from
61.252.97.81 (Korea, Republic of) which said HELO as universal.nl
and left the following turdlet for all to see:
Received: from [61.252.97.81] (HELO universal.nl) (61.252.97.81)
by ScubaSteve with SMTP; Wed Jun 23 09:13:20 2004 -0000
Received: from 102.68.252.8 by smtp.secretlover.co.uk;
Wed, 23 Jun 2004 09:17:14 +0000
Message-ID: <a87601c45902$f35cb5cc$2a6f...@universal.nl>
From: "Vito R. Maynard" <vrmayn...@secretlover.co.uk>
To: a...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 10:16:57 +0100
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:17:30 2004 -0000 a message was received from
218.237.75.253 (Korea, Republic of) which said HELO as bigred.inka.de
and left the following turdlet for all to see:
Received: from [218.237.75.253] (HELO bigred.inka.de) (218.237.75.253)
by ScubaSteve with SMTP; Wed Jun 23 09:17:30 2004 -0000
Received: from 109.12.36.241 by smtp.racha.com.br;
Wed, 23 Jun 2004 09:22:04 +0000
Message-ID: <e45001c45903$e8ec3335$c59e...@bigred.inka.de>
From: "Janet Lutz" <lut...@racha.com.br>
To: ami...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 13:21:56 +0400
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:09:56 2004 -0000 a message was received from
200.76.167.139 (Mexico) which said HELO as halesowen.ac.uk
and left the following turdlet for all to see:
Received: from [200.76.167.139] (HELO halesowen.ac.uk) (200.76.167.139)
by ScubaSteve with SMTP; Wed Jun 23 09:09:56 2004 -0000
Received: from 165.13.186.7 by smtp.tu-muenchen.de;
Wed, 23 Jun 2004 09:13:57 +0000
Message-ID: <966b01c45902$055591bf$1563...@halesowen.ac.uk>
From: "Phoebe A. Dixon" <phoebe.a...@tu-muenchen.de>
To: al...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 12:13:30 +0300
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:17:26 2004 -0000 a message was received from
66.114.219.35 (United States) which said HELO as rdi.co.za
and left the following turdlet for all to see:
Received: from [66.114.219.35] (HELO rdi.co.za) (66.114.219.35)
by ScubaSteve with SMTP; Wed Jun 23 09:17:26 2004 -0000
Received: from 128.208.245.208 by smtp.schenini.ch;
Wed, 23 Jun 2004 09:21:42 +0000
Message-ID: <605201c45903$ec3be4a7$5c9c...@rdi.co.za>
From: "Dorothy Corbett" <dorothyc...@schenini.ch>
To: am...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 12:21:33 +0300
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:06:32 2004 -0000 a message was received from
220.248.48.150 (China) which said HELO as siemens.it
and left the following turdlet for all to see:
Received: from [220.248.48.150] (HELO siemens.it) (220.248.48.150)
by ScubaSteve with SMTP; Wed Jun 23 09:06:32 2004 -0000
Received: from 57.152.243.40 by smtp.dragoncollective.co.uk;
Wed, 23 Jun 2004 09:07:46 +0000
Message-ID: <c6be01c45901$91e32249$4496...@siemens.it>
From: "Antwan K. Hart" <a_ha...@dragoncollective.co.uk>
To: alec....@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 07:07:18 -0200
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:10:08 2004 -0000 a message was received from
219.240.1.4 (Korea, Republic of) which said HELO as telemate.fr
and left the following turdlet for all to see:
Received: from [219.240.1.4] (HELO telemate.fr) (219.240.1.4)
by ScubaSteve with SMTP; Wed Jun 23 09:10:08 2004 -0000
Received: from 231.25.194.33 by smtp.hobro-gym.dk;
Wed, 23 Jun 2004 09:15:15 +0000
Message-ID: <6cf601c45902$4b0a6e4c$8c79...@telemate.fr>
From: "Leigh Acosta" <laco...@hobro-gym.dk>
To: aline...@123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 07:14:50 -0200
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:15:05 2004 -0000 a message was received from
67.39.145.160 (United States) which said HELO as stereo.cz
and left the following turdlet for all to see:
Received: from [67.39.145.160] (HELO stereo.cz) (67.39.145.160)
by ScubaSteve with SMTP; Wed Jun 23 09:15:05 2004 -0000
Received: from 243.48.45.192 by smtp.messagenet.com.au;
Wed, 23 Jun 2004 09:19:02 +0000
Message-ID: <d6ad01c45903$8f738112$4c6b...@stereo.cz>
From: "Hugo Edmonds" <hugoedm...@messagenet.com.au>
To: al...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 09:18:51 +0000
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:10:42 2004 -0000 a message was received from
69.70.106.226 (Canada) which said HELO as cps.ca
and left the following turdlet for all to see:
Received: from [69.70.106.226] (HELO cps.ca) (69.70.106.226)
by ScubaSteve with SMTP; Wed Jun 23 09:10:42 2004 -0000
Received: from 165.141.53.188 by smtp.amonite.co.uk;
Wed, 23 Jun 2004 09:14:23 +0000
Message-ID: <f2ab01c45902$2fe0607f$f7eb...@cps.ca>
From: "Bryon Connor" <bcon...@amonite.co.uk>
To: al...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 03:14:18 -0600
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:17:33 2004 -0000 a message was received from
4.29.45.29 (United States) which said HELO as unitbv.ro
and left the following turdlet for all to see:
Received: from [4.29.45.29] (HELO unitbv.ro) (4.29.45.29)
by ScubaSteve with SMTP; Wed Jun 23 09:17:33 2004 -0000
Received: from 235.133.57.172 by smtp.gna.es;
Wed, 23 Jun 2004 09:19:15 +0000
Message-ID: <303101c45903$672f96ce$e1c1...@unitbv.ro>
From: "Octavio N. Ochoa" <n.och...@gna.es>
To: am...@aa.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 16:18:58 +0700
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:09:42 2004 -0000 a message was received from
216.123.253.113 (Canada) which said HELO as cic.com.na
and left the following turdlet for all to see:
Received: from [216.123.253.113] (HELO cic.com.na) (216.123.253.113)
by ScubaSteve with SMTP; Wed Jun 23 09:09:42 2004 -0000
Received: from 32.149.35.146 by smtp.arrabonet.hu;
Wed, 23 Jun 2004 09:10:02 +0000
Message-ID: <7e6801c45901$cec681cf$4458...@cic.com.na>
From: "Cornell J. Washington" <c.washi...@arrabonet.hu>
To: al...@aa.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 14:09:59 +0500
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:11:23 2004 -0000 a message was received from
209.89.216.13 (Canada) which said HELO as netconnect.com.au
and left the following turdlet for all to see:
Received: from [209.89.216.13] (HELO netconnect.com.au) (209.89.216.13)
by ScubaSteve with SMTP; Wed Jun 23 09:11:23 2004 -0000
Received: from 114.177.92.155 by smtp.tecs.com.au;
Wed, 23 Jun 2004 09:13:09 +0000
Message-ID: <16b401c45902$ab4d251a$9a2c...@netconnect.com.au>
From: "Rebecca N. Galindo" <r_ngal...@tecs.com.au>
To: all...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 17:12:43 +0800
Since NANAS postings are unmunged, it is also possible that this address
was harvested from usenet.
On Wed Jun 23 09:20:35 2004 -0000 a message was received from
212.159.103.202 (United Kingdom) which said HELO as anewlife.co.uk
and left the following turdlet for all to see:
Received: from [212.159.103.202] (HELO anewlife.co.uk) (212.159.103.202)
by ScubaSteve with SMTP; Wed Jun 23 09:20:35 2004 -0000
Received: from 145.182.73.65 by smtp.pino.demon.nl;
Wed, 23 Jun 2004 09:13:50 +0000
Message-ID: <032601c45902$2d09ae9c$43f2...@anewlife.co.uk>
From: "Chang McClellan" <chang_mc...@pino.demon.nl>
To: ande...@ak.123webhosting.org, and...@ak.123webhosting.org
Subject: Get $200 bonus at our Casino!
Date: Wed, 23 Jun 2004 14:13:49 +0500