[email] Ch3ap v1agra p1lls

l.o.n.k.i

unread,

Nov 11, 2005, 11:00:55 PM11/11/05

to

Mail received on spamtrap. Recipient addresses, domains and hosts have
been munged to prevent listwashing. Cc headers have been deleted since
it could show potential addresses.

* http:// has been subtituted.
* some dynamic extentions has been replaced
* an effort has started to subtitute tracking id's to other stuff

Ipnumbers listed are stored in a public rbl.

========================================================================

>From acc...@domain.example Sat Nov 12 04:22:17 2005
Received: from domain.victim.example ([ipv4.victim.example])
by server.domain.victim.example (8.11.6p2/8.12.8) with ESMTP id munged.id
for <acc...@domain.victim.example>; Sat, 12 Nov 2005 04:22:17 +0100
Received: (qmail 15737 invoked by uid 110); 12 Nov 2005 04:13:50 +0100
Received: (qmail 15734 invoked by uid 110); 12 Nov 2005 04:13:50 +0100
Received: (qmail 15731 invoked from network); 12 Nov 2005 04:13:49 +0100
Received: from zaqdadc6008.zaq.ne.jp (218.220.96.8)
by ipv4.victim.example with SMTP; 12 Nov 2005 04:13:49 +0100
Received: from [218.220.96.8] by web78471.mail.yahoo.com via HTTP; Fri, 11 Nov 2005 19:15:16 -0800
Date: Fri, 11 Nov 2005 19:15:16 -0800
From: "Cristina Dennis" <acc...@domain.example>
Subject: Ch3ap v1agra p1lls
To: acc...@domain.victim.example

--0-0548426726-4986374964=:78216

--0-0548426726-4986374964=:78216

--0-0548426726-4986374964=:78216--

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:

http://www.killfile.org/~tskirvin/nana/

l.o.n.k.i

unread,

Nov 11, 2005, 11:00:56 PM11/11/05

to

Mail received on spamtrap. Recipient addresses, domains and hosts have
been munged to prevent listwashing. Cc headers have been deleted since
it could show potential addresses.

* http:// has been subtituted.
* some dynamic extentions has been replaced
* an effort has started to subtitute tracking id's to other stuff

Ipnumbers listed are stored in a public rbl.

========================================================================

>From acc...@domain.example Sat Nov 12 05:01:16 2005
Received: from mail.domain.victim.example (domain.victim.example [ipv4.victim.example] (may be forged))

by server.domain.victim.example (8.11.6p2/8.12.8) with ESMTP id munged.id

for <acc...@domain.victim.example>; Sat, 12 Nov 2005 05:01:16 +0100
Received: (qmail 5686 invoked by uid 110); 12 Nov 2005 03:54:03 -0000
Received: (qmail 5683 invoked from network); 12 Nov 2005 03:54:03 -0000
Received: from pool-71-114-29-236.washdc.dsl-w.verizon.net (71.114.29.236)
by domain.victim.example with SMTP; 12 Nov 2005 03:54:03 -0000
Received: from [71.114.29.236] by web75334.mail.yahoo.com via HTTP; Sat, 12 Nov 2005 18:02:09 -0800
Date: Sat, 12 Nov 2005 18:02:09 -0800
From: "Lorenzo Mcnally" <acc...@domain.example>

Subject: Ch3ap v1agra p1lls
To: acc...@domain.victim.example

--0-9490227886-6736789093=:87021

--0-9490227886-6736789093=:87021

--0-9490227886-6736789093=:87021--

l.o.n.k.i

unread,

Nov 12, 2005, 10:11:32 AM11/12/05

to

Mail received on spamtrap. Recipient addresses, domains and hosts have
been munged to prevent listwashing. Cc headers have been deleted since
it could show potential addresses.

* http:// has been subtituted.
* some dynamic extentions has been replaced
* an effort has started to subtitute tracking id's to other stuff

Ipnumbers listed are stored in a public rbl.

========================================================================

>From acc...@domain.example Sat Nov 12 15:25:28 2005
Received: from ipv4.victim.example ([222.62.248.110])
by server.domain.victim.example (8.11.6p2/8.12.8) with SMTP id munged.id;
Sat, 12 Nov 2005 15:25:18 +0100
Received: from [222.62.248.110] by web95124.mail.yahoo.com via HTTP; Sun, 13 Nov 2005 04:25:15 -0800
Date: Sun, 13 Nov 2005 04:25:15 -0800
From: "Mary Bravo" <acc...@domain.example>

Subject: Ch3ap v1agra p1lls
To: acc...@domain.victim.example

--0-0612998692-2727960664=:93869

--0-0612998692-2727960664=:93869

--0-0612998692-2727960664=:93869--