|
| Spammer using Spamcop.net address as listwash contact... |
 |
Sun, 08 Apr 2007 08:28:12 -070 |
Return-Path: <mickey@disneystravel.com>
Delivered-To: spamcop-net-skiwi@spamcop.net
Received: (qmail 19212 invoked from network); 8 Apr 2007 06:18:42 -0000
X-Spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-26) on filter7
X-Spam-Level:
X-Spam-Status: hits=0.8 tests=HTML_FONT_BIG,HTML_MESSAGE,MIME_HTML_ONLY,
NO_REAL_NAME,URIBL_RED version=3.1.4
Received: from unknown (192.168.1.101)
by filter7.cesmail.net with QMQP; 8 Apr 2007 06:18:42 -0000
Received: from server021.dfw.nationwide.net (206.123.129.84)
by mailgate.cesmail.net with SMTP; 8 Apr 2007 06:18:42 -0000
Received: (qmail 5280 invoked by uid 89); 8 Apr 2007 06:18:42 -0000
Delivered-To: [munge]
Received: (qmail 5274 invoked from network); 8 Apr 2007 06:18:41 -0000
Received: from unknown (HELO psmtp.com) (64.18.2.67)
by server021.dfw.nationwide.net with SMTP; Sun, 08 Apr 2007 06:18:41 +0000
Received: from source ([75.126.196.58]) by exprod7mx65.postini.com
([64.18.6.13]) with SMTP;
Sat, 07 Apr 2007 23:18:35 PDT
Received: from disneystravel.com [75.126.196.58] by
6xex8.disneystravel.com with SMTP; Sun, 08 Apr 2007 01:18:41 -0600
Message-Id: <ny547e3fs0kn3s.e6313bbxv82b2@disneystravel.com>
Subject: [munge] April 7, 2007 Free Disney Vacation Free of Charge
Reply-To: mickey@disneystravel.com
Content-Type: text/html;
charset=us-ascii
Content-Transfer-Encoding: 7BIT
Date: Sun, 08 Apr 2007 01:18:41 -0600
From: mickey@disneystravel.com
To: [munge]
X-SpamCop-Checked: 192.168.1.101 206.123.129.84 64.18.2.67 75.126.196.58
64.18.6.13 75.126.196.58
<html>
</head>
<body>
<form language="JavaScript" name="FrontPage_Form1"
onsubmit="location.href='_derived/nortbots.htm';return false;"
action="../../../trav/--WEBBOT-SELF--" method="post"
webbot-onSubmit="return FrontPage_Form1_Validator(this)">
<table cellSpacing="2" cellPadding="0"
width="601" align="center"
bgColor="#3979c6" border="0">
<tr>
<td vAlign="top" width="610">
<table width="603" summary="Orlando Vaction Packages
and
Information about Disneyworld">
<tr>
<td width="600">
<table width="598">
<tr>
<td width="592"
bgColor="#66ccff"><font size="5"><b> [munge]
TODAY ONLY <font color="#FF0000">April
7</font><font
color="red">,
2007 Free Disney Vacation
</font></b> <b><font
color="red">Free of
Charge</font> </b>
</font><br>
The Orlando Vacation Package includes 3 days and 2 nights
hotel
accommodations, and your choice of one of the
following as a
bonus:
<li>Two complimentary all-day adult ticket for any Disney
Park
</li>
<li>Two complimentary all-day adult ticket for Universal
Studios
</li>
<li><font size="5"><b><font
color="red">
<a href="http://disneystravel.com/">Free Disney
Vacation</a></font></b></font>
</li>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</form>
<p><font lang="0" face="Arial"
FAMILY="SANSSERIF" PTSIZE="8">You have
received
this message as part of an opt-in mailing that is canspam compliant.<br>
Your prior info is as follows [munge]
<br>
If you feel you have received this message in error or wish to unsubscribe,
<a href="http://disneystravel.com/remove.htm">click
here</a></font></p>
<p><font lang="0" face="Arial"
FAMILY="SANSSERIF" PTSIZE="8">If you
would like
to contact us please direct inquiries to<a style="TEXT-DECORATION:
none"
href="mailto:dinah@spamcop.net">
</a></font><font face="Arial"><a
href="mailto:dinah@spamcop.net">Spam
cop</a></font></p>
|
| Post Reply
|
| Re: Spammer using Spamcop.net address as listwash contact... |
 |
Sun, 08 Apr 2007 19:35:03 -070 |
In article <evb1mh$9rl$1@news.spamcop.net>, Skiwi
<skiwi@spamcop.net>
wrote:
One of my clients yesterday received a similar
0ffertrav.com/hotbusinessdeals.com spam from the same net block
(75.126.196.0/24) also listing:
dinah@spamcop.net
as the spammer's contact address. Minutes later, that net block became
blacklisted on every mail server I manage (50,000+ mail boxes).
--Mike
-------------------------------------------------------------------------
Received: from [75.126.196.248] (HELO 0ffertrav.com)
by spammeddomain.invalid (CommuniGate Pro SMTP 5.1.8)
with SMTP id 28100961 for victim@spammeddomain.invalid; Sat, 07 Apr
2007 02:59:52 -0700
receiver=spammeddomain.invalid; client-ip=75.126.196.248;
envelope-from=disney@0ffertrav.com
From: disney@0ffertrav.com
Return-Path: disney@0ffertrav.com
To: victim@spammeddomain.invalid
Message-Id: <3254265344.345465@0ffertrav.com>
Subject: [spam victim] April 7, 2007 Free Disney Vacation Free of
Charge
Date: Sat, 07 Apr 2007 04:59:53 -0600
Received: from 0ffertrav.com [75.126.196.248] by 8fe.0ffertrav.com with
SMTP; Sat, 07 Apr 2007 04:59:53 -0600
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Reply-To: disney@0ffertrav.com
<html>
</head>
<body>
<form language="JavaScript" name="FrontPage_Form1"
onsubmit="location.href='_derived/nortbots.htm';return false;"
action="../../../trav/--WEBBOT-SELF--" method="post"
webbot-onSubmit="return FrontPage_Form1_Validator(this)">
<table cellSpacing="2" cellPadding="0"
width="601" align="center"
bgColor="#3979c6" border="0">
<tr>
<td vAlign="top" width="610">
<table width="603" summary="Orlando Vaction Packages and
Information about Disneyworld">
<tr>
<td width="600">
<table width="598">
<tr>
<td width="592"
bgColor="#66ccff"><font size="5"><b> [spam
victim]
TODAY ONLY <font color="#FF0000">April
7</font><font
color="red">,
2007 Free Disney Vacation
</font></b> <b><font
color="red">Free of
Charge</font> </b>
</font><br>
The Orlando Vacation Package includes 3 days and 2 nights
hotel
accommodations, and your choice of one of the
following as a
bonus:
<li>Two complimentary all-day adult ticket for any Disney
Park
</li>
<li>Two complimentary all-day adult ticket for Universal
Studios
</li>
<li><font size="5"><b><font
color="red">
<a href="http://0ffertrav.com/">Free Disney
Vacation</a></font></b></font>
</li>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</form>
<p><font lang="0" face="Arial"
FAMILY="SANSSERIF" PTSIZE="8">You have
received
this message as part of an opt-in mailing that is canspam compliant.<br>
Your prior info is as follows [munged] <br>
If you feel you have received this message in error or wish to
unsubscribe,
<a href="http://0ffertrav.com/remove.htm">click
here</a></font></p>
<p><font lang="0" face="Arial"
FAMILY="SANSSERIF" PTSIZE="8">If you
would like
to contact us please direct inquiries to<a style="TEXT-DECORATION:
none"
href="mailto:dinah@spamcop.net">
</a></font><font face="Arial"><a
href="mailto:dinah@spamcop.net">Spam
cop</a></font></p>
</body>
|
| Post Reply
|
|
|
|
|
|
|
|
|
|