Received: from [88.205.140.98] by openbrick.kicks-ass.net
(ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.6.0)); Fri, 25 Apr 2008 02:59:20 -0400
Return-Path:
Received: from 195.4.0.141 (HELO mail.sanitop-wingenroth.de)
by hansonsux.homeip.net with esmtp ( )
id dhcVpc-BOTeGN-Xj
for [devnull]; Fri, 25 Apr 2008 12:59:14 +0600
Message-ID: <114001c8a6a1$df7150b0$628ccd58@Donnell>
From: "Donnell Atkinson"
To: "Harris Orr" <[devnull]>
Subject: Francesca has her eye on you, Fabio is looking your way. Italian Designer Deals 65%%off
Date: Fri, 25 Apr 2008 12:59:14 +0600
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_4414_11A8_01C8A6D4.2A0BC0B0"
X-Priority: 3
X-MSMail...

Mail received on spamtrap. This spamtrap mail has been redacted, the
mail was not really sent to users.spamikaze.org>.
URLs have been stripped of the parts before and after the host name.

Return-path: yahoo.com.au>
Received: from [mail.victim.example] (helo=humbolt.mail.victim.example)
by shelob.surriel.com with esmtp (Exim 4.63...

Received: from [210.18.127.24] by openbrick.kicks-ass.net
(ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.6.0)); Fri, 25 Apr 2008 02:57:25 -0400
Received: from [210.18.127.24] by mail.global.frontbridge.com; Fri, 25 Apr 2008 12:27:21 +0530
Message-ID: <01c8a6cf$b5499a80$187f12d2@996.scogar>
From: "Harry Bouchard" <996.scogar@jeep.net>
To: <[spamtrap]>
Subject: Chatting online
Date: Fri, 25 Apr 2008 12:27:21 +0530
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2905
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2905
Return-Path: <996.scogar@jeep.net>

Hello! I am tired tonight. I am nice girl that would like to chat with you. Email me at Emma@amongbegil.cn only, because I am using my friend's email to write this. I will reply with my pics

Received: from [87.126.247.246] by openbrick.kicks-ass.net
(ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.6.0)); Fri, 25 Apr 2008 02:56:57 -0400
User-Agent: Microsoft-Entourage/12.1.0.080305
Date: Fri, 25 Apr 2008 09:56:55 +0300
Subject: Buy more meds at discounted prices
From: Letson EDUWARE.COM>
To: "[devnull]" <[devnull]>
Message-ID: <20BF2F43.B2%%Hin-srelcyc@EDUWARE.COM>
Thread-Topic: Buy more meds at discounted prices
Thread-Index: AcimurGKNG7MhZVBRi62Rul6P1fjcA==
Mime-version: 1.0
Content-type: multipart/alternative;
boundary="B_6874308285_29156"
Return-Path: EDUWARE.COM>

--B_6874308285_29156
Content-type: text/plain;
charset="US-ASCII"
Content-transfer-encoding: 7bit

When the doctors are trying to avoid prescribing meds for you, just stay with us. http://www.bopealoa.com/

Received: from [61.76.156.32] by openbrick.kicks-ass.net
(ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.6.0)); Fri, 25 Apr 2008 02:56:35 -0400
Received: from localhost (localhost.localdomain [127.0.0.1])
by host06913060.clintoncountyiowa.com (8.13.1/8.13.1) with SMTP id OLAuOm2T11.504667.jFY.Qko.3411052695220
for <[removed]>; Fri, 25 Apr 2008 15:54:16 -0900
Message-ID: c70b901c8a6a1$7dff7be0$0c00a8c0@SECPC003
From: "Tracie Woodson" clintoncountyiowa.com>
To: <[removed]>
Subject: Omega replica watch Same quality at lower price
Date: Fri, 25 Apr 2008 15:54:16 -0900
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962 ...

Received: from [91.200.142.35] by openbrick.kicks-ass.net
(ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.6.0)); Fri, 25 Apr 2008 02:55:28 -0400
Received: from 63.97.179.%%STATDIG (%%LILSTAT.romancebounty.com) (63.97.179.%%STATDIG) by mta140.mail.scd.yahoo.com with SMTP; Fri, 25 Apr 2008 08:55:59 +0100
MIME-Version: 1.0
X-Accept-Language: en
X-Priority: Normal
From: "INGRESSIO" mdopublicidad.com>
To: [removed]
Subject: CONTROL DE ASISTENCIA Y ACCESO POR HUELLA DIGITAL
Date: Fri, 25 Apr 2008 08:55:59 +0100
Message-ID: <1-91385647-vi87f5nUnkwT7FWMBOF0VDD@%%LILSTAT.romancebounty.com>
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Return-Path: execuplan.com>

Received: from [211.239.136.1] by openbrick.kicks-ass.net
(ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.6.0)); Fri, 25 Apr 2008 02:54:20 -0400
Received: from [211.239.136.1] by mx1.artofformation.de; Fri, 25 Apr 2008 15:54:15 +0900
From: "Tabitha Tuttle"
To: <[removed]>
Subject: \/\/atches, rolex, fake //atches#
Date: Fri, 25 Apr 2008 15:54:15 +0900
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0006_01C8A6EC.9C9BAD80"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Thread-Index: Aca6QIMMASX59PS4U5XHPA6E93SCMD==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-ID: <01c8a6ec$9c9bad80$0188efd3@niggardlyr6>
Return-Path:

This is a multi-part message in MIME format.

Received: from [81.158.138.92] by openbrick.kicks-ass.net
(ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.6.0)); Fri, 25 Apr 2008 02:54:09 -0400
Received: from localhost (localhost.localdomain [127.0.0.1])
by host56191408.quintcareers.com (8.13.1/8.13.1) with SMTP id reo4Avkw65.942100.lqT.ua1.6541426596807
for <[spamtrap]>; Fri, 25 Apr 2008 07:49:26 +0000
Message-ID: 22df4401c8a6a1$21338870$4001a8c0@DFNPTM2J
From: "Nikki Choi" quintcareers.com>
To: <[spamtrap]>
Subject: First-class replica watches at Replica Classics
Date: Fri, 25 Apr 2008 07:49:26 +0000
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 ...

Mail received on spamtrap. This spamtrap mail has been redacted, the
mail was not really sent to users.spamikaze.org>.
URLs have been stripped of the parts before and after the host name.

Return-path: seaotterboats.co.uk>
Received: from [mail.victim.example] (helo=humbolt.mail.victim.example)
by shelob.surriel.com with esmtp...

Most of the work-at-home spams I've seen are just a front for MLM. I don't
see any evidence of that here.

Spammer's contact info:
dating.eurogroup@gmail.com

This junk came from:
125.32.214.47 => No reverse DNS
125.32.0.0 - 125.32.255.255 is assigned to cnc-noc.net CNCGROUP-JL (CN)
125.32.214.47 is listed at: CBL, SBL-ZEN:CBL, SpamCop, UCEPROTECT-3
UCEProtect says:
Your ISP CHINA169-BACKBONE CNCGROUP China169 Backbone/AS4837 is
UCEPROTECT-Level3 listed because he is responsible for a total of 55912
abusers on the net. See:
http://www.uceprotect.net/rblcheck.php?ipr=125.32.214.47
cnc-noc.net is listed at RFC-Ignorant.org (abuse, postmaster, and whois)

------- Forwarded Message

Return-Path: brainfox.com>
[local routing snipped]
Received: from [125.32.214.47] ([125.32.214.47] verified)
by fe.mail.megapathdsl.net (CommuniGate Pro SMTP 5.1.10)
with ESMTP id 467826111...