Deep 6 Spam

Don’t Fall for this JUNK !

What a SCAM !

Send this link to your friends and let them know not to fall for it.

—–Original Message—–
From: DR GABRIELLE MARTINS [mailto:martins_gabrielle@mailsenders.com]
Sent: Tuesday, May 13, 2008 6:51 AM
To: undisclosed-recipients:
Subject: RE-PAYMENT NOTIFICATION

THE DESK OF CHAIRMAN FOREIGN DEBT

FUND SETTLEMENT COMMITTEE

CBN LAGOS .

RELY TO: marbuchi20@gmail.com

RE-PAYMENT NOTIFICATION:

I AM DR Gabrielle MARTINS, THE CHAIRMAN FOREIGN DEBT FUND

SETTLEMENT COMMITTEE CBN, AM DELIGHTED TO INFORM YOU THAT THIS

PANEL ,WHICH JUST CONCLUDED IT’S SEATING TODAY IN ABUJA JUST RELEASED

YOUR NAME AMONGST BENEFICIARIES THAT HAS NOT RECEIVED THEIR PAYMENT AND THIS

TIME IT WILL BE PAID TO YOU.

DID YOU AUTHORISED ONE MR.CLAUDE ? WHO PRESENTATED DOCUMENT OF CLAIM PURPORTED

TO HAVE SIGNED BY YOU FOR THE RELEASE OF YOUR PART-PAYMENT OF 8.5MILLION USD

ONLY. PLEASE RECONFIRM BACK TO ME TO AVOID ANY IRREGULARITIES AS YOUR PAYMENT

IS NOW READY TO BE TRANSFFERED (BASED ON URGENT INSTRUCTIONS RECEIVED THIS

MORNING FROM THE PRESIDENCY OFFICE).

TO THAT EFFECT, YOU ARE ADVISED NOT TO RESPOND TO ANY MAIL OR FAX CONCERNING

YOUR FUND FROM ANY BODY WHO CLAIM TO BE OR YOUR AGENT AS YOUR FUND IS

NOW READY

TO BE TRANSFERED IMMEDIATELY BY THE AUTHORITIES OF THIS OFFICE.

YOU ARE WARNED AND ADVISED TO FOLLOW-UP INSTRUCTIONS AS REGARDS TO YOUR

FUND.THIS IS YOUR PAYMENT (REF.#.(000999/CBN/7535/2007.) FOR THE

SECURITY OF YOUR FUND . ANY MAIL OR FAXES WITH OUT YOUR PAYMENT NUMBERS AS

STATED ABOVE ,SHOULD BE DISREGARDED IMMEDIATELY.

LASTLY,YOU ARE DIRECTED AND ADVISED TO RECONFIRM YOUR INFORMATIONS SUCH AS:-

FULL NAME…………………….

YOUR HOME ADDRESS……….

YOUR AGE…………..

DIRECT PHONE/FAX…………..

OCCUPATION/AGE…………….

IDENTIFICATION………….

TO THIS EMAIL ADDRESS.. (marbuchi20@gmail.com)

WAITING TO HEAR FROM YOU AS URGENCY REQUIRED .

REGARDS,

DR GABRIELLE MARTINS

CHAIRMAN FOREIGN DEBT

FUND SETTLEMENT COMMITTEE.

I just received an SPAM email from ORDERSELF.COM which is a violation of the CANSPAM Act of 2003.  This unsolicited email was sent to me spamming Canadian Pharmacies with the typical Viagra, Cialis, and Soma pills, etc.

What really pisses me off about these guys, is that they have the Sender of the email, as MY EMAIL ADDRESS.  They make it look like I sent the email to myself in an effort to get me to open it.

I never opted in to their email list, so this email was completely unsolicited.

They also do not include any links to ‘opt out’ of their mass email spamming campaign.

What a bunch of losers!

Here is their whois info.  As you can see, they recently registered this domain to do their mass spamming with, and it looks like it is coming from our Favorite Chinese Spammers.

ICANN Registrar:	XIN NET TECHNOLOGY CORPORATION
Created:	2008-01-16
Registrar Status:	ok
Name Server:	NS.XINNETDNS.COM (has 543,024 domains)
Name Server:	NS2.XINNETDNS.COM (has 543,024 domains)

Domain Name:orderself.com

Registrant: 
ding dan
        xi an
        320002
        
Administrative Contact: 
liubing
        ding dan
        xi an
        xi an Beijing 320002
        CN
        tel:  101 2345678 
        fax:  101 2345678 
        
        
Technical Contact: 
liubing
        ding dan
        xi an
        xi an Beijing 320002
        CN
        tel:   2345678 
        fax:   2345678 
        
        
Billing Contact: 
liubing
        ding dan
        xi an
        xi an Beijing 320002
        CN
        tel:   2345678 
        fax:   2345678 
        
        
 Registration Date: 2008-01-16
       Update Date: 2008-02-12
   Expiration Date: 2009-01-16
        
    Primary DNS:  ns.xinnet.cn                210.51.171.209
  Secondary DNS:  ns.xinnetdns.com                210.51.170.66

 I got spammed by a new generic drug spammer today.   I attempted to look at this loser’s site and noticed that it was not responding.  Good, hopefully it has already been pulled down. 

—–Original Message—–
From: Max Suarez [mailto:bbuykapfgp@bpm-online.com]
Sent: Thursday, February 14, 2008 7:01 AM
To:
Subject: My subject

 What is gen texts. If you’ve read a er support in your own code. ic “V”?Every me your time on…something di principles will help cine has a brand name and its g Patterns–the lessons en and why everything er (and impress cocktail party guests) ic.
Ge Facade, Proxy, and Factory ne when he casually mentions ric me In a way that lets you put ans the actual chemical concentrate which is the main ingredient for that me of Design Patterns so dic you get to take ine.
Since brand names obtain a patent therefore the other dr and why everything ug companies make the same dr Head First book, you know ug as in its
gen or on the real relationship eri the latest research in c form, so g In a way that lets you put ene to know how they ric Vi with a the same software g and why everything ra is just the same as Pfizer’s V you want to learn the ia when he casually mentions g his stunningly clever use of Command, ra.
The only difference which is an added advantage to you is that ge Patterns–the lessons ner Something more fun. ic Vi You want to learn the a real OO design principles g to know how they ra is far cheaper
than the branded V that you can hold your ia used in the Java API g to do instead). You want ra but the benefits are just identical as the branded Vi and experience of others, ag reinvent the wheel ra.
The active ingredient in Vi a design paddle pattern. a be wrong (and what g will load patterns into your ra which is used as ge You want to learn about ne on your team. ric is si that you can hold your lden his stunningly clever use of Command, afil citrate.
We offer you cheap V a book, you want ia Something more fun. g brain in a way that sticks. ra

Visit us.

 

More VPXL penis pill spam. These guys really piss me off. The emails are unsolicited. Another Chinese spammer.

FROM: Alberto Dodge [nkyxrufdhjg@bonifacio.com.ar]
SUBJECT: VPXL penis enlargement pills

Larger and Larger
http://wooglespi.com

Whois Record
Domain Name:wooglespi.com

Registrant:
tian tian
lian xi
985623

Administrative Contact:
tiantian
tian tian
lian xi
wulumuqi Beijing 985623
CN
tel: 101 2345678
fax: 101 2345678

Technical Contact:
tiantian
tian tian
lian xi
wulumuqi Beijing 985623
CN
tel: 2345678
fax: 2345678

Billing Contact:
tiantian
tian tian
lian xi
wulumuqi Beijing 985623
CN
tel: 2345678
fax: 2345678

Registration Date: 2008-01-11
Update Date: 2008-01-11
Expiration Date: 2009-01-11

Primary DNS: ns1.oieusnre.com 210.14.128.172
Secondary DNS: ns2.oieusnre.com 210.14.128.112

Here is another spammer that is pissing me off.  Do these canadian pharmacy spam sites piss anyone else off besides me?  What gives with these losers.  A server in Iran, a Russian nameserver, but registered in the US.  These emails were completely unsolicited, and contain no links for opting out.  Complete violation of CANSPAM.

Appreciate better prices and higher quality of medications received from Canada.

«CanadianPharmacy» has an excellent level of service, helpful and cooperating customer care team.

Visit our “CanadianPharmacy” site Start new life with «CanadianPharmacy»!

–http://beanchshole.com

Registry Data

ICANN Registrar:	REGISTER.COM, INC.
Created:	2007-12-24
Registrar Status:	clientTransferProhibited
Name Server:	NS1.STOOKVOL.COM (has 3 domains)
Name Server:	NS2.SUPERPLUSWOW.COM (has 347 domains)

Server Data

IP Address:	81.31.179.248
IP Location	- Tehran - Tehran - Sharif University Of Technology
Blacklist Status:	Clear

DomainTools Exclusive

Registrant Search:	“Joni K Voldness” owns about 3 other domains
Email Search:	is associated with about 4 domains is associated with about 705,538 domains
IP History:	3 changes on 4 unique name servers over 0 years.
Reverse IP:	96 other sites hosted on this server.
Free Tool:

Whois Record

Registrant: 
      
      Joni K Voldness
      2935 Fremont Ave So #202 
      Minneapolis, MN 55408
      US
      Email: 

   Registrar Name….: REGISTER.COM, INC.
   Registrar Whois…: whois.register.com
   Registrar Homepage: www.register.com 

   Domain Name: beanchshole.com

      Created on…………..: Mon, Dec 24, 2007
      Expires on…………..: Wed, Dec 24, 2008
      Record last updated on..: Mon, Dec 24, 2007

   Administrative Contact:
      
      Joni K Voldness
      2935 Fremont Ave So #202 
      Minneapolis, MN 55408
      US
      Phone: +1.6129780596
      Email: 

   Technical Contact:
      Registercom
      Domain Registrar
      575 8th Avenue 
      New York, NY 10018
      US
      Phone: +1.9027492701
      Email: 

   DNS Servers:

   ns2.istprol.ru
   ns2.superpluswow.com
   ns1.prferyow.com
   ns1.stookvol.com

server-ssl.com is a LOSER SPAMMER that is sending out unsolicited emails.  The website is for a canadian pharmacy pushing viagra, penis grow pills, cialis, etc.  The thing that really sucks about these guys is that they attempt to portray themselves as being the real VIAGRA.COM website.  In several places in their email, they have the text www.viagra.com linked to their website ‘www.server-ssl.com’ .

They embedded my email as an alt tag on a image, as well as some text listing my email address in the message.  They attempt to make it look like a reputable site. Here is the WHOIS information for this LOSER SPAMMER:

REGISTRY SERVER: [whois.internic.net]
Domain Name: SERVER-SSL.COM
Registrar: ONLINENIC, INC.
Whois Server: whois.35.com
Referral URL: http://www.OnlineNIC.com
Name Server: NS1.SLAM12.COM
Name Server: NS2.SLAM12.COM
Status: ok
Updated Date: 09-jan-2008
Creation Date: 20-apr-2006
Expiration Date: 20-apr-2008

---

REGISTRAR SERVER: [whois.35.com]
The Data in OnlineNIC`s WHOIS database is provided by OnlineNIC
for information purposes, and to assist persons in obtaining
information about or related to a domain name registration record.
OnlineNIC does not guarantee its accuracy. By starting a WHOIS
query, you agree that you will use this Data only for lawful
purposes and that, under no circumstances will you use this Data
to:
(1)allow, enable, or otherwise support the transmission of mass
unsolicited,commercial advertising or solicitations via e-mail(spam).
(2)enable high volume,automated, electronic processes that apply
to OnlineNIC Inc.(or its systems).OnlineNIC reserves the right to modify these terms at any time.
By starting this query, you agree to abide by this policy.

Registrant:
staci cooper scrummel@hotmail.com +7.4952171180
Private person
p.o. box 501
cumby,tx,UNITED STATES 75433

Domain Name:server-ssl.com
Record last updated at 2008-01-09 10:04:44
Record created on 2006/4/20
Record expired on 2008/4/20

Domain servers in listed order:
ns1.slam12.com ns2.slam12.com

Administrator:
name:(staci cooper)
Email:(scrummel@hotmail.com) tel– +7.4952171180
Private person
p.o. box 501

t cumby
tx,
UNITED STATES

zipcode:75433

Technical Contactor:N/A
Billing Contactor:
name:(staci cooper)
Email:(scrummel@hotmail.com) tel– +7.4952171180
Private person
p.o. box 501

t cumby
tx,
UNITED STATES

zipcode:75433

Registration Service Provider:
name: Regtime.net
tel: +7 8462698077
fax: +7 8462698057
web:http://www.webnames.ru

Sick and Tired of chinese spammers?  Me too.  Here is some more penis pill spam from a chinese spammer.  These guys send out unsolicited emails in bulk.  This is a throw-away domain that they registered back on Jan 3, 2008.   

Searching for a safe way to succeed in s’e_xual relationships?

Or looking for new sensual delights?

I must confess I’d never experienced such a vigour and sensuality before

I tried VPXL!

http://yeengjo.com/

Hurry to try it, too, if you want are a real creator of your life, including its s’e_xual side!

HERE IS THE WHOIS INFORMATION FOR THIS LOSER SPAMMER !

REGISTRY SERVER: [whois.internic.net]
Domain Name: YEENGJO.COM
Registrar: BEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CN
Whois Server: whois.dns.com.cn
Referral URL: http://www.dns.com.cn
Name Server: NS1.NS-UNTOON.COM
Name Server: NS2.NS-UNTOON.COM
Status: clientTransferProhibited
Status: clientUpdateProhibited
Status: clientDeleteProhibited
Updated Date: 04-jan-2008
Creation Date: 03-jan-2008
Expiration Date: 03-jan-2009

---

REGISTRAR SERVER: [whois.dns.com.cn]

Domain Name………. yeengjo.com
Creation Date…….. 2008-01-04 03:49:12
Registration Date…. 2008-01-04 03:49:12
Expiry Date………. 2009-01-04 03:49:12
Organisation Name…. lian lian
Organisation Address. liao li
Organisation Address.
Organisation Address. dalian
Organisation Address. 789456
Organisation Address. BJ
Organisation Address. CN

Admin Name……….. zhengzheng
Admin Address…….. liao li
Admin Address……..
Admin Address…….. dalian
Admin Address…….. 789456
Admin Address…….. BJ
Admin Address…….. CN
Admin Email………. cncliup@21cn.com
Admin Phone………. +86.1012345678-0
Admin Fax………… +86.1012345678

Tech Name………… li yang
Tech Address……… No 202 hedong
Tech Address………
Tech Address……… Yongzhou
Tech Address……… 425000
Tech Address……… HN
Tech Address……… CN
Tech Email……….. cncliup@21cn.com
Tech Phone……….. +86.7468328888-2
Tech Fax…………. +86.7468328888

Bill Name………… li yang
Bill Address……… No 202 hedong
Bill Address………
Bill Address……… Yongzhou
Bill Address……… 425000
Bill Address……… HN
Bill Address……… CN
Bill Email……….. cncliup@21cn.com
Bill Phone……….. +86.7468328888-2
Bill Fax…………. +86.7468328888
Name Server………. ns2.ns-untoon.com
Name Server………. ns1.ns-untoon.com

PILLSENRICOR.COM is a spammer website set up to push penis pill spam. These are unsolicited messages. The email is short and sweet, just two lines.

BestEddiePharma
http://pillsenricor.com
Here is the whois info for this P.O.S. spammer.

REGISTRY SERVER: [whois.internic.net]
Domain Name: PILLSENRICOR.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN
Name Server: NS1.FONZDRUGS89.COM
Name Server: NS1.PILLSFREE95.COM
Status: clientTransferProhibited
Updated Date: 29-nov-2007
Creation Date: 29-nov-2007
Expiration Date: 29-nov-2008

——————————————————————————–
REGISTRAR SERVER: [whois.todaynic.com]
Dear Valued Customer,

This message is a reminder to help you keep the contact data associated with your domain
registration up-to-date. Our records include the following information:

Domain name: pillsenricor.com
Status: Active

Protection Status: public
( make contact info private at http://www.now.cn/domain/domainPrivate.php )

Registrant:
Name: Jorban Inc.
Address: Markov st., 8374
City: London
Country: GB
Postal Code: LX79864

Administrative Contact:
Name: Jorban Inc.
Organization: Jorban Inc.
Address: Markov st., 8374
City: London
Country: GB
Postal Code: LX79864
Phone: +44.394874353
Fax: +44.394874353
Email: jorban@pillsfree95.com

Technical Contact:
Name: Jorban Inc.
Organization: Jorban Inc.
Address: Markov st., 8374
City: London
Country: GB
Postal Code: LX79864

Nameserver Information:
ns1.fonzdrugs89.com
ns1.pillsfree95.com

Create: 2007-11-29 20:32:44
Update: 2007-11-29
Expired: 2008-11-29
QueryTimes: 150

Here is another chinese penis pill spammer.  These are unsolicited spam emails being sent in bulk by this spammer.  They are using a throw-away domain.  This domain MOREISBETTERED.COM was registered on Jan 07, 2008.

Message below.  These guys are really pissing me off.  They must be taking their own pills, because they are ’big penises’. 

The trouble was: The guru didnt speak that often.but it missed the boat. Germany is now in a worse recession

 for the flaws and to think critically.investor and philanthropist-were separate and distinct. Heeditor, urging Soros to attack the French franc. Soros, in his answer,was very dour, a cold fish. All that talk now about how he can move
Soros, the expert financier, giving some advice based on his experiencepositions he chose to take, move markets up or down. In effect,find out what Soros was buying? 

Here is the WHOIS information on this spammer…

REGISTRY SERVER: [whois.internic.net]
Domain Name: MOREISBETTERED.COM
Registrar: XIN NET TECHNOLOGY CORPORATION
Whois Server: whois.paycenter.com.cn
Referral URL: http://www.xinnet.com
Name Server: NS1.NS-EARTHLING.COM
Name Server: NS2.NS-EARTHLING.COM
Status: ok
Updated Date: 07-jan-2008
Creation Date: 07-jan-2008
Expiration Date: 07-jan-2009

FONZDRUGS89.COM and PILLSFREE95.COM.  Check your WHOIS information on any of the domains referenced in the tons of SPAM email messages you are seeing these days.  It’s most likely that these two domains are listed as the nameservers.  Often the ownership information shows a Jorban Inc.  A company claiming to be out of London. 

They have been spamming the hell out of the Internet with penis enlargement pill SPAM.  This just sucks because they  completely violate all common sense buiness good practices.  They harvest or purchase active email addresses, and unleash a herd of SPAM email messages with relentless fury.  I’m talking about sending messages every 15 minutes.  Often multiples of the same SPAM emails.  They are good for around 100+ SPAM messages on a daily basis, and growing.

I noticed that all of their links are not responding tonight.  Could it be that someone has taken action against them, and as a result their hosting was suspended?  Or is their massive spamming campaign sending so many visitors to their website, that their servers just can’t handle the load of orders coming in?

Hopefully it is the former.  We will see if they remain down, or if they will be back online in the coming days.  If they have been suspended, it’s not all good news.  They will be back up soon with new hosting, new domains names, and a new and more massive campaign of spam emails.  If they already have your email address, then you will find out soon when that is.