Spammers' nest. worldtradeproject.com, postageshop.com, wishnetworks.com, [206.105.105.0 - 206.105.105.255]: Access denied! === My complaint === Content-Type: text/plain; charset="iso-8859-1" From: Dolphin Reply-To: dolphin-mp3@konx.com Organization: Private person To: abuse@sprint.net, Spam reports , uce@ftc.gov, feedback@nextcard.com, abuse@exodus.net Subject: [email] Repeating spammer (postageshop.com, nextcard)! [Fwd: Put Your Picture on Your Credit Card!] Date: Fri, 27 Jul 2001 19:25:18 +0300 X-Mailer: KMail [version 1.2] Cc: dsalama@IFXCORP.COM, akachler@TELCOM.NET, postmaster@postageshop.com, offers@postageshop.com MIME-Version: 1.0 Message-Id: <01072719251800.01300@dolphin.dolphinwave.org> Content-Transfer-Encoding: 8bit Bcc: dolphin-mp3@konx.com Status: RO X-Status: S Spam on my e-mail address, that was never subscribed for postageshop.com ads! And I never heard of them before, either! Not to mention that I always check the "no ads/promotions" boxes if I ever subscribe to web pages! Several people were also spammed by them yesterday, according to the NANA.sightings archives. Please, terminate spammer's accounts as soon as possible! Thanks! ======= ATTN: postageshop.com, the SPAMMERS! I never asked you to send me your trash on my e-mail box for my own expenses! You don't pay for my Internet account, my phone bills, my equipment, and you have no rights to use it as your ads space! You've just spammed a wrong person and your lame lies that you've bought my address from the web page that I was subscribed to will not full me, who fights spammers for 3+ years! What about other people, who also sent complaints on your yesterday's spam? Also were that web page subscribers? http://groups.google.com/groups?th=2aa147b0d3dbebe9,2&seekm=20010726160725.29107.qmail%40uadvg137.cms.usa.net And no, I'm not going to unsubscribe from any list that I didn't subscribe at first place! And I also will not help you to wash your spam lists either: you will not get the e-mail address of mine, that you've spammed! So long. ======= ANALYSIS ======= Spammer: www.postageshop.com [206.105.105.34]. Used SMTP (spammer's): mail.postageshop.com [206.105.105.33]. IFX Corporation IP block [206.105.104.0 - 206.105.105.255] (no mailbox) which is in the US Sprint IP range [206.104.0.0 - 206.107.255.255]. Upstream: Sprint (sl-ifx-1-0-T1.sprintlink.net). Spammer's e-mail: offers@postageshop.com Spamvertised web pages: http://www.postageshop.com/ http://www.nextcard.com/index6.html?ref=aff0090342 ======= SPAM WAS ======= Received: from [206.105.105.33] by ###MYMAILSERVER### (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id tmpecaaa for <###@###>; Fri, 27 Jul 2001 18:51:27 +0300 Received: from postageshop.com ([206.105.105.34]) by mail.postageshop.com (8.11.3/8.11.3) with SMTP id f6RFfYh70620; Fri, 27 Jul 2001 11:41:36 -0400 (EDT) (envelope-from offers@postageshop.com) Date: Fri, 27 Jul 2001 11:41:36 -0400 (EDT) Message-Id: <#######.#######@mail.postageshop.com> MIME-Version: 1.0 From: offers@postageshop.com Reply-To: offers@postageshop.com To: offers@postageshop.com Subject: Put Your Picture on Your Credit Card! Mime-Version: 1.0 Content-Type: text/html; charset="us-ascii" Status: R X-Status: N The following message was sent to you as a subscriber to a website that was recently purchased by Postageshop

The following message was sent to you as a subscriber to a website that was recently purchased by Postageshop.com Internet Services. We strive to bring you valuable offers on products and services that interest you most. Please DO NOT reply to this email. If you wish to unsubscribe, see below.

 

NextCard Visa

 

PERSONALIZE YOUR VISA WITH YOUR FAVORITE PICTURE
 Click Now!!!

PictureCardSM

Create your own credit card with NextCard PictureCardSM. It's easy.

First Ice
Cream.


Put a picture of your hobby, your favorite destination, a loved one or just about anything on your NextCard and get a credit card that reflects not only your wise financial choices, but your personality.

Just choose the PictureCard option when you complete your application and follow the instructions. You can upload your own picture with just a few clicks or you can choose an image from the NextCard gallery.

...and as Low As 2.99% Introductory or 9.99% On Going APR
NextCard Visa!!!!

NextCard Visa

 

1. Fill in the short Application
2. 30 Second ONLINE Approval
3. No Annual Fee
4. On line Balance Transfer


Click Here to get your PHOTO ON YOUR CARD Today!!!

   

If you wish not to receive emails offering products such as offered in this email, please reply with the word 'unsubscribe' in the subject line.


======= PREVIOUS SPAM HEADERS ======= Received: from mail.postageshop.com [206.105.105.33] by cm18 via mtad (53CM.0601.1.01E) with ESMTP id 438FgZmdH0463M18; Thu, 26 Jul 2001 12:29:07 GMT Received: from postageshop.com ([206.105.105.34]) by mail.postageshop.com (8.11.3/8.11.3) with SMTP id f6QCRNh10341 for ; Thu, 26 Jul 2001 08:27:24 -0400 (EDT) (envelope-from offers@postageshop.com) Date: Thu, 26 Jul 2001 08:27:24 -0400 (EDT) Message-Id: <200107261227.f6QCRNh10341@mail.postageshop.com> MIME-Version: 1.0 From: offers@postageshop.com Reply-To: offers@postageshop.com To: megalart@acmeforces.com Subject: Put Your Picture on Your Credit Card! Mime-Version: 1.0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable X-MIME-Autoconverted: from 8bit to quoted-printable by mail.postageshop.com id f6QCRNh10341 Received: from mail.postageshop.com (mail.postageshop.com [206.105.105.33]) by walrus.megabaud.fi (8.8.8/8.8.7) with ESMTP id DAA05708 for ; Fri, 27 Jul 2001 03:22:57 +0300 (EEST) From: offers@postageshop.com Received: from postageshop.com ([206.105.105.34]) by mail.postageshop.com (8.11.3/8.11.3) with SMTP id f6R0Bah49648; Thu, 26 Jul 2001 20:11:36 -0400 (EDT) (envelope-from offers@postageshop.com) Date: Thu, 26 Jul 2001 20:11:36 -0400 (EDT) Message-Id: <200107270011.f6R0Bah49648@mail.postageshop.com> MIME-Version: 1.0 Reply-To: offers@postageshop.com To: offers@postageshop.com Subject: Put Your Picture on Your Credit Card! Mime-Version: 1.0 Content-Type: text/html; charset="us-ascii" X-Mozilla-Status: 8001 X-Mozilla-Status2: 00000000 === Another spammer in the block, my complaint === Content-Type: text/plain; charset="iso-8859-1" From: Admin Organization: Private person To: Abuse reports , nanas-sub@cybernothing.org, uce@ftc.gov, abuse@sprint.net, dsalama@IFXCORP.COM, postmaster@ifxcorp.com, akachler@TELCOM.NET, postmaster@telcom.net Subject: [email] Spam (more IFX/Telcom.Net spammers)! [Fwd: BROADCAST YOUR MESSAGE TO 200K BUSINESSES - $499.] Date: Wed, 8 Aug 2001 19:49:59 +0300 X-Mailer: KMail [version 1.2] Cc: info@worldtradeproject.com, remove@worldtradeproject.com, sifmail@earthlink.net, stefan@techdroid.net MIME-Version: 1.0 Message-Id: <01080819372300.01300@dolphin.dolphinwave.org> Content-Transfer-Encoding: 8bit Status: RO X-Status: S Please, terminate spammer's accounts as soon as possible! Thanks! ======= ATTN: Sprint! Please, urge your customers, IFX/Telcom.Net, to get rid of their spamming clients! ATTN: IFX/Telcom.Net! This is another spammer from your 206.105.105.0/24 IP block! My previous complaint about postageshop.com spammers, sent 10 days ago (http://groups.google.com/groups?ic=1&q=msgid:01072719251800.01300%40dolphin.dolphinwave.org) you obviously ignored, cause you still provide the connectivity to them. If this spammer of your's, worldtradeproject.com, wouldn't be disconnected in 3 days, I will drop your whole 206.105.104.0 - 206.105.105.255 IP block into my deny tables as a known "bullet-proof" spam source, and will share this info with other admins who would be more than happy to deny the connectivity to spammers. ======= ANALYSIS ======= Spammer: worldtradeproject.com [206.105.105.138] Spammer's SMTP: smtp.worldtradeproject.com [206.105.105.38]. Mail from: info@worldtradeproject.com Remove box: remove@worldtradeproject.com worldtradeproject.com [206.105.105.138] ===================== Merchant Puplishing 34 West 13th street New York, NY 10011 US Domain Name: WORLDTRADEPROJECT.COM Administrative Contact: Mike Kanbar sifmail@earthlink.net Merchant Puplishing 34 West 13th street New York, NY 10011 US Phone- 212 691 6666 Fax- 212 656 1568 Technical Contact: Stefan Schueller stefan@techdroid.net Techdroid Servers 60 Hartwell Road Carlise, MA 01741 US Phone- 978 369 0023 Fax- 978 369 0023 Record updated on 2000-10-17 00:00:00. Record created on 2000-10-17. Record expires on 2002-10-17. Database last updated on 2001-08-08 04:29:43 EST. Domain servers in listed order: TELCOM.NET 208.30.36.18 NS2.TELCOM.NET 198.172.137.19 IFX Corporation IP block [206.105.104.0 - 206.105.105.255] which is in the US Sprint IP range [206.104.0.0 - 206.107.255.255]. Upstream: Sprint (sl-ifx-1-0-T1.sprintlink.net). Nameserver: Telcom.Net ======= SPAM WAS ======= Received: from [206.105.105.38] by ##### (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id mlqgcaaa for <###@###>; Wed, 8 Aug 2001 19:08:49 +0300 Received: from wishnetworks.com ([206.105.105.138]) by smtp.worldtradeproject.com (8.9.2/8.9.2) with ESMTP id LAA23527; Wed, 8 Aug 2001 11:39:25 -0400 (EDT) Message-ID: <158782001838153554609@wishnetworks.com> X-EM-Version: 5, 0, 0, 16 X-EM-Registration: #01B0530810E603002D00 Reply-To: info@worldtradeproject.com From: "World Trade Project" To: "BROADCAST"@smtp.worldtradeproject.com Subject: BROADCAST YOUR MESSAGE TO 200K BUSINESSES - $499. Date: Wed, 8 Aug 2001 11:35:54 -0400 MIME-Version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Status: R X-Status: N If you have received this mail with any attachments we urge you NOT TO OPE= N any attachments=2E Attachments can carry a virus which may be damaging = to your computer and result in severe loss of data=2E We have not attache= d any files to this mail=2E If you ever receive a file from us with an at= tachment please do not open the attachment before verification from us tha= t the file is safe=2E Our contact information can be found at the bottom = of this message=2E WORLD TRADE PROJECT MESSAGE BROADCAST SERVICE HAVE YOUR MESSAGE BROADCAST TO 200,000 BUSINESSES FOR ONLY $499=2E FAST, EFFICIENT AND EXTREMELY COST EFFECTIVE COST TRANSLATES TO ABOUT 2 CENTS PER 10 MAILS - A TINY FRACTION OF REGULAR= POSTAL RATES=2E PLUS, NO PRINTING COST! REACH HUNDREDS OF THOUSANDS OF POTENTIAL CUSTOMERS IMMEDIATELY! WE DO ALL THE WORK AND YOU GET ALL THE ORDERS! FOR ONLY $499=2E WE'LL DO THE MAILING FOR YOU! YOU JUST GIVE US THE COPY = AND SIT BACK AND WAIT FOR THE ORDERS TO COME IN=2E WE CAN USUALLY GET YOUR MESSAGE OUT WITHIN 24 HOURS (or less) OF RECEIPT O= F YOUR COPY AND PAYMENT=2E EMAIL BROADCASTING IS AN EXTREMELY EFFICIENT AND COST EFFECTIVE WAY TO GET= YOUR OFFERS OUT TO THE CUSTOMERS YOU WANT=2E =20 YOU WILL REACH HUNDREDS OF THOUSANDS OF BUSINESSES THAT MAY NEED YOUR PROU= DUCTS FOR SERVICES=2E WE CAN ALSO HANDLE AND MANAGE YOUR NEWSLETTER MAILINGS AND USE YOUR OWN MA= ILING LISTS, CONTACT US FOR DETAILS AND PRICING=2E WE ACCEPT VISA, MASTERCARD AND AMEX OR CHECKS=2E IF INTERESTED CONTACT US FOR MORE DETAILS: WORLD TRADE PROJECT=20 (A Merchant Publishing Company) CONTACT: MICHAEL (E) MAILTO:INFO@WORLDTRADEPROJECT=2ECOM To be removed from this list please reply to this email with the word REMO= VE typed in the subject line of the email=2E Our software processes all r= emove requests automatically so it is important that you follow these inst= ructions in order for our software to detect and remove your address from = future mailings=2E If you have received multiple copies please reply to t= he mail with REMOVE in the subject line, and in the body of the email list= each and every email address separately=2E Do not add commas, parenthesi= s or any other characters other than those that appear in your email addre= ss=2E =20 Please do not call for removal, as this will not expedite the process=2E = If you feel that you have followed these instructions and made every effor= t to be removed but are still receiving email you may let us know by sendi= ng a note to remove@worldtradeproject=2Ecom explaining the issue=2E Inclu= de your name and telephone number and the best time to contact you and we = will respond promptly=2E === More spamming attempts, my another complaint === Received: (from dolphin@localhost) by mail.dolphinwave.org (8.11.6/8.11.6) id g02NlsS03823 for webmail; Thu, 3 Jan 2002 01:47:54 +0200 Received: from localhost (localhost [[UNIX: localhost]]) by mail.dolphinwave.org (8.11.6/8.11.6) id g02NlqV03807; Thu, 3 Jan 2002 01:47:52 +0200 Content-Type: text/plain; charset="iso-8859-15" From: Admin Reply-To: abuse-2002@dolphinwave.org Organization: Private person Message-Id: <200201030136.36334@dolphinwave.org> To: Abuse reports , nanas-sub@cybernothing.org, abuse@sprint.net, dsalama@IFXCORP.COM, postmaster@IFXCORP.COM, akachler@TELCOM.NET, postmaster@TELCOM.NET Subject: [email] Repeating spammers/Usenet harvesters (worldtradeproject.com)! Date: Thu, 3 Jan 2002 01:47:51 +0200 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Today my mailserver rejected another spam attempt from those spammers, who have spammed me in August 8th, as well! Please, terminate spammer's accounts as soon as possible! Thanks! ======= Spammers: worldtradeproject.com [206.105.105.138] (smtp.worldtradeproject.com [206.105.105.38]) IFX Corporation IP block [206.105.104.0 - 206.105.105.255] which is in the US Sprint IP range [206.104.0.0 - 206.107.255.255]. Upstream: Sprint (sl-ifx-1-0-T1.sprintlink.net). Nameserver: TELCOM.NET (main01.telcom.net) ======= Sendmail logs (GMT+0200) ======= Jan 2 21:32:53 orca sendmail[2337]: g02JWhp02337: ruleset=check_mail, arg1=, relay=MY-SECONDARY-MX, reject=553 5.3.0 ... 550Access denied - spammers/spam-services - http://www.DolphinWave.org/spam/206.105.105.38_206.105.105.138_worldtradeproject.com.txt Jan 2 21:32:53 orca sendmail[2337]: g02JWhp02337: from=, size=4070, class=0, nrcpts=0, proto=ESMTP, daemon=Daemon0, relay=MY-SECONDARY-MX ======= PREVIOUS SPAM WAS ======= Received: from [206.105.105.38] by ##### (NTMail 4.30.0013/AB9564.63.12487e1d) with ESMTP id mlqgcaaa for <###@###>; Wed, 8 Aug 2001 19:08:49 +0300 Received: from wishnetworks.com ([206.105.105.138]) by smtp.worldtradeproject.com (8.9.2/8.9.2) with ESMTP id LAA23527; Wed, 8 Aug 2001 11:39:25 -0400 (EDT) Message-ID: <158782001838153554609@wishnetworks.com> X-EM-Version: 5, 0, 0, 16 X-EM-Registration: #01B0530810E603002D00 Reply-To: info@worldtradeproject.com From: "World Trade Project" To: "BROADCAST"@smtp.worldtradeproject.com Subject: BROADCAST YOUR MESSAGE TO 200K BUSINESSES - $499. Date: Wed, 8 Aug 2001 11:35:54 -0400 MIME-Version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Status: R X-Status: N If you have received this mail with any attachments we urge you NOT TO OPE= N any attachments=2E Attachments can carry a virus which may be damaging = to your computer and result in severe loss of data=2E We have not attache= d any files to this mail=2E If you ever receive a file from us with an at= tachment please do not open the attachment before verification from us tha= t the file is safe=2E Our contact information can be found at the bottom = of this message=2E WORLD TRADE PROJECT MESSAGE BROADCAST SERVICE HAVE YOUR MESSAGE BROADCAST TO 200,000 BUSINESSES FOR ONLY $499=2E FAST, EFFICIENT AND EXTREMELY COST EFFECTIVE COST TRANSLATES TO ABOUT 2 CENTS PER 10 MAILS - A TINY FRACTION OF REGULAR= POSTAL RATES=2E PLUS, NO PRINTING COST! REACH HUNDREDS OF THOUSANDS OF POTENTIAL CUSTOMERS IMMEDIATELY! WE DO ALL THE WORK AND YOU GET ALL THE ORDERS! FOR ONLY $499=2E WE'LL DO THE MAILING FOR YOU! YOU JUST GIVE US THE COPY = AND SIT BACK AND WAIT FOR THE ORDERS TO COME IN=2E WE CAN USUALLY GET YOUR MESSAGE OUT WITHIN 24 HOURS (or less) OF RECEIPT O= F YOUR COPY AND PAYMENT=2E EMAIL BROADCASTING IS AN EXTREMELY EFFICIENT AND COST EFFECTIVE WAY TO GET= YOUR OFFERS OUT TO THE CUSTOMERS YOU WANT=2E =20 YOU WILL REACH HUNDREDS OF THOUSANDS OF BUSINESSES THAT MAY NEED YOUR PROU= DUCTS FOR SERVICES=2E WE CAN ALSO HANDLE AND MANAGE YOUR NEWSLETTER MAILINGS AND USE YOUR OWN MA= ILING LISTS, CONTACT US FOR DETAILS AND PRICING=2E WE ACCEPT VISA, MASTERCARD AND AMEX OR CHECKS=2E IF INTERESTED CONTACT US FOR MORE DETAILS: WORLD TRADE PROJECT=20 (A Merchant Publishing Company) CONTACT: MICHAEL (E) MAILTO:INFO@WORLDTRADEPROJECT=2ECOM To be removed from this list please reply to this email with the word REMO= VE typed in the subject line of the email=2E Our software processes all r= emove requests automatically so it is important that you follow these inst= ructions in order for our software to detect and remove your address from = future mailings=2E If you have received multiple copies please reply to t= he mail with REMOVE in the subject line, and in the body of the email list= each and every email address separately=2E Do not add commas, parenthesi= s or any other characters other than those that appear in your email addre= ss=2E =20 Please do not call for removal, as this will not expedite the process=2E = If you feel that you have followed these instructions and made every effor= t to be removed but are still receiving email you may let us know by sendi= ng a note to remove@worldtradeproject=2Ecom explaining the issue=2E Inclu= de your name and telephone number and the best time to contact you and we = will respond promptly=2E