Deadbeats' Hall of Lame
2012 Deadbeats Page 1
Do not sign me up for any mail lists. Studio42 does not accept such unsolicited business. Also, since I've recently been getting a flood of such e-mail from various people and organizations I don't wish to deal with, their names will end up here, along with their home and business addresses, and phone numbers, whenever possible.
Please realize that 99.9% of internet users DON'T want your crap in our e-mail boxes.
Minimum fine for violation of this policy allows me to legally bill/invoice for $500 and this can be escalated to a court of law.
This page created on January 5, 2012 for 2012 Deadbeats
Subject: Lates_Jan_2012Cred_Reports
Date: 1/6/2012 10:15
Received: 1/6/2012 10:49
From: Free_2012_Score, Updates_@readscoretech.info
To: chris@indiciumtechnologies.com
See the spam
Spam comes from SingleHop in Illinois.
Site is hosted in CalPop in California.
Registration of the fresh domain is through Enom and is privacy protected by WhoisGuard.
Spam uses opt-out despite the fact I havent' signed up for anything.
Spammer claims Oregon and Texas addresses in the body of the spam.
Everything points to the United States.
See the lookups
Subject: Re : FROM A PUERTORICAN TO ALL LATINOS..
Date: 1/7/2012 20:44
Received: 1/7/2012 20:46
From: James Martinez, coachjimmartinez@gmail.com
To: colonsito24@yahoo.com
BCC: Chris Pickett, chris@studio42.com
See the spam
Spam comes out of Google in A HREF="california.shtml">California and uses a Gmail drop.
Spammer's web site is hosted by LiquidWeb in Michigan.
Spammer's domain is registered by GoDaddy and lists a Florida adddress.
See the lookups
Subject: Here's USD777 of house money you can wager
Date: 1/15/2012 22:04
Received: 1/15/2012 22:43
From: ClubVIP Wager, cpllsgobpab@sedima.fr
To: Chris Pickett, chris@studio42.com
See the spam
Relays through India. French drop. Russian DNS and is privacy protected by being NOT DISCLOSED.
Hosted in the Czech RepublicSee the lookups
Subject: Federal Tax Transfer Confirmation 92e0601a38a2c410
Date: 1/19/2012 09:55
Received: 1/19/2012 10:00
From: 31785467222021NACHA, htrangd@yahoo.com
To: cpaguru@ghskinnercpa.com
See the spam
Sent through Yahoo in Great Britian via the Arab Emirates.
Redirector site is on Google, in California in the United States.
See the lookups
Subject: Re:Best Pay Per Lead 01745d725802bfa1
Date: 1/31/2012 04:57
Received: 1/31/2012 08:31
From: 384280_Private-Network, mauricedionnerwz@yahoo.com
To: LIST OMITTED
See the spam
Sent out via Yahoo in Great BritianIndia. Redirector is dead, but is on Google in California, United States.
Method of operation is very similar to this spam
See the lookups
Subject: Re:Website Templates Design 90% discount #98c772c13d64d8c9
Date: 2/1/2012 03:38
Received: 2/1/2012 08:36
From: Jose Murray, murrayzjose1970@yahoo.com
To: LIST OMITTED
See the spam
Sent out via Yahoo in California, United States from Israel.
Redirector is working, and is on Google in California, United States.
Method of operation is very similar to this spam and this spam
Seems they are intended to install viral software, then redirect out to Google again.
See the lookups
Subject: See your 2012 Credit Score & Report
Date: 2/1/2012 11:20
Received: 2/1/2012 11:26
From: Yes Free Score, Lisa@statedscoresall.info
To: chris@indiciumtechnologies.com
See the spam
Very similar to this spam.
Hosted and sent from Utah, United States.
Domain is privacy protected using WhoisGuard in California, and Enom is the registar.
Double opt-out being used: opt-out and unssubscribe.
Spammer also lists a California and Florida address.
See the lookups
February 2, 2012, 13:17:
First, the hosting provider states they are taking action. 2 hours after complaint received.
This is actually extremely FAST to get such a notification.
See the action
February 3, 2012, 19:14:
The hosting provider has disconnected the server. This is a confirmed kill!
See the kill
Subject: Quit Smoking - Great News For Smokers
Date: 2/2/2012 10:02
Received: 2/2/2012 20:38
From: Lisa M., lisam@gmail.com
To: webmaster@studio42.com
See the spam
Spam abuse farm as this spam, this spam and this spam.
Send and hosted from Dutch IP space leased from a French ISP.
Uses a Gmail drop but is most likely a forgery.
See the lookups
Subject: Drop Ship Partner
Date: 2/6/2012 06:56
Received: 2/6/2012 10:58
From: Web srl, noreply@websrl.smtp3.net
Reply-To: Web srl, business@websrl.com
To: Chris Pickett, chris@studio42.com
See the spam
1 of 2.
Mostly from Italy. One of the sites is hosted on Softayer in Texas, United States.
See the lookups
Subject: Drop Ship Partner
Date: 2/6/2012 07:13
Received: 2/6/2012 10:59
From: Web srl, noreply@websrl.smtp3.net
Reply-To: Web srl, business@websrl.com
To: webmaster@studio42.com
See the spam
2 of 2.
Mostly from Italy. One of the sites is hosted on Softayer in Texas, United States.
See the lookups
Subject: DO NOT WAIT!
Date: 2/7/2012 06:05
Received: 2/7/2012 08:39
From: Jen Cramer, john.dignan@blakes.co.uk
To: Chris Pickett, chris@studio42.com
See the spam
Originated from Japan, and relayed through ClearWire ISP in Washington, United States.
Site hosted and registered on GoDaddy in Arizona, United States.
Domain uses a Yahoo drop and invalid registration information.
See the lookups
Subject: Target Industry Marketing Email List 2012
Date: 2/7/2012 16:00
Received: 2/7/2012 15:09
From: Emy Jackson, emy.jacksonus@gmail.com
To: chris, chris@studio42.com
See the spam
Sent through ThePlanet, in Texas, United States.
Spammer uses a London and California address and a Gmail drop.
See the lookups
Subject: It continues to increase
Date: 2/7/2012 16:03
Received: 2/7/2012 21:39
From: Emm Morales, avril.barker@student.london.ac.uk
To: spam-hater@studio42.com
See the spam
Same as this spam but with differences. Also sent to my anti-spamaccount.
Relaying via a raped AT&T ADSL account, this spammer may be forging Department of Defense
into the headers.
Site hosted and registered on GoDaddy in Arizona, United States.
Domain uses a Yahoo drop and invalid registration information.
All elements point to United States.
See the lookups
Subject: Database Portfolio
Date: 2/7/2012 22:39
Received: 2/9/2012 10:06
From: Ross Woods, ross.woods.us@gmail.com
To: chris, chris@studio42.com
See the spam
Sam scam behind this garbage.
Sent through ThePlanet, in Texas, United States.
These spams have ties to this spam and this spam
Spammer uses a California address and a Gmail drop.
See the lookups
ThePlanet earns a denial for not having valid MX records. I guess this is part of their policy
of not being able to take action against spammers when you can't get complaints
See the denial
Subject: Hard to resist bonus offers at Lucky Cash
Date: 2/10/2012 00:46
Received: 2/10/2012 10:27
From: Lucky Cash, no-reply@atrentoff.com
To: chris@indiciumtechnologies.com
See the spam
Online casino spam.
Comes out of Romania, site hosted in Czech Republic, Russian DNS and Chinese registration.
See the lookups
Subject: Re:USPSNotification Parceldelivery-status report b7d22d64a0e43416.
Date: 2/10/2012 10:47
Received: 2/10/2012 10:49
From: 34314996194607United Parcel_Service, levisedqb@yahoo.com
To: LIST OMTTED
See the spam
Sent from Yahoo in Great Britain from Netherlands. Site is a Google redirector.
See the lookups
Subject: Microsoft OEM Software
Date: Mon, 13 Feb 2012 11:35:40 -0500
Date: 2/13/2012 08:35
Received: 2/13/2012 10:51
From: Aurora Oliver, bittrans2000@gmail.com
To: Chris Pickett, chris@studio42.com
See the spam
Sending out of Verizon in Virginia, United States, from Korea.
Gmail drop.
See the lookups
Subject: Microsoft OEM Software
Date: 2/13/2012 06:35
Received: 2/13/2012 10:53
From: Frederic Simmons, stalker2174@yandex.ru
To: spam-hater@studio42.com
See the spam
Same as above.
Sent through an ISP in Wisconsin, United States, but after that, it become unclear.
Same Gmail drop used..
See the lookups
Subject: Gioi thieu san pham
Date: 2/15/2012 17:08
Received: 2/15/2012 19:53
From: quanglongtech@gmail.com
See the spam
Going through Google in California, United States from Vietnam.
Site hosted in California and domain registered through Enom.
See the lookups
Subject: hi, John,
Date: 2/17/2012 09:49
Received: 2/17/2012 18:49
From: ashley@treatingbackacne.org, ashley@treatingbackacne.org
To: chris@indiciumtechnologies.com
See the spam
Garbage out of Hostnoc in Pennsylvania, United States.
Site registered through GoDaddy and uses a Hotmail drop.
See the lookups
Subject: Hey, dear,
Date: 2/18/2012 09:52
Received: 2/18/2012 17:51
From: AngelaS@treatingbackacne.org, AngelaS@treatingbackacne.org
To: chris@indiciumtechnologies.com
See the spam
From the same idiots who sent this unwanted trash and earns a 2nd strike violation.
Garbage out of Hostnoc in Pennsylvania, United States.
Site registered through GoDaddy and uses a Hotmail drop.
See the lookups
Subject: You're invited to participate
Date: 2/17/2012 11:16
Received: 2/19/2012 02:05
From: Darryl, dsittler27@yahoo.com
To: Chris Pickett, chris@studio42.com
See the spam
ISP in Missouri, United States let's this GoDaddy registered domain have a presence.
Domain is registered in Australia and uses a Yahoo contact drop.
See the lookups
Web site terminated!!
See the confirmed kill
Subject: The perfect place for last minute gifts and cards Chris
Date: 2/19/2012 17:16
Received: 2/19/2012 17:13
From: HelloTurtle.com, bounce@helloturtle.com
Reply-To: HelloTurtle.comhelp@helloturtle.com
To: chris@studio42.com, chris@studio42.com
See the spam
British scam and a domain registered via Enom.
See the lookups
Subject: Compare insurance for the chance of super bug free private rooms
Date: 2/20/2012 07:42
Received: 2/20/2012 08:13
From: Active Quote, info@g2.gingernutoffers.com
Reply-To: reply+670.235131@g2.gingernutoffers.com
To: Chris Pickett, chris@studio42.com
See the spam
British Health Insurance.
Sent from Great Britian and the registered domain uses a UK Hotmail drop.
See the lookups
Subject: Cruise/Yacht Crew Workers Wanted
Date: 2/22/2012 01:28
Received: 2/21/2012 19:35
From: QUEEN'S CRUISE, queen.cruises@xbmail.com
Reply-To: queen.cruise@xbmail.com
See the spam
Abusing Belgium from India for an apparently British operation.
See the lookups
Subject: Your accountant license can be revoked.
Date: 2/22/2012 02:07
Received: 2/23/2012 10:22
From: Marcel Harden, risk@aicpa.org
To: Chris Pickett, chris@studio42.com
See the spam
Apparently I am a CPA and my license is going to be revoked. I wasn't aware I was a CPA.
Spam comes from Belgium, and has links to a Dutch site and a Russian site.
See the lookups
Subject: =?ISO-8859-1?Q?Clinica_Sesmt_exames_admissionais,demissionais,_PPRA,_PCMSO,_Cipa_tudo_em_seguran=E7a_do_trabalho._?=
Date: 2/29/2012 09:58
Received: 2/29/2012 11:04
From: CLINICA SESMT, clinicasesmt@gmail.com
To: webmaster@studio42.com
See the spam
Comes out of Google in California, United States.
See the lookups
Subject: =?UTF-8?B?UG9zdG1hc3RlciAtIG5pbmNzIHTDtmJiIGxlbWVyw7xsdCB0ZWxlZm9uLCBtZWdqw7Z0dCBhIG1pbGk=?=
Date: 3/7/2012 07:22
Received: 3/9/2012 11:44
From: MILI, sokshop1@gmail.com
To: Postmaster, postmaster@studio42.com
See the spam
Sending and living in Hungary, this spam-farm gets it's registration from TuCows.
They also expect me to opt-out of this crap I didn't opt-in to, so I'm going to DNSBL
the entire ISP's listed SWIP.
See the lookups
Subject: Save up to 70 Percent on leading Home and Lifestyle Brands
Date: 3/10/2012 11:51
Received: 3/10/2012 12:29
From: Achica, info@jd-mail.co.uk
Reply-To: reply+780.809650@jd-mail.co.uk
To: Chris Pickett, CHRIS@studio42.com
See the spam
British spam farm wanting to do opt-out harvesting.
See the lookups
Subject: Would you like to send 20000-50000 mails everyday?
Date: 3/8/2012 20:43
Received: 3/12/2012 10:56
From: BBmailer, Bartley@digathanews.com
Reply-To: supportop@hotmail.com
To: chris, chris@studio42.com
See the spam
Spamware spammers. Sent and originated on HostNoc in Pennsylvania.
Hosted on ECommerce in Ohio. Hosting and sending in the United States.
Registed via TuCows to some Chinese guy.
Uses Hotmail, Yahoo, Gmail and Skype for contact drops.
See the lookups
Subject: Meeting Request
Date: 3/12/2012 10:48
Received: 3/12/2012 10:56
From: Yolanda Pierce, yolandap@michelinmarketing.com
To: Chris Pickett, chris@studio42.com
See the spam
They don't like cold calls, but they have no problem with pamming and spamming to try to get
job to spam on the behalf of others.
All out of Florida, United States.
See the lookups
Subject: Du Hoc - Dinh Cu - Di Dan - Bao Lanh - Du Lich
Date: 3/14/2012 00:41
Received: 3/14/2012 10:09
From: Cty IMEC, ctyimec@hotmail.com
To: chris@studio42.com, chris@studio42.com
See the spam
Abusing CorExchange in Texas, United States. Web site is located in Vietnam, for a spam
in Vietnamese. Spammer wants to use a Hotmail drop.
See the lookups
Subject: =?UTF-8?Q?Ch=C6=B0=C6=A1ng_Tr=C3=ACnh_Khuy=E1=BA=BFn_M=C3=A3i_Ch=C3=A0o_?= =?UTF-8?Q?M=C3=B9a_H=C3=A8_N=C4=83m_2012_C=E1=BB=A7a_VietNam_Airl?= =?UTF-8?Q?ine?=
Date: 3/15/2012 19:27
Received: 3/15/2012 19:58
From: IDC VietNam, vinh.idcvn@gmail.com
To: Chris Pickett, chris@studio42.com
See the spam
Abusing Google, California, United States, from Vietnam.
One site hosted on HopOne in Washington, yet the domain is owned by Indians.
The rest are Vietnam hosted and operated.
See the lookups
See the spam
All Vietnam with a GMail drop.
See the lookups
Subject: Du Hoc - Dinh Cu - Di Dan - Bao Lanh - Du Lich/A>
Date: 3/16/2012 05:57
Received: 3/16/2012 12:19
From: Cty IMEC, ctyimec1@hotmail.com
To: chris@studio42.com, chris@studio42.com
See the spam
A near identical repeat of this spam.
Strike 2 for CorExchange and Strike 1 this year for fpt.net in Vietnam.
Abusing CoreExchange in Texas, United States. Web site is located in Vietnam, for a spam
in Vietnamese. Spammer wants to use a Hotmail drop.
See the lookups
Subject: Private Health Insurance - Can you afford to be without it?
Date: 3/19/2012 04:59
Received: 3/19/2012 09:33
From: Simon at Insured Ltd., Insured.Ltd@wize1.co.uk
Reply-To: Simon at Insured Ltd., re-16NG-QOOX-5YP7PS-BZ902@wize1.co.uk
To: chris@studio42.com, chris@studio42.com
See the spam
British spam farm wanting to do opt-out harvesting.
See the lookups
Subject: Du Hoc - Dinh Cu - Di Dan - Bao Lanh - Du Lich
Date: 3/20/2012 12:51
Received: 3/20/2012 13:29
From: Cty IMEC, ctyimec1@hotmail.com
To: chris@studio42.com, chris@studio42.com
See the spam
Strike 3 for CorExchange in Texas, United States.
Site hosted on PAVIETNAM in Vietnam, spammer wants to use a Hotmail drops.
See the lookups
COREXCHANGE replies, but we'll need to see what that really means. I have to count this
as an action.
See the action
Subject: INTERESTING JOB IN YOUR AREA....APPLY
Date: 3/22/2012 17:57
Received: 3/22/2012 23:28
From: MARK CULLEN, Amyt@mtsonline.net
Reply-To: markcullen16@gmail.com
To: undisclosed-recipients:;
See the spam
Abusing a server in California, United States, from BellSouth, part of AT&T, in GeorgiaUnited States.
Spammer wants to use a Gmail drop.
Spammer goes by the name MARK CULLEN, which might become a flag for filtering.
See the lookups
Subject: =?UTF-8?Q?THAM_GIA_NGAY_=C4=91=E1=BB=83_nh=E1=BA=ADn_=C4=91?= =?UTF-8?Q?=C6=B0=E1=BB=A3c_TH=E1=BA=BA_=C4=90I=E1=BB=86?= =?UTF-8?Q?N_THO=E1=BA=A0I_200K?=
Date: 3/23/2012 18:50
Received: 3/23/2012 19:33
From: Sutzo.com, noreply@emailnhanh.com
Reply-To: no-reply@sutzo.com
To: Chris Pickett, chris@studio42.com
See the spam
Crap from Vietnam, hosted in Vietnam. 1 domain is privacy protected, the other uses
a Gmail drop.
See the lookups
Subject: Antologia Uma Mirada al sur
Date: 3/24/2012 22:39
Received: 3/25/2012 08:53
From: Para el escritor, info@paraelescritor.com.ar
To: Chris Pickett, chris@studio42.com
See the spam
Abusing Peer1 in New York, United States.
Web sites and spam origination is in Argentina.
See the lookups
Subject: High quality cheap FAMOUS BRANDS online!
Date: 3/26/2012 17:08
Received: 3/26/2012 17:30
From: yeahsupermall
To: godaddy@studio42.com
See the spam
Sent from China with Chinese and Dutch hosting.
See the lookups
Date: 3/27/2012 16:40
Received: 3/27/2012 18:54
From: Tulip Cooper, tulipc@knowledgematrixinc.com
To: Chris Pickett, chris@studio42.com
See the spam
Abusing coming from a DataPipe in New Jersey, United States, as well as hosting one of the sites.
The other site is on ECommerce Corporate in Ohio, United States.
One domain is registered through Register.Com to someone in Maryland, United States.
The main target domain is registered to someone in India.
See the lookups
Subject: Du Hoc - Dinh Cu - Di Dan - Bao Lanh - Du Lich
Date: 3/27/2012 23:06
Received: 3/27/2012 23:12
From: Cty IMEC, ctyimec1@gmail.com
To: chris@studio42.com, chris@studio42.com
See the spam
4th offense. 1st, 2nd, 3rd.
CorExchange in Texas, United States again let's this go through.
Site hosted on FPT in Vietnam, spammer wants to use a Gmail drop now.
See the lookups
If you are one of the dilweeds who sent me unsolicited email or are someone thinking about it, drop dead.
Also, if you've got a complaint about my anti-spam feelings or want to scold me for being justifiably sick of spam, I have the following words of wisdom for you:
BLOW IT OUT YOUR ASS!
Anyone else, I'd like to hear from you. Click below and drop me a line.
Anti-Spam Site administrator
|