Back to the spamming

[GaryWatson]

From:

Reynold Lily <parameciasumptuous@yahoo.com>

Sent: Sat Jan 26 18:03
To:

sweepingstabler@yahoo.com

Priority: Normal
Subject:

Acept 2400 US Dollars deposit bonus immediately!!!

Type: Embeded HTML/Text
Alert:

The users email-address has been added to the addressbook

US Players WELCOME!

Obtain $2400 deposit bonus right away!!!

Get a chance to win our gigantic progressive jackpot - see it go up

Take a part in tournaments in all your favorite games!

Make deposits and receive your winnings quickly, safely & securely!

Appreciate a respected, award-winning establishment.

Propel to Golden Gate Casino: http://trophy.dellazplace.com/322cgv/

This is a private email account I set up last week. I am not using a yahoo account.

I have only used this account to set up affiliate accounts. Unfortunately I dont know which site sent out the spam as I have set up about a dozen or so. It is definately coming from an affiliate department

[GaryWatson]

Header

Return-path: <parameciasumptuous@yahoo.com>
Envelope-to: xxxxxxxxxxxxxxxxxxxxxx
Delivery-date: Sat, 26 Jan 2008 18:03:40 -0500
Received: from bosimpinc01.eigbox.net ([10.20.13.1])
by bosmailscan21.eigbox.net with esmtp (Exim)
id 1JIu3o-0002iu-DN
for xxxxxxxxxxxxxxxxxxxx; Sat, 26 Jan 2008 18:03:40 -0500
Received: from n6c.bullet.mail.tp2.yahoo.com ([203.188.202.136])
by bosimpinc01.eigbox.net with NO UCE
id hz3e1Y04Q2x4wff0000000; Sat, 26 Jan 2008 18:03:40 -0500
X-EN-OrigIP: 203.188.202.136
X-EN-IMPSID: hz3e1Y04Q2x4wff0000000
Received: from [202.43.196.225] by n6.bullet.mail.tp2.yahoo.com with NNFMP; 26 Jan 2008 23:03:38 -0000
Received: from [217.12.4.215] by t2.bullet.tpe.yahoo.com with NNFMP; 26 Jan 2008 23:03:38 -0000
Received: from [216.252.122.219] by t2.bullet.ukl.yahoo.com with NNFMP; 26 Jan 2008 23:03:37 -0000
Received: from [69.147.84.116] by t4.bullet.sp1.yahoo.com with NNFMP; 26 Jan 2008 23:03:36 -0000
Received: from [127.0.0.1] by omp208.mail.sp1.yahoo.com with NNFMP; 26 Jan 2008 23:03:36 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 898151.57684.bm@omp208.mail.sp1.yahoo.com
Received: (qmail 3591 invoked by uid 60001); 26 Jan 2008 23:03:36 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Receivedate:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID;
b=kCNqQQ1OgEZz756dvDTmXGgnGwaXQ/6XkKFfOqCqDhBbrkjzu8n+o5GoMI2XYNVeZFaAlNpxXxMnpKCU yR7k2CxglG1DE0EwGEqrspbOmaVjohB7LseMNYxXVmDnDsudhJ twixcJY90S72IMmzi0MT59/zf3EM2S9af8HkT/MgE=;
X-YMail-OSG: 7l2K_hwVM1mdYeKNkfitQs2KuA9NJelvZhnmQCDYnnT6kIW8BK lL81psnVFbe6CgUg--
Received: from [121.187.240.30] by web45714.mail.sp1.yahoo.com via HTTP; Sat, 26 Jan 2008 15:03:36 PST
Date: Sat, 26 Jan 2008 15:03:36 -0800 (PST)
From: Reynold Lily <parameciasumptuous@yahoo.com>
Subject: Acept 2400 US Dollars deposit bonus immediately!!!
To: sweepingstabler@yahoo.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-528771048-1201388616=:3427"
Content-Transfer-Encoding: 8bit
Message-ID: <621989.3427.qm@web45714.mail.sp1.yahoo.com>

[winbig]

From Korea this time:

[ ISP Organization Information ]
Org Name : Korea Telecom
Service Name : KORNET
Org Address : Jungja-dong, Bundang-gu, Sungnam-ci
Org Detail Address: 206

[ ISP IPv4 Admin Contact Information ]
Name : IP Administrator
Phone : +82-2-3674-5708
E-Mail : kornet_ip@kt.co.kr

[ ISP IPv4 Tech Contact Information ]
Name : IP Manager
Phone : +82-2-3674-5708
E-mail : kornet_ip@kt.co.kr

[ ISP Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-100-0000
E-mail : abuse@kornet.net

121.187.240.30

[GaryWatson]

Here's what I got. (Just testing to see if I can work a screenshot yet

[GaryWatson]

Yessss. Got it. Thanks for the advice BB