More Adelphia Spam

From - Sun Jun 24 12:48:52 2007

X-Account-Key: account2

X-UIDL: *T""!C&N!!4$D"!f_*"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.1/8.14.1) with ESMTP id l5OCewbM009466

for ; Sun, 24 Jun 2007 06:41:03 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.1/8.14.1/Submit) id l5OCewbq009465

for dave@doctor.nl2k.ab.ca; Sun, 24 Jun 2007 06:40:58 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Sun, 24 Jun 2007 06:40:58 -0600

Resent-Message-ID: <20070624124058.GC2059@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

Received: from mta9.adelphia.net

by doctor.nl2k.ab.ca (8.14.1/8.14.1) with ESMTP id l5O1R5BC028048

for ; Sat, 23 Jun 2007 19:27:19 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from web35 ([68.168.75.142]) by mta9.adelphia.net

(InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP

id <20070624012657.CXYZ6326.mta9.adelphia.net@web35>;

Sat, 23 Jun 2007 21:26:57 -0400

Message-ID: <248049.1182648417907.JavaMail.root@web35>

Date: Sat, 23 Jun 2007 18:26:57 -0700

From: "sgtjarvisreeves008@yahoo.com.cn"

Reply-To: sgtjarvisreeves008@yahoo.com.cn

Subject: {Spam?} HELLO!

X-Priority: 3 (Normal)

Sensitivity: Normal

X-NetKnow-InComing-4.61.3-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.61.3-1-MailScanner-SpamCheck: spam, SORBS-DNSBL,

SORBS-SPAM, RFC-IGNORANT-POSTMASTER, RFC-IGNORANT-ABUSE,

SpamAssassin (not cached, score=2.348, required 1,

BOTNET_SERVERWORDS 0.00, MISSING_HEADERS 1.58, RDNS_NONE 0.10,

URG_BIZ 0.67)

X-NetKnow-InComing-4.61.3-1-MailScanner-SpamScore: ss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4.61.3-1-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-InComing-4.61.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: *T""!C&N!!4$D"!f_*"!

X-Antivirus: AVG for E-mail 7.5.472 [269.9.6/862]

Mime-Version: 1.0

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset=utf-8





--

Hello Pal,

I hope my email meets you well. I am in need of your assistance. My name is Sgt Jarvis Reeves. I am a military attache with the Engineering unit here in Ba'qubah Iraq for the united state, we have about $25 Million dollars that we want to move out of the country. My partners and I need a good partner someone we can trust to actualize this venture.The money is from oil proceeds and legal.But we are moving it through diplomatic means to your house directly or a safe and secured location of your choice using diplomatic courier services.But can we trust you? Once the funds get to you, you take your 40% out

and keep our own 60%. Your own part of this deal is to find a safe place where the funds can be sent to. Our own part is sending it to you. If you are interested I will furnish you with more details,Awaitingyoururgentresponse.sgtjarvisreeves008@yahoo.com.cn

Your Buddy. Sgt Jarvis Reeves



--

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.









--

No virus found in this incoming message.

Checked by AVG Free Edition.

Version: 7.5.472 / Virus Database: 269.9.6/862 - Release Date: 6/22/2007 3:04 PM









And analysis says:



gzcat /var/log/maillog.*.gz | egrep 248049.1182648417907.JavaMail.root@web35

Jun 23 19:27:20 doctor sendmail[28047]: l5O1R5wK028047: from=, size=1506, class=0, nrcpts=1, msgid=<248049.1182648417907.JavaMail.root@web35>, proto=ESMTP, daemon=MTA, relay=mta9.adelphia.net [68.168.78.199]

Jun 23 19:27:20 doctor sendmail[28048]: l5O1R5BC028048: from=, size=1506, class=0, nrcpts=1, msgid=<248049.1182648417907.JavaMail.root@web35>, proto=ESMTP, daemon=MTA, relay=mta9.adelphia.net [68.168.78.199]

$whois 68.168.78.199

BW whois 3.4 by Bill Weinman (http://whois.bw.org/)

Copyright 1999-2003 William E. Weinman

Request: 68.168.78.199

connected to whois.arin.net [192.149.252.44:43] ...

Road Runner HoldCo LLC COUDERSPORT-1 (NET-68-168-64-0-1)

68.168.64.0 - 68.168.95.255

Adelphia 68168640-Z14 (NET-68-168-64-0-2)

68.168.64.0 - 68.168.79.255



# ARIN WHOIS database, last updated 2007-06-28 19:10

# Enter ? for additional hints on searching ARIN's WHOIS database.



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA