More Spam from Shaw

Posted by Dave Yadallee on
From - Mon May 28 05:38:00 2007

X-Account-Key: account2

X-UIDL: Jh6"!44;"!g3""!-hP!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.1/8.14.1) with ESMTP id l4S4P4pL010975

for ; Sun, 27 May 2007 22:25:09 -0600 (MDT)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.1/8.14.1/Submit) id l4S4P4wr010964

for dave@doctor.nl2k.ab.ca; Sun, 27 May 2007 22:25:04 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Sun, 27 May 2007 22:25:03 -0600

Resent-Message-ID: <20070528042503.GA9767@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

Received: from S010600016c250a3a.ed.shawcable.net

by doctor.nl2k.ab.ca (8.14.1/8.14.1) with SMTP id l4S3dR87023962

for ; Sun, 27 May 2007 21:39:34 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from criss ([68.148.74.166])

by i_floridarealestate.net(HyperSendmail v2008.922)

with ESMTP id for doctor@nl2k.ab.ca;

Mon, 28 May 2007 05:45:04 +0200

Date: Mon, 28 May 2007 05:45:04 +0200

From:נועה

Subject: {Spam?} הצעה למנהלי חברות

To: "idoctor@nl2k.ab.ca"

Message-id: <5263-576092145640690@criss>

MIME-version: 1.0

Content-type: multipart/alternative;

boundary="Boundary_(ID_KStlmUHaczwgrH2+oCA8Fn)"

X-NetKnow-InComing-4.59.4-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.59.4-2-MailScanner-SpamCheck: spam, SORBS-DNSBL,

SORBS-DUL, RFC-IGNORANT-POSTMASTER, RFC-IGNORANT-ABUSE,

SpamAssassin (not cached, score=14.792, required 1,

HTML_MESSAGE 0.00, MIME_HTML_MOSTLY 0.00, MPART_ALT_DIFF 1.14,

RCVD_IN_SORBS_DUL 3.20, RDNS_NONE 0.10, SUBJECT_NEEDS_ENCODING 1.28,

SUBJ_ILLEGAL_CHARS 1.53, URIBL_RHS_DOB 5.00, URI_NOVOWEL 2.54)

X-NetKnow-InComing-4.59.4-2-MailScanner-SpamScore: ssssssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4.59.4-2-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-InComing-4.59.4-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: Jh6"!44;"!g3""!-hP!!





--Boundary_(ID_KStlmUHaczwgrH2+oCA8Fn)

Content-type: text/plain; charset=windows-1255

Content-transfer-encoding: 7BIT









--

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.





--Boundary_(ID_KStlmUHaczwgrH2+oCA8Fn)

Content-type: text/html; charset=windows-1255

Content-transfer-encoding: quoted-printable








5">








style=3D"BORDER-RIGHT: #265461 2px solid; BORDER-TOP: #265461 2px solid; BO=

RDER-LEFT: #265461 2px solid; BORDER-BOTTOM: #265461 2px solid"

cellSpacing=3D0 cellPadding=3D0 width=3D750 align=3Dcenter border=3D0>















style=3D"FONT-SIZE: 25px; COLOR: #ff9400; FONT-FAMILY: tahoma">=

92;זמנה

להשתתף בפי=

497;לוט ללא תשלו=

;ם





style=3D"FONT-SIZE: 15px; COLOR: #003229; FONT-FAMILY: tahoma"> =

חברת

גזפרו מזמ•=

7;נה את חברתך ל=



השתתף
  בפיי&=

#1500;וט להסבת מס=

08;ר כלי רכב

בחברתך להנ–=

6;ה בגז.

   
f9400">ההשתתפות

בפיילוט - לל=

488; תשלום!

  מט&=

#1512;ת הפיילוט ל=

88;פשר לך לבחון=

מדגמית

את יתרונות
&=

nbsp; החיסכון וה—=

3;ימוש ברכב המ&=

#1493;נע בגז ובנז=

97;ן

 

חברות רבות =

89;משק זכו להצל=



חה גדולה בהש=

514;תפותן
  בפי=

97;לוט דומה בעב=



ר,

וחוסכות כס–=

7; רב
  בשימוש =

89;רכבים המונע&=

#1497;ם בגז.

   


target=3D_blank>לה=

513;תתפות בפייל=



וט אליך למלא
>טופס

זה

width=3D354>











style=3D"FONT-WEIGHT: bold; FONT-SIZE: 12px; COLOR: #99cc66; FONT-FAMILY: t=

ahoma"

cellSpacing=3D0 cellPadding=3D0 border=3D0>





הופ



י



ל



די



ר



תי תפו



שי



ק ב



ינ



ר



ט



ק ע"י מ

י

מ

ה - ש

ו

צה ו

וו

א

ט

נ




cellSpacing=3D0 cellPadding=3D0 border=3D0>





































ל רה מ י פו
href=3D"http://fdlffjl.info/gu/" target=3D_blank>ח
TD>
href=3D"http://fdlffjl.info/gu/" target=3D_blank>א
TD>

הס רש מת ת צה -
fdlffjl.info/gu/"

target=3D_blank>ל
target=3D_blank>ץ כ
target=3D_blank>ן





cellSpacing=3D0 cellPadding=3D0 border=3D0>






























































href=3D"http://fdlffjl.info/go/" target=3D_blank>לח=

;
href=3D"http://fdlffjl.info/go/" target=3D_blank>אן=

; - להזמנת שר		 ת צ ל ב ל ת ב ש אל

target=3D_blank>ץ כ		 ו י תפו ה ג ו א י י ר

--=20




This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.





--Boundary_(ID_KStlmUHaczwgrH2+oCA8Fn)--





A Sample Shaw Spam

Posted by Dave Yadallee on
From - Tue May 15 20:31:56 2007

X-Account-Key: account2

X-UIDL: ogR"!6H;!!#?$!!hd,!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.1/8.14.1) with ESMTP id l4FIEepf010649

for ; Tue, 15 May 2007 12:14:45 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.1/8.14.1/Submit) id l4FIEeBi010648

for dave@doctor.nl2k.ab.ca; Tue, 15 May 2007 12:14:40 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Tue, 15 May 2007 12:14:40 -0600

Resent-Message-ID: <20070515181440.GD6260@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

Received: from relay.crocusplains.com

by doctor.nl2k.ab.ca (8.14.1/8.14.1) with ESMTP id l4FFrfnl022828

for ; Tue, 15 May 2007 09:53:47 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from localhost (localhost [127.0.0.1])

by relay.crocusplains.com (Postfix) with ESMTP id DF7C825B2E

for ; Tue, 15 May 2007 10:48:35 -0600 (MDT)

Received: from relay.crocusplains.com ([127.0.0.1])

by localhost (cgyfs01 [127.0.0.1]) (amavisd-new, port 10024) with ESMTP

id 29358-02 for ; Tue, 15 May 2007 10:48:35 -0600 (MDT)

Received: from cgyts01 (cgy_ts_01.crocusplainscgy.com [192.168.200.201])

by relay.crocusplains.com (Postfix) with SMTP id CBAD524778

for ; Tue, 15 May 2007 10:48:35 -0600 (MDT)

From: "Developer"

To:

Subject: Find a web developer when you need one.

Date: Tue, 15 May 2007 09:56:51 -0600

Message-ID: <010201c79709$a73c3870$c9c8a8c0@crocusplainscgy.com>

MIME-Version: 1.0

Content-Type: text/plain;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Mailer: Microsoft CDO for Windows 2000

Thread-Index: AceXCac8nbzc1S7lSd2MsC2NhG1TAQ==

Content-Class: urn:content-classes:message

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1896

X-Virus-Scanned: by amavisd-new at crocusplains.com

X-NetKnow-InComing-4.59.4-2-MailScanner: Found to be clean, Found to be clean

X-Spam-Status: No, No

X-NetKnow-InComing-4.59.4-2-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-InComing-4.59.4-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: ogR"!6H;!!#?$!!hd,!!



Hello,



Web Designers:



Struggling to find a qualified developer for your online projects? Ever had=

to decline a project because a reliable developer was not accessible? Want=

instant access to reliable developers when you need them? We are a design=

and development team that assists many organizations in the development of=

their web-based projects. Specializing in PHP and ASP, we have the skills=

to build impressive and dynamic websites, which are increasingly on demand=

by clients in need of a web presence.



Business Owners:



The competitive nature of business, especially now with the Internet, deman=

ds being on top of your website and its message. We empower businesses wit=

h affordable, professional websites and custom software applications that g=

enerate revenue.



Learn more at http://www.CrocusPlains.com.



Thank you



----------



To be removed from our list please reply to this message with REMOVE as the=

subject.



--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.





Our logs show May 15 09:53:47 doctor sendmail[22828]: l4FFrfnl022828: from=, size=2067, class=0, nrcpts=1, msgid=<010201c79709$a73c3870$c9c8a8c0@crocusplainscgy.com>, proto=ESMTP, daemon=MTA, relay=crocusplains.com [68.145.52.138] (may be forged)



and



whois 68.145.52.138

BW whois 3.4 by Bill Weinman (http://whois.bw.org/)

Copyright 1999-2003 William E. Weinman

Request: 68.145.52.138

connected to whois.arin.net [199.43.0.144:43] ...



OrgName: Shaw Communications Inc.

OrgID: SHAWC

Address: Suite 800

Address: 630 - 3rd Ave. SW

City: Calgary

StateProv: AB

PostalCode: T2P-4L4

Country: CA



ReferralServer: rwhois://rs1so.cg.shawcable.net:4321



NetRange: 68.144.0.0 - 68.151.255.255

CIDR: 68.144.0.0/13

NetName: SHAW-COMM

NetHandle: NET-68-144-0-0-1

Parent: NET-68-0-0-0-0

NetType: Direct Allocation

NameServer: NS7.NO.CG.SHAWCABLE.NET

NameServer: NS8.SO.CG.SHAWCABLE.NET

Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE

RegDate: 2002-06-03

Updated: 2006-02-08



OrgAbuseHandle: SHAWA-ARIN

OrgAbuseName: SHAW ABUSE

OrgAbusePhone: +1-403-750-7420

OrgAbuseEmail: internet.abuse@sjrb.ca



OrgTechHandle: ZS178-ARIN

OrgTechName: Shaw High-Speed Internet

OrgTechPhone: +1-403-750-7428

OrgTechEmail: ipadmin@sjrb.ca



# ARIN WHOIS database, last updated 2007-05-14 19:10

# Enter ? for additional hints on searching ARIN's WHOIS database.