Joe Wein
Fighting spam and scams
on the Internet

Home / Blog / About us
Spam
419/Nigeria
Online fraud
jwSpamSpy
Contact

Email Spam Filter:
jwSpamSpy
Try it for free!

Google
 

Information about "Joe Jobs"

Other Joe-jobs against anti-spam sites: Vigilante Joe-jobs:

joe-job: n., vt.

A spam run forged to appear as though it came from an innocent party, who is then generally flooded by the bounces; or, the act of performing such a run.

Here are several examples of Joe Jobs we've come across over the last couple of months. Some of them appear to be the work of a vigilante who is trying to get certain websites shut down that deal in illicit content such as credit card fraud. Another, the one targeting spamblocks.com takes aim at a spamfilter service and bears the same handwriting as the three Joe Jobs against joewein.de.

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!

lncrew.com

Received: from [61.41.38.54] (helo=52)
by mx24.web.de with smtp (WEB.DE 4.99 #603)
id 1Ano4q-0001cx-00; Tue, 03 Feb 2004 01:06:05 +0100
Received: from 85.195.116.66 by 61.41.38.54; Sun, 01 Feb 2004 16:57:22 -0700
Message-ID: <DLXLUHSMYMACQTUYWOUEEOU@aol.com>
From: "Janette Childs" <host@hosthost.biz>
Reply-To: "Janette Childs" <host@hosthost.biz>
To: dimed@web.de
Subject: @(*_*)@
Date: Mon, 02 Feb 2004 02:00:22 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--3737563693725759"
X-Originating-IP: 217.72.192.149
Precedence: bulk

----3737563693725759
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable

Hello, Thank you for registration on our board - http://www.lncrew.com

Welcome to our underground Site!
http://www.lncrew.com

In our site you will find:
Spam Hosting - from 20$ per mounth.
Fraud Hosting - from 30$ per mounth.
Stoln Credit Cards, Fake ID, DL's.
Spam For free only from 1.02.2004 to 5.02.2004.


Welcome - http://www.lncrew.com and http://forum.lncrew.com

-------
Best Hosting.
e-mail: support@netua.com
abuse e-mail: abuse@netua.com
http://www.netua.com
-------
strength cogent adamant agave esteem jane catherine regent nepenthe calumn=
y kingsley creaky artwork edmonton carnival prognosticate=20

----3737563693725759--


shadowfamily.com

Received: from [81.211.213.40] (helo=81.211.213.40)
by mxng10.kundenserver.de with smtp (Exim 3.35 #1)
id 1AyqFv-00015k-00
for ####@#########; Thu, 04 Mar 2004 11:39:11 +0100
To: #####@#######
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Message-Id: <E1AyqFv-00015k-00@mxng10.kundenserver.de>
From: dnsadmin@tucows.com
MIME-Version: 1.0
Precedence: bulk
Date: Wed, 03 Mar 2004 18:45:25 -0800
Subject: Your credit card will be billed at $29.95
Content-Type: text/plain; charset=Windows-1252
Content-Transfer-Encoding: 7bit

Your credit card will be billed at $22.95 weekly and free 3 pack of child
porn CD is shipping to your billing address. To cancel your membership
and CD pack please email full credit card details to
dnsadmin@tucows.com Ready to enjoy all types of underage
porn? We have the best selection for every taste! Click the secret link
below and have fun... www.shadowfamily.com


Contact us:
http://resellers.tucows.com/contact_service

You can order by phone:1- 416-535-0123


dumpsmarket.com

Return-path: <t3hh@yahoo.com>
Received: from 65.35.106.37 (37.106.35.65.cfl.rr.com [65.35.106.37])
by fozzy.webpack.hosteurope.de (8.11.6/8.11.6) with SMTP id i0O1u8728454
for <#####@#########>; Sat, 24 Jan 2004 02:56:08 +0100
Message-Id: <200401240156.i0O1u8728454@fozzy.webpack.hosteurope.de>
From: orders@avahost.net
To: #####@############
Subject: Welcome to www.dumpsmarket.com
Date: Fri, 23 Jan 2004 17:59:35 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165

Welcome to www.dumpsmarket.com the site of stolen credit cards,child porno, fake money, passports and complete info about any US citizen!


You can get fresh stolen dumps here:

http://www.dumpsmarket.com/forum/viewtopic.php?t=77

Only using our site you can get every detail of any US citizen including SSN number:

http://www.dumpsmarket.com/forum/viewtopic.php?t=192

Credit cards with cvv2 information are available here:

http://www.dumpsmarket.com/forum/viewtopic.php?t=57

Our site will be usefull for the those who want to wash their money also.
If you don't want to pay taxes or you need to buy something illegal like weapons or drugs.

Quick contacts:
Panther 44007777
Graph 146191522


You can order by phone: 5092757151.

Best regards,
Vladimir V Panfilovich.


dumpsmarket.ws

Received: from [213.37.60.250] (helo=213.37.60.250)
by delta.mc1.hosteurope.de with smtp (Exim 4.34)
id 1CAVO6-0002Ow-2W
for #####@############; Thu, 23 Sep 2004 17:20:05 +0200
From: sales@enom.com
To: #####@############
Subject: Welcome to www.dumpsmarket.ws
Date: Thu, 23 Sep 2004 10:19:54 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

Welcome to www.dumpsmarket.cn
Here you can buy stolen passports, counterfeit dollars and all other things you are in want of. If you need, we would provide you with the info about the bank account of a person who you are interested in. Also there are credit cards dumps of US and Europe residents. Your faithfully,panther aka Graph.


dumpsworld.com

Received: from [83.103.129.19] (helo=83.103.129.19)
by epsilon.mc1.hosteurope.de with smtp (Exim 4.34)
id 1CH1qe-00053I-M5
for ######@##########; Mon, 11 Oct 2004 17:12:34 +0200
From: jdandrea@att.com
To: ######@##########
Subject: over 2 million DUMPS for sale
Date: Mon, 11 Oct 2004 10:09:12 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-HE-Spam-Level: +++++++
X-HE-Spam-Score: 7.9
X-HE-Spam-Report: Content analysis details: (7.9 points)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 NO_REAL_NAME From: does not include a real name
1.5 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
0.1 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL
2.5 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[83.103.129.19 listed in sbl-xbl.spamhaus.org]
0.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: shadowcrew.com]
3.0 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

USA DUMPS

Visa Classic, mastercard standart
10-50 - 20$/dump
50-100 - 15$/dump
over 100 - 10$/dump

Visa Gold/Platinum/Signature/Purchasing/Busines/Corporate
10-50 - 38$/dump
50-100 - 33$/dump
over 100 - 27$/dump

Mastercard except standart(premiere/etc)
10-50 - 38$/dump
50-100 - 33$/dump
over 100 - 27$/dump

EUROPE:
visa Gold/Platinum/Signature/Purchasing/Busines/Corporate
150$ per dump (france, spain, italy, turkey -160$ per dump)
mastercard - 100$ per dump (france, spain, italy, turkey -120$ per dump)
visa classic - 75$ (france, spain, italy, turkey -100$ per dump)

PAYMENT METHODS: Webmoney, e-gold.
WU only via exchangers.

BINLIST:
http://dumpsworld.com - whole
CONTACT: icq 10578

more detailed is here:

http://63.240.81.5/phpBB2/viewtopic.php?t=4683
http://www.shadowcrew.com/phpBB2/viewtopic.php?t=4683


We thank to our hosting company AT&T www.att.com,www.att.net cause it in any circumstances continues to host our site
and covers all our dirty business for the small per cent from the deals.

You can also make an order by the phone:

Phone: (908) 781-0323
Fax..: (908) 719-0124


thcdumps.com

Return-path: <enn0n@mail.com>
Received: from aerosol.che.cau.ac.kr ([165.194.13.201] helo=165.194.13.201)
by vmx02.#########.### with smtp (Exim 4.41)
id 1CAk4m-0002jR-0v
for #####@#####.##; Fri, 24 Sep 2004 09:01:05 +0200
From: noc@above.net
To: #####@#####.##
Subject: Want to steal money from credit cards?
Date: Fri, 24 Sep 2004 01:51:15 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

Welcome to www.thcdumps.com, www.4carding.cc, www.zerosecurity.biz.
Best credit cards, cashing of dirty money, stolen paypal accounts, access to the bank accounts of UK and USA residents - all this you will find only on thecc.su
Come now and you will receive 10 credit cards with cvv2 code for free.


carderboard.com, x-board.com, cardingplanet.com

Return-path: <k9u4@delphi.com>
Received: from mcdxiii.dsl.saunalahti.fi ([62.142.13.213] helo=62.142.13.213)
by vmx02.###########.net with smtp (Exim 4.41)
id 1CEwtN-0001H5-RB
for ####@#######; Tue, 05 Oct 2004 23:30:44 +0200
From: yak@onlinenic.com
To: ####@#######
Subject: Welcome to www.carderboard.com, www.x-board.com
Date: Tue, 05 Oct 2004 16:31:06 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

Today it becomes a reality, cards with or without cvv2 code from USA and European countries, you can have them for funny prices on www.cardingplanet.com,
www.carderboard.com, www.x-board.com
And also you can find the data about USA residents, starting from the bank accounts and ending with their pants size.
All this and many other things - only on our company sites.


thecc.su, thecc.us

Received: from [165.194.49.114] (helo=165.194.49.114)
by #####.##########.### with smtp (Exim 4.41)
id 1CEz7O-0005np-TC
for ####@###########; Wed, 06 Oct 2004 01:53:19 +0200
From: info@managed.com
To: ####@###########
Subject: Welcome to www.thecc.su, www.thecc.us
Date: Tue, 05 Oct 2004 18:42:23 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

Best credit cards, cashing of dirty money, stolen paypal accounts, access to the bank accounts of UK and USA residents - all this you will find only on
www.thecc.su, www.thecc.us
Come now and you will receive 10 credit cards with cvv2 code for free.



darkprofits.com

Return-Path: <Darci_Eluned@collegeclub.com>
X-Flags: 0000
Received: (qmail 28446 invoked by uid 65534); 5 Sep 2003 19:38:36 -0000
Received: from roc-66-66-156-18.rochester.rr.com (HELO rr.com) (66.66.156.18)
by mx0.gmx.net (mx005-rz3) with SMTP; 05 Sep 2003 21:38:36 +0200
Received: from roc-66-66-156-18.rochester.rr.com (roc-66-66-156-18.rochester.rr.com [66.66.156.18])
by rr.com (8.12.8p1/8.12.8) with ESMTP id pkpon35389
for <#####@#######>; Fri, 05 Sep 2003 19:39:25 -0400 (EST)
Date: Fri, 05 Sep 2003 19:39:23 -0400 (EST)
From: Tyler Jackson <Darci_Eluned@collegeclub.com>
X-Mailer: The Bat! (v1.61) Personal
Reply-To: Darci_Eluned@collegeclub.com
X-Priority: 3 (Normal)
Message-ID: <8879004799.80065380338927@collegeclub.com>
To: #####@#####
Subject: Earn profits, earn dark profits.
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------884661684253"

Welcome to the site http://www.darkprofits.com, it's us again, now we extended our offerings,
here is a list:

1. Heroin, in liquid and crystal form.

2. Rocket fuel and Tomohawk rockets (serious enquiries only).

3. Other rockets (Air-to-Air), orders in batches of 10.

4. New shipment of cocaine has arrived, buy 9 grams and get 10th for free.

5. We also offer gay-slaves for sale, we offer only such service on the NET,
you can choose the one you like, then get straight to business.

6. Fake currencies, such as Euros and US dollars, prices would match competition.

7. Also, as always, we offer widest range of child pornography and exclusive lolita
galleries, to keep out clients busy.

Everyone is welcome, be it in States or any other place worldwide.

ATTENTION. Clearance offer. Buy 30 grams of heroin, get 5 free.
Prepay your batch of rockets (air-to-air) and recieve a portable rocket-lacuncher
for free.

http://www.darkprofits.com

This offer won't last! Only until 20th of August all our clients will also recieve
a pack of 2 CDs, with best selection of child pornography.


carderportal.com

Return-Path: <Dorie_Ddene@prodigy.net>
X-Flags: 0000
Delivered-To: GMX delivery to #####@######
Received: (qmail 11278 invoked by uid 65534); 21 Sep 2003 13:09:42 -0000
Received: from foo158-160.visit.se (HELO visit.se) (212.214.158.160)
by mx0.gmx.net (mx017-rz3) with SMTP; 21 Sep 2003 15:09:42 +0200
Received: from foo158-160.visit.se (foo158-160.visit.se [212.214.158.160])
by visit.se (8.12.8p1/8.12.8) with ESMTP id icidso738753
for <#####@######>; Sun, 21 Sep 2003 13:05:45 -0400 (EST)
Date: Sun, 21 Sep 2003 13:05:43 -0400 (EST)
From: CarderPortal.Org <Dorie_Ddene@prodigy.net>
X-Mailer: The Bat! (v1.61) Personal
Reply-To: Dorie_Ddene@prodigy.net
X-Priority: 3 (Normal)
Message-ID: <225139323.9436471731804@prodigy.net>
To: joewein@gmx.net
Subject: You credit card has been charged for $234.65
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------1216130481907"

------------1216130481907
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: base64

Important notice

We have just charged your credit card for money laundry service in amount of $234.65 (because you are either child pornography webmaster or deal with dirty money, which require us to layndry them and then send to your checking account).
If you feel this transaction was made by our mistake, please press "No".
If you confirm this transaction, please press "Yes" and fill in the form below.


Enter your credit card number here:


Enter your credit card expiration date:


Contacts:

icq: 181184; admin@carderportal.com - Err0r32;

icq: 106561; svs@paris.com - Fidel


carderplanet.org

Hello our potential customer

We would like to introduce our new-born sites

www.carderplanet.org
www.mazafaka.cc
www.brandhost.ru
www.mazafaka.ru

where you can shop around most wanted and needed items in your life.
Our weapon section has wide range of hard-to-find machine guns, silencers, armour-piercing ammos and others.

First of all, let's check our 3 top-selling items:
1. Russian surface-to-air missle SA-14 "Gremlin" (upgraded analog of SS-16 "Strela") from our supplies in Kazakhstan. Due to high demand, it takes about 4 weeks to backorder that item. Weight is 10,2 kg., lenght - 1427 mm. You can make a huge party and you can have tons of fun launching your "Gremlin" with your buddies.
2. Israeli bestselling submashine-gun "Tavor" 5.56" (upgraded analog of 7.65" "Uzi"), comes with 2 full clips of standart ammo + bonus one clip of armour-piercing ammo.
3. Russian booby trap made in 5 versions:
- a bottle of Jim Beam (200 grammes of C4 inside),
- a can of Budlight beer (150 grammes of C4 inside),
- a Barbie-doll (100 grammes of C4 inside),
- a cell phone (50 grammes of C4 inside),
- a lighter Zippo (25 grammes of C4 insid
You can take one with you to the school or college and have alot of fun with your buddies. Buy more than 10 pieces of booby traps, and we upgrade C4 to C4+ for free.
(C4+ can not be detected in airports or any other areas).

Also we have our Dutch-based shop where you can buy some drugs to make your life more wonderful and funny. We have wide selection of Ganzha, Crack, both synthetic and natural Heroin.
And our prices are affordables for everyone.

If you want to buy anything from us, just visit our site, contact administrator and get full price-list. We accept all major credit cards, wire transfers and money orders.
Please ask for details if you want to use Western Union or Moneygram money transfers.


P.S. Due to our government laws all items from our shop can be sold only to 18+ aged people. We can ask you for age verification before shipping.


You can also make an order by the phone:
973-442-3401 fax: 973-989-5535
973-590-5000 Fax: 973-590-5080


newphotoid.com

From: <sales@homepageuniverse.com>
To: "user" <user@domain>
Sent: Sunday, 09 January, 2005 16:35
Subject: re:

newphotoid.com

Buy fake id from us only 75.00

With each purchase free membership to our new ch1ld porn site

Board airplane under ANY NAME we are MUSLIM friendly & ship to Iraq

Get into nudie bar see PUSS Y


spamblocks.com

Received: from [82.48.61.221] (helo=2120x2e2270x2e1180x2e70)
by mx17.##### with esmtp (WEB.DE 4.99 #605)
id 1AtyAQ-0008GL-00
for ####@####; Fri, 20 Feb 2004 01:05:20 +0100
From: newsletter@mailblocks.com
To: dimes@web.de
Subject: Newsletter
Date: Wed, 18 Feb 2004 21:41:34 -0800
MIME-Version: 1.0 (produced by Synapse)
x-mailer:
Synapse - Delphi & Kylix TCP/IP library by Lukas Gebauer
Content-type: text/html; charset=UTF-8
Content-Transfer-Encoding: Quoted-printable
Content-Disposition: inline
Content-Description: HTML text
Message-Id: <E1AtyAQ-0008GL-00@mx17.web.de>
Precedence: bulk

=3Chtml=3E



=3Cbody=3E
=3Cp=3ETired of getting spammed=3F I have a simple free solution for you=
to combat
spam on the internet stops 99 % of all spam=2E =3B Just click the link=
and try
it out today=2E=3C=2Fp=3E
=3Cp align=3D=22center=22=3E=3C!--webbot bot=3D=22HTMLMarkup=22 startspan=
--=3E=3Ca href=3D=22http=3A=2F=2Fwww=2Egenuineonlinedeals=2Ecom=22 target=
=3D=22=5Ftop=22 =3E
=3Cimg src=3D=22http=3A=2F=2Fwww=2Edslreports=2Ecom=2Fr0=2Fdownload=
=2F536236~a197e77e392cfc8c75c8d264568c4f7a=2Funtitled=2Ebmp=22 width=3D=
=22120=22
height=3D=2290=22 alt=3D=22Download Your Free ChoiceMail One Trial =22=
border=3D=220=22=3E=3C=2Fa=3E=3C!--webbot bot=3D=22HTMLMarkup=22 endspan
i-checksum=3D=2229890=22 --=3E=3C=2Fp=3E
=3Cp=3E=3Cfont size=3D=221=22=3EThis email is in compliance with the Can=
Spam act=2E =3B To be removed from this email
list please send a removal request to =3Ca href=3D=22mailto=3Anewsletter=
=40mailblocks=2Ecom=22=3E
newsletter=40mailblocks=2Ecom=3C=2Fa=3E or just reply with remove in the=
subject=2E All requests will take effect within 10 days=2E =3B
Where did you sign up to this opt-in email list=3F This list was purchased=
on eBay
inc=2E item number 2585470823 from Seller =3Cfont color=3D=22#0000FF=22=3E
=3Ca href=3D=22mailto=3Adavrome=40cox=2Enet=3Fsubject=3DEbay sale=
#2585470823 Opt-in only list=22=3E
Who Sold your email address=3C=2Fa=3E =3C=2Ffont=3E=3C=2Ffont=3E=3C=2Fp=3E
=3Cul=3E
=3Cb=3E=3Cfont size=3D=221=22=3ENo Misleading Headers or Other Masking=
of Email Origin=3C=2Ffont=3E=3C=2Fb=3E=3Cfont size=3D=221=22=3E
- An email may not include falsification of header information=2C false
registrations for email accounts or IP addresses used in connection with=
email
ads=2C and retransmissions of an email ad for the purpose of concealing=
its
origin=2E A subject heading of the message likely would mislead a=
reasonable
recipient as to the contents or subject matter of the message=2E =3C=
=2Ffont=3E
=3Cb=3E=3Cfont size=3D=221=22=3EEmail Ads Must Contain Clear=
Identification=3C=2Ffont=3E=3C=2Fb=3E=3Cfont size=3D=221=22=3E
- Messages containing advertisements or solicitations must be identified=
as
such=2C and do so by "=3Bclear and conspicuous"=3B means=2E=
Further=2C the sender must
identify itself as the initiator and sender of the email including=
company
name=2C email address and physical address=2E=3C=2Ffont=3E
=3Cb=3E=3Cfont size=3D=221=22=3EEffective Method of Opt-Out of Future=
Mailings=3C=2Ffont=3E=3C=2Fb=3E=3Cfont size=3D=221=22=3E
- Senders of emails covered by the Act must give recipients an effective=
means
of requesting not to receive future email ads from that sender=2E=
Effective
means include=3A =3Cbr=3E
=3Cbr=3E
=28a=29 Giving the recipient the ability to send a reply message or=
other
"=3BInternet-based communication"=3B =28such as a link to a Web=
site where the
recipient registers it opting=29 enabling the recipient to opt-out of=
future
emails from the sender=2C =3Cbr=3E
=3Cbr=3E
=28b=29 Keeping the opt-out means used viable for at least 30 days after=
the
original message is sent=2C and =3Cbr=3E
=3Cbr=3E
=28c=29 Ceasing transmission of email ads to that recipient no later=
than 10
business days after receipt of an opt-out request=2E =3Cbr=3E
=3Cbr=3E
 =3B=3C=2Ffont=3E
=3Cb=3E=3Cfont size=3D=221=22=3ENo Sale or Transfer of Opted-out Email=
Addresses=3C=2Ffont=3E=3C=2Fb=3E=3Cfont size=3D=221=22=3E
- Email senders=2C or any other person who is aware of an opt-out=
request=2C are
generally prohibited from selling or otherwise transferring email=
addresses of
persons who have opted-out=2E =3C=2Ffont=3E
=3Cb=3E=3Cfont size=3D=221=22=3ENo Sexually Oriented Material in Email=
Messages=3C=2Ffont=3E=3C=2Fb=3E=3Cfont size=3D=221=22=3E
- Emails that contain sexually oriented material=2E=2E =3C=2Ffont=3E
=3Cb=3E=3Cfont size=3D=221=22=3ENo Random Generation of Email Addresses=
=3C=2Ffont=3E=3C=2Fb=3E=3Cfont size=3D=221=22=3E
- You are responsible for knowing the source of your email list=2E No=
list and
emailings may contain email addresses obtained by the use of a program=
for
random generation of email addresses=2C and=2For "=3Bscraping"=
=3B Web sites or online
services=2E =3C=2Ffont=3E
=3Cb=3E=3Cfont size=3D=221=22=3ENo Invalid Email Account Generation=3C=
=2Ffont=3E=3C=2Fb=3E=3Cfont size=3D=221=22=3E
- Senders may not use scripts or other automated means to register for
multiple email accounts or online user accounts from which to transmit=
emails=2E
=3C=2Ffont=3E
=3Cb=3E=3Cfont size=3D=221=22=3ENo Unlawful Retransmission of Emails=3C=
=2Ffont=3E=3C=2Fb=3E=3Cfont size=3D=221=22=3E
- Senders are prohibited from relaying or retransmitting emails from a
computer or computer network that was accessed without authorization=2E =
=3C=2Ffont=3E
=3C=2Fbody=3E

=3C=2Fhtml=3E


cyberpolice.ru:

Received: from cm61-18-243-110.hkcable.com.hk ([61.18.243.110])
	by vmx50.********.net with smtp (Exim 4.41)
	id 1C3Xpn-00065E-Mc; Sat, 04 Sep 2004 12:31:52 +0200
X-Message-Info: NEGSQS166dMNPihgHBbd9d3+AObcz1oS
Received: from mail80.upacq.aisp.net (150.208.227.148) by dbk0-zp09.aisp.net 
	with Microsoft SMTPSVC(5.0.2195.6824);
	 Wed, 04 Sep 2002 09:30:29 -0200
Received: from OB97 (ix62.33.213.47.gzbjf47.d.aisp.net 6.58.30.128)
	by mail88.jfe.aisp.net (80.32.067f7/78.1.99) with SMTP id zm979Z47VHs7488;
	Wed, 04 Sep 2002 15:24:29 +0400
Message-ID: <0rp232ylo453hn2tas$k6vlq87euf7$oz8nbv9@I8>
From: "www@cyberpolice.ru" <www@cyberpolice.ru>
To: "Digitalis" <*******@*******.***>
References: <tablespoon589-Q85GrrLKmE25ZR4mp426@aisp.net>
Subject: bolo
Date: Wed, 04 Sep 2002 12:24:29 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="--6262479483219255811"
X-UIDL: 0)'"!R&V!!LaT!!%E/!!

----6262479483219255811
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable

Best forum about mailing and spam
Get involved today!
http://www.cyberpolice.ru

----6262479483219255811--


antispam.de:

Received: from [202.143.129.34] (helo=antispam.net)
	by mx28.web.de with smtp (WEB.DE 4.101 #87)
	id 1C6Jp8-0004wJ-00; Sun, 12 Sep 2004 04:10:40 +0200
Message-ID: <aa1401c4986b$331b3440$22721a7b@abuseyfkiflofkdn>
From: "Stop Spam" <abuseyfkiflofkdn@antispam.net>
To: "Member" <#####@web.de>
Subject: Helft uns!
Date: Sat, 11 Sep 2004 20:52:45 -0500
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Hi!

Wir betreiben die Internetseite http://www.antispam.de und brauchen Geld
für den Kampf gegen Spam E-Mails.

Wir freuen uns über jede Spende!

Bargeld & Schecks bitte an:
Nassenstein-Isermann GbR
Stichwort:  Antispam
Hämmern 1
51688 Wipperfürth
Germany

Sie können uns auch unterstützen, indem Sie Artikel in unserem Shop kaufen:
http://shop.antispam.de/

In Zusammenarbeit mit: http://www.eco.de und http://www.msn.de


whiskyshop24.de:

This Joe-job is related to the Joe-job against antispam.de and irlandseiten.de, as the operator of whiskyshop24.de and irlandseiten.de is active in antispam.de.

Return-Path: <yyyyvst@37.com>
X-Flags: 0000
Delivered-To: GMX delivery to ######@######
Received: (qmail 31413 invoked by uid 65534); 28 Sep 2004 07:47:47 -0000
Received: from lsanca2-ar24-4-62-190-086.lsanca2.dsl-verizon.net (HELO 37.com) (4.62.190.86)
by mx0.###### (mx059) with SMTP; 28 Sep 2004 09:47:47 +0200
Message-ID: <c6b001c4a523$59b837a0$8f5478fa@yyyyvst>
From: <yyyyvst@37.com>
To: "newsletter" <xmxixcxhxaxexlx1x9x7x5x@gmx.net>
Subject: Whisky direkt nach Hause bestellen
Date: Tue, 28 Sep 2004 00:21:12 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1158

In unserem Online-Shop haben Sie eine reichhaltige Auswahl an feinstem
irischen und schottischen Whisk(e)y.

Besuchen Sie unsere Internetseite:
http://www.whiskyshop24.de






Dies ist kein Sp@m! Sie erhalten diese eMail weil Sie in unserer
Kundendatei sind.


irlandseiten.de:

This Joe-job is related to the Joe-job against antispam.de and whiskyshop24.de.

Return-Path: &pnqhhuupk@cooleywhiskey.com>
X-Flags: 0000
Delivered-To: GMX delivery to ######@#####
Received: (qmail 8067 invoked by uid 65534); 30 Sep 2004 06:46:33 -0000
Received: from ppp11-177.dsl-mum.eth.net (HELO cooleywhiskey.com) (61.11.11.177)
  by mx0.gmx.net (mx058) with SMTP; 30 Sep 2004 08:46:33 +0200
Message-ID: <8a3701c4a6b1$58e102a0$3901a2c4@pnqhhuupk>
Reply-To: <pnqhhuupk@cooleywhiskey.com>
From: <pnqhhuupk@cooleywhiskey.com>
To: <xmxixcxhxaxexlx1x9x7x5x@gmx.net>
Subject: Whisky vom feinsten...
Date: Thu, 30 Sep 2004 06:50:10 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-GMX-Antivirus: -1 (not scanned, may not use virus scanner)
X-GMX-Antispam: -2 (not scanned, spam filter disabled)

Jetzt Mitglied werden in unserem Whisky Verein

http://www.irlandseiten.de/hosting/guw/index2.html


jr-cds.de:

This Joe-job is related to the Joe-job against antispam.de, whiskyshop24.de and irlandseiten.de.

Return-Path: <tahfurvvhicjhmn@020.co.uk>
X-Flags: 0000
Delivered-To: GMX delivery to ######@#####
Received: (qmail 22369 invoked by uid 65534); 2 Oct 2004 18:41:35 -0000
Received: from unknown (HELO 020.co.uk) (200.185.186.20)
  by mx0.gmx.net (mx044) with SMTP; 02 Oct 2004 20:41:35 +0200
Message-ID: <d4c401c4a8a5$abc71e00$88ec0a60@tahfurvvhicjhmn>
Reply-To: <tahfurvvhicjhmn@020.co.uk>
From: <tahfurvvhicjhmn@020.co.uk>
To: <xmxixcxhxaxexlx1x9x7x5x@gmx.net>
Subject: CDs - so billig wie noch nie...
Date: Sun, 03 Oct 2004 04:31:37 +1100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1158

Seid Ihr auf der Suche nach guten, günstigen, gebrauchten und auch
ungebrauchten CD´s? 
Dann habt Ihr hier die richtige Adresse gefunden. 
Das Angebot umfaßt derzeit über 3000 CD´s aus den Richtungen Pop, Rock,
Independent, Metal, Deutschrock, Schlager, Techno, Black,  und ein wenig
Klassik ist ebenfalls vorhanden


http://www.jr-cds.de/?id=25564


FusionPHP.Net has previously been targetted by "Joe Jobs" that accused the site to host child pornography. Therefore we suspect that the following persistent spams are also Joe Jobs by a vigilante:

From: "Patattenboerken" <potatoehead@fusionphp.net>
To: <my.email@address>
Sent: Saturday, 19 February, 2005 11:25
Subject: Visit FusionPHP.net !!!

Visit FusionPHP.NET today, fullfilling your PHP needs!!!

http://www.fusionphp.net/

We have the BEST free php news script in the world. Please click on the GOOGLE AdSense ads at the top of the page ONCE per day, Every day to keep our site online and pay for our hosting!!!

Please spread the word about our website and our scripts!!! Forward this email to 250 people and we'll pay you $7.50 US dollars via paypal.

Thank you,
Patattenboerken
http://fusionphp.net/
patattenboerken@gmail.com
webmaster@fusionphp.net

Remember to Click on the Google AdSense ads ONCE per day at least, multiple clicks per day don't matter as much as ONCE per day. Thank you.


This blatant spam for "kyrgyz.us" for hosting child pornography looks like another vigilante Joe job:

From: <sales@register.com>
To: <emailaddress>
Sent: Wednesday, 23 February, 2005 7:38
Subject: welcome to www.kyrgyz.us

A little bird told us that you have recently bought from us:

* "10 y.o. Kirgiz girl ripped by two 8inch penises" Homemade DVD
* "8 y.o. boy having sex with 13 y.o. girl" DIRECTOR'S EDITION DVD
* "35 y.o. mother having fun with her 6 y.o. twins" Lesbian DVD


As our valued customer, you have subscribed for news letter from our site.
How we opened brand new online shop in the country which has no any laws agains child porno. Welcome to kyrgyz.us. All you need to do is to register in our forum on kyrgyz.us and send a copy of that email to one of forum' administrators. After verifying your identity (we hate cops :)) you will get lifetime access to the hidden part of our forum. What do we have for you now? Tons of sweet high-resoluted child porno' pics, 150+ DVD with brand new content, with children from 5 y.o. Free worldwide delivery of DVD. New updated and completely private billing system. No chances for other to know your name or subject of your orders. Many kool bonuses and a free lottery for our customers. Three winners will have unforgettable possibility to assist during film shooting and make their own episode with any child from our list.

P.S. To Law Enforcements and just for squealers - guys don't bother us with your fuckin questions.
We paid enough to authorities to do whatever we want here. So just fuck off and watch after you fucken idiot Bush Jr.

You can also find us on www.gazeta.kg

Contact us:

support@ev1.net
customerservice@ev1.net
sales@register.com
domainregistrar@register.com


jdb@thinkmojo.com

According to this article the blog site thinkmojo.com is being joe-jobbed. Here is an example of a spam we received:


834105017 We back ONLINE !!! With our hardlolita site and the PURE CHILD PORNO site. In our memberzone we have 1000 exclusive hardcore photos with little, tasty children and over 300 Megabytes of high quality hardcore CP videos. By joining our site, you'll no longer have to search for other cp sites on the net. You will find MORE ABSOLUTELY FRESH content If you was our member. We care about our members. Often updates. Friendly support. All in ONE site! You will be totally fulfilled at our site! We have a lot of extra services inside our memberzone! 1861411100

1164510802 If you want see samples of pics and videos contact e-mail: jdb at thinkmojo.com 611385764


Message headers:

Received: from computer (s142-179-95-140.bc.hsia.telus.net [142.179.95.140])
 by my.mail.host (Postfix) with ESMTP id 7C4E57A2EF
 for <my.email@address>; Fri,  3 Nov 2006 13:22:58 -0500 (EST)
Received: from computer (localhost.localdomain [127.0.0.1])
 by computer (8.13.1/8.13.1) with ESMTP id kA3IQjZn005192
 for <my.email@address>; Fri, 3 Nov 2006 10:26:46 -0800
Received: (from root@localhost)
 by computer (8.13.1/8.13.1/Submit) id kA3IQbUN005191;
 Fri, 3 Nov 2006 10:26:37 -0800
Date: Fri, 3 Nov 2006 10:26:37 -0800
Message-Id: <200611031826.kA3IQbUN005191@computer>
To: my.email@address
Subject: 227864571
Reply-To: jdb@thinkmojo.com
From: jdb@thinkmojo.com

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!