nts-uzdinelz04d07p19_0001 - 2004-12-13 uzdinelz04d07p19 - lowraterefinance.net "get a capable html e-mailer" mailto:munnkurad@hotmail.com
Network Testing

Home | Articles | Spams | 419 scams | Spambots | Deny list | Phone list | eMail list | Free spam | FAQ | Forum
Remove requests | Decode 64 | Decode qp | Decode ip | Other sites | Spam SUCKS! | Formmail Scans
Logos | Phishing | Lottery Scams | Support TOASTEDspam.com | Network Testing Services | PushPinMap
(3005) View this spam as a pruned html file TOASTEDspam.com toasted spam dot com
nts-uzdinelz04d07p19_0001 - 2004-12-13 uzdinelz04d07p19 - lowraterefinance.net "get a capable html e-mailer" mailto:munnkurad@hotmail.com
This spam was sent to spamtrap address nts-uzdinelz04d07p19@munged.ext
which decodes to 210.49.145.120 2004-04-07 16:19

It was also CC'd to nts-fdjebgbc04e23o03@munged.ext
which decodes to 64.105.27.23 2004-05-23 15:03

13 14:16:23 www sendmail[14318]: iBDJG6s14318: from=<mwtwyypngs@o2.pl>, size=12920, class=0, nrcpts=1, msgid=<334236592@MKCQAHI>, proto=SMTP, daemon=MTA, relay=as8-200-76-195-212.mtyxl.axtel.net [200.76.195.212]
Dec 13 14:16:25 www sendmail[14334]: iBDJG6s14318: ctladdr=<nts-uzdinelz04d07p19@munged.ext> (8/0), delay=00:00:16, xdelay=00:00:02, mailer=prog, pri=42371, dsn=2.0.0, stat=Sent

2004-04-07 16:19:44 - uzdinelz04d07p19 - 210.49.145.120  c210-49-145-120.kelvn1.qld.optusnet.com.au - Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322) - http://www.munged.ext/larts/

2004-05-23 15:03:39 - fdjebgbc04e23o03 - 64.105.27.23  h-64-105-27-23.lsanca54.covad.net - Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) - http://www.munged.ext/articles/disptext/munged.ext_0001

This spammer requested network testing with the following email:

------------------------------------------------------------

Return-path: mwtwyypngs@o2.pl Mon Dec 13 14:16:23 2004 [2004-12-13 14:16:24 106795]
Received: from as8-200-76-195-212.mtyxl.axtel.net (as8-200-76-195-212.mtyxl.axtel.net [200.76.195.212])
   by www.munged.ext (8.11.6/8.11.6) with SMTP id iBDJG6s14318;
   Mon, 13 Dec 2004 14:16:09 -0500
Received: from LQFRL-YE49 (200.76.195.212) by 200.76.195.212; Mon, 13 Dec 2004 14:15:58 -0500
From: "Lindsay Carey" <mwtwyypngs@o2.pl>
To: nts-uzdinelz04d07p19@munged.ext
Cc: nts-fdjebgbc04e23o03@munged.ext
Subject: Reminder!!
Date: Mon, 13 Dec 2004 14:15:58 -0500
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <334236592@MKCQAHI>
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1437
X-spamfilt: Chienworks* SpamFilt - 2004-12-13 14:16:24 - [106795]
X-spamfilt: Excessive use of quoted-printable: 100.05
X-spamfilt: b-/b - 1 - refinance
X-spamfilt: bay hits: +0 -2
X-spamfilt: bay head: + -224.8
X-spamfilt: bay body: +378 -488.2
X-spamfilt: bay html: +390.8 -501.2
X-spamfilt: bay index: 0.612694078649082
X-spamfilt: #0 +0 -2 =0

This is a multi-part message in MIME format.

--Java.XTKJZ.3803_35H97FV3.25NW1135
Content-Type: multipart/alternative;
boundary="Java.HWLAB.5497_79F81TC0.21KE7007"

--Java.HWLAB.5497_79F81TC0.21KE7007
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit

Get a capable html e-mailer


--Java.HWLAB.5497_79F81TC0.21KE7007
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-1=
">
<META content=3D"MSHTML 6.00.2900.2523" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2><A href=3D"http://www.lowraterefinance.ne=
t/x/loan2.php?id=3Dd37"><IMG alt=3D""
hspace=3D0 src=3D"cid:%RNDATTID@MKCQAHI" align=3Dbaseline
border=3D0></A></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>GAZA CITY (CNN) -- Four I=
sraeli
troops were killed Sunday when Palestinian militants set off an explosion =
in a
tunnel beneath an Israeli military checkpoint and opened fire on the check=
point
as well, an Israeli official said.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>The Palestinian militant =
group Hamas
said it had carried out the attack together with another group.</FONT></DI=
V>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>Government spokesman Raan=
an Gissin
said four soldiers were killed.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>Six people were taken to =
hospital --
four badly hurt, one with moderate injuries and one lightly injured, milit=
ary
sources said.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>The sources said another =
soldier
remained beneath the rubble.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>Gissin said rescue operat=
ions were
continuing Sunday night.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>The attack "indicates tha=
t unless
there is decisive and sustained effort taken to dismantle the terrorist
organization, it will be impossible to move towards normalizations and tow=
ards
political negotiations," Gissin told a news crew. "And I think the
responsibility on that lies with the Palestinian Authority."</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>Shortly after the first b=
last, a
second explosion was heard in southern Gaza, but its precise location was =
not
immediately known.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>Hamas, in a phone call to=
CNN, said
it had set off the first explosion near Rafah in cooperation with a group =
called
the Fatah Hawks.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>There was no immediate in=
formation
available on that group, although it was believed to be linked to the Fata=
h
movement formerly led by the late Palestinian leader Yasser Arafat.</FONT>=
</DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>Israeli military sources =
said it was
a coordinated attack, with Palestinians firing mortar shells and guns at t=
he
post when the explosives were detonated.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>It was not clear whether =
there were
Palestinian casualties.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>News video of the afterma=
th showed
soldiers using stretchers to transport troops who appeared to be severely =

wounded.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>In a pamphlet distributed=
after the
attack, Hamas said it had used 1.5 tons of explosives and had recorded vid=
eo of
the incident.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>Palestinians have used tu=
nnels in the
area to smuggle weapons from Egypt. Israel has carried out operations to c=
rack
down on the smuggling.<BR>Shell explosion in schoolyard</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>An Israeli tank shell exp=
loded in a
Gaza schoolyard Sunday morning, wounding eight Palestinian schoolchildren,=

Palestinian medical and security sources said.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>The children between the =
ages of 6
and 12 -- sustained moderate to light injuries, the sources said.</FONT></=
DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>The violence happened in =
Khan Yunis
in central Gaza</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>Israeli military sources =
said that
forces in the area identified what they thought was a number of mortar she=
lls
being fired towards Israeli settlements nearby.</FONT></DIV>
<DIV><FONT color=3D#eaeaea></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#eaeaea size=3D2>In response, the forces f=
ired towards
the positions with light weapons, but did not fire a tank shell, the milit=
ary
sources said.</FONT></DIV></BODY></HTML>


--Java.HWLAB.5497_79F81TC0.21KE7007--

--Java.XTKJZ.3803_35H97FV3.25NW1135
Content-Type: image/gif;
name="%ATTNAME.gif"
Content-Transfer-Encoding: base64
Content-ID: <%RNDATTID@MKCQAHI>

------------------------------------------------------------

graphical email; image contains:

Hi,
This short note is to confirm the following.
You are eligible to receive a $380,000 loan for as low as $322.00 per month.
The approval process takes no longer than a minute.

------------------------------------------------------------

[whois.yesnic.com]
-----------------------------------------------
Queried Domain Information as follows
-----------------------------------------------

Domain Name : lowraterefinance.net

::Registrant::
        Name      : Peter Vantec
        Email     : munnkurad@hotmail.com
        Address   : 4927 Vittu Ave.
        Zipcode   : none
        Nation    : PL
        Tel       : 31-342-913-44
        Fax       : 

::Administrative Contact::
        Name      : Peter Vantec
        Email     : munnkurad@hotmail.com
        Address   : 4927 Vittu Ave.
        Zipcode   : none
        Nation    : PL
        Tel       : 31-342-913-44
        Fax       : 

::Technical Contact::
        Name      : Peter Vantec
        Email     : munnkurad@hotmail.com
        Address   : 4927 Vittu Ave.
        Zipcode   : none
        Nation    : PL
        Tel       : 31-342-913-44
        Fax       : 

::Name Servers::
        ns1.gtnlc.com   202.102.230.36
        ns2.gtnlc.com   219.148.2.27

::Dates & Status::
        Created Date   2004-12-05 18:56:54 EST
        Updated Date   2004-12-05 18:56:54 EST
        Valid Date     2005-12-05 18:56:54 EST
        Status         ACTIVE

host lowraterefinance.net
;; connection timed out; no servers could be reached
host www.lowraterefinance.net
;; connection timed out; no servers could be reached


TOASTEDspam.com toasted spam dot com