Here is the spam message, with its links disabled so nobody will accidentally click and end up in spam hell.

From: Kuldip G. Murphy-king [kmurphy-king_wd@terrific.com]
Sent: Wednesday, October 15, 2003 12:18 AM
To: alfred_katz@hotmail.com; alfred_lau@hotmail.com; alfred_li00@hotmail.com; alfred_lord@hotmail.com; alfred_mimenza@hotmail.com; alfred_morris@hotmail.com; alfred_nemes@hotmail.com
Subject: Find the ones that are looking for it hbkefs31brf8bxex8l

Browse thru our database of online cheating wives. If all you want is sex then this is your personals site. Get it on tonight (linked to spamhttp://ultimatepersonals.biz/onlinecheatingwives/100055.html - ed.)

iqcto98ga0wjhn69bg6s3q5a5 4nz7t85nrdpd3qoz59c1ajc4wh3 y26nh21tcqxoquhtk19h01a rl90asmoi9twkbn41xxqfo1 eu4ltbxvkf43i6slrv2og1k j71cc21xea3tk82uyh3acv7 sb98ig2pcrhe6836h1348 ggflau3psth750utp8lmqwog3 g35z5h39jgkiy59t3p87z8

Here is an alternate form of the spam message, with its links disabled so nobody will accidentally click and end up in spam hell.

From: Maggi Leibowitz [maggileibowitzbr@terrific.com]
Sent: Wednesday, October 15, 2003 5:55 AM
To: biboyuk@hotmail.com; bibleteach2001@hotmail.com; biblethumper83@hotmail.com
Subject: Online Cheating Wives 0rp4t43919adm17az6

Our database of married but lonely house wives has doubled in the last 3 months! The site just keeps growing!! The truth is these ladies just want to be able to meet guys and still keep their family's. Most of them are simply looking for new friends, part time lovers and one night stands. If you are looking for single woman than you should try a different web site. This one is all about married horny house wives :)

Get Lucky Tonight (linked to spamhttp://ultimatepersonals.biz/onlinecheatingwives/100055.html - ed.)

l2mmsw2w2dlke3r00sv2mezq9 dfbh3l1h9na5y2vveh1xau 3vthir3tduz7ihv0fmm13jo1cl b03c902mrd8p4vcle2yzz8ha2 7rg0yb3djjxeykp11y2jqye fte0dc3ixqxvf3anyq5c37n9 8sd4za1urw1rx2t66wffya8qqn56 vck9udhqlxp84cto52d6he nvrcv83ojffordy31avb8c

Here is the header from the spam message

Received: from awn.com ([64.230.172.122]) by tomts10-srv.bellnexxia.net
(InterMail vM.5.01.06.04 201-253-122-130-104-20030726) with ESMTP
id <20031015051809.EXZR1840.tomts10-srv.bellnexxia.net@awn.com>;
Wed, 15 Oct 2003 01:18:09 -0400
Message-ID: <5ca401c392db$2ce6b8d2$a9d2e1d5@ftrwh2i>
From: "Kuldip G. Murphy-king" <kmurphy-king_wd@terrific.com>
To: alfred_katz@hotmail.com, alfred_lau@hotmail.com, alfred_li00@hotmail.com, alfred_lord@hotmail.com, alfred_mimenza@hotmail.com, alfred_morris@hotmail.com, alfred_nemes@hotmail.com
Subject: Find the ones that are looking for it hbkefs31brf8bxex8l
Date: Wed, 15 Oct 2003 05:18:11 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0351_DCE706E0.9DE37ED6"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165

(really from 64.230.172.122 HSE-Montreal-ppp102285.qc.sympatico.ca)

Here we find "whois" the domain which sponsored the spam (ultimatepersonals.biz) registered to

This is the same registrant as freeclicks.biz seen earlier here, through the same registrar, but with different domain name servers.

So now what about those nameservers for the spamvertizer's domain, whois freejoinsnow222.biz?

We note the DNS for the spamvertizers DNS is powermailing.biz, and because that sure sounds like a spamming related domain we whois it too here

Here we find the ip address for the spamvertizer, http://ultimatepersonals.biz

10/15/03 01:09:23 dns http://ultimatepersonals.biz
Mail for ultimatepersonals.biz is handled by mail.ultimatepersonals.biz
Canonical name: ultimatepersonals.biz
Addresses:
200.210.170.39

Lets also look for the spamvertizer's DNS servers at NS1.freejoinsnow222.BIZ and NS2.freejoinsnow222.BIZ

10/15/03 04:06:14 dns NS1.FREEJOINSNOW222.BIZ
Canonical name: NS1.FREEJOINSNOW222.BIZ
Addresses:
67.96.72.82

10/15/03 04:07:40 dns NS2.FREEJOINSNOW222.BIZ
Canonical name: NS2.FREEJOINSNOW222.BIZ
Addresses:
67.96.72.83

Lets also look for the DNS server's DNS servers at NS1.POWERMAILING.BIZ and NS2.POWERMAILING.BIZ

10/15/03 01:14:58 dns NS1.POWERMAILING.BIZ
Canonical name: NS1.POWERMAILING.BIZ
Addresses:
200.207.128.163

10/15/03 01:16:29 dns NS2.POWERMAILING.BIZ
Canonical name: NS2.POWERMAILING.BIZ
Addresses:
218.6.2.138

and look for the third nameserver listed on the powermailing.biz registration

10/15/03 01:19:35 dns NS3.POWERMAILING.BIZ
Canonical name: NS3.POWERMAILING.BIZ
Addresses:
61.174.143.251

and look for the address of powermailing.biz itself

10/15/03 01:20:40 dns POWERMAILING.BIZ
Canonical name: POWERMAILING.BIZ
Addresses:
145.99.195.130
200.36.37.30

Intrigued as to what this powermailing.biz is all about, we surfed on over to http://powermailing.biz,

We Provide Hosting and dedicated Hosting. We also submit your domains to Search engines, and we can optimize them and generate doorpages for better positioning. We also provide Domain Registration for you. We can provide the tools for mail advertising.

We can do the Bulk mailing using Opt-in mails.Indeed, this cannot be understated. 100% Opt-In emails means that these individuals have agreed to received your targeted message. You cannot be accused of spamming anyone! What could be better!

Note that the spam sample here is definitely not to an opt-in list