Just received this through my mail:

=======================

From: getpaidforum
Date: Thursday, February 20, 2003 04:54:29
To: bri.lfc@************
Subject: the best investment club on net-paying about 4 months all the time

dear sir

I mail to you because i know you interested in invest. If you don't like our is e-mail .

please delete it .say sorry to you .
Apple Investment Club is a private investment group involved in the global high yield market
with experience in well managed mid to long term trading contracts and private venture capital
opportunities.If you are looking for a relatively safe place to grow your gold in today's
volatile HYIP market, this is it. Our dedicated investment team analyzes world market trends
and performs an extensive amount of due diligence for each contract we initiate.represented below
as "DIC" provides official rules published on this webpage, which members should review at least
once a month .Itoffers you the opportunity to earn a daily interest rate of 1% on $50-$300 ,
1.5% for $301-$500 , 2% for $501-$1000 3% for $1001-5000 and 5% for $5001- $un1.
E-gold deposited with us.

http://appleinvestmentclub.2ya.com/

our club opened Nov 14 2002 .

now is the best one i think .jioning our mailing listing for more information now.

please visit

http://groups.yahoo.com/group/appleinvestmentclub/

=======================================

So this little f*****r is sending me spam from my email link on here, will they ever give up?

If its not PM's its emails

Spammer, if you're reading this PI$$ OFF!!!

He could have also got it from mec-co-op's emails... You did do a 250 point email sendout through them in the past couple of days... IF you have the headers post them, then get onto Mec's WM about it and point here here... She goes by taxlady on here...

yes I got it as well!

I've reported them to www.2ya.com/ as spam and as they are a redirection service have asked how I go about taking it further..

Nope, if you look, it was sent direct from here...

admin@getpaidforum.com

I guess thats the email addy you get when sending from this forum?

It's NOT from them... he's joe jobbing..

if you still have the email, or anyone still has it, post the headers here. I think the mods will be very interested on where it's come from...


When you get someone's email, it automatically just gives you an email addy, you cant send email through the forum..

From: getpaidforum <admin@getpaidforum.com>
To: <****@orcon.net.nz>
Time: Thu, 20 Feb 2003 05:08:42
Subject: the best investment club on net-paying about 4 months all the time
mime-version: 1.0
return-path: <admin@getpaidforum.com>
received: from smtp2.orcon.net.nz (smtp2.orcon.net.nz [219.88.242.60]) by dbmail-mx2.orcon.co.nz (8.12.6/8.12.6/Debian-8) with ESMTP id h1K5A833001070 for <****@orcon.net.nz>; Thu, 20 Feb 2003 18:10:08 +1300
received: from tony-pk7rskgao ([210.83.89.166]) by smtp2.orcon.net.nz (8.12.6/8.12.6/Debian-8) with SMTP id h1K4wbku024577 for <***@orcon.net.nz>; Thu, 20 Feb 2003 17:58:40 +1300
content-type: text/plain; charset="iso-8859-1"
message-id: <200302200458.h1K4wbku024577@smtp2.orcon.net.nz>

LGwong posted about this in the forum thread....forum issues

It's not from here......

Okay, he's joe jobbing..

He's also from China, 210.* gives that away


######, those headers wont parse through spamcop...

Nope, it isnt...

210.83.89.166 <--- That's the originating IP, China based...

Received: from unknown (HELO tony-pk7rskgao) (210.83.89.166)

Traceroute for combat.uxn.com users starts at hop 5 for best speed
traceroute to 210.83.89.166 (210.83.89.166), 30 hops max, 40 byte packets 1 * * * 2 * * * 3 * * * 4 * * * 5 0.so-0-0-0.XL1.LAX2.ALTER.NET (152.63.115.217) 21.483 ms 6 0.so-4-0-0.CL1.LAX4.ALTER.NET (152.63.57.37) 23.436 ms 7 193.ATM7-0.GW3.LAX4.ALTER.NET (152.63.113.121) 24.413 ms 8 cnc-lax4-gw.customer.alter.net (157.130.244.154) 177.723 ms 9 210.52.130.121 (210.52.130.121) 182.605 ms10 1p0-gsr1-hz1.cncnet.net (210.52.131.130) 184.558 ms11 3ge0-gsr2-hz1.cncnet.net (210.52.131.138) 188.464 ms12 1p0-gsr2-nb1.cncnet.net (210.52.131.142) 189.441 ms13 210.52.252.71 (210.52.252.71) 186.511 ms14 210.52.252.130 (210.52.252.130) 192.370 ms15 203.175.200.5 (203.175.200.5) 196.276 ms

maby not sure

% [whois.apnic.net node-1]
% How to use this server http://www.apnic.net/db/
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 210.83.89.0 - 210.83.89.31
netname: lanjingling-culture-area
country: cn
descr: ningbo city,zhejiang province
admin-c: TC254-AP
tech-c: TC254-AP
status: ASSIGNED NON-PORTABLE
changed: t-wangxy2@china-netcom.com 20021028
mnt-by: MAINT-CN-ZM28
source: APNIC

person: TECH GROUP CNC
address: 9/F, Building A, Corporate Square, No. 35 Financial Street,
address: Xicheng District, Beijing 100032, P.R.China
country: CN
phone: +86-10-88093588
fax-no: +86-10-88091442
e-mail: tech-group@china-netcom.com
nic-hdl: TC254-AP
mnt-by: MAINT-CN-ZM28
changed: zhaomq@china-netcom.com 20010917
source: APNIC

no ..err

thats where my email addy is from

Here is where I look up all of this kind of stuff.....

http://combat.uxn.com/

Nice little tool!

Sorry julietNz i in a bit of a rush should learn to read whole thing

nah I'm sorry lol.. its been one of those days

I usually use Amnesi, but I can't because they are down.

Jeeze, what is it? Spamming hour?

Just got another one, read this:

This includes my reply to them



==========================================

From: Brian F
Date: Thursday, February 20, 2003 05:38:06
To: kapil@charteredvaluer.com
Subject: Re: Message Regarding EarnMoney

Stop spamming me

You say you found a web site the other day?

YES! cos its YOUR web site!!!

Or is it just a coincidence that your email addy is on the ref link for Kings rewards

http://www.kingsrewards.com/cgi-bin/signup...al@softhome.net

Now STOP SPAMMING ME NOW or I will report you and get you thrown off your ISP!!!

Earn $500 a month using these Search Engines on your web site!
http://searchtimes.com/index.php?AID=39645
http://easysearchall.com/index.php?AID=6389

Please make a search or two and make me rich
-------Original Message-------

From: Kapil Agrawal
Date: Thursday, February 20, 2003 05:24:48
To: bri.lfc@blueyonder.co.uk
Subject: Message Regarding EarnMoney

Dear Friend,
I came to know that you are a person working for all this earning money on internet and you have an account at Z-cash.
I too want to try the service of earning money on internet.
I found a website www.earnmoney.wxs.org a few days ago.

I want to ask you a question :-
1. Is all the things that are given on this website true

And about your Z-cash plz send me details about that program.


kapil


======================================

As you can see, I replied to this i.diot, the crazy thing about them, they must think I was born yesterday, the site they claimed to have found the other day, just happened to have all his referral links on the urls, lol...

Jeeze, these wasters Pi$$ me right off

People are harvesting our email addys off this forum and theres nothing we can do about it! hiding your email addy doesn't mean anything if you use the downline builder

this is getting ridiculous!!

everytime I get one of these emails I'll source out the headers and report them as spam to the proper person (or at least contact the site they are spamming and get their accounts CLOSED)

lets see how they like that!

Report him to those places he spammed you with...

His accounts will be automatically closed...

Strange, my e-mail address is not even in the downline folder.

CHARTEREDVALUER.COM

is a company out of India.....

do you think that kapil guy is the same person as the one below? (member of this forum)

kapilbhatia02

Real name: Shailesh Subhash Agrawal

That guy has made 0 posts in over 6 months...

Prime candidate for removal in my book...

It could be him, but then it might not be...

Let me see. I think I saw an e-mail address on Super.BePaidForEmail that have kapil in it.

Poncer, you done any advertising anywhere of a site that uses your email addy as a ref?

I just recieved the same email brian did...how do i find out the isp and etc...so that i can report him???

Becca, did you run an advert via Mec Op Mail recently?

As I've just realised, the advert I ran, my first program (out of the the 25) on the email was in fact Z-Cash, the exact same program this spammer is talking about!!!

Jaikula may have been right, the spammer may be farming the emails off the Mec adverts, as looking at that page he sent me to, they're also a member at Mec!!!

Interesting...

Yeah, it's too coincidental. Mec-Co-Op does this advert swap, plus also runs these 250 point batches where you can buy a whole 250 point email...

Get hold of Taxlady and let her know there's a spammer within Mec-Co-Op, send her the emails with headers, she'll flush him out right quickly, specially if all he's doing is harvesting...


Becca Sue, if you are using Outlook Express, right click the email and goto properties...

Hotmail if I rem you need to set your settings so you can see full headers.. *cant rem where that is*

Yahoo, I dont know, anyone else?

Let me think, yes. I advertise at Pennies for Jays-PaidMail which still had my e-mail address as my user id.

Sounds like the person might have gotten it from there... I'd get hold of Pennies WM, let them know what's happening and ask them if that person is part of thier program.... Just a matter of having a helpful WM then... It will require all headers so the original IP is known...

Thanks JulietNZ for posting the full message header. I have banned this guy. See here for detail.

Poncer, if you would like to have your user name changed just write and let me know,
Anyone with an email addy for a username can do this on our sites

Well, I haven't done any recent advertising and I got one of those dang things. So far I have been lucky enough not to have received any, until today. I don't know how to even get the headers for it, gotta love this crappy netscape mail, but the addy they used was admin@getpaidforum.com.

brian no i havent run an ad on mec-co-op
I have no idea where else they could have gotten my email addy

For full header with netscape mail you have to click on the yellow triangle (it's on the right side of the screen in the normal header)

I think I changed it to something else a long time ago on Pennies. It is the gold membership ad I sent for Jay's site.

DUPLICATE MESSAGE EDITED

maybe its time for you to stop posting this

you have posted this more than 10-15 time saying the same thing

yeah whats up with that. Everywhere I look....thats what I see