An Email Phishing or Spam

Had Been Spoofing My Email as From and ReplyTo

All of these SPAM messages originated on CHINANET-BACKBONE No.31, on various servers for different provinces. They stopped in June, 2018. The last day or two of the SPAM messages are presented and analyzed below.

What I am seeing is server rejection messages from the Chinese shopping site Tencent to my email account for this web site. The attached message that was rejected is "from" a Chinese name, given in Simplified Chinese, and the Webmaster email address, edited as per instructions, not just picked up by a bot. A human was involved in this spoof. Sometimes the ReplyTo address is the Webmaster email address, sometimes it is an invalid email address. There were 23 SPAM messages on June 23-24, 2018, after which rejection messages to this Webmaster stopped.

Updated December 9, 2018

Table excerpted form X-headers of samples at end of this page:

Sample	Date/Time	Received From	Rec From Domain	Reply-To
Sample 1	06/19/18 10:51 PM	fhdigz.com ([36.22.233.48])	119.10.74.131	<3541014347@qq.com>
Sample 2	06/19/18 10:25 PM	tebon.com.cn ([1.195.240.128])	114.80.178.70	<Tommy@highlighthollywood.com>
Sample 3	06/19/18 09:27 PM	wharfchangsha.com ([125.118.145.8])	NONE	<jkbeard@jameskbeard.com>
Sample 4	06/19/18 09:23 PM	hd-leds.com ([140.250.246.17])	23.234.27.33	<470461463@qq.com>
Sample 5	06/19/18 09:06 PM	izhaohu.com ([1.195.255.34])	139.196.92.106	<jkbeard@jameskbeard.com>
Sample 6	06/19/18 09:00 PM	huabao-com.com ([1.195.252.217])	112.121.164.134	<2095328496@qq.com>
Sample 7	06/19/18 08:19 PM	niaot.ac.cn ([1.195.249.41])	159.226.97.84	<jkbeard@jameskbeard.com>
Sample 8	06/19/18 08:16 PM	infcn.com.cn ([125.118.79.55])	NONE	<sally@usbrightlawfirm.com>

Many others. I get notice of about five rejected SPAM messages a day from Tencent. There may be many more that are not rejected by the Tencent servers.

I will update this page with new examples and SPAM source IP addresses from time to time.

How I Know

The effect of this is that my hosting provider occasionally thinks (or its server thinks) that my email account has been hacked and disables it. I can change the password and re-enable the account. I have done this several times. Examination of my email account reveals that no messages have been sent from it, other than to my home email, in quite some time. Thus, a spammer is spoofing my email address with a Chinese name and sending SPAM to Tencent accounts.

The Effect

Sometimes I leave my email down for a day or two to break up a server bounce loop, with the hosting service loop sending a rejection notice to Tencent, which sends a rejection notice to the hosting service...

This means that my email is not a reliable channel. This channel is not needed often, but it's the simplest way to reach me if you don't have another method in hand. In addition, I must reset the password every week or two.

It's a nuisance to me, and sometimes people can't reach me through the Webmaster email address. And, the SPAM does not contribute to anyone.

What YOU Can Do

Normally I, or my hosting provider, could decipher the X-headers of the bounce messages and the attached SPAM and ask the provider that hosts the SPAM sender to reign in the offender. But, the X-headers are in Chinese and are corrupted in the form that I get them.

If you can decipher the information available in the samples below and reliably determine the origin of these emails, please notify one or more of the authorities in the navigation widget at top left. If you know of similar authorities in China, I'm sure that they would love to hear from you.

If You are a Tencent or CHINANET-BACKBONE No.31 IP Person

All of the SPAM messages originate on CHINANET-BACKBONE No.31 on servers for various provinces, including one from Honk Kong. Please look at the samples and deal appropriately with the SPAMM originators.

The ReplyTo sometimes identifys the party that benefits from the SPAM. Please look at users 3541014347@qq.com, 470461463@qq.com, 2095328496@qq.com as probable benficiearies of the SPAM.

Samples of The SPAM

Note that Tencent accounts have email names of the form nnnnnnnnnn@qq.com, e.g. ten numerical digits with the domain @qq.com. Some of the SPAM seems to be junk commercial or scam email, but one of them is a short anti-American rant. Some of them can be interpreted by Google Translate, some are too corrupted in the copies available to me.

Sample 1

Received: from fhdigz.com ([36.22.233.48])
  	by :SMTPAUTH: with ESMTPA
  	id VTDIfIPuTz7B4VTDJfAHBW; Tue, 19 Jun 2018 19:51:18 -0700  
x-spam-cmae: v=2.3 cv=Rq7r0huK c=1 sm=1 tr=0 p=oyrJm09dVjBJWDM3lu85Ow==:17  
 p=JPo3hNP54pwA:10 p=2ObKZwp_AAAA:20 p=Wq4kNb7Mo-EA:10  
 a=oyrJm09dVjBJWDM3lu85Ow==:117 a=6IB6RHWxqZIA:10 a=x7bEGLp0ZPQA:10   a=vb0YNP340y4A:10
 a=r77TgQKjGQsHNAKrUKIA:9 a=dZbOZ2KzAAAA:8   a=0GzCnCcQLF0DJAFsz5AA:9 a=TlC0VVd5SDrXC2UX:21
 a=frz4AuCg-hUA:10   a=QEXdDO2ut3YA:10 a=AamAc2fW99XnHjK0OG4A:9 a=GnIDRT8RqqIA:10  
 a=S3pfywP4fbkc15O89_8A:9 a=AYuhZ1cNViIA:10  
x-spam-account: jkbeard@jameskbeard.com  
x-spam-domain: jameskbeard.com  
X-Priority: 5  
X-Mailer: UanlOuiw  
From: "=?utf-8?B?bGxPd0Y=?=" <jkbeard@jameskbeard.com>  
Reply-To: <3541014347@qq.com>  
To: <3541014347@qq.com>  
Subject: =?utf-8?B?Nzg0NTE4NTQ5MzMzMDE2ICAgICAgICAgICAgICAg6LO96Y63?=  
	=?utf-8?B?5LyaNzcxNDk46bueQ09N5Li76JCl6LWb56GoL+KRpeaguC/nmb3lrrbmpb0v?=  
	=?utf-8?B?VlLlv6voiYfvvIzmi7/nsr7lh4bnibnnoIHjgIHkuIDogpbnrYk=?=  
	=?utf-8?B?6LWE5paZ5Yqg5a6i5pyNUVHjgJA3MTc1ODg0NTbjgJE=?=  
Message-ID: <f5d9606448252c8f3cdd0fc4308b79e2@jameskbeard.com>  
Date: Wed, 20 Jun 2018 10:51:01 +0800  Content-Type: multipart/mixed;
  	boundary="f3fd813fb64d1cc11ba0973b0005a921"  
X-CMAE-Envelope: MS4wfEz2gNZ1E+HQAsQG1RJhqmmie1b8+7SXcNfoOv343KgxHPvHxwGwXbk2ul4iTXY1YbiwWJZ
 BzdzuA9imhtrysSfl5Wd3TKOMxyvSc5VBH+fHUinpBdOI
   Hi221VtyZH89UVLS67kzFtgbgg+e1zXj0ADvAluNQKv+nqv4L5N/sm+n

ForwardedMessage.eml

Subject:

784518549333016 賽鎷会771498點COM主营赛硨/⑥核/白家楽/VR快艇，拿精准特码、一肖等资料加客服QQ【717588456】

From:

"llOwF" <jkbeard@jameskbeard.com>

Date:

6/19/2018 10:51 PM

To:

<3541014347@qq.com>

期期计划点击：http://t.cn/RuF8Iyb 客服Q：706551789

1.首次存歀10以上即可申请8え首侟綵唫!

2. 限定时间内不限制游戏完成有效投紸达1000，即可申请46新人奬!

3.VR啋种赛車、快艇、百家楽，可疮痂病>享受医疗救助> 最高三角板>8拿着>8突出问题> 8喜温>8宣传促销>元高税费改革> 额公安部>奖励困难职工>

4.质量农事>服亵渎神明> 务落实经费>调瘦薄>查最发展路子> 高获北的>赠￥锈豆>8大裂谷> 8颗粒归仓>8疤斑>现唫全险>! ==================================

论坛活動：问卷调查：https://wj.qq.com/s/2140747/26f6

V抓紧抓实>I朱允炆> P洗印>等宜油>级高速公路>永久统一时间>累计留存现金>，最节目制作> 高羊驼>周攻茄科> 资撞击杀虫>1核桃>88县经营管理站>8大头菜>圆，狠下功夫> 月俸怕旱>露常务会>66路单>8迟眼蕈蚊>8圆胶泥田> ，半开放式棚>永紫色> 久林业生态系统>派红豆杉>送）病虫草鼠害>

香<关系xi代数shu>港赛马<流程图>会将每<特征检测>天<静态测试>派<冠轮>发神秘菜<链路管理>唫给<顶根距>予在<输出脉mai冲>香<维数>港赛马<颗粒有机物>会<小手轮>注<缩短渐开线>冊或<厚块，大部分>游<副轮>戏<对话模mo型>的所<开口销>有玩<转录>家<非传chuan统计算机>，<最大应力强度因子>菜唫<整定处理>没有门槛<音形结合he编码>限<作用域>制、<滑动轴承宽度>不<前台作业>设上<角锥体>限唫额<激活机制>，<海洋地球化学>只<筛板厚度>要<主文件>您在<椭圆手柄套>香<氯度>港<深度du计算>赛<随机噪声>马会有<注解>注<全干扰>冊<逻辑文件>过账<数shu字控制技术shu>号。<小键盘>就<报警>算您<类型>不曾<写锁>在<中心词>香<图形库>港赛马<气动气液阻尼缸>会<光流场>侟<资源子网>宽<自底di向上>游<划hua分算法>戏<基于知识shi的de问答系xi统>过，<正投影法>都<放大>有可<基本优先级>能<海洋辐射传递>获得<平行轴齿轮副>我们每天<秒，第二的>随<制造商>机<智能自动机>派<时钟分配驱动器>送的<内压>神<附加维修>秘礼唫<泛关系xi>，最<微软的de>高可<进位传chuan递加法器>获得<合格试验筛>8<密码检验和he>8<怀卵量>8<齿槽深>8<实行>8 圆。<齿根曲面>

( 771428點COM 值得永久收藏）

，

Sample 2

Received: from tebon.com.cn ([1.195.240.128])
  	by :SMTPAUTH: with ESMTPA
  	id VSoWfHVY2J2MDVSoXfLAG9; Tue, 19 Jun 2018 19:25:42 -0700  
x-spam-cmae: v=2.3 cv=bdBFrtHB c=1 sm=1 tr=0 p=YqKIuXBR8lsA:10  
 a=C701odSFxNcqFO+NROOK5A==:117
 a=C701odSFxNcqFO+NROOK5A==:17  
 a=r77TgQKjGQsHNAKrUKIA:9 a=kjscKcl4U-XPRUsjnJ8A:9 a=dIlKIteIw7wjmXSI:21  
 a=QEXdDO2ut3YA:10 a=zmtyKxTkKKjyGqG2pK8A:9 a=GnIDRT8RqqIA:10  
x-spam-account: jkbeard@jameskbeard.com  
x-spam-domain: jameskbeard.com  
X-Priority: 1  X-Mailer: jxjhkm  
From: "=?utf-8?Q?gupE?=" <jkbeard@jameskbeard.com>  
Reply-To: <Tommy@highlighthollywood.com>  
To: <1375073093@qq.com>  
Subject: =?utf-8?Q?=E8=B5=9B=E9=8E=B7=E6=B1=87771948=E3=80=82com=E4=B8=BB=E8=90=A5=E8=B5
 =9B=E8=BB=8A/=E2=91=A5=E5=90=88/=E7=99=BE=E5=98=89=E5=98=9E/VR=E5=BF=AB=E8=89=87=EF=BC
 =8C=E9=A2=86=E7=B2=BE=E5=87=86=E7=89=B9=E7=A0=81=E3=80=81=E4=B8=80=E8=82=96=E7=AD=89=E8
 =B5=84=E6=96=99+=E5=AE=A2=E6=9C=8DQQ=E3=80=90717587789=E3=80=91-2018/6/20?=  
Message-ID: <c8f1080c78ea1f687f6a029c0cb8c91e@jameskbeard.com>  
Date: Wed, 20 Jun 2018 10:25:38 +0800  
Content-Type: multipart/mixed;
  	boundary="27e08fe2a02f7c026611a10c0008b6d1"  
X-CMAE-Envelope: MS4wfD3OeEiYD8xwVQI3dOkqMhuWhnVWy05nv5Kbm6O9BIOX2VDPxZDQM58hygpNbpbN+Nd/
 pj+Bi4BWIYzDIwZtW5WM2bFozgiVnWme/wztleikRGQZ8efb
   FQWKlKFz7bT7swekhEYLBjNSovaiHfMWMiow/SwtP+OEg3FzOLoet7/p

ForwardedMessage.eml

Subject:

赛鎷汇771948。com主营赛車/⑥合/百嘉嘞/VR快艇，领精准特码、一肖等资料+客服QQ【717587789】-2018/6/20

From:

"gupE" <jkbeard@jameskbeard.com>

Date:

6/19/2018 10:25 PM

To:

<1375073093@qq.com>

恭喜混杂退化>您获元江哈尼族彝族傣族自治县>得撒令人>哈收入分配>拉结果枝>蒂保障措施> 姆斯桑盾蚧>坦帝白化苗>国班子成员> 最高长期工>荣誉槲寄生>！农民进城>

访问链接: 772418点COM，客服QQ:717578567

1顺流而下>：无党派人士>首农田鼠害>侟1重点实施> 鎹西葫芦>8精选>え，盘脚坐> 2平整>00言必行>鎹1大朝山>8切花> え、秋海棠>,鹤蚌相争，渔翁得利>1龙年> 00茶天牛>0候选窗>鎹8中国人民解放军>8え自觉接受> ，1数码单反相机>倍氺银耳环>！

2：怒江> 林权流转>下公民素质>载A上井>PP烟具> ，完给实在>成沧源> 任气候生产力>务领鱼贩>取股所> 23缺索症>4新硬粒小麦>人奬合理密植> ！分析研究>

3<对没志气的人，路程显得远；对没有银钱的人，城镇显得远。>：<世上最累人的事，莫过於虚伪的过日子。> <我为自己所招惹的一切侮辱>最<抬起了火红的头，下界的眼睛>专业<交给这张白纸，在那里面你将>的<刺骨，故小痛在体，而长利在身；拂耳，故小逆在心，而久福在国。>采<耗子爬竹竿：一节一节来 >瞟<水里的蚂蟥粘上便难脱>计划<哦，别把岁月刻在我爱的额上，>S<麻雀开会细商量>S<希望是附丽于存在的，有存在，便有希望，有希望，便是光明。>C<像一个衰老的父亲高兴去看>、賽<败家子挥金如粪，兴家人惜粪如金。>车<应当把荣誉当作你最高的人格的标志。>9.<爱除自身外无施与，除自身外无接受。——纪伯伦>8<偷鸡不成蚀把米，即不仅没有占到便宜，反而受到了损失 >8<对我一点不稀奇，一点不新鲜；>，<人生自古谁无死，留取丹心照汗青。>六合<云彩经不起风吹，朝露经不起日晒。>4<远远背着我，和别人却太靠近。>8<温柔的鄙夫，要吝啬，反而浪用？>.7<人最宝贵的是生命，生命人只有一次。人的一生应该这样度过：当回忆>5<葱头不开花装什么蒜>领取<品格可能在重大的时刻中表现出来，但它却是在无关重要的时刻形成的。——雪莱【英】>奬<扇子一摇生风(故意找麻烦)>上<那么干净，我简直像聋蛇一般，>奬<依旧爱我，爱人呀，把我全忘掉，>啋<就会发觉责备我多么不应该。>唫<捏死手中鸟轻而易举 >！ <江边卖水：多此一举 >

4：完善措施> VI禁止停车>P晋竞放>级啋茯苓>唫不利>、周深入扎实> 攻资抗性>、月获得> 凤副县长>禄党内监督>、生总量平衡>日礼颖枯病>唫鎹视察>不科学谋划> 停硼镁肥>！

Sample 3

Received: from wharfchangsha.com ([125.118.145.8])
  	by :SMTPAUTH: with ESMTPA
  	id VRuVf60a8gvApVRuXfZBCl; Tue, 19 Jun 2018 18:27:50 -0700  
x-spam-cmae: v=2.3 cv=eKE9ckh1 c=1 sm=1 tr=0 p=rBB26e50KXG/W6myjA473g==:17  
 p=KeY5sgqtb6gA:10 p=xVBNFI-gAAAA:20 p=yzWpughpgUcs4uo3yXIA:9   p=yVwLgjsstXD9p8RT:21
 p=fJHajCkZZLQA:10 a=rBB26e50KXG/W6myjA473g==:117   a=-ncxm-J5a5gA:10 a=r77TgQKjGQsHNAKrUKIA:9
 a=2cXsEN-qxLoA:10   a=22Zrgm39Vt1blu-hxQYA:9 a=5pkWui-EPLQA:10 a=xxbw17SlPfPkvtnePPkA:9  
 a=C54quozIGlEA:10  
x-spam-account: jkbeard@jameskbeard.com  
x-spam-domain: jameskbeard.com  
X-Priority: 3  
X-Mailer: aaaaa  
From: "aaa" <jkbeard@jameskbeard.com>  
Reply-To: <jkbeard@jameskbeard.com>  
To: <1283119669@qq.com>  
Subject: aaaaa     Ùï¿½ï¿½772418ï¿½ï¿½comï¿½Óªï¿½Ü‡/ï¿½ï¿½ï¿½ï¿½×¼Ò˜S/VRï¿½ï¿½ï¿½ï¿½ï¿½ï
 ¿½ï¿½ï¿½×¼ï¿½ï¿½ï¿½ï¿½Ò»Ð¤ï¿½ï¿½ï¿½Ï¼Ó¿Í·ï¿½QQï¿½ï¿½706551789ï¿½ï¿½  
Message-ID: <371ad6d1da6fd1168e936c113694a8e4@jameskbeard.com>  
Date: Wed, 20 Jun 2018 09:27:35 +0800  
Content-Type: multipart/mixed;
  	boundary="d49c3379bb3999613dd7ddf2000bfb91"  
X-CMAE-Envelope: MS4wfPI3J0vw8hk1A3hRMmJLinXbNCGoq21K6RQIYJ2/rDPCIL7c88IZBS67rwyAvXIgnr
 HmnILjk8SYDqxU1uQ76b5f2U92QKegewpW3WdbEUZPu0FgVOTe
   bj/2RiNZRCdwghSilmez5pDXZFGQb9Slc6ImfJbrsF8wKo18GIj6jAxdb82FkMtXu2Iw0E4mmtIXqw==

ForwardedMessage.eml

Subject:

aaaaa ِ��772418��com�Ӫ�܇/��׼ҘS/VR��׼��һФ��ϼӿͷ�QQ��706551789��

From:

"aaa" <jkbeard@jameskbeard.com>

Date:

6/19/2018 9:27 PM

To:

<1283119669@qq.com>

锟斤拷锟斤拷锟斤拷樱锟絟ttp://t.cn/RuF8jsw 锟酵凤拷Q: 717578567

锟斤拷/FONT> 一肖锟斤拷锟斤拷准锟斤拷锟斤拷锟斤拷

锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟姐，1锟斤拷锟斤拷锟竭匡拷锟�%锟斤拷锟�

锟斤拷小锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷0元锟�8元锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷

锟斤拷FONT color=#0080ff> 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟酵ｏ拷锟矫匡拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟�

锟斤拷FONT color=blue>锟斤拷锟斤拷锟斤拷呕郏锟斤拷锟斤拷锟斤拷鈫傦拷锟斤拷锟斤拷锟斤拷\锟斤拷\锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷樱锟�

锟斤拷FONT color=navy>锟斤拷锟斤拷赢锟斤拷锟斤拷锟姐！锟斤拷锟斤拷\锟斤拷锟阶拷偌覙S锟斤拷锟斤拷锟叫撅拷喜锟斤拷

锟斤拷锟斤拷菥锟斤拷:771948锟斤拷OM

Sample 4

Received: from hd-leds.com ([140.250.246.17])
  	by :SMTPAUTH: with ESMTPA
  	id VRqUfTWpmma4MVRqVfgfKj; Tue, 19 Jun 2018 18:23:40 -0700  
x-spam-cmae: v=2.3 cv=JYmSU3CV c=1 sm=1 tr=0 p=GDahISOBNl4A:10   p=lOGAExiP19uaRyA3TvQA:9
 a=7611PMxjNq166fxBNy5s7w==:117   a=7611PMxjNq166fxBNy5s7w==:17 a=yAbte6kbDQYA:10
 a=rK2zQ7WPXE8A:10   a=x7bEGLp0ZPQA:10 a=r77TgQKjGQsHNAKrUKIA:9 a=OvdXp9r3V15dmWZHuXMA:9  
 a=LbfhxgweQ7oiOj5o:21 a=AWzbc7it75AA:10 a=jj7_4B6OhxEBodan8W4A:9   a=sNuy_aXDAQMA:10
 a=_OxKTY4LsQ0A:10  
x-spam-account: jkbeard@jameskbeard.com  
x-spam-domain: jameskbeard.com  
X-Priority: 1  
X-Mailer: ujGAREzfCS  
From: "KNO" <jkbeard@jameskbeard.com>  
Reply-To: <470461463@qq.com>  
To: <3026495831@qq.com>  
Subject: ï¿½ï¿½ï¿½ï¿½71948ï¿½ï¿½comï¿½Óªï¿½Ü‡/ï¿½Þºï¿½ï¿½Ù¼Î˜S/VRï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½×¼ï
 ¿½ï¿½ï¿½ï¿½Ò»Ð¤ï¿½ï¿½ï¿½ï¿½ï¿½Í·ï¿½QQï¿½ï¿½717597168ï¿½ï¿½-6/20  
Message-ID: <16fa1a50c59fcad5ff07e102232aaecd@jameskbeard.com>  
Date: Wed, 20 Jun 2018 09:23:32 +0800  
Content-Type: multipart/mixed;
  	boundary="2f9ef091e5bfd5d8ffc2e79e00004231"  
X-CMAE-Envelope: MS4wfDXWh8VUvQYXMODQGEPIyIhIUuCadD6fPs3oC6BxQEreOPXWYgB5zG/DMLeEpL2A/
 sS14lpsZeeeMW15+hFxMHMlUNz2JcTdnvRb9H666neNzYdZgPxd
   AxXYItX1OglivjXLWRYhlu0P2wIQqLoRpsOpl8Vc8rAAt6InrGWW9HRS

ForwardedMessage.eml

Subject:

��71948��com�Ӫ�܇/�޺��ټΘS/VR��׼��һФ��ͷ�QQ��717597168��-6/20

From:

"KNO" <jkbeard@jameskbeard.com>

Date:

6/19/2018 9:23 PM

To:

<3026495831@qq.com>

1锟斤拷>.锟斤拷锟斤拷锟�> 锟斤拷锟斤拷锟斤拷女>迎摩锟斤拷锟斤拷>锟�锟斤拷锟絞t; 驻硬锟斤拷锟�>锟斤拷锟�锟斤拷>锟斤拷锟絪pan style="font-size:000px; font-family:Pydj; line-height:normal; font-stretch:normal">锟斤拷锟�> 772418锟斤拷com锟斤拷

2锟斤拷> .锟�锟斤拷锟斤拷gt;锟�锟窖碉拷锟斤拷gt; 锟斤拷锟斤拷锟斤拷锟絞t;VR锟侥达拷>锟斤拷span style="font-size:000000000000px; font-family:nLwiw; line-height:normal; font-stretch:normal">女锟斤拷锟�> 锟斤拷span style="font-size:00000px; font-family:RilvR; line-height:normal; font-stretch:normal">平锟�>锟絊锟斤拷锟斤拷gt;锟斤拷賽锟斤拷色>锟斤拷锟�锟斤拷锟�> 锟斤拷span style="font-size:00000000000000000px; font-family:i; line-height:normal; font-stretch:normal">锟斤拷业强锟�>锟斤拷薅锟斤拷gt;水

3. 锟斤拷<锟接凤拷锟�>平台<锟结构锟斤拷锟斤拷锟斤拷xi统>锟斤拷<锟絯u锟斤拷锟斤拷锟絜锟洁处锟斤拷系xi统>锟斤拷<锟絚hong锟脚癸拷锟斤拷锟�<锟斤拷锟斤拷锟斤拷锟絪pan style="position: absolute; top:-476em;display:inline-block"><锟斤拷锟斤拷锟�>锟斤拷Q<锟絪hu锟斤拷锟�锟斤拷717597168

锟轿拷锟斤拷锟斤拷锟斤拷锟侥癸拷桑锟斤拷些前锟斤拷锟斤拷锟斤拷牵锟斤拷锟矫伙拷锟皆硷拷锟斤拷锟节ｏ拷锟斤拷锟斤拷锟截就革拷约锟斤拷锟街筹拷锟斤拷锟揭诧拷锟斤拷为锟斤拷锟侥筹拷锟斤拷锟斤拷锟斤拷锟解，锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟� 锟斤拷锟斤拷

Sample 5

Received: from izhaohu.com ([1.195.255.34])
  	by :SMTPAUTH: with ESMTPA
  	id VRaQf2s0QsZinVRaRfEHtD; Tue, 19 Jun 2018 18:07:03 -0700  
x-spam-cmae: v=2.3 cv=FJU1Odgs c=1 sm=1 tr=0 p=FmdYsMxpYpCdqehBSNxLwA==:17   p=zrO7Pqw3pcoA:10
 p=2ObKZwp_AAAA:20 p=yVwLgjsstXD9p8RT:21 p=Wq4kNb7Mo-EA:10   a=FmdYsMxpYpCdqehBSNxLwA==:117
 a=r77TgQKjGQsHNAKrUKIA:9   a=lXmTwQOSOR0hyAqPqS0A:9 a=AWzbc7it75AA:10 a=ZC8qKd1o0CcqcS0x9DcA:9
 a=xG45ARPXy0AA:10 a=2F64GsLNblcmYbTUe8cA:9 a=5RF1dqjbx-AA:10  
x-spam-account: jkbeard@jameskbeard.com  
x-spam-domain: jameskbeard.com  
X-Priority: 1  
X-Mailer: aaaaa  
From: "=?gbk?Q?aaa?=" <jkbeard@jameskbeard.com>  
Reply-To: <jkbeard@jameskbeard.com>  
To: <747974982@qq.com>  
Subject: =?gbk?Q?747974982@qq.com-=C8=FC=C2=ED=BB=E1771468=FCcCOM=D6=F7=D3=AA=C8=FC=DC=87/
 =C1=F9=BA=CF/=B0=D9=BC=D2=E0=CF/VR=BF=EC=CD=A7=A3=AC=C1=EC=BE=AB=D7=BC=CC=D8=C2=EB=A1=A2
 =D2=BB=D0=A4=B5=C8=D7=CA=C1=CF+=BF=CD=B7=FEQQ=A1=BE715842008=A1=BF?=  
Message-ID: <d592128d149a5407da414d5d2e8b253a@jameskbeard.com>  
Date: Wed, 20 Jun 2018 09:06:56 +0800  
Content-Type: multipart/mixed;
  	boundary="2aecbd8e9aaf164a2d33876c00029621"  
X-CMAE-Envelope: MS4wfGM41/V+WA32HUx1Q9e51ZWWLRc3ut37jQWslAk3x5MAuyIqWhNCiVCcw6d18HKR51
 +hJABzXHBXUPM3sfmkUM30jrq58VnNZ2Z98OJCG5Due1JxQyNp
   XiJ8LGOMXMzKq+mBml4F65nPgZ6qMvMvF7MMh/DBeQH0A9X8+ZpDW3pB

ForwardedMessage.eml

Subject:

747974982@qq.com-赛马会771468點COM主营赛車/六合/百家嘞/VR快艇，领精准特码、一肖等资料+客服QQ【715842008】

From:

"aaa" <jkbeard@jameskbeard.com>

Date:

6/19/2018 9:06 PM

To:

<747974982@qq.com>

开户连接：http://t.cn/RuF8Iyb 客服Q: 706786158

☆ 一肖中特精准资料来就鎹

☆ 不计输赢，天天反点，1え起最高可享9%无上限

☆ 小金额搏大歀！存10元送8元现唫，出歀无上限

☆ 周周有奖励、啋唫拿不停！每月亿え现唫大回馈活動

☆采瞟多重优慧，天天拿得意唫、超级奬上奬、心动不如行動！

☆六合连赢大奬等着你！额外加奬，玩转百家楽，额外有惊喜！

更多优惠尽在:771948点COM

于是很快，大家都发觉到了艾莉亚的天不怕地不怕的性格，她很快就和一帮臭骑士还有最低等的士兵们打得火热，大家都忽略了她的性别，她自己的头发也修剪得很短，跟男孩子一样。

Sample 6

Received: from huabao-com.com ([1.195.252.217])
  	by :SMTPAUTH: with ESMTPA
  	id VRTjfaVQpJ8BiVRTkfrPRo; Tue, 19 Jun 2018 18:00:09 -0700  
x-spam-cmae: v=2.3 cv=DL2hHRFb c=1 sm=1 tr=0 p=9eCagPpsUvAA:10   p=Du81g01TmYhIf5DK:21
 a=VyUHAsKq5Uvmo6eoCqvNBQ==:117   a=VyUHAsKq5Uvmo6eoCqvNBQ==:17 a=PYQlSK3-y6sA:10
 a=x7bEGLp0ZPQA:10   a=lQRTTJmoL1gA:10 a=r77TgQKjGQsHNAKrUKIA:9 a=NZvBDI_0qaZzPlbGazIA:9  
 a=AWzbc7it75AA:10 a=vxsEwq5lHInKjZJFS6QA:9 a=5pkWui-EPLQA:10  
x-spam-account: jkbeard@jameskbeard.com  
x-spam-domain: jameskbeard.com  
X-Priority: 3  
X-Mailer: EMIpTQblG  
From: "=?gbk?B?ztTpvdauxdTG8cjdy/vIy/f9y68=?=" <jkbeard@jameskbeard.com>  
Reply-To: <2095328496@qq.com>  
To: <2095328496@qq.com>  
Subject: =?gbk?B?MDExODI4NjExNTAgICAgICAgINmQwuu74zc3MTk0OLXjQ09N?=
  	=?gbk?B?1vfTqsj8s4wvot66yy+w2bzOmFMvVlK/7M2no6zB7L6r17zM2A==?=
  	=?gbk?B?wuuhotK70KS1yNfKwc+807/Nt/5RUaG+NzE1ODU5MTY4ob8=?=  
Message-ID: <54f1401bda32c1bbf97ea3190ac1afe0@jameskbeard.com>  
Date: Wed, 20 Jun 2018 09:00:05 +0800  
Content-Type: multipart/mixed;
  	boundary="27e08fe2a02f7c026611a10c0008b6d1"  
X-CMAE-Envelope: MS4wfBi5C476UJDZ4G2ZpCK/2NnyXOyYahvzrFRZojKSI8cUNOWr2CIeOyIt7CmdJNzy
 +6BoGKrKxsfIdNpq9F1l3uxoD2OC2RB60bLRNNVLDEUsJk1ODydu
   oUrqMS8wZnbjnHveXUfVMCGkUPLav4Q+/r+L9HUdFYMlq2EJsBF82qqW

ForwardedMessage.eml

Subject:

01182861150 賽码汇771948点COM主营赛硨/⑥核/百嘉楽/VR快艇，领精准特码、一肖等资料加客服QQ【715859168】

From:

"卧榻之旁岂容他人鼾睡" <jkbeard@jameskbeard.com>

Date:

6/19/2018 9:00 PM

To:

<2095328496@qq.com>

L先生：“好极了，非常好用。”

林祥厚邀您来【賽鎷会771428點COM】精准<善人同处，则日闻嘉训；恶人从游，则日生邪情。>一肖<麦秸烧火没长劲 >一码<明眸和亲挚的心应得的分量>请<麻布上绣花底子太差>点<我们为祖国服务，也不能都采用同一方式，每个人应该按照资禀，各尽所能。——歌德>击加<就披上黑色，做旖旎的哭丧者。>QQ<十里认人，百里认衣。>：706772123

这个首领非常年轻，大约二十岁的样子，非常英俊，一头金红色的头发，他的微笑很迷人。他曾在君临的比武大会上一出场就俘获了珊莎的女伴珍妮·普尔的芳心。

Sample 7

Received: from niaot.ac.cn ([1.195.249.41])
  	by :SMTPAUTH: with ESMTPA
  	id VQqCfnVoH6MMHVQqDfkTcC; Tue, 19 Jun 2018 17:19:18 -0700  
x-spam-cmae: v=2.3 cv=MsV8FVSe c=1 sm=1 tr=0 p=xH2uHVD2kCcA:10   p=lVJ2JE9qpPtSaIZY:21
 a=DAkIEpRlsAmMcblCcaDR6Q==:117   a=DAkIEpRlsAmMcblCcaDR6Q==:17 a=iLMjSSCFrHoA:10
 a=r77TgQKjGQsHNAKrUKIA:9   a=OKt8Y_b4xGNTQKP7tZQA:9 a=AWzbc7it75AA:10 a=QdoCpS79-LvH0mIg-wEA:9
 a=FRy-WHvrAC4A:10  
x-spam-account: jkbeard@jameskbeard.com  
x-spam-domain: jameskbeard.com  
X-Priority: 3  
X-Mailer: MAoMROlPZ  
From: "4OI" <jkbeard@jameskbeard.com>  
Reply-To: <jkbeard@jameskbeard.com>  
To: <3450917852@qq.com>  
Subject: qtezdvgczbod                Ùï¿½ï¿½771468ï¿½COMï¿½Óªï¿½Ü‡/ï¿½ï¿½ï¿½ï¿½Ù¼ï¿½ï¿½
 VRï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½×¼ï¿½ï¿½ï¿½ï¿½Ò»Ð¤ï¿½ï¿½ï¿½Ï¼Ó¿Í·ï¿½QQï¿½ï¿½717590567ï¿½ï¿½  
Message-ID: <1ce2e08bfdb5602f7c266f0f2901113f@jameskbeard.com>  
Date: Wed, 20 Jun 2018 08:19:15 +0800  
Content-Type: multipart/mixed;
  	boundary="5bc88906fb93d65dddda2073000cd471"  
X-CMAE-Envelope: MS4wfLRXchFkorCjyYp+qtK28l8SThR0ozQBBeuZ4Fd/BkFMUaKg+7ffkcIF2BgMngSBGHR
 yJK+lZo1UyVWhJo3GMQOlsgmKxrEhQLxEUF72Rc9lcfrCtLBA
   RqsJmJkcdRhEE3hT0V4cb6A719b9/6d/mvgb6SR/HVV6r9VP46f84xBf

ForwardedMessage.eml

Subject:

qtezdvgczbod ِ��771468�COM�Ӫ�܇/��ټ��VR��׼��һФ��ϼӿͷ�QQ��717590567��

From:

"4OI" <jkbeard@jameskbeard.com>

Date:

6/19/2018 8:19 PM

To:

<3450917852@qq.com>

“她的声音和红信手机语音助手好像，它就是之前的红云助手吗？”

周孝莺邀您来【賽鎷会771548。com】平<沽酒楼前>特一<那边才见>肖<花空烟水流>心<乌鹊正南飞>水<纵凭高不见天涯>实力<金屋冷>请点<东风静>击加<小桃无赖已撩人>Q<旧游无处不堪寻>Q：<好伴云来>715859168

暗夜的火焰在风雪中陡然大放光芒，火焰燃烧起长长的焰尾，温暖一下子包裹住威尔，令他僵硬的手脚重新活泛起来。

Sample 8

eceived: from infcn.com.cn ([125.118.79.55])
  	by :SMTPAUTH: with ESMTPA
  	id VQnZfNeSXeGVcVQnafnMAe; Tue, 19 Jun 2018 17:16:36 -0700  
x-spam-cmae: v=2.3 cv=SNZsqtnH c=1 sm=1 tr=0 p=DFTtYJiZfHlBfD5QPNij8Q==:17   p=YZf9LmY8fUQA:10
 p=unG5nmD_xcqKx42g:21 a=DFTtYJiZfHlBfD5QPNij8Q==:117   a=yk0sNSaM68cA:10
 a=r77TgQKjGQsHNAKrUKIA:9 a=7G5Ia4vaYe0mXLdnz9MA:9   a=mFyHDrcPJccA:10 a=CMcg0skoudodQ8zDtAIA:9
 a=RCRtysc1Hq4A:10   a=lhfgmOUNsmNJ11el8twA:9  
x-spam-account: jkbeard@jameskbeard.com  
x-spam-domain: jameskbeard.com  
X-Priority: 1  
X-Mailer: aaaaa  
From: "jkbeard" <jkbeard@jameskbeard.com>  
Reply-To: <sally@usbrightlawfirm.com>  
To: <3137715204@qq.com>  
Subject: Ùï¿½ï¿½ï¿½71498ï¿½ï¿½OMï¿½Óªï¿½ï¿½ï¿½/ï¿½ï¿½ï¿½ï¿½Ù¼ï¿½ï¿½VRï¿½ï¿½ï¿½ï¿½ï¿½ï
 ¿½ï¿½ï¿½×¼ï¿½ï¿½ï¿½ï¿½Ò»Ð¤ï¿½ï¿½ï¿½Ï¼Ó¿Í·ï¿½QQï¿½ï¿½717588456ï¿½ï¿½-6/20  
Message-ID: <d8259801a48023f310a1d7c9354d3b79@jameskbeard.com>  
Date: Wed, 20 Jun 2018 08:16:22 +0800  
Content-Type: multipart/mixed;
  	boundary="d49c3379bb3999613dd7ddf2000bfb91"  
X-CMAE-Envelope: MS4wfB+FNf29dAdqh0jTKmJFHO4CqN9ky15Ba1eoUN1lilRypdWwRb8JfQUnNd05Sjwc
 ZT476gub6mdLpt2SAyYUpHKxlZAV6/pblO/Fc6ks7QvJolMj7dIb
   j46g4XY2tSu4d9W4xqkr9nKsqXpQG0p4Hu1yFegajyxaS8KnsbUmvmfg

ForwardedMessage.eml

Subject:

ِ��71498��OM�Ӫ��/��ټ��VR��׼��һФ��ϼӿͷ�QQ��717588456��-6/20

From:

"jkbeard" <jkbeard@jameskbeard.com>

Date:

6/19/2018 8:16 PM

To:

<3137715204@qq.com>

恭喜您获得新人第一优慧拵10鎹8一倍氺

注意查收站内信：每月派送神秘啋唫

1 拵10鎹8联系客服领取！2 新会員侟500鎹18圆，1000鎹88一倍氺；3 新会員首次完成有效投柱，可得新人奬最高234圆，4 天天返点高达9.0%（无上限）；
5 24小时任意侟取，想取就取，0手续費；
更多优慧：:771498点COM客服Q:717152848