Hi all,
I've been getting hit by the same ass clown
Uses 32Vegas.ws with the following URL: xxxhttp://promo.32vegas.ws/eu/europalace.html
Managed to get the redirect code tag before it redirected:
epmmarket.com/?btag=ep13579&utm_term=23&utm_medium=179&utm_conte nt=3&utm_campaign=Europalace&utm_source=WA5568
Full headers from mailer today:
Code:
Return-Path: <mailer@elasticemail.com>
Received: from compute1.internal (compute1.nyi.mail.srv.osa [10.202.2.41])
by store14 (Cyrus git2.5.0+0-git-fastmail-6364) with LMTPA;
Tue, 07 Dec 2010 01:57:36 -0500
X-Sieve: CMU Sieve 2.4
X-Spam-score: 4.3
X-Spam-hits: BAYES_50 0.8, DCC_CHECK 1.5, FREEMAIL_FROM 0.001, HTML_MESSAGE 0.001,
SPF_PASS -0.001, T_RP_MATCHES_RCVD -0.01, T_TO_NO_BRKTS_FREEMAIL 0.01,
URIBL_INVALUEMENT 2, BAYES_USED global, SA_VERSION 3.3.1
X-Backscatter: NotFound1
X-Backscatter-Hosts:
X-Spam-source: IP='174.142.165.42', Host='mailer.elasticemail.com', Country='CA',
FromHeader='com', MailFrom='com'
X-Spam-charsets: plain='utf-8', html='utf-8'
X-Resolved-to: xxxxxxx@fastmail.com.au
X-Delivered-to: xxxxxxx@fastmail.com.au
X-Mail-from: mailer@elasticemail.com
Received: from mx2.messagingengine.com ([10.202.2.201])
by compute1.internal (LMTPProxy); Tue, 07 Dec 2010 01:57:36 -0500
Received: from mailer.elasticemail.com (mailer.elasticemail.com [174.142.165.42])
by mx2.messagingengine.com (Postfix) with SMTP id 2D05B7801AA
for <xxxxxxx@fastmail.com.au>; Tue, 7 Dec 2010 01:57:35 -0500 (EST)
DKIM-Signature: v=1; a=rsa-sha1; bh=fuluLRLW5f9N+gZnI0M1zAr1p+c=;
c=relaxed/relaxed; d=elasticemail.com; s=api;
h=DomainKey-Signature:MIME-Version:From:To:List-Unsubscribe:Subject:Reply-To:Sender:Content-Type;
b=mS93GufIyRB5Hlwslkl7nSYW2WDca4AP5rG5e8316rmb8i2ejBOHVqouIm6oFBeFP7gbNvJbX0ISrnmb/1pieEwXH+FpctLdVHKp0S0ag3ncgX+pTBcMSTyJp6ytjhQNN1qnY4oL5CAPUcwi4kICrBLqRUmbnU1+d7oIMQinllo=
DomainKey-Signature: q=dns; a=rsa-sha1; c=simple;
d=elasticemail.com; s=api;
h=MIME-Version:X-Mailer:From:To:List-Unsubscribe:Subject:Reply-To:Sender:Content-Type;
b=DOaVqAcFystaqnxAtQoN+gAlLUbpvj4hf2D3gm/OYEn2vyxvboSgc/MdgotFME41meNkO8dquRnr3LIsRZb0fzrF/zb/LMrYPvQcfmsB+t9cl3wQHlu044ZMfAj5r27pnd/8Db2i34WsaNt+74jhH+DFJVR49Sz+8YyApgl3jC0=
MIME-Version: 1.0
X-Mailer: ElasticEmail
From: "David Vegas" <32vegas.promo@gmail.com>
To: xxxxxxx@fastmail.com.au
List-Unsubscribe: <http://api.elasticemail.com/mailer/unsubscribe?key=NDcyO2NpeGljMDFAZmFzdG1haWwuY29tLmF1>
Subject: 75 credits no deposit needed
Reply-To: "David Vegas" <32vegas.promo@gmail.com>
Sender: "Elastic Email" <mailer@elasticemail.com>
Date: Tue, 07 Dec 2010 01:57:33 -0500
Message-ID: <1.034be90a9b1e4573786c@hd-t1797cn>
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_3A4B_CD73CD4C.58BDF534"
X-Truedomain-Domain: elasticemail.com
X-Truedomain-SPF: Pass
X-Truedomain-DKIM: Pass
X-Truedomain: M-Accepted (DKIM)
Cheers

Dave