Now go outside and look at the sky.
Daily Spam #1
Subject: .ws "Web Site" Domain Registry: #37 Fastest Growing Co. in USA
From: Domain Hostmaster
Haha... sure, all I need to make my live complete is a .ws domain, used by respectable spammers all over.
So, who are those guys?
The spam contains a link to NetLeads.ws, and it's impossible to get reliable registry information about .ws domains. But the site is hosted in Gloucester, UK at Fasthosts Internet Ltd., and I'll try and let them know what they are hosting.
A traceroute on the email sender IP address leads us to Turkey. The two possibilities are that either mailserver.emekinsaat.com.tr is used knowingly to send spam, or it is just one of many unsecured mailservers that has been hijacked. I vote for #2. Oh well... so there ends the trail for this piece of spam.