Date: Wed, 28 Dec 2011 05:32:16 +0700
Subject: Re: Fwd: Re: Scan from a HP Officejet #8056528
A document was scanned and sent to you using a Hewlett-Packard JET SK868691M
Sent to you by: SHEA
Pages : 3
Filetype: Image (.jpeg) View
The domain chredret.ru was used in this spam run yesterday, but now the server has moved from 184.108.40.206 to 220.127.116.11 (Delta-X, Ukraine). I don't know Delta-X at all, but the SiteVet and Google reports are not good, so you might want to consider blocking the entire range 18.104.22.168/22.