Date: Wed, 28 Dec 2011 05:32:16 +0700
Subject: Re: Fwd: Re: Scan from a HP Officejet #8056528
A document was scanned and sent to you using a Hewlett-Packard JET SK868691M
Sent to you by: SHEA
Pages : 3
Filetype: Image (.jpeg) View
The domain chredret.ru was used in this spam run yesterday, but now the server has moved from 18.104.22.168 to 22.214.171.124 (Delta-X, Ukraine). I don't know Delta-X at all, but the SiteVet and Google reports are not good, so you might want to consider blocking the entire range 126.96.36.199/22.