RE: [Declude.JunkMail] Interesting Spam
Found out that invURIBL wasn't working correctly on my server. It was finding the wrong IP address for the DNS server. Once I fixed that, all of those spams suddenly ceased from being delivered to our inboxes! *grin > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox > Sent: Thursday, September 06, 2007 6:58 PM > To: declude.junkmail@declude.com > Subject: Re: [Declude.JunkMail] Interesting Spam > > I use a command line tool from www.whoisview.com that works well for both > domains and IP blocks. > > Occasionally I run into a domain that doesn't resolve, but when that happens > I also have trouble from registrar sites like netsol and godaddy. > www.freewho.com generally works well, though. > > Darin. > > > - Original Message - > From: "Colbeck, Andrew" <[EMAIL PROTECTED]> > To: > Sent: Thursday, September 06, 2007 7:40 PM > Subject: RE: [Declude.JunkMail] Interesting Spam > > > Well, the easy part is answering your question about the domains. > > Each of the payload domains was registered today, so whatever service > you're using to look up the registrations is probably using a database > at least a day behind. > > I use (for example) this site to my satisfaction: > > http://whois.domaintools.com/sdsdm.com > > > > Andrew. > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > > Behalf Of Dave Beckstrom > > Sent: Thursday, September 06, 2007 3:07 PM > > To: declude.junkmail@declude.com > > Subject: [Declude.JunkMail] Interesting Spam > > > > We're getting a rash of spam that doesn't score high enough > > to be blocked. > > In the past I've looked up the domain owner of the site > > listed in the spam > > and been able to identify sometimes dozens of domains owned > > by the spammer, > > then I've put that list into a filter and blocked the domains > > before they > > were all used in new spam sent to us. > > > > I did a whois on some of the domains and they all show as > > available and > > unregistered. Yet when I go to the domain, it does take me > > to the spammers > > site. How can these domains be functional and show as available to be > > registered at the same time? > > > > Below is a paste of one of the spams. I added 3 additional > > domains that > > have appeared in this same asshole's spam so that you can see > > the pattern of > > domains he is using. > > > > How do I block these? > > > > Dave > > > > > > > > X-Note: > > X-Note: Spam Score: [18] > > X-Note: Scan Time: 16:47:18 on 06 Sep 2007 > > X-Note: Spool File: 35111367.eml > > X-Note: Server Name: dsl88-233-31730.ttnet.net.tr > > X-Note: SMTP Sender: [EMAIL PROTECTED] > > X-Note: Reverse DNS & IP: dsl88-233-31730.ttnet.net.tr > > [88.233.123.242] > > X-Note: Country Chain: TURKEY->destination > > X-Note: Failed Weights: SORBS-WEB [5], FIVETENSRC [4], HELOBOGUS [5], > > SPFUNKNOWN [1], Filter_Country [8], WEIGHT10 [10], WEIGHT14 [14] > > X-Note: > > > > > > -Original Message- > > From: Tam Genois [mailto:[EMAIL PROTECTED] > > Sent: Thursday, September 06, 2007 1:15 PM > > Subject: [SPAM]- Score (12)tuile > > > > How it is going Genois > > Do you want to have an average to small penis all of your > > life? No, you > > don't > > > > dae Hays > > http://soltepec.com/ > > http://selenan.com/ > > http://www.seriia.com/ > > http://www.sdsdm.com/ > > > > > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Interesting Spam
I used www.betterwhois.com and the whois service at www.netsol.com and neither showed the domains had been registered. Guess I'll have to try your site. Thanks! > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, > Andrew > Sent: Thursday, September 06, 2007 6:41 PM > To: declude.junkmail@declude.com > Subject: RE: [Declude.JunkMail] Interesting Spam > > Well, the easy part is answering your question about the domains. > > Each of the payload domains was registered today, so whatever service > you're using to look up the registrations is probably using a database > at least a day behind. > > I use (for example) this site to my satisfaction: > > http://whois.domaintools.com/sdsdm.com > > > > Andrew. > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > > Behalf Of Dave Beckstrom > > Sent: Thursday, September 06, 2007 3:07 PM > > To: declude.junkmail@declude.com > > Subject: [Declude.JunkMail] Interesting Spam > > > > We're getting a rash of spam that doesn't score high enough > > to be blocked. > > In the past I've looked up the domain owner of the site > > listed in the spam > > and been able to identify sometimes dozens of domains owned > > by the spammer, > > then I've put that list into a filter and blocked the domains > > before they > > were all used in new spam sent to us. > > > > I did a whois on some of the domains and they all show as > > available and > > unregistered. Yet when I go to the domain, it does take me > > to the spammers > > site. How can these domains be functional and show as available to be > > registered at the same time? > > > > Below is a paste of one of the spams. I added 3 additional > > domains that > > have appeared in this same asshole's spam so that you can see > > the pattern of > > domains he is using. > > > > How do I block these? > > > > Dave > > > > > > > > X-Note: > > X-Note: Spam Score: [18] > > X-Note: Scan Time: 16:47:18 on 06 Sep 2007 > > X-Note: Spool File: 35111367.eml > > X-Note: Server Name: dsl88-233-31730.ttnet.net.tr > > X-Note: SMTP Sender: [EMAIL PROTECTED] > > X-Note: Reverse DNS & IP: dsl88-233-31730.ttnet.net.tr > > [88.233.123.242] > > X-Note: Country Chain: TURKEY->destination > > X-Note: Failed Weights: SORBS-WEB [5], FIVETENSRC [4], HELOBOGUS [5], > > SPFUNKNOWN [1], Filter_Country [8], WEIGHT10 [10], WEIGHT14 [14] > > X-Note: > > > > > > -Original Message- > > From: Tam Genois [mailto:[EMAIL PROTECTED] > > Sent: Thursday, September 06, 2007 1:15 PM > > Subject: [SPAM]- Score (12)tuile > > > > How it is going Genois > > Do you want to have an average to small penis all of your > > life? No, you > > don't > > > > dae Hays > > http://soltepec.com/ > > http://selenan.com/ > > http://www.seriia.com/ > > http://www.sdsdm.com/ > > > > > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Interesting Spam
I use a command line tool from www.whoisview.com that works well for both domains and IP blocks. Occasionally I run into a domain that doesn't resolve, but when that happens I also have trouble from registrar sites like netsol and godaddy. www.freewho.com generally works well, though. Darin. - Original Message - From: "Colbeck, Andrew" <[EMAIL PROTECTED]> To: Sent: Thursday, September 06, 2007 7:40 PM Subject: RE: [Declude.JunkMail] Interesting Spam Well, the easy part is answering your question about the domains. Each of the payload domains was registered today, so whatever service you're using to look up the registrations is probably using a database at least a day behind. I use (for example) this site to my satisfaction: http://whois.domaintools.com/sdsdm.com Andrew. > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Dave Beckstrom > Sent: Thursday, September 06, 2007 3:07 PM > To: declude.junkmail@declude.com > Subject: [Declude.JunkMail] Interesting Spam > > We're getting a rash of spam that doesn't score high enough > to be blocked. > In the past I've looked up the domain owner of the site > listed in the spam > and been able to identify sometimes dozens of domains owned > by the spammer, > then I've put that list into a filter and blocked the domains > before they > were all used in new spam sent to us. > > I did a whois on some of the domains and they all show as > available and > unregistered. Yet when I go to the domain, it does take me > to the spammers > site. How can these domains be functional and show as available to be > registered at the same time? > > Below is a paste of one of the spams. I added 3 additional > domains that > have appeared in this same asshole's spam so that you can see > the pattern of > domains he is using. > > How do I block these? > > Dave > > > > X-Note: > X-Note: Spam Score: [18] > X-Note: Scan Time: 16:47:18 on 06 Sep 2007 > X-Note: Spool File: 35111367.eml > X-Note: Server Name: dsl88-233-31730.ttnet.net.tr > X-Note: SMTP Sender: [EMAIL PROTECTED] > X-Note: Reverse DNS & IP: dsl88-233-31730.ttnet.net.tr > [88.233.123.242] > X-Note: Country Chain: TURKEY->destination > X-Note: Failed Weights: SORBS-WEB [5], FIVETENSRC [4], HELOBOGUS [5], > SPFUNKNOWN [1], Filter_Country [8], WEIGHT10 [10], WEIGHT14 [14] > X-Note: > > > -Original Message- > From: Tam Genois [mailto:[EMAIL PROTECTED] > Sent: Thursday, September 06, 2007 1:15 PM > Subject: [SPAM]- Score (12)tuile > > How it is going Genois > Do you want to have an average to small penis all of your > life? No, you > don't > > dae Hays > http://soltepec.com/ > http://selenan.com/ > http://www.seriia.com/ > http://www.sdsdm.com/ > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Interesting Spam
Well, the easy part is answering your question about the domains. Each of the payload domains was registered today, so whatever service you're using to look up the registrations is probably using a database at least a day behind. I use (for example) this site to my satisfaction: http://whois.domaintools.com/sdsdm.com Andrew. > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Dave Beckstrom > Sent: Thursday, September 06, 2007 3:07 PM > To: declude.junkmail@declude.com > Subject: [Declude.JunkMail] Interesting Spam > > We're getting a rash of spam that doesn't score high enough > to be blocked. > In the past I've looked up the domain owner of the site > listed in the spam > and been able to identify sometimes dozens of domains owned > by the spammer, > then I've put that list into a filter and blocked the domains > before they > were all used in new spam sent to us. > > I did a whois on some of the domains and they all show as > available and > unregistered. Yet when I go to the domain, it does take me > to the spammers > site. How can these domains be functional and show as available to be > registered at the same time? > > Below is a paste of one of the spams. I added 3 additional > domains that > have appeared in this same asshole's spam so that you can see > the pattern of > domains he is using. > > How do I block these? > > Dave > > > > X-Note: > X-Note: Spam Score: [18] > X-Note: Scan Time: 16:47:18 on 06 Sep 2007 > X-Note: Spool File: 35111367.eml > X-Note: Server Name: dsl88-233-31730.ttnet.net.tr > X-Note: SMTP Sender: [EMAIL PROTECTED] > X-Note: Reverse DNS & IP: dsl88-233-31730.ttnet.net.tr > [88.233.123.242] > X-Note: Country Chain: TURKEY->destination > X-Note: Failed Weights: SORBS-WEB [5], FIVETENSRC [4], HELOBOGUS [5], > SPFUNKNOWN [1], Filter_Country [8], WEIGHT10 [10], WEIGHT14 [14] > X-Note: > > > -Original Message- > From: Tam Genois [mailto:[EMAIL PROTECTED] > Sent: Thursday, September 06, 2007 1:15 PM > Subject: [SPAM]- Score (12)tuile > > How it is going Genois > Do you want to have an average to small penis all of your > life? No, you > don't > > dae Hays > http://soltepec.com/ > http://selenan.com/ > http://www.seriia.com/ > http://www.sdsdm.com/ > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Interesting spam footer
Just kids with more imagination than knowledge Sunday, September 18, 2005, 6:38:03 PM, Darin Cox <[EMAIL PROTECTED]> wrote: DC> DC> DC> Thought this was interesting... a spammer trying to use fear of DC> prosecution to stop people from reporting their email as spam. DC> DC> DC> DC> The spam was sent to a postmaster address never used for outgoing mail... DC> DC> DC> DC> Darin. DC> DC> DC> DC> = DC> IMPORTANT INFORMATION CONCERNING THIS COMMERCIAL MESSAGE DC> IN COMPLIANCE WITH THE CAN-SPAM ACT OF 2003 DC> This is one of a number of commercial email messages that you, DC> or someone using your computer, agreed to receive this message DC> WARNING!!! DC> ANY PERSON REPORTING ALLEGED SPAM TO ANY PERSON, PERSONS, ISPs DC> OR ENTITIES WITHOUT PHYSICAL PROOF OF SAID CLAIM IS GUILTY OF DC> BOTH FRAUD AND A CIVIL CRIME AND WILL BE PURSUED AND PROSECUTED DC> TO THE FULLEST EXTENT OF THE LAW. FURTHER, SHOULD SAID ALLEGATION DC> RESULT IN ANY INTERRUPTION OF NORMAL BUSINESS ACTIVITY OF THE DC> COMPANY AND/OR RESULT IN LOSS OF INCOME AND/OR RESULT IN DC> UNNECESSARY EXPENSES, A CIVIL SUIT WILL BE BROUGHT DC> DC> DC> DC> DC> Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Interesting spam footer
Well, the website resolves to 82.96.105.6, so at least they are consistent. It's a Euro IP address. Here's what RIPE reports about the IP: % This is the RIPE Whois query server #2.% The objects are in RPSL format.%% Note: the default output of the RIPE Whois server% is changed. Your tools may need to be adjusted. See% http://www.ripe.net/db/news/abuse-proposal-20050331.html% for more details.%% Rights restricted by copyright.% See http://www.ripe.net/db/copyright.html % Note: This output has been filtered.% To receive output for a database update, use the "-B" flag % Information related to '82.96.105.0 - 82.96.105.255' inetnum: 82.96.105.0 - 82.96.105.255netname: DE-ITelligencedescr: ITelligence sprlcountry: DEadmin-c: PN357-RIPEtech-c: PN357-RIPEstatus: ASSIGNED PAmnt-by: PROBE-MNTmnt-lower: PROBE-MNTsource: RIPE # Filtered person: Philippe Nihouladdress: ITelligence sprl 47, Place Favresse La Hulpe, 1310 BEphone: +32 6551170fax-no: +32 6551170e-mail: [EMAIL PROTECTED]nic-hdl: PN357-RIPEmnt-by: PROBE-MNTsource: RIPE # Filtered % Information related to '82.96.64.0/18AS29686' route: 82.96.64.0/18descr: Probe Networks european networkorigin: AS29686mnt-by: PROBE-MNTsource: RIPE # Filtered - Original Message - From: Darin Cox To: Declude.JunkMail@declude.com Sent: Sunday, September 18, 2005 9:35 PM Subject: Re: [Declude.JunkMail] Interesting spam footer The site being advertised was www.ebay-laptop.com. Silly really. They're just asking for trouble with that statement. Came in from 82.96.105.2, but with a fake yahoo email address. Darin. - Original Message - From: Dave Doherty To: Declude.JunkMail@declude.com Sent: Sunday, September 18, 2005 8:54 PM Subject: Re: [Declude.JunkMail] Interesting spam footer OK, so I guess the point is the recipient has to prove that the message is spam? Sounds like "blame the victim"... And maybe the recipient has to buy what's being offered to avoid running afoul of the "LOSS OF INCOME" claim. And what was being advertised? Anything useful to the recipient? Did this come from a source in the US? Interesting "English" there is the lower-case sentence... Mike, my guess is there's no court with jursidiction. But if it WERE prosecuted in the US, I would love to attend the trial! -Dave Doherty Skywaves, Inc. - Original Message - From: Darin Cox To: IMail_Forum@list.ipswitch.com ; Declude.JunkMail@declude.com Sent: Sunday, September 18, 2005 7:38 PM Subject: [Declude.JunkMail] Interesting spam footer Thought this was interesting... a spammer trying to use fear of prosecution to stop people from reporting their email as spam. The spam was sent to a postmaster address never used for outgoing mail... Darin. =IMPORTANT INFORMATION CONCERNING THIS COMMERCIAL MESSAGEIN COMPLIANCE WITH THE CAN-SPAM ACT OF 2003This is one of a number of commercial email messages that you,or someone using your computer, agreed to receive this messageWARNING!!!ANY PERSON REPORTING ALLEGED SPAM TO ANY PERSON, PERSONS, ISPs OR ENTITIES WITHOUT PHYSICAL PROOF OF SAID CLAIM IS GUILTY OF BOTH FRAUD AND A CIVIL CRIME AND WILL BE PURSUED AND PROSECUTED TO THE FULLEST EXTENT OF THE LAW. FURTHER, SHOULD SAID ALLEGATION RESULT IN ANY INTERRUPTION OF NORMAL BUSINESS ACTIVITY OF THE COMPANY AND/OR RESULT IN LOSS OF INCOME AND/OR RESULT IN UNNECESSARY EXPENSES, A CIVIL SUIT WILL BE BROUGHT
Re: [Declude.JunkMail] Interesting spam footer
The site being advertised was www.ebay-laptop.com. Silly really. They're just asking for trouble with that statement. Came in from 82.96.105.2, but with a fake yahoo email address. Darin. - Original Message - From: Dave Doherty To: Declude.JunkMail@declude.com Sent: Sunday, September 18, 2005 8:54 PM Subject: Re: [Declude.JunkMail] Interesting spam footer OK, so I guess the point is the recipient has to prove that the message is spam? Sounds like "blame the victim"... And maybe the recipient has to buy what's being offered to avoid running afoul of the "LOSS OF INCOME" claim. And what was being advertised? Anything useful to the recipient? Did this come from a source in the US? Interesting "English" there is the lower-case sentence... Mike, my guess is there's no court with jursidiction. But if it WERE prosecuted in the US, I would love to attend the trial! -Dave Doherty Skywaves, Inc. - Original Message - From: Darin Cox To: IMail_Forum@list.ipswitch.com ; Declude.JunkMail@declude.com Sent: Sunday, September 18, 2005 7:38 PM Subject: [Declude.JunkMail] Interesting spam footer Thought this was interesting... a spammer trying to use fear of prosecution to stop people from reporting their email as spam. The spam was sent to a postmaster address never used for outgoing mail... Darin. =IMPORTANT INFORMATION CONCERNING THIS COMMERCIAL MESSAGEIN COMPLIANCE WITH THE CAN-SPAM ACT OF 2003This is one of a number of commercial email messages that you,or someone using your computer, agreed to receive this messageWARNING!!!ANY PERSON REPORTING ALLEGED SPAM TO ANY PERSON, PERSONS, ISPs OR ENTITIES WITHOUT PHYSICAL PROOF OF SAID CLAIM IS GUILTY OF BOTH FRAUD AND A CIVIL CRIME AND WILL BE PURSUED AND PROSECUTED TO THE FULLEST EXTENT OF THE LAW. FURTHER, SHOULD SAID ALLEGATION RESULT IN ANY INTERRUPTION OF NORMAL BUSINESS ACTIVITY OF THE COMPANY AND/OR RESULT IN LOSS OF INCOME AND/OR RESULT IN UNNECESSARY EXPENSES, A CIVIL SUIT WILL BE BROUGHT
Re: [Declude.JunkMail] Interesting spam footer
OK, so I guess the point is the recipient has to prove that the message is spam? Sounds like "blame the victim"... And maybe the recipient has to buy what's being offered to avoid running afoul of the "LOSS OF INCOME" claim. And what was being advertised? Anything useful to the recipient? Did this come from a source in the US? Interesting "English" there is the lower-case sentence... Mike, my guess is there's no court with jursidiction. But if it WERE prosecuted in the US, I would love to attend the trial! -Dave Doherty Skywaves, Inc. - Original Message - From: Darin Cox To: IMail_Forum@list.ipswitch.com ; Declude.JunkMail@declude.com Sent: Sunday, September 18, 2005 7:38 PM Subject: [Declude.JunkMail] Interesting spam footer Thought this was interesting... a spammer trying to use fear of prosecution to stop people from reporting their email as spam. The spam was sent to a postmaster address never used for outgoing mail... Darin. =IMPORTANT INFORMATION CONCERNING THIS COMMERCIAL MESSAGEIN COMPLIANCE WITH THE CAN-SPAM ACT OF 2003This is one of a number of commercial email messages that you,or someone using your computer, agreed to receive this messageWARNING!!!ANY PERSON REPORTING ALLEGED SPAM TO ANY PERSON, PERSONS, ISPs OR ENTITIES WITHOUT PHYSICAL PROOF OF SAID CLAIM IS GUILTY OF BOTH FRAUD AND A CIVIL CRIME AND WILL BE PURSUED AND PROSECUTED TO THE FULLEST EXTENT OF THE LAW. FURTHER, SHOULD SAID ALLEGATION RESULT IN ANY INTERRUPTION OF NORMAL BUSINESS ACTIVITY OF THE COMPANY AND/OR RESULT IN LOSS OF INCOME AND/OR RESULT IN UNNECESSARY EXPENSES, A CIVIL SUIT WILL BE BROUGHT
RE: [Declude.JunkMail] Interesting spam footer
Title: Message It looks like a great opportunity to actually meet a real live spammer in person in front of a judge. Sign me up. Mike -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin CoxSent: Sunday, September 18, 2005 4:38 PMTo: IMail_Forum@list.ipswitch.com; Declude.JunkMail@declude.comSubject: [Declude.JunkMail] Interesting spam footer Thought this was interesting... a spammer trying to use fear of prosecution to stop people from reporting their email as spam. The spam was sent to a postmaster address never used for outgoing mail... Darin. =IMPORTANT INFORMATION CONCERNING THIS COMMERCIAL MESSAGEIN COMPLIANCE WITH THE CAN-SPAM ACT OF 2003This is one of a number of commercial email messages that you,or someone using your computer, agreed to receive this messageWARNING!!!ANY PERSON REPORTING ALLEGED SPAM TO ANY PERSON, PERSONS, ISPs OR ENTITIES WITHOUT PHYSICAL PROOF OF SAID CLAIM IS GUILTY OF BOTH FRAUD AND A CIVIL CRIME AND WILL BE PURSUED AND PROSECUTED TO THE FULLEST EXTENT OF THE LAW. FURTHER, SHOULD SAID ALLEGATION RESULT IN ANY INTERRUPTION OF NORMAL BUSINESS ACTIVITY OF THE COMPANY AND/OR RESULT IN LOSS OF INCOME AND/OR RESULT IN UNNECESSARY EXPENSES, A CIVIL SUIT WILL BE BROUGHT
RE: [Declude.JunkMail] Interesting spam...
Thanks, Kami. I've started a new section in one of my JunkMail Pro text filter files called "Phishing" for similar attempts to garner e-mail addresses and credit cards numbers. Andrew 8) -Original Message- From: Kami Razvan [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 13, 2003 2:11 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Interesting spam... Hi; I just saw a spam that I think we all need to block... = Important notice We have just charged your credit card for money laundry service in amount of $234.65 (because you are either child pornography webmaster or deal with dirty money, which require us to layndry them and then send to your checking account). If you feel this transaction was made by our mistake, please press "No". If you confirm this transaction, please press "Yes" and fill in the form below. Enter your credit card number here: Enter your credit card expiration date: Contacts: Phone: +5982 902 5627 Fax: +5982 902 3114 E-mail: [EMAIL PROTECTED] ICQ: 156746629 == It should be interesting to see variations of this .. Regards, Kami --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Interesting spam...
Yes, I got one of those personally. Incredibly cheeky, but no doubt there are people dumb enough to fall for it. If there weren't, we wouldn't still be getting those Nigerian scams. Got one of those yesterday, too. Visited their web site (which offers English and Russian language versions) and they have a not-too-convincing disclaimer saying they had nothing to do with the spam. -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
