Email Spammers who SPAMMED ME! | Kas Against Spam!!

kas
Administrator

I no longer do indepth security inspections. Now this is more of a hobby I do in my spare time.

Posts: 783
Are you a spam fighter?: YES

Email Spammers who SPAMMED ME! Nov 24, 2010 4:18:05 GMT -5

Quote

Post by kas on Nov 24, 2010 4:18:05 GMT -5

Email Spammers who spammed ME!

conleerealestate@yahoo.com
Subject: Cocoa Luna Open House

Joie Concepcion <joieconcepcionxm@yowzahost.com>
Subject: isila rin

Brad Gorman <hyguwjdu@hotmail.com>
Subject: edafjv

Aaron Traywick <wyfjr@gmail.com>
Subject: RE:jzjzo

Ross Levison <uqumivi@live.com>
Subject: RE:foljmil

Michael McDermott <irag@yahoo.com>
Subject: RE:ryxihuk

Louis Fein <qezj@gmail.com>
Subject: RE:ohube

The only way to protect yourself is to arm yourself with knowledge. When you relax and expect others to protect you, they usually drop the ball. So this is why I do what I do.
.

kas
Administrator

I no longer do indepth security inspections. Now this is more of a hobby I do in my spare time.

Posts: 783
Are you a spam fighter?: YES

Email Spammers who SPAMMED ME! Dec 24, 2010 0:13:06 GMT -5

Quote

Post by kas on Dec 24, 2010 0:13:06 GMT -5

Here is another but I wanted to focus this time on the spam content instead of who it is from as it was not me who fell victim but someone I know and I don't have the header information.

Someone I know has an email account that got hacked and then another family member from the older less tech-savvy generation clicked on the spam link that got sent from the hacked account because they knew the sender and so thought it was trustworthy.

I took some pictures to help explain what I saw:

First the email:

As you can see the fake site of h1s67mp6az6.nuhmytru.com (*Link changed to myWOT advisory about this site)

I also got one that said the fake site of vqcjl4cjl8k.nuhmytru.com(*Link changed to myWOT advisory about this site)

Also LegitScripts said it is a "Rogue Internet Pharmacy" and not to be trusted!

Also read the very informed spam fighter's review of the domain:
www.siteadvisor.com/sites/nuhmytru.com (Reviewer's comments are here: LINK)

Then the site:

i.imgur.com/iRXLP.jpg

This is a known fake pharma site that phishes for your credit card info contributed to identity theft!!

Read more here: spamtrackers.eu/wiki/index.php/Canadian_Health%26Care_Mall

And parts I noticed when looking at the site from a safe box:

The certification that verifies it is legit .. is faked and hosted on their spam domain:

Also I noticed that they have a spam policy page that also has an unsubscribe button that tries to get you to put in your email address. Don't do it as that is only so they can harvest your email to spam and possibly hack the same way my family member's email got hacked!

Last Edit: Dec 24, 2010 0:32:28 GMT -5 by kas

The only way to protect yourself is to arm yourself with knowledge. When you relax and expect others to protect you, they usually drop the ball. So this is why I do what I do.
.

kas
Administrator

I no longer do indepth security inspections. Now this is more of a hobby I do in my spare time.

Posts: 783
Are you a spam fighter?: YES

Email Spammers who SPAMMED ME! Dec 24, 2010 0:41:20 GMT -5

Quote

Post by kas on Dec 24, 2010 0:41:20 GMT -5

Just wanted to add .. if you are going to buy medication online you should read the following:

www.nabp.net/programs/consumer-protection/buying-medicine-online/

and a list of LEGIT online pharmacies:

www.legitscript.com/pharmacies/legitimate

The only way to protect yourself is to arm yourself with knowledge. When you relax and expect others to protect you, they usually drop the ball. So this is why I do what I do.
.

kas
Administrator

I no longer do indepth security inspections. Now this is more of a hobby I do in my spare time.

Posts: 783
Are you a spam fighter?: YES

Email Spammers who SPAMMED ME! Dec 27, 2010 14:54:20 GMT -5

Quote

Post by kas on Dec 27, 2010 14:54:20 GMT -5

Another one but this one is trying to pretend to be a news site but each link goes to another scam:

Return-Path: <mail.123283815@swhs887create.com>
Received: from noehlo.host ([127.0.0.1])
by pickering.mail.mindspring.net (EarthLink SMTP Server) with SMTP id 1pvxGm5m33Nl3p20; Wed, 22 Dec 2010 18:01:20 -0500 (EST)
Received: from smtp.connection ([69.64.23.33])
X-Goomoji-Body: true [id]
Date: [*date]
Message-ID: <rhlLkTikyTQPMUDhVYmsDP93sa_Aj-6HFQHgKPt5l87Gg@mail.>
References: <bhiLkTikyTQPMUDhVYmsDP93sa_Aj-6HFQHgKPt5l87Gg@mail.>
Subject: =?ISO-8859-1?Q?_17_positions_left_-_up_to_$500_day_?=
From: News8Reports <News8Reports123283815@swhs887create.com>

<center>
<a href="http://
swhs612winning
.
com
/pfK3au1L/9j8zW123283815hfclzqgqzez/kgPkkY811049/OK47ytI">
<style>{{words:10}}</style>
<img border="0" src="http://
swhs612winning
.
com
/td27VqajDoIGvJ123283815meivlqgwsao/84nQ0P.11049/oooeiug" alt=""></a><br>
<style>{{words:10}}</style>
<a href="http://
swhs612winning
.
com
/tzdV0K27ayC1lr123283815hyihxuxdszs/b05E2wE11049/aWQWvkk">
<style>{{words:10}}</style>
<img border="0" src="http://
swhs612winning
.
com
/oodm3vbRDa4Kw.123283815kegmdvbnboo/yFrDYeO11049/0UPVHgO" alt=""></a><br>

<div><img style="MARGIN: 0px 0.2ex; VERTICAL-ALIGN: middle" src="cid:348@goomoji.gmail" width="12" height="12" goomoji="348"></div>
<div></div>

and here are what the links look like:

Last Edit: Dec 27, 2010 14:57:55 GMT -5 by kas

The only way to protect yourself is to arm yourself with knowledge. When you relax and expect others to protect you, they usually drop the ball. So this is why I do what I do.
.