The IRS Scam I wrote about yesterday is on another server, now in South Africa: http://smtp1.cnwweb.co.za/~admin/irs/ . The from is now service@irs.com, and the reply-to is no-reply@irs.com. Many thanks to Susan who let me know that IRS phishing scams can be reported at phishing@irs.gov.
Archive of posts filed under the Spam category.
New Internal Revenue Service Scam
I just received two messages from the “Internal Revenue Service” sent to two different email addresses. I am going to get $109.30! The address in the From was “notice@irs.com” while the Reply-To was “no-reply@irss.com” To collect my refund, I go to “http://www.redalkemi.com/try/irs” At that page (on a server based in India) is hard coded the […]
“This advertisement is presented by” spam has stopped
On March 1, 2007 I started receiving spam sent to me with a “unique” signature. The message footer always started with the phrase “This advertisement is presented by” then a company name. From March 1 through August 13, I received 5,220 spam messages. I’m not sure why they stopped on that date. Here is one […]
Searching for Catchall Domains?
I received an odd spam this morning. It was sent to a nonsense address at one of my domains that still has the catchall enabled. The body of the message Return-Path: Received: from pdngvw.net (unknown [211.63.134.102]) by server1.planetmike.com (Postfix) with SMTP id 88836400001 for ; Wed, 22 Aug 2007 05:01:14 -0400 (EDT) Received: from kgfhbaq.net […]
DomainUpdater.com Registry spam
I just received some spam to my email address that was in my old Network Solutions domain registration Whois listing. The spam is from domainupdater.com (view the whois information for domainupdater.com. The spammers at DomainUpdater.com are hiding behind Network Solutions’ http://www.networksolutionsprivateregistration.com/ service. I am so glad that I left NSI entirely a few weeks ago. […]
Domain Return Address in a Spam Run
Wow, it’s been a while since one of my domains was used as the return address in a spam run. 2,630 bounces, so a fairly small run. Wish I had captured the body content. Oh well, ever since the spammers won a battle by forcing me to turn off my catchall addresses, it’s been more […]
Vistaprint Still Sucks (pt 3)
I swear, you just can’t make this stuff up. From VistaPrint’s privacy policy: Deactivation of Your Account. You may also request deactivation of your VistaPrint account by contacting Customer Care at customercare@vistaprint.com or by writing to the address below and requesting account deactivation. Please note that some information may remain in our archived records after […]
Vistaprint Still Sucks (pt 2)
So, yesterday evening I email my account deactivation request to Vistaprint.com. Today just after 8am Eastern I got some RRR (not quite XXX) porn spam to the unique email address I gave only to Vistaprint. Wow, spam from a third party sent to an email address only given to Vistaprint? A coincidence? I don’t think […]
Spam with Numeric Subject and Short Hex Body
Over the past 12 hours or so, I’ve received a handful of email messages from around the world. The Subject is a series of numbers, 4 to 6 digits. The only text in the body is a group of eight hexadecimal characters. I don’t see a correlation between any of the info in the messages, […]
PDF Spam with numbers in the subject
Since Monday I’ve been getting lots of new PDF spam. The subject line ends with a number with 5 to 10 digits in it. The subject line matches the file name of the attachment. The PDF all tout stock spams. The footer of the PDF says the message is from “American Stock Trader Press.” If […]