| View previous topic :: View next topic |
| Author |
Message |
efa
Lieutenant
Joined: Aug 31, 2007
Posts: 164
Location: Italy
|
 Posted: Fri Jul 04, 2008 11:46 am Post subject: spam/cheat without URL, that ask to write to an email |
|
|
Hi,
after starting to use Complainterator, I receive no more spam with link inside.
Probably I cost too much to the spammer, as I managed to suspend hundreds domains a month.
But now I receive some spam with no URL inside, that ask to write to an email, most on yahoo, hotmail, gmail or other big provider. All are cheat/phish.
For all of that, I write to abuse@domain.tld asking to close the mailbox and attach the spam source.
Someone other receive this types of spam?
|
|
| Back to top |
|
 |
ahoier
SIRT Handler
Joined: Jan 14, 2006
Posts: 1100
Location: USA
|
| Posted: Fri Jul 04, 2008 2:06 pm Post subject: |
|
|
I think I know what you are talking about 
A lot of times I will receive spam, appearing to be from a "sexy lady" who wants to "meet up" (sex? drinks? mail-order bride? who knows  Probably all three, to result in the third..lol).
And yea, most of the time they will use either throw-away mail accounts (drop boxes) at free-email places (Gmail, hotmail, msn, yahoo, etc.) - OTHER times, the domain in the e-mail address won't look to familiar...in that case, whois the domain, and you will find the spammer registered the domain for use solely as a mail server (MX) - you won't find any webpage/HTTP when you navigate to the domain either - since they only use the domain as a mailserver.
There is one group currently doing this, known as "UALadys" - which appears to be a Ukrainian marriage agency (mail-order brides).
There's all kinds of results at Google:
http://www.google.com/search?q=UALadys&rls=com.microsoft:en-US:IE-SearchBox&ie=UTF-8&oe=UTF-8&sourceid=ie7&rlz=1I7GGIH
Other links of interest:
http://www.spaminmyinbox.com/2007/07/marriage-agency-scam-claiming-affiliate.html
http://ikillspammers.blogspot.com/2008/03/hello-i-am-bored-this-evening.html
from http://www.google.com/search?num=100&hl=en&safe=off&rls=com.microsoft%3Aen-US%3AIE-SearchBox&rlz=1I7GGIH&q=UALadys+spam
spamislame has wrote about the group a couple times.
Now, if this isn't the type of spam you are questioning, sorry for the long drawn out reply lol.
|
|
| Back to top |
|
|
AlphaCentauri
SIRT Handler
Premium Member
Joined: Nov 20, 2003
Posts: 2885
|
| Posted: Fri Jul 04, 2008 5:52 pm Post subject: |
|
|
I have noticed the same shift -- a lot more spam asking for me to write to them instead of asking me to visit a URL. It's obviously a far less effective way to get people to respond, so spammers must really be hurting. But it does limit our ability to investigate, as we would be giving away a lot more information than most of us would wish by responding to an email address instead of visiting a website.
|
|
| Back to top |
|
|
ahoier
SIRT Handler
Joined: Jan 14, 2006
Posts: 1100
Location: USA
|
| Posted: Fri Jul 04, 2008 6:57 pm Post subject: |
|
|
And ofc, if a reply is sent...it's no longer "unsolicited" spam....hehehe.
|
|
| Back to top |
|
|
brewt
SIRT Handler
Premium Member
Joined: May 29, 2007
Posts: 792
Location: USA
|
| Posted: Fri Jul 04, 2008 10:33 pm Post subject: |
|
|
| ahoier wrote: | | And ofc, if a reply is sent...it's no longer "unsolicited" spam |
the original email remains unsolicited despite subsequent replies.
|
|
| Back to top |
|
|
efa
Lieutenant
Joined: Aug 31, 2007
Posts: 164
Location: Italy
|
| Posted: Sat Jul 05, 2008 8:40 am Post subject: |
|
|
the spam with content on "sexy lady" who wants to "meet up" are really fewer.
The most speak about bank, United Nation program, Lottery winner, Insurance refound for some disaster, Nigeria government, and so on... all are cheat.
I cannot image a spammed stupid that can belive in those emails ...
|
|
| Back to top |
|
|
PaulW2
Lieutenant
Premium Member
Joined: May 04, 2006
Posts: 153
|
| Posted: Sat Jul 05, 2008 8:53 am Post subject: |
|
|
| efa wrote: | the spam with content on "sexy lady" who wants to "meet up" are really fewer.
The most speak about bank, United Nation program, Lottery winner, Insurance refound for some disaster, Nigeria government, and so on... all are cheat.
I cannot image a spammed stupid that can belive in those emails ... |
These now make up the bulk of my spam. I often get two from the same source arrive within seconds of each other.
|
|
| Back to top |
|
|
efa
Lieutenant
Joined: Aug 31, 2007
Posts: 164
Location: Italy
|
| Posted: Sat Jul 05, 2008 7:34 pm Post subject: |
|
|
| AlphaCentauri wrote: | | But it does limit our ability to investigate |
I do not understand why you say this.
Tipically if the email inside the message body, is a yahoo domain email, I write to abuse[at]yahoo.com asking to close the account, not to the main itself.
If is an hotmail, I use that abuse service, and so on.
I do not reveal nothing of myself to the spammer.
|
|
| Back to top |
|
|
efa
Lieutenant
Joined: Aug 31, 2007
Posts: 164
Location: Italy
|
| Posted: Sat Jul 05, 2008 7:52 pm Post subject: |
|
|
someone think that can be usefull an automatic tool to parse this types of spam and create the complaint?
|
|
| Back to top |
|
|
tembow
Blue Angel
Premium Member
Joined: Oct 10, 2005
Posts: 2942
|
| Posted: Sun Jul 06, 2008 12:51 am Post subject: |
|
|
If you write it, I will use it.
|
|
| Back to top |
|
|
spam-review
Cadet
Joined: Jul 04, 2008
Posts: 4
|
| Posted: Sun Jul 06, 2008 1:07 am Post subject: |
|
|
Outblaze is responsible and has a lot of mail domains. This is what they reply to me:
| Outblaze wrote: | Hello
This is to inform you that action has been taken against the user
referenced in your complaint, in accordance with our zero tolerance
Acceptable Use Policy, which can be found at this URL -
http://www.outblaze.com/antispam/index.html
Outblaze is one of the largest providers of webmail services in
the world. As a responsible ISP, we hate spam, and we do not
allow our network to be abused by spammers.
Thank you for reporting this incident. Please feel free to report
further incidents of abuse originating from our users to us at
[Outblaze abuse address]
We encourage you to use http://www.spamcop.net to send out automated
spam complaints, if you face difficulties complaining manually to each
spam you receive.
Thank You
Outblaze Abuse Desk |
My complaints look like this:
To: outblaze abuse
Subject: "Lotto scam: swissclaims.dept@winning.com"
Body: Full scam mail including headers.
Their domains include those listed at www.mail.com. ( http://www.digwebinterface.com/ - look for MX - is useful to find where to send abuse complaints for uncommon domains)
Yahoo! I've sent complaints using their web form - highlight Fraud, not spam. Maybe Yahoo! abuse mail would act on "Fraud: address" also.
Gmail: http://mail.google.com/support/bin/request.py?contact_type=abuse_phishing
Mail account complaints usually don't require many words imho.
|
|
| Back to top |
|
|
AlphaCentauri
SIRT Handler
Premium Member
Joined: Nov 20, 2003
Posts: 2885
|
| Posted: Sun Jul 06, 2008 3:34 am Post subject: |
|
|
| efa wrote: | | AlphaCentauri wrote: | | But it does limit our ability to investigate |
I do not understand why you say this. |
I meant that while we can get the email address shut down if it is on yahoo or gmail, we can't get any more details about who the spammer is or what he is selling without giving him an email address for ourselves.
The spammers can register for those email accounts by the thousand. And they often use relatively obscure free services that require us to spend time finding a contact address, and even then those services may not shut them down. (Though if you get spam with an email address with a ".co.za" TLD, it's worth looking it up, as the South African ISP's seem to be very responsive to abuse reports.)
|
|
| Back to top |
|
|
efa
Lieutenant
Joined: Aug 31, 2007
Posts: 164
Location: Italy
|
| Posted: Fri Jul 18, 2008 12:08 pm Post subject: |
|
|
done in xComplaint v.0.07.13
Look at:
 /posts218399-30.html
|
|
| Back to top |
|
|
efa
Lieutenant
Joined: Aug 31, 2007
Posts: 164
Location: Italy
|
| Posted: Fri Jul 18, 2008 12:09 pm Post subject: |
|
|
done in xComplaint v0.07.13
see:
/posts218399-30.html
|
|
| Back to top |
|
|
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
