posted on August 20, 2003 02:36:03 PM new
How many people will fall for THIS one? Geez.
I finally got a Ebay scam email!
This one is an Ebay draw for a Ford Explorer.
"All you have to do is to login to "My Ebay" and confirm your entrance. After that you will get a Unique Contest Key that will represent you in the draw
Sign In... (yeah right...)
Here's what SpamCop said...
Parsing header:
Received: from rwcrgxc51.email.net ([204.127.198.37]) by rwcrmxc13.email.net (rwcrmxc13) with ESMTP id <20030820204252r13006mc0be>; Wed, 20 Aug 2003 20:42:52 +0000
Possible spammer: 204.127.198.37
Received line accepted
Received: from www.mediagarage.com ([209.132.244.95]) by email.net (rwcrgxc51) with ESMTP id <20030820204252e5100dnicle>; Wed, 20 Aug 2003 20:42:52 +0000
host 204.127.198.37 (getting name) = rwcrgxc51.email.net.
host rwcrgxc51.email.net (checking ip) = 204.127.198.37
204.127.198.37 not listed in dnsbl.njabl.org
204.127.198.37 not listed in proxies.blackholes.easynet.nl
204.127.198.37 not listed in dnsbl.sorbs.net
ips are close enough
204.127.198.37 is close to an MX (204.127.000.26) for email.net
Possible spammer: 209.132.244.95
Possible relay: 204.127.198.37
204.127.198.37 not listed in relays.ordb.org.
204.127.198.37 has already been sent to relay testers
Received line accepted
Received: from localhost (localhost.localdomain [127.0.0.1]) by www.mediagarage.com (8.11.6/8.11.6) with SMTP id h7KKgnD22354 for <[email protected]>; Wed, 20 Aug 2003 16:42:49 -0400
host 209.132.244.95 (getting name) = 4oh.com.
host 4oh.com (checking ip) = 211.233.39.186
209.132.244.95 not listed in dnsbl.njabl.org
209.132.244.95 not listed in proxies.blackholes.easynet.nl
209.132.244.95 not listed in dnsbl.sorbs.net
209.132.244.95 is an MX for mediagarage.com
127.0.0.1 discarded
Tracking message source: 209.132.244.95:
Routing details for 209.132.244.95
[refresh/show] Cached whois for 209.132.244.95 : [email protected]
Using abuse net on [email protected]
abuse net alchemy.net = [email protected]
Using best contacts [email protected]
Yum, this spam is fresh!
209.132.244.95 not listed in dnsbl.njabl.org
209.132.244.95 not listed in dnsbl.njabl.org
209.132.244.95 not listed in proxies.blackholes.easynet.nl
209.132.244.95 not listed in dnsbl.sorbs.net
209.132.244.95 not listed in relays.ordb.org.
209.132.244.95 not listed in query.bondedsender.org
Would send message source reports to:
Re:209.132.244.95 (Administrator of network where email originates)
posted on August 20, 2003 04:14:58 PM new
I don't concern myself about people falling for scams. People have been trying to scam others ever since Urg convinced Ugg that his cave in the next valley was a better shelter. Anyone who enters the ebay contest and logs into their ebay account sort of deserves to get what follows. I am skeptical about ANY offer in front of me, even from so called legitimate companies.
posted on August 20, 2003 04:28:36 PM new
I'm up to 4 spoofs a day now. I no longer send them to [email protected] but may start sending them to [email protected] .
-------------- sig file ----------- He who angers you controls you
posted on August 20, 2003 04:38:00 PM new
Got a really fancy invitation for the Vacation thing from the SHEARTON HOTELS!! Turns out it was NOTHING but a harvester.
Gotten one for a free Whopper lately? hahahaha.....harvester. Course I figured it out. there is NOTHING free on the internet.
OOOOOO,,,,,I just love the "Square Trade" deal.......FREE! FREE! FREE! All over it until, you get inside,,,,,hey buddy...We need Twenty bucks! But, but, but,,,,,but my a$$ $20.00 or get lost. AND we don't want to waste alot of time if it's a drawn out thing like with that jackswebb guy,,,,,a real pain, we just want to tell the complainer to close the case and forget about it. We just can't seem to convince him to give your $300.00 back and THEN we will remove the bad feed back. Jackswebb says to square trade, So you have no problem SIGNING that YOU will be responsible liable for removing all the guys complaints and such, Right? Square trade has one word,,,,,,,can you guess? .........NO!
posted on August 20, 2003 06:00:13 PM new
I got one today, too. Sent it to spoof but from now on it will go to [email protected] Great idea there, auctionace!
