Legend:  new window    outside link    tools page  glossary link   

Classic Spam:
Why get it for free when you can pay for it?

Like the legendary serpent that eats its own tail, spammers sometimes resort to offering anti-spam products. Unfortunately, these aren’t any more likely to make spam disappear than that snake will be likely to finish its meal. One might suppose that there’s no better place to get such info than from the source of the problem, but with rule #1 in mind I’m afraid I have to look askance.

This spam came to me from a Brazilian DSL subscriber line (the 200.204.78.170 address), despite the usual forged “yahoo.comHELO name. Again, we see the spammer trying to use a domain name instead of a fully-qualified mail host name, which is a dead giveaway even if you don’t bother to track down the numeric address. He’s also MIME-encoded the message body for no reason, since it consists of simple HTML markup (if you can call the bastardized HTML output from Microsoft programs “simple”). I converted it from base64 back to HTML for your edification.

Like our white hat spammer, this chickenboner offers us information about how to deal with spam. He’s selling it in book form for $19.95 — at least it appears to be a book, if you can believe the dummied-up illustration found on the perp’s website. I couldn’t find any information about this book or its authors on the web, and the closest that Barnes and Noble could get to the title was a list of Spanish language tutorials.

To the credit, perhaps, of the unidentifiable authors Monday and Trispin, the book purports to offer truly useful information (as opposed to White Hat’s revenge-oriented data), although you can get much of this information elsewhere (such as on this very site) and save yourself the cost.

From: Return-Path: hidden
Received: from mta003pub.verizon.net (HELO mta003.verizon.net) (206.46.170.242)
      by mailgate.cesmail.net with SMTP; 25 Oct 2002 20:16:32 -0000
Received: from yahoo.com ([200.204.78.170]) by mta003.verizon.net
      (InterMail vM.5.01.05.09 201-253-122-126-109-20020611) with SMTP
      id <20021025201626.YTVZ8730.mta003.verizon.net@yahoo.com>
      for hidden; Fri, 25 Oct 2002 15:16:26 -0500
Received: from 97.15.125.126 ([97.15.125.126]) by smtp013.mail.yahoo.com       with asmtp; Thu, 24 Oct 2002 05:15:06 +1000
Received: from sydint1.microthin.com.au ([144.9.137.233])
      by da001d2020.lax-ca.osd.concentric.net with QMQP; Tue, 22 Oct 2002
      18:12:42 -0400
Received: from unknown (192.4.150.87)
      by n9.groups.yahoo.com with esmtp; Mon, 21 Oct 2002 07:10:18 -0700
Reply-To: hidden
Message-ID: <03B4794E-E821-11D6-BA79-0001032B8BDA@VZ5yex8P>
From: hidden
To: hidden
Subject: Sick of junk mail?

<HTML>
<HEAD>
<META NAME="GENERATOR" Content="Microsoft DHTML Editing Control">
<TITLE></TITLE>
</HEAD>
<BODY>
<DIV><FONT face=Verdana size=2>Tired of hitting the delete key when reading your
e-mail?</FONT></DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2>Have a look at this&nbsp;comprehensive guide and
learn how to filter junk mail.&nbsp; Tips and tricks for all users including
AOL, Hotmail, Yahoo,&nbsp;Outlook and Outlook Express.</FONT></DIV>
<DIV><FONT face=Verdana size=2>&nbsp; </FONT></DIV>
<DIV><A href="http://www.bizsmartmart.com/502256/order.htm"><IMG alt="" hspace=0 src="C:\My Documents\My
Webs\SpamWatch\spamwatch.jpg" align=baseline border=0></A></DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2><A
href="http://www.bizsmartmart.com/502256/order.htm"><FONT
color=#4a4a00>Download</FONT></A> it today!&nbsp;&nbsp;&nbsp;</FONT></DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT size=1><A
href="http://www.bizsmartmart.com/502256/cgi-bin/RmvRequestForm.pl">Remove
Me</A></FONT></DIV>
<DIV><FONT face=Verdana size=2>&nbsp;&nbsp;</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Verdana size=2></FONT>&nbsp;</DIV>
</BODY>
</HTML>



 home | legal stuff | glossary | blog | search

 Legend:  new window    outside link    tools page  glossary link   


(c) 2003-2006, Richard C. Conner ( )

03255 hits since March 28 2009

Updated: Sat, 06 May 2006