From dogworkings at DELETE.pobox.THIS.com Sat Apr 2 14:10:34 2005 From: dogworkings at DELETE.pobox.THIS.com (Jim Carroll) Date: Sat Apr 2 15:15:02 2005 Subject: [SpamCop-Mail] Blacklisting China Message-ID: Hello Please forgive my stupidity. Is it possible using SpamCop mail to blacklist any mail originating in or relayed through any domain in China? Many spammers utilize China as an intermediary, it seems, and many Chinese postmasters refuse SpamCop reports. I don't know anyone in China, so it's unlikely I'd lose anything but spam by doing this. Is this feasible? Thanks in advance. From MikeE at ster.invalid Sat Apr 2 12:28:16 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sat Apr 2 15:30:03 2005 Subject: [SpamCop-Mail] Re: Blacklisting China References: Message-ID: Jim Carroll wrote: > Please forgive my stupidity. Is it possible using SpamCop mail to > blacklist any mail originating in or relayed through any domain in > China? I don't use SC mail, so I don't know what blocklists are available, but if there is access to the blackholes.us filter for .ch, you could pick that - china.blackholes.us -- Mike Easter kibitzer, not SC admin From 79ytka802 at sneakemail.com Sat Apr 2 21:30:47 2005 From: 79ytka802 at sneakemail.com (Aviatrix) Date: Sat Apr 2 15:35:02 2005 Subject: [SpamCop-Mail] Re: Blacklisting China In-Reply-To: References: Message-ID: Mike Easter wrote: > I don't use SC mail, so I don't know what blocklists are available, but > if there is access to the blackholes.us filter for .ch, you could pick > that - china.blackholes.us You mean .cn, don't you? .ch is Switzerland. From eddie at eddie.web Sat Apr 2 16:06:15 2005 From: eddie at eddie.web (eddie) Date: Sat Apr 2 16:10:03 2005 Subject: [SpamCop-Mail] Re: Blacklisting China References: Message-ID: On Sat, 02 Apr 2005 14:10:34 -0600, Jim Carroll scratched out the following: > Hello > > Please forgive my stupidity. Is it possible using SpamCop mail to > blacklist any mail originating in or relayed through any domain in China? > > Many spammers utilize China as an intermediary, it seems, and many Chinese > postmasters refuse SpamCop reports. I don't know anyone in China, so it's > unlikely I'd lose anything but spam by doing this. > > Is this feasible? > > Thanks in advance. Yes, SC has a blacklist for all of china It is listed as: China (the country) cn.rbl.cluecentral.net www.cluecentral.net/rbl/ Just select it in your Options->Blacklists and be done with them -- Once movie theaters gave out steak knives Today they confiscate them From MikeE at ster.invalid Sat Apr 2 16:05:16 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sat Apr 2 19:05:11 2005 Subject: [SpamCop-Mail] Re: Blacklisting China References: Message-ID: Aviatrix wrote: > Mike Easter wrote: > > >> I don't use SC mail, so I don't know what blocklists are available, >> but if there is access to the blackholes.us filter for .ch, you >> could pick that - china.blackholes.us > > You mean .cn, don't you? > > .ch is Switzerland. You are correct, ma'am -- silly me. I think I was getting ready to type china and then switched gears and ground [grinded?] them because the brain clutch didn't properly disengage. Switzerland is .ch because it is Confoederatio Helvetica -- Mike Easter kibitzer, not SC admin From nobody at devnull.spamcop.net Sat Apr 2 18:11:36 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Sat Apr 2 19:15:03 2005 Subject: [SpamCop-Mail] Re: Blacklisting China References: Message-ID: "Jim Carroll" wrote in message news:d2mu87$bir$1@news.spamcop.net... > > Please forgive my stupidity. Is it possible using SpamCop mail to blacklist > any mail originating in or relayed through any domain in China? The web-Forum FAQ http://forum.spamcop.net/forums/index.php?showtopic=2238 includes an entry "Blocking and Blackhole lists available" under the SpamCop E-Mail System and Accounts section..... From MikeE at ster.invalid Sat Apr 2 16:34:05 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sat Apr 2 19:35:03 2005 Subject: [SpamCop-Mail] Re: Blacklisting China References: Message-ID: WazoO wrote: > "Jim Carroll" >> Please forgive my stupidity. Is it possible using SpamCop mail to >> blacklist any mail originating in or relayed through any domain in >> China? > > The web-Forum FAQ > http://forum.spamcop.net/forums/index.php?showtopic=2238 includes an > entry "Blocking and Blackhole lists available" under the SpamCop > E-Mail System and Accounts section..... Actually, the linkto your post which sez what the blocklists are is this one: http://forum.spamcop.net/forums/index.php?showtopic=2594&st=0&p=16838&# List as provided by one of the newsgroup users (S. Maesslein) 10 Sep 2004 bl.spamcop.net l1.spews.dnsbl.sorbs.net list.dsbl.org sbl.spamhaus.org korea.services.net cn.rbl.cluecentral.net nigeria.blackholes.us argentina.blackholes.us brazil.blackholes.us cbl.abuseat.org xbl.spamhaus.org dnsbl.sorbs.net If I had remembered that SC was using cluecentral's instead of blackhole's, my search would've worked [advanced google web on the forum and the blocklist] I wonder what was the thinking for SC choosing cluecentral's over blackhole's. -- Mike Easter kibitzer, not SC admin From nobody at devnull.spamcop.net Sat Apr 2 20:54:23 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Sat Apr 2 21:55:03 2005 Subject: [SpamCop-Mail] Re: Blacklisting China References: Message-ID: "Mike Easter" wrote in message news:d2ndio$klb$1@news.spamcop.net... > WazoO wrote: > > > > The web-Forum FAQ > > http://forum.spamcop.net/forums/index.php?showtopic=2238 includes an > > entry "Blocking and Blackhole lists available" under the SpamCop > > E-Mail System and Accounts section..... > > Actually, the linkto your post which sez what the blocklists are is this > one: > > http://forum.spamcop.net/forums/index.php?showtopic=2594&st=0&p=16838&# Yeah, but as you know, I'm not into the spoon-feeding, and that there is so much other data in the FAQ for other questions not yet thought of... > If I had remembered that SC was using cluecentral's instead of > blackhole's, my search would've worked And as you also noticed, I had to ask for help to even get this data "out" .... Actually haven't clue if that list is still valid or anywhere near complete ..... > I wonder what was the thinking for SC choosing cluecentral's over > blackhole's. That'd be a JT thing I know that some of the lists offered were based on user requests. From andy.lawson at bigfoot.com Mon Apr 4 18:59:53 2005 From: andy.lawson at bigfoot.com (Andy) Date: Mon Apr 4 13:00:03 2005 Subject: [SpamCop-Mail] Can I whitelist on a to: address? Message-ID: Hi all, I'd like to be able to whitelist mail I receive via a forwarding account. The mail arrives showing as to: the address doing the forwarding, not from it. I don't know who's gonna send it so I can't whitelist them. Is there a way around this? Cheers, Andy. From nobody at spamcop.net Mon Apr 4 14:06:05 2005 From: nobody at spamcop.net (Dave Lerner) Date: Mon Apr 4 13:10:10 2005 Subject: [SpamCop-Mail] Re: Can I whitelist on a to: address? In-Reply-To: References: Message-ID: Andy wrote: > I'd like to be able to whitelist mail I receive via a forwarding > account. The mail arrives showing as to: the address doing the > forwarding, not from it. I don't know who's gonna send it so I can't > whitelist them. http://www.spamcop.net/fom-serve/cache/302.html From MikeE at ster.invalid Mon Apr 4 11:16:02 2005 From: MikeE at ster.invalid (Mike Easter) Date: Mon Apr 4 13:15:02 2005 Subject: [SpamCop-Mail] Re: Can I whitelist on a to: address? References: Message-ID: Dave Lerner wrote: > Andy wrote: >> I'd like to be able to whitelist mail I receive via a forwarding >> account. The mail arrives showing as to: the address doing the >> forwarding, not from it. I don't know who's gonna send it so I can't >> whitelist them. > > http://www.spamcop.net/fom-serve/cache/302.html This link sez the whitelist is looking at the various From/Sender/envSender http://www.spamcop.net/fom-serve/cache/303.html My SpamPal client side filter has an ignore function which would work to solve that problem, but I don't know about SC mail. -- Mike Easter kibitzer, not SC admin From jeffg at spamcop.net Mon Apr 4 18:54:56 2005 From: jeffg at spamcop.net (Jeff G.) Date: Mon Apr 4 17:55:15 2005 Subject: [SpamCop-Mail] Re: Can I whitelist on a to: address? References: Message-ID: Andy wrote: > I'd like to be able to whitelist mail I receive via a forwarding > account. The mail arrives showing as to: the address doing the > forwarding, not from it. I don't know who's gonna send it so I can't > whitelist them. > > Is there a way around this? Sorry, there isn't. To achieve what you want, I'd suggest forwarding from that forwarding account directly to your secret account, or turning off forwarding and collecting from it directly, using rules on your client to do what you will with the resulting emails. -- Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From andy.lawson at bigfoot.com Tue Apr 5 12:21:43 2005 From: andy.lawson at bigfoot.com (Andy) Date: Tue Apr 5 06:25:33 2005 Subject: [SpamCop-Mail] Re: Can I whitelist on a to: address? In-Reply-To: References: Message-ID: Jeff G. wrote: > Sorry, there isn't. To achieve what you want, I'd suggest forwarding > from that forwarding account directly to your secret account, or turning > off forwarding and collecting from it directly, using rules on your > client to do what you will with the resulting emails. Thanks for the response, Jeff. What's a secret account? Looking through the SpamCop FAQ, there's a reference to a secret account being an ISP hosted account to which SpamCop is configured to forward non-spam mail. Is this what you mean? Unfortunately, I use SpamCop to host my mail for me. My mail client is configured to get mail directly from imap.spamcop.net - you are an awful lot more reliable than my ISP's mail servers. Cheers, Andy. From nobody at spamcop.net Tue Apr 5 22:03:09 2005 From: nobody at spamcop.net (nobody) Date: Tue Apr 5 08:05:11 2005 Subject: [SpamCop-Mail] I keep getting this spam everyday. Message-ID: Hello I am getting a spam like this each and every day and whilst I have forwarded every spam to Spamcop, noting seems to be doen about it. Can anyone tell me how to stop this spammer from attacking me all the time. I am so sick of it. X-Message-Status: n X-SID-PRA: 강 지원 X-SID-Result: TempError X-Message-Info: 1fLmhUU0vWHOUUVx44IVD+ZZog50Q716PdLSzDjEbGs= Received: from 220.116.75.186 ([220.116.75.186]) by mc11-f30.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Tue, 5 Apr 2005 03:28:55 -0700 Message-ID: From: "강 지원" Reply-To: "lq5195@kukukuwolow.com" To: hojur1052@hotmail.com Subject: 카드대출 Date: Tue, 05 Apr 2005 16:26:00 +0600 X-Mailer: Microsoft Outlook, Build 10.0.2616 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--76131419545800769713" X-Priority: 3 X-MSMail-Priority: Normal Return-Path: lq5195@kukukuwolow.com X-OriginalArrivalTime: 05 Apr 2005 10:28:55.0974 (UTC) FILETIME=[455BAC60:01C539CA] ----76131419545800769713 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit 카드대출 card77.cc.to ----76131419545800769713-- From MikeE at ster.invalid Tue Apr 5 07:56:52 2005 From: MikeE at ster.invalid (Mike Easter) Date: Tue Apr 5 10:00:03 2005 Subject: [SpamCop-Mail] Re: I keep getting this spam everyday. References: Message-ID: nobody wrote: > Hello I am getting a spam like this each and every day and whilst I > have forwarded every spam to Spamcop, noting seems to be doen about > it. Can anyone tell me how to stop this spammer from attacking me all > the time. I am so sick of it. You should be configured in such a way that there is very little spam in your Inbox with your wanted mail. When the only spam you ever see is the spam you intentionally go to a folder to visit, it doesn't feel like an attack and it doesn't make you sick. Using SC as a reporting tool doesn't do much of anything to reduce your spam. It facilitates contributions to the SCbl, the spamcop blocklist, a popular and dynamic blocklist used by many to aid in filtering their mail. I use it along with other blocklists to keep spam out of my Inbox by tagging it. If you are a spamcop mail subscriber, your filters should be keeping spam from your inbox as well. That particular item would've been filtered by my filters because it is on the spamcop blocklist, along with a number of others I don't use. -- Mike Easter kibitzer, not SC admin From jeffg at spamcop.net Tue Apr 5 12:29:42 2005 From: jeffg at spamcop.net (Jeff G.) Date: Tue Apr 5 11:40:03 2005 Subject: [SpamCop-Mail] Re: Can I whitelist on a to: address? References: Message-ID: Andy wrote: > Jeff G. wrote: >> Sorry, there isn't. To achieve what you want, I'd suggest forwarding >> from that forwarding account directly to your secret account, or >> turning off forwarding and collecting from it directly, using rules >> on your client to do what you will with the resulting emails. > > Thanks for the response, Jeff. > > What's a secret account? Looking through the SpamCop FAQ, there's a > reference to a secret account being an ISP hosted account to which > SpamCop is configured to forward non-spam mail. Is this what you mean? > > Unfortunately, I use SpamCop to host my mail for me. My mail client is > configured to get mail directly from imap.spamcop.net - you are an > awful lot more reliable than my ISP's mail servers. > > Cheers, > Andy. Can you configure your mail client to also get mail directly from your current "forwarding account", or is forwarding all they do? -- Thanks and Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From jeffg at spamcop.net Tue Apr 5 12:38:23 2005 From: jeffg at spamcop.net (Jeff G.) Date: Tue Apr 5 11:40:06 2005 Subject: [SpamCop-Mail] Re: I keep getting this spam everyday. References: Message-ID: nobody wrote: > Hello I am getting a spam like this each and every day and whilst I > have forwarded every spam to Spamcop, noting seems to be doen about > it. Can anyone tell me how to stop this spammer from attacking me all > the time. I am so sick of it. ... > Received: from 220.116.75.186 ([220.116.75.186]) by > mc11-f30.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); > Tue, 5 Apr 2005 03:28:55 -0700 You could also increase your Hotmail Junk E-Mail Filter level. -- Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From andy.lawson at bigfoot.com Thu Apr 7 19:43:26 2005 From: andy.lawson at bigfoot.com (Andy Lawson) Date: Thu Apr 7 13:45:26 2005 Subject: [SpamCop-Mail] Re: Can I whitelist on a to: address? In-Reply-To: References: Message-ID: Jeff G. wrote: > Can you configure your mail client to also get mail directly from your > current "forwarding account", or is forwarding all they do? Unfortunately, it's just a forwarder. It's a group account that forwards to others as well. I guess I'll just have to keep an eye on my Held Mail. Cheers! From jeffg at spamcop.net Fri Apr 8 03:53:46 2005 From: jeffg at spamcop.net (Jeff G.) Date: Fri Apr 8 03:00:04 2005 Subject: [SpamCop-Mail] Re: Can I whitelist on a to: address? References: Message-ID: Andy Lawson wrote: > Jeff G. wrote: >> Can you configure your mail client to also get mail directly from >> your current "forwarding account", or is forwarding all they do? > > Unfortunately, it's just a forwarder. It's a group account that > forwards to others as well. I guess I'll just have to keep an eye on > my Held Mail. Can you have it forward to, say, Yahoo! UK or fastmail.fm account with a secret address like asf075asf54? You could then POP from there. -- Thanks and Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From Ilgaz at spamcop.net Sun Apr 10 16:22:39 2005 From: Ilgaz at spamcop.net (Ilgaz Ocal) Date: Sun Apr 10 08:25:02 2005 Subject: [SpamCop-Mail] White listing the mail affects RBL/Bayesian? Message-ID: Hi, I wonder if whitelisting mail, the false positives I get will do anything to RBL/bayesian filter of Spamcop. Of course, when you white list, you will get mail from that address but I think about preventing future false positives for other users. Have a nice day Ilgaz Ocal From Ilgaz at spamcop.net Sun Apr 10 16:25:44 2005 From: Ilgaz at spamcop.net (Ilgaz Ocal) Date: Sun Apr 10 08:30:02 2005 Subject: [SpamCop-Mail] Re: I keep getting this spam everyday. References: Message-ID: If you don't plan to make Korean, Chinese friends or business with them, go to advanced filters (RBL) and block them as whole countries. We keep reporting them, nothing happens. Those mails will go to "held mail", they won't be deleted. You can report them if you want. Ilgaz Ocal ps: I am just a user like you In article , "nobody" wrote: > Hello I am getting a spam like this each and every day and whilst I have > forwarded every spam to Spamcop, noting seems to be doen about it. Can > anyone tell me how to stop this spammer from attacking me all the time. I am > so sick of it. > > > X-Message-Status: n > X-SID-PRA: 강 지원 > X-SID-Result: TempError > X-Message-Info: 1fLmhUU0vWHOUUVx44IVD+ZZog50Q716PdLSzDjEbGs= > Received: from 220.116.75.186 ([220.116.75.186]) by mc11-f30.hotmail.com > with Microsoft SMTPSVC(6.0.3790.211); > Tue, 5 Apr 2005 03:28:55 -0700 > Message-ID: > From: "강 지원" > Reply-To: "lq5195@kukukuwolow.com" > To: hojur1052@hotmail.com > Subject: 카드대출 > Date: Tue, 05 Apr 2005 16:26:00 +0600 > X-Mailer: Microsoft Outlook, Build 10.0.2616 > MIME-Version: 1.0 > Content-Type: multipart/alternative; > boundary="--76131419545800769713" > X-Priority: 3 > X-MSMail-Priority: Normal > Return-Path: lq5195@kukukuwolow.com > X-OriginalArrivalTime: 05 Apr 2005 10:28:55.0974 (UTC) > FILETIME=[455BAC60:01C539CA] > > ----76131419545800769713 > Content-Type: text/plain; > Content-Transfer-Encoding: 7Bit > > 카드대출 > > card77.cc.to > > ----76131419545800769713-- From nobody at spamcop.net Mon Apr 11 21:13:21 2005 From: nobody at spamcop.net (nobody) Date: Mon Apr 11 07:15:22 2005 Subject: [SpamCop-Mail] Re: I keep getting this spam everyday. References: Message-ID: Trouble is I live here in South Korea. And they will not do anything about spam at Kornet been there tried that wasted my time and words till I was red in the face. "Ilgaz Ocal" wrote in message news:Ilgaz-25DB2B.15254410042005@news.spamcop.net... > If you don't plan to make Korean, Chinese friends or business with them, > go to advanced filters (RBL) and block them as whole countries. > > We keep reporting them, nothing happens. > > Those mails will go to "held mail", they won't be deleted. You can > report them if you want. > > > Ilgaz Ocal > ps: I am just a user like you > > In article , > "nobody" wrote: > >> Hello I am getting a spam like this each and every day and whilst I have >> forwarded every spam to Spamcop, noting seems to be doen about it. Can >> anyone tell me how to stop this spammer from attacking me all the time. I >> am >> so sick of it. >> >> >> X-Message-Status: n >> X-SID-PRA: 강 지원 >> X-SID-Result: TempError >> X-Message-Info: 1fLmhUU0vWHOUUVx44IVD+ZZog50Q716PdLSzDjEbGs= >> Received: from 220.116.75.186 ([220.116.75.186]) by mc11-f30.hotmail.com >> with Microsoft SMTPSVC(6.0.3790.211); >> Tue, 5 Apr 2005 03:28:55 -0700 >> Message-ID: >> From: "강 지원" >> Reply-To: "lq5195@kukukuwolow.com" >> To: hojur1052@hotmail.com >> Subject: 카드대출 >> Date: Tue, 05 Apr 2005 16:26:00 +0600 >> X-Mailer: Microsoft Outlook, Build 10.0.2616 >> MIME-Version: 1.0 >> Content-Type: multipart/alternative; >> boundary="--76131419545800769713" >> X-Priority: 3 >> X-MSMail-Priority: Normal >> Return-Path: lq5195@kukukuwolow.com >> X-OriginalArrivalTime: 05 Apr 2005 10:28:55.0974 (UTC) >> FILETIME=[455BAC60:01C539CA] >> >> ----76131419545800769713 >> Content-Type: text/plain; >> Content-Transfer-Encoding: 7Bit >> >> 카드대출 >> >> card77.cc.to >> >> ----76131419545800769713-- From Ilgaz at spamcop.net Mon Apr 11 23:24:41 2005 From: Ilgaz at spamcop.net (Ilgaz Ocal) Date: Mon Apr 11 15:25:03 2005 Subject: [SpamCop-Mail] Re: I keep getting this spam everyday. References: Message-ID: Oh, it would be problem than. Sorry. You can only rely on bayesian (word pattern based) stuff and mail address filtering I guess. I can't believe they don't take action for your reported stuff even... Unbelieavable.. Have a nice day Ilgaz Ocal On 2005-04-11 14:13:21 +0300, "nobody" said: > Trouble is I live here in South Korea. And they will not do anything > about spam at Kornet been there tried that wasted my time and words > till I was red in the face. > > > "Ilgaz Ocal" wrote in message > news:Ilgaz-25DB2B.15254410042005@news.spamcop.net... >> If you don't plan to make Korean, Chinese friends or business with them, >> go to advanced filters (RBL) and block them as whole countries. >> >> We keep reporting them, nothing happens. >> >> Those mails will go to "held mail", they won't be deleted. You can >> report them if you want. >> >> >> Ilgaz Ocal >> ps: I am just a user like you >> >> In article , >> "nobody" wrote: >> >>> Hello I am getting a spam like this each and every day and whilst I have >>> forwarded every spam to Spamcop, noting seems to be doen about it. Can >>> anyone tell me how to stop this spammer from attacking me all the time. I am >>> so sick of it. From jeffg at spamcop.net Tue Apr 12 23:09:51 2005 From: jeffg at spamcop.net (Jeff G.) Date: Tue Apr 12 22:10:18 2005 Subject: [SpamCop-Mail] Re: White listing the mail affects RBL/Bayesian? References: Message-ID: Ilgaz Ocal wrote: > I wonder if whitelisting mail, the false positives I get will do > anything to RBL/bayesian filter of Spamcop. > > Of course, when you white list, you will get mail from that address > but I think about preventing future false positives for other users. No, the filtering for one user is not affected at all by another user's whitelists. -- Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From Ilgaz at spamcop.net Wed Apr 13 07:01:50 2005 From: Ilgaz at spamcop.net (Ilgaz Ocal) Date: Tue Apr 12 23:05:09 2005 Subject: [SpamCop-Mail] Re: White listing the mail affects RBL/Bayesian? References: Message-ID: On 2005-04-13 05:09:51 +0300, "Jeff G." said: > Ilgaz Ocal wrote: >> I wonder if whitelisting mail, the false positives I get will do >> anything to RBL/bayesian filter of Spamcop. >> >> Of course, when you white list, you will get mail from that address >> but I think about preventing future false positives for other users. > > No, the filtering for one user is not affected at all by another user's > whitelists. So, it affects me at least. Thanks. Ilgaz Ocal From Ilgaz at spamcop.net Thu Apr 14 13:59:40 2005 From: Ilgaz at spamcop.net (Ilgaz Ocal) Date: Thu Apr 14 06:00:24 2005 Subject: [SpamCop-Mail] Re: 123STORE.BIZ, 1SECURESTORE.INFO, 123SECURESTORE.COM, SALEZSITE.INFO spammer References: Message-ID: On 2005-03-13 12:11:41 +0200, "Anonymous" said: > If you're tired of getting spam day in and day out from these spammers > (offering a device to steal cable TV signals, and credit repair), then > please feel free to load up the SpamVampire and hit them for all their > worth. > > SpamVampire: > http://www.hillscapital.com/antispam/ > > They use several tricks to remain in operation... > 1) They use redirect domains (see below), so automated parsers such as > SpamCop can't report the actual spamvertised website. > (snip) > The most telling 'mark' of their spam at the moment is that there is > always the name "lisa" somewhere in the URL. Is there a special advantage of .info domain to spammers? Trivial, just wondering... They worked for years to make it accepted and now let spammers abuse it? As turks, we hated the METU (www.metu.edu.tr) policy of needing real paperwork to give .com (company) and .org domain name, now they say "look at all those lawsuits by legit companies, we were right". Info is new and in this network "hell", they didn't put countermeasures against obviously existing high tech criminals? I mean, I see your post, its not that put @ before domain stuff anymore. Ilgaz Ocal (btw at least the first part of site you reported is unreachable, good news) From Ilgaz at spamcop.net Thu Apr 14 14:04:38 2005 From: Ilgaz at spamcop.net (Ilgaz Ocal) Date: Thu Apr 14 06:05:03 2005 Subject: [SpamCop-Mail] Re: Need help with spamcop on this References: Message-ID: On 2005-03-09 09:46:33 +0200, Caduceus said: > Hi: > > On Monday, I decided to download Pine. I thought I configured my > pinerc file correctly, however whenever I try to connect Pine will say > "Trouble reading remote collections, Try Again?". Also, Pine will not > connect to my imap server. Here is how I have the pinerc file > configured. Can anyone tell me what I'm doing wrong, and what changes > I need to do to make it work? > > ----------------- > If anyone can tell me what changes I need to make to my pinerc file I > would appreciate it. TIA. As a rule, never post anything from your ~ (user) folder to open net, e.g. usenet. All that security exists to protect your home folder in whatever system you use. If you click http://mailsc.spamcop.net/fom-serve/cache/334.html (or clicked help, like me) you will see Pine stuff. Also nothing except usenet's pine related group can help about pine, its a huge advanced client. Have a nice day Ilgaz From Ilgaz at spamcop.net Thu Apr 14 14:27:24 2005 From: Ilgaz at spamcop.net (Ilgaz Ocal) Date: Thu Apr 14 06:30:03 2005 Subject: [SpamCop-Mail] A mad user test about spamcop.net mail at /. (3 weeks) Message-ID: You would call me mad for it. As it would end up in spammers hands anyway (guys having custom worms) so as I moved to Spamcop mail from Yahoo "plus" (yea, plus without apop even) I had a mad idea. I gave my mail on Slashdot, no "nospam" etc mess added, open mail. I don't get how spammer supposed not to filter those basic additions but anyway... 3 weeks. Total 3 manually sent (no zombie etc) mails from obvious morons and all ended up in my held mail for reporting. One was a big looking French owned market company. I mailed them some stuff about frogs ;) No, not swearing of course. No need to go down their level. Having only 3 mails as spam helped me to check the actual stuff and remember, now a usenet user with my real mail, I didn't have access to usenet for that 3 weeks. Only place given was slashdot. I found it very interesting and mailed to CmdrTaco (founder) about it. I don't know if he read that or not, we speak about slashdot here and that guy is founder... I really wonder his mailbox when he wakes up each day. So, old fashioned harvesters are alive and well, can pass that maniac code of Slashdot even checking your proxy while posting and bravo Spamcop and its users. Or, worse? Worms harvesting mail addresses? Companies? The most blamed one, real networks, using for 20 months their "radiopass" and before like 4 years or more every single real version (like streaming) is clean. Of course, don't tell it on slashdot unless you want -1 mod thing. Gotta love the freedom of speech. Only problem is, I am 2x in more regret I paid yahoo now.. :) Well, I was on beers and Myrealbox (Novell) didn't filter anything (on purpose, they are beta testing) I hope this post is relevant, I think it may give new users (like me) a clue about the power we speak about. Have a nice day Ilgaz Ocal From dogworkings at DELETE.pobox.THIS.com Mon Apr 18 19:55:19 2005 From: dogworkings at DELETE.pobox.THIS.com (Jim Carroll) Date: Mon Apr 18 20:00:04 2005 Subject: [SpamCop-Mail] Lost password for email service Message-ID: Any idea how to recover same? There doesn't seem to be a "Forgot your password?" link. I could have sworn the password I used was correct, but no go. Now it's gotten me wondering whether I actually IMAGINED that I signed up for mail. Can't find a way to confirm that, either. Thanks. Jim -- It's not that I don't like "smooth jazz", it's just that I like lumpy jazz better. From jeffg at spamcop.net Mon Apr 18 22:54:20 2005 From: jeffg at spamcop.net (Jeff G.) Date: Mon Apr 18 21:55:03 2005 Subject: [SpamCop-Mail] Re: Lost password for email service References: Message-ID: Jim Carroll wrote: > Any idea how to recover same? There doesn't seem to be a "Forgot your > password?" link. I could have sworn the password I used was correct, > but no go. > > Now it's gotten me wondering whether I actually IMAGINED that I > signed up for mail. Can't find a way to confirm that, either. You ahould have on file your emailed receipt for payment. Please contact support@spamcop.net with a copy of that receipt. -- Thanks and Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From ariane at freenet.de Fri Apr 22 05:44:08 2005 From: ariane at freenet.de (Ariane) Date: Thu Apr 21 22:45:05 2005 Subject: [SpamCop-Mail] Re: Meine geilen Bilder Message-ID: <426863e9$1$17971$6d4158fb@reader-1.xsnews.nl> Hi, hier sind meine geilen Bilder! My nude Pics!!! http://www.geile-tipps.info/go/ -- Posted by News Bulk Poster Unregistered version From nobody at spamcop.net Fri Apr 22 18:12:37 2005 From: nobody at spamcop.net (Ellen) Date: Fri Apr 22 17:20:28 2005 Subject: [SpamCop-Mail] System outage Message-ID: The system is down and we have people working on the problem. Unfortunately I do not have an estimated time to repair. If someone would propagate this to the forums I would appreciate it! Ellen SpamCop followups to spamcop From nobody at spamcop.net Fri Apr 22 20:19:48 2005 From: nobody at spamcop.net (Ellen) Date: Fri Apr 22 19:26:25 2005 Subject: [SpamCop-Mail] The system is back up Message-ID: Thanks! Ellen SpamCop From dogworkings at DELETE.pobox.THIS.com Sat Apr 23 16:27:18 2005 From: dogworkings at DELETE.pobox.THIS.com (Jim Carroll) Date: Sat Apr 23 16:35:04 2005 Subject: [SpamCop-Mail] Re: I keep getting this spam everyday. References: Message-ID: "> If you don't plan to make Korean, Chinese friends or business with them, > go to advanced filters (RBL) and block them as whole countries. > > We keep reporting them, nothing happens. > > Those mails will go to "held mail", they won't be deleted. You can > report them if you want. Someone clarify for me. If the spam is in "held mail", then doesn't that mean it's already been reported? Or is it just because the mail fits a pattern? I have just been using the "delete" option. I do want to report spammers and irresponsible relay operators. So, should I report the "held mail" instead of deleting it? Thanks. From nobody at devnull.spamcop.net Sat Apr 23 20:55:05 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Sat Apr 23 21:00:29 2005 Subject: [SpamCop-Mail] Re: I keep getting this spam everyday. References: Message-ID: "Jim Carroll" wrote in message news:d4eb8p$9ld$1@news.spamcop.net... > > Someone clarify for me. If the spam is in "held mail", then doesn't that > mean it's already been reported? Or is it just because the mail fits a > pattern? > > I have just been using the "delete" option. I do want to report spammers > and irresponsible relay operators. So, should I report the "held mail" > instead of deleting it? Much of this explained in the much expanded Forum FAQ (which includes the spamcop.net FAQ) .... specific item would include the "How I use .." entry, but there is much more there to peruse ... http://forum.spamcop.net/forums/ From SCNews.5.myspamgobbler at spamgourmet.com Sat Apr 23 19:17:43 2005 From: SCNews.5.myspamgobbler at spamgourmet.com (Brian (SnSR)) Date: Sat Apr 23 21:25:03 2005 Subject: [SpamCop-Mail] Re: I keep getting this spam everyday. In-Reply-To: References: Message-ID: WazoO wrote: > "Jim Carroll" wrote in message > news:d4eb8p$9ld$1@news.spamcop.net... > >>Someone clarify for me. If the spam is in "held mail", then doesn't that >>mean it's already been reported? Or is it just because the mail fits a >>pattern? >> >>I have just been using the "delete" option. I do want to report spammers >>and irresponsible relay operators. So, should I report the "held mail" >>instead of deleting it? > > > Much of this explained in the much expanded Forum FAQ (which > includes the spamcop.net FAQ) .... specific item would include > the "How I use .." entry, but there is much more there to peruse ... > http://forum.spamcop.net/forums/ > > In a more simplified answer, in case you don't wish to visit the Forum, the held mail is just that, Held mail. It is waiting for you to determine if it is spam or ham. You need to look through it to see if there is any false positives and then you can report it. Just hitting delete does just that. It deletes it. Without reporting it. You have the option of clicking the Report as spam link that is below the Mark as, or clicking the Report Spam link at the top of the window (next to Held Mail). The Report as spam link quick reports, which only reports the source of the email. The other Report Spam link allows you to choose to quick report some of the spam and make a full report of others. I like to go through the Held Mail to look for any false positives and then click the Report Spam link and go through the list once again. This list shows the actual email address, so I may catch a false positive because of looking at them. Once in this mode, I check all and look through the list and uncheck false positives and any others that I want to spend a little more time reporting. I then quick report the first batch and then Queue for reporting or Forward (and whitelist sender) for the others. From Ilgaz at spamcop.net Sun Apr 24 18:33:19 2005 From: Ilgaz at spamcop.net (Ilgaz) Date: Sun Apr 24 10:35:04 2005 Subject: [SpamCop-Mail] Citizen bank (new?) $5 phishing passed spamcop (all RBL on) Message-ID: Hi, Pasting below, Eudora pro alerts me fine about Phishing, have no clue about that bank but maybe popular there in USA, so crossposting to spamcop.mail. I better warn: WARNING, MAIL PASTED BELOW IS A PHISHING ATTEMPT, NOT A REAL BANK MAIL! Have a nice day Ilgaz Return-Path: Delivered-To: spamcop-net-ilgaz@spamcop.net Received: (qmail 14872 invoked from network); 24 Apr 2005 13:30:48 -0000 Received: from unknown (192.168.1.101) by blade2.cesmail.net with QMQP; 24 Apr 2005 13:30:48 -0000 Received: from customersites2.easily.co.uk (213.152.250.16) by mailgate.cesmail.net with SMTP; 24 Apr 2005 13:30:44 -0000 Received: (qmail 3951 invoked by uid 48); 24 Apr 2005 13:09:16 -0000 Date: 24 Apr 2005 13:09:16 -0000 Message-ID: <20050424130916.3950.qmail@customersites2.easily.co.uk> To: ilgaz@spamcop.net Subject: Important notice From: CitizensBank Customer Department Reply-To: noreply@citizensbank.com MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 3.0.0 (2004-09-13) on blade2.cesmail.net X-Spam-Level: * X-Spam-Status: hits=1.9 tests=FRONTPAGE,HTML_MESSAGE,HTML_TAG_EXIST_TBODY, MIME_HTML_ONLY version=3.0.0 X-SpamCop-Checked: 192.168.1.101 213.152.250.16 Citizens Bank Online - $5 Giveaway Survey
Citizens Bank: Not your typical bank  


Citizens Bank Instant $5 reward survey
Get credited $5 to your account just for answering 5 easy questions!

Dear Valued Customer,

You have been chosen by Citizens Bank customer department to take part in our quick and easy 5 question survey, In return we will instantly credit $5 to your account -
Just for your time!

Helping us better understand how our customers feel benefits everyone. With the information collected we can decide to direct a number of changes to improve and expand our online service, creating a more convenient and effective banking experience suited to your needs.
The data you provide us is completely non-sensitive and anonymous – No part of what is collected is handed down to any third party groups, Furthermore, your private details are kept safe with our secure 128Bit SSL encrypted page.
All entries will be stored in our secure database for a maximum of 7 days while we process these results

We kindly ask you to please spare a moment of your time in taking part on this unique offer

To continue click on the link below...

http://www.citizensbankonline.com/logon/securesurvey.asp


Many Thanks & Kind Regards -
Citizens Bank Customer Department
   
     
 

 

 

        Member FDIC    Equal Housing Lender

               To contact Customer Service please call 1-800-922-9999.
  
Privacy | Security © 2005 Citizens Financial Group. All rights reserved. Terms of Use | Site Map
From nobody at devnull.spamcop.net Sun Apr 24 13:19:38 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Sun Apr 24 13:20:21 2005 Subject: [SpamCop-Mail] Forum FAQ entry list Message-ID: Not done since January, here's an entry list of the web-Forum FAQ, which incorporates the www.spamcop.net FAQ data/links. Not going to do an HTML version, and adding in the link data would simply end up being too huge and messy. The actual item is found at http://forum.spamcop.net/forums/index.php?showtopic=2238 Last Revised : 24 April 2005 SpamCop Glossary SpamCop FAQ .... (FAQ = Frequently Asked Questions) Overview of SpamCop Services - (somebody deleted this entry ... best replacement seems to be the following ...) How does SpamCop reporting work? Why am I Blocked? Has your email been blocked? (ISP, Mailing List Admin, Advertiser) SpamCop Blocking List - Am I listed? Why am I getting all these bounces? Why does SpamCop want to send a report to my own network administrator? Password Problems? Am I running mailing lists responsibly? Updated! Outlook 2003 REG hack to work around MIME issues Alternate Outlook 2003/XP e-mail submit methods NEW Why Outlook Express Forward doesn't work / Secure E-Mail Handling E-Mail Address Removal, Unsubscription, & Listwashing Yahoo Groups Mail Blocked? Say NO to the Challenge/Response Lunacy Cost of Spam Spammer Rules How can I contact a SpamCop representative? How To Ask Questions The Smart Way (language issue, but there really is only one defintion for RTFM) SpamCop Parsing and Reporting Service What is this? How does it work? How do I use it? SpamCop Analogous to a Credit Reporting Agency? How do I sign up? Rules - everybody read! (recent changes made ... you may need to re-look) What do I need to know to get started reporting spam? Parsing & Reporting spam - decisions, problems How do I get my email program to reveal the full, unmodified email? How do I configure Mailhosts for SpamCop? NEW One version of a Step-by-step MailHost set-up How do I submit spam via email? E-Mail spam submittals blocked by your ISP? Emailed Spam Submissions Disappearing? No Confirmation e-mails? What is Quick Reporting? How can I unsend a Report? "Header incomplete, aborting." and "No source IP address found, cannot proceed." Causes of "Would send" and "If reported today, reports would be sent to:" messages SpamCop said "No reports filed." What does it mean? Member and account management questions Why was my authorization revoked? Is there a limit on reporting spam? -----> 3,000 per day -----> not older than 48 hours Why did my spam load increase after I started Reporting? What is mole reporting? How do I set up SpamAssassin to work with SpamCop? NEW Can I automatically forward spam from my spamtraps? SpamCop Email System & Accounts What is this SpamCop Mail Service? What is the cost? How do I sign up? How do I setup my account? SpamCop E-Mail Account Storage Quota / Limit I can report and trash but not Delete from Held Folder Jeff G.'s Guide to accessing SpamCop email using OE and IMAP How do I sign up for multiple accounts under the family plan? Discounted Additional Account, more detail When does my account expire? How do I renew my account? I forgot my Password How I use my SpamCop E-Mail account examples Blocking and Blackhole lists available How To Stop Filtering With The SCBL, for SpamCop Email System Customers FAQ about the Personal Blacklist and Whitelist FAQ about POP'ing out of SpamCop Email System "POP Configuration" Setup FAQ about WebMail FAQ about Webmail: Deleting and Moving Messages WebMail Login problems & General Slowness, First things to check FAQ about IMAP IMAP - Deleting E-Mail How to save Sent Mail in SpamCop Webmail FAQ about Filtering and Held Mail FAQ about the personal webmail filters, Client filters within webmail Messages not Filtered - Why? Jeff G.'s Guide to SpamCop Quick Reporting from a SpamCop E-Mail Account Does SpamCop work with AOL/MSN/Hotmail? I want email to go from myaccount@myemail.com and back to the same account. Is this possible? When does my account expire? Where can I get further assistance? Why can't I receive any email? Getting Mail From The SpamCop Email System IMP/Horde FAQ SpamCop Blocking List Service How do I configure my mailserver to reject mail based on the blocklist? What is on the list? How can I be de-listed One-time automatic BL De-listing How much does it cost? Is it possible to download the entire blocklist? How can I check if an IP is on the list? If my IP is listed, does it mean I am a spammer or my ISP hosts spammers? Why can't I get to the blocking list from ATT's network? General Information about SpamCop How can I get help? How can I report a bug? How can I suggest a feature? What are the rules for posting to the forum? May I create a link to SpamCop from my site? Can I get a copy of the source code for SpamCop? Who is Julian Haight? Why did I get a spam promoting SpamCop? What are some general tips for responding to questions in the forum? Adding items to the FAQ Features and Bugs Use the parser without reference to your mailhosts configuration Non-SpamCop information Make an anonymous donation to support SpamCop Can I advertise on SpamCop? Help for abuse-desks and administrators These are questions commonly asked by Internet Service Providers. Users of SpamCop need not read this (skip on down a few sections), but may find it interesting. You have probably arrived here because of a SpamCop report. Please read the introduction for information about the report you are viewing. Introduction - What is this thing? How does it work? I have been falsely and/or maliciously accused of spamming, what can I do? How can I contact a real person about this? Interacting with SpamCop and it's users: You are mailbombing me! How can I make it stop? How can I get SpamCop reports about my network? How do I register an abuse@ email address? How can I get removed from SpamCop's blocking system? Once I close a spammer's account, how can I prevent others reporting it? How can I respond to spam complaints via email? How can I control what type of reports I receive? You've munged the header... How do I get in touch with the person who filed the complaint? Help with SpamCop reports and spam in general Robots: Mailing lists and autoresponders I didn't originate the spam. My server might have relayed this message. Why report it to me? What does a SpamCop Report look like? Why did SpamCop report this usenet message to me? General questions: Who appointed you the "cop" of the internet? Where do you get off? My web site got terminated/threatened because of SpamCop, but I did not send the spam. What's the big idea? Why did SpamCop submit my server to relay-testing sites? What is your opinion of FFA (free for all) pages? How do Deputies respond to appeals? Abuse-queue management tools Assistance stopping spam: I'm receiving spam reports, but my mail server logs don't reflect it. Why? HTTP Proxies (Cisco / Squid / Mailtraq) Formmail Open Relay Servers Adding BLs to Postfix Spam-sending malware But my Exchange 2000 server is secured against relaying! How can I control spam from my network? How can I control unsolicited bounces? SOCKS Proxy Servers Links to help with removing open proxies Other information, help and links What other sites should I visit to help fight spam? CAN-SPAM Act of 2003 - Bill Number S.877 for the 108th U.S. Congress Abuse.net's introduction to spam: What is it and why is it bad? Elsop's anti-spam page - lots of other links to more information U.S. FTC Spam page for the Consumer spam uce.gov replaces uce ftc.gov SamSpade - tools for the unix-deprived and other good info Bestprac.com - A guide for all types of users on how to avoid spamming abuse.net - ISP abuse address clearinghouse Realtime blackhole list - blocking of selected email servers Spamhaus - Lists ISPs who keep organized spamming alive Spam Links - Many Resources, Definitions, and Tools The SpamCon Foundation (formerly suespammers.org) The author of this software, Julian Haight Net abuse jargon file - Cues for the acronym challenged Net abuse FAQ - all about spam An organization to fight "street spam" - those unsightly weight loss signs on the highway. Reading Email Headers. Sneakemail is a service that gives you more control over the emails you receive. SpamList is a config file for sendmail which agressively blocks spam. Use with caution. SPEWS is not SpamCop, SpamCop is not SPEWS - Note the spelling SpamWars, a humorous kill-the-spammer browser-based game Monitoring and reporting worm/hacking activity Marjolein's Ban Spam page The Crystal Cave - News, Tools, Resources to combat Spam Surf the Internet Safely Outlook & Exchange Solutions Center Inside Outlook Express Anti-Phishing Working Group U.S.DoJ Identity Theft and Fraud Information Follow the Money; or, why does my computer keep getting infested with spyware? Phone number spam Recursos anti-spam en espa�ol Campa�a anti-spam de El Espectador (Uruguay) Informaci�n b�sica acerca del 'spam' Credit and thanks Noting that the above link is Julian's credit / contributor list for the stuff found at spamcop.net and JT's newsgroup and e-mail support. What follows is my list of credit for the web-based Forum stuff .... for starters, the contributors to this existing FAQ (not sure I've got a 100% identity list, don't have permission to use real names, and will probably add more items into this FAQ and forget to update this list .. apologies in advance for missing the kudos and correct attributions) ... and just to keep things a bit off-kilter, in reverse alphabetical order; WB8TYW turetzsr (who does request to be known as Steve T) studog StevenUnderwood petzl PeterJ Miss Betsy Merlyn JeffG dbiel DavidT agsteele From Ilgaz at spamcop.net Mon Apr 25 13:42:40 2005 From: Ilgaz at spamcop.net (Ilgaz) Date: Mon Apr 25 05:45:30 2005 Subject: [SpamCop-Mail] Fixed References: Message-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I saw a new message from another source, same scam. It was in held mail. So, I guess it means as "fixed", well at least for me Ilgaz Ocal -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 - not licensed for commercial use: www.pgp.com iQA/AwUBQmy7iA8rRlEuOnC+EQLZSACgi2hX1ss3PeJyq1PVdDDMb3mj+8YAoNw1 NEJU977Cgtr82jTyf7nKV7b8 =9Hc7 -----END PGP SIGNATURE----- From nobody at devnull.spamcop.net Mon Apr 25 15:15:18 2005 From: nobody at devnull.spamcop.net (Glenn Daniels) Date: Mon Apr 25 14:20:04 2005 Subject: [SpamCop-Mail] Re: Citizen bank (new?) $5 phishing passed spamcop (all RBL on) References: Message-ID: "Ilgaz" wrote in message > Hi, > > Pasting below, Eudora pro alerts me fine about Phishing, have no clue > about that bank but maybe popular there in USA, so crossposting to > spamcop.mail. > > I better warn: WARNING, MAIL PASTED BELOW IS A PHISHING ATTEMPT, NOT A > REAL BANK MAIL! > > Have a nice day > > Ilgaz > --- snippage --- Ilgaz: Actually, there was a phish out last year that actually did point to domain citlzensbank.com. That site has long since been taken down. What is now there is an advert for a domain name registrar service. This is not a Phish site: href="http://www.citlzensbank.com/Survey/Secure/index.asp">http://www.citize nsbankonline.com/logon/securesurvey.asp

but the spam is a spoof of a Phish, which lends credibility to the belief some have that spammers really do eat their offspring. I am thinking that someone at citizensbank.com might be interested to know that their graphics have been abused in a spamitem. The spamsender may or may not have had permission to link to their graphics in criminal spamitems being transmitted on the internet. The domain registering service may or may not have a "pink contract" with the spamsender, and may or may not have acquired permissions from citizensbank.com to use their trademark logos in a criminal spamitem. Is it OK by you to report your spamitem to the abuse desk for citizensbank.com and let their people address these issues with the owner of the allegedly spamvending website? Glenn From SCNews.5.myspamgobbler at spamgourmet.com Mon Apr 25 17:23:15 2005 From: SCNews.5.myspamgobbler at spamgourmet.com (Brian (SnSR)) Date: Mon Apr 25 19:31:41 2005 Subject: [SpamCop-Mail] Re: Citizen bank (new?) $5 phishing passed spamcop (all RBL on) In-Reply-To: References: Message-ID: Glenn Daniels wrote: > "Ilgaz" wrote in message > >>Hi, >> >>Pasting below, Eudora pro alerts me fine about Phishing, have no clue >>about that bank but maybe popular there in USA, so crossposting to >>spamcop.mail. >> >>I better warn: WARNING, MAIL PASTED BELOW IS A PHISHING ATTEMPT, NOT A >>REAL BANK MAIL! >> >>Have a nice day >> >>Ilgaz >> > > > --- snippage --- > > Ilgaz: > > Actually, there was a phish out last year that actually did > point to domain citlzensbank.com. That site has long since > been taken down. > > What is now there is an advert for a domain name > registrar service. > > This is not a Phish site: > href="http://www.citlzensbank.com/Survey/Secure/index.asp">http://www.citize > nsbankonline.com/logon/securesurvey.asp

> > but the spam is a spoof of a Phish, which lends credibility > to the belief some have that spammers really do eat their > offspring. > This was a working phish site yesterday. Godaddy has supposedly nuked the site according to someone on another list, but I'm not totally certain of this yet. > I am thinking that someone at citizensbank.com might be > interested to know that their graphics have been abused > in a spamitem. The spamsender may or may not have had > permission to link to their graphics in criminal spamitems > being transmitted on the internet. The domain registering > service may or may not have a "pink contract" with the > spamsender, and may or may not have acquired > permissions from citizensbank.com to use their trademark > logos in a criminal spamitem. > > Is it OK by you to report your spamitem to the abuse desk > for citizensbank.com and let their people address these > issues with the owner of the allegedly spamvending website? > > Glenn > > From 79ytka802 at sneakemail.com Fri Apr 29 10:00:08 2005 From: 79ytka802 at sneakemail.com (Aviatrix) Date: Fri Apr 29 04:00:38 2005 Subject: [SpamCop-Mail] Re: 123STORE.BIZ, 1SECURESTORE.INFO, 123SECURESTORE.COM, SALEZSITE.INFO spammer In-Reply-To: References: Message-ID: Only just noticed this, don't go here very often...: Ilgaz Ocal wrote: > Is there a special advantage of .info domain to spammers? Trivial, just > wondering... Yes. The .info registry (Afilias) was running a special "free give-away" campaign last year. "Register your .info domain now and get it entirely FREE for the first year". Spammers were having a field day... From Ilgaz at spamcop.net Fri Apr 29 12:41:30 2005 From: Ilgaz at spamcop.net (Ilgaz) Date: Fri Apr 29 04:46:28 2005 Subject: [SpamCop-Mail] Re: 123STORE.BIZ, 1SECURESTORE.INFO, 123SECURESTORE.COM, SALEZSITE.INFO spammer References: Message-ID: On 2005-04-29 11:00:08 +0300, Aviatrix <79ytka802@sneakemail.com> said: > Only just noticed this, don't go here very often...: > > Ilgaz Ocal wrote: > >> Is there a special advantage of .info domain to spammers? Trivial, just >> wondering... > > Yes. The .info registry (Afilias) was running a special "free > give-away" campaign last year. "Register your .info domain now and get > it entirely FREE for the first year". Spammers were having a field > day... Couldn't imagine a more idiotic (my english not enough) campaign. I can'T imagine how many people filtered .info domain directly, even newbies. Thanks... A good domain name wasted. I may end up with ilgaz.nom.tr , our new cool domain name :) Ilgaz From Ilgaz at spamcop.net Sat Apr 30 11:57:28 2005 From: Ilgaz at spamcop.net (Ilgaz) Date: Sat Apr 30 04:00:05 2005 Subject: [SpamCop-Mail] Re: Citizen bank (new?) $5 phishing passed spamcop (all RBL on) References: Message-ID: On 2005-04-25 21:15:18 +0300, "Glenn Daniels" said: > "Ilgaz" wrote in message >> Hi, >> >> Pasting below, Eudora pro alerts me fine about Phishing, have no clue >> about that bank but maybe popular there in USA, so crossposting to >> spamcop.mail. >> >> I better warn: WARNING, MAIL PASTED BELOW IS A PHISHING ATTEMPT, NOT A >> REAL BANK MAIL! >> >> Have a nice day >> >> Ilgaz >> > > --- snippage --- > > Ilgaz: > > Actually, there was a phish out last year that actually did > point to domain citlzensbank.com. That site has long since > been taken down. > > What is now there is an advert for a domain name > registrar service. > > This is not a Phish site: > href="http://www.citlzensbank.com/Survey/Secure/index.asp">http://www.citize > nsbankonline.com/logon/securesurvey.asp

> > but the spam is a spoof of a Phish, which lends credibility > to the belief some have that spammers really do eat their > offspring. > > I am thinking that someone at citizensbank.com might be > interested to know that their graphics have been abused > in a spamitem. The spamsender may or may not have had > permission to link to their graphics in criminal spamitems > being transmitted on the internet. The domain registering > service may or may not have a "pink contract" with the > spamsender, and may or may not have acquired > permissions from citizensbank.com to use their trademark > logos in a criminal spamitem. > > Is it OK by you to report your spamitem to the abuse desk > for citizensbank.com and let their people address these > issues with the owner of the allegedly spamvending website? > > Glenn Hi, Would I miss the chance of reporting evil to satan himself? ;) Just like I never miss the chance on spams mentioning Microsoft products. BTW, sorry for late reply, I actually saw the legit mail you mention. I remember I said "now this is clever" Ilgaz Ocal