From spamcop at oitc.com Thu Aug 4 08:11:21 2005 From: spamcop at oitc.com (spamcop) Date: Thu Aug 4 07:15:03 2005 Subject: [SpamCop-Mail] Gov of China is phishing! Message-ID: Return-Path: Received: from smtp103.biz.mail.re2.yahoo.com (68.142.229.217) by mail.oitc.com with SMTP (Eudora Internet Mail Server X 3.2.6) for ; Thu, 4 Aug 2005 02:40:02 -0400 Received: (qmail 62906 invoked from network); 4 Aug 2005 06:39:59 -0000 Received: from unknown (HELO User) (23@neverbeenadreamhost.info@69.74.45.97 with login) by smtp103.biz.mail.re2.yahoo.com with SMTP; 4 Aug 2005 06:39:57 -0000 Reply-To: <.> From: "service@paypal.com" Subject: Unauthorized access to your PayPal account ! Date: Thu, 4 Aug 2005 02:42:00 -0400 MIME-Version: 1.0 Content-Type: text/html; charset="Windows-1251" Content-Transfer-Encoding: 7bit X-Priority: 1 X-MSMail-Priority: High X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-ID: <1088984886-54321036@mail.oitc.com>

As part of our security measures, we regularly screen activity in the
PayPal system. We recently noticed the following issue on your account:

We would like to ensure that your account was not accessed by an
unauthorized third party. Because protecting the security of your
account is our primary concern, we have limited access to sensitive PayPal
account features. We understand that this may be an inconvenience but please
understand that this temporary limitation is for your protection.
Case ID Number: PP-072-838-482

https://www.paypal.com/us/cgi-bin/webscr?cmd=complaint-view

For your protection, we have limited access to your account until
additional security measures can be completed. We apologize for any
inconvenience this may cause.

To review your account and some or all of the information that PayPal
usedto make its decision to limit your account access, please visit the
Resolution Center https://www.paypal.com/ . If, after reviewing your account information, you
seekfurther clarification regarding your account access, please contact
PayPal by visiting the Help Center and clicking "Contact Us".We thank you for
your prompt attention to this matter. Please understand that this is a
security measure intended to help protect you and your account. We apologize for
any inconvenience.

Sincerely,
PayPal Account Review Department

PayPal Email ID PP645495

From MikeE at ster.invalid Thu Aug 4 06:45:58 2005 From: MikeE at ster.invalid (Mike Easter) Date: Thu Aug 4 08:50:04 2005 Subject: [SpamCop-Mail] Re: Gov of China is phishing! References: Message-ID: spamcop wrote: Don't post spam into discussion groups. It is best to not post spam anywhere, but instead to post a tracker for any given item you want to talk about for any given reason. The tracker is posted as I described to you in .routing. If you must post a spam anywhere, which 'messes up' the spam and its headers with newsreader induced linewraps, it can be posted in spamcop.spam, but it shouldn't be discusssed there. -- Mike Easter kibitzer, not SC admin From Rick0.merrill at NOSPAMgmail.com Thu Aug 4 12:24:04 2005 From: Rick0.merrill at NOSPAMgmail.com (Rick Merrill) Date: Thu Aug 4 11:25:03 2005 Subject: [SpamCop-Mail] Re: Gov of China is phishing! In-Reply-To: References: Message-ID: Mike Easter wrote: > spamcop wrote: > > > > Don't post spam into discussion groups. > > It is best to not post spam anywhere, but instead to post a tracker for > any given item you want to talk about for any given reason. The tracker > is posted as I described to you in .routing. > > If you must post a spam anywhere, which 'messes up' the spam and its > headers with newsreader induced linewraps, it can be posted in > spamcop.spam, but it shouldn't be discusssed there. > > > Others (like meself) would like to know what is a "tracker"? From Rick0.merrill at NOSPAMgmail.com Thu Aug 4 12:26:44 2005 From: Rick0.merrill at NOSPAMgmail.com (Rick Merrill) Date: Thu Aug 4 11:30:03 2005 Subject: [SpamCop-Mail] Re: Gov of China is phishing! In-Reply-To: References: Message-ID: spamcop wrote: ...To review your account and some or all of > the > information that PayPal
usedto make its decision to limit your account > access, please visit the
Resolution Center href="...://mail.jsbs.bjedu.gov.cn/images/login/primapagina.htm"> Message-ID: Rick Merrill wrote: > Mike Easter wrote: >> Don't post spam into discussion groups. >> >> It is best to not post spam anywhere, but instead to post a tracker >> for any given item you want to talk about for any given reason. The >> tracker is posted as I described to you in .routing. When I was talking to spamcop@oitc.com in .routing, I posted an example, which I'll repost here below. > Others (like meself) would like to know what is a "tracker"? Mike Easter wrote: > When you put the spam into the parser, the parser will show a tracker > at the top, like this: > > Here is your TRACKING URL - it may be saved for future reference: http://www.spamcop.net/sc?id=z792891970zd854775ffad6a7f3aa0a89d6cf9332efz > > Post that. Naturally that assumes that a person handles or can handle their spam by pasting it into the webparsing interface, which might not be the case if someone is a spamcop mail client. This might be a good time to mention that traditionally the various newsgroups on the spamcop newsserver have been used in the following ways, altho' the available description isn't satisfactory to me in the SC faq. - spamcop and spamcop.help are for discussions. They are not to have any spams posted in them. - spamcop.routing is for those who can post a competent discussion of a suggestion for a routing change to the deputies. Routing change suggestions should be based on a tracker and should contain an understanding of where and how the current notify is being derived as well as the spamcop 'philosophy' of notifies -- so that the suggested alternative notify bears up under such constraints. The recommendedation for improving the notify has to convince the deputy that s/he should make a manual change in routing. - spamcop.spam is for posting spams only. No discussion of the spams in .spam. Posting a spam into .spam is far inferior to posting a tracker, because newgroup posting, unless it is done as an attachment to the newsgroup message, introduces linewraps which change the spam and its headers and make experimentation and spamcop parsing more difficult - spamcop.mail is for a discussion of issues pertaining to spamcop mail accounts. Currently spamcop.mail is a 'stealth' newsgroup, because all reference to it on the faq page was removed, and the faq/s say that people who want to ask questions about mail should or must go to the forum. However there is still spamcop mail support available in the newsgroups. - spamcop.social is for discussing non-spamcop related issues more of a social nature - spamcop.geeks is for discussing non-spamcop related issues more of a technical or geeky nature The issues about the faults of the newsgroup descriptions is another example of how the faq only gets changed when or how it suits the man with the faq control, not necessarily what is correct or accurate. -- Mike Easter kibitzer, not SC admin From nobody at devnull.spamcop.net Thu Aug 4 14:59:15 2005 From: nobody at devnull.spamcop.net (Glenn Daniels) Date: Thu Aug 4 14:00:03 2005 Subject: [SpamCop-Mail] Re: Gov of China is phishing! References: Message-ID: "Rick Merrill" wrote ... > > paypal phishing should also be forwarded to spoof@ebay.com > When it is an eBay phish I use spoof/at/ebay.com. When it is a PayPal phish, use spoof/at/paypal.com. The phish in either case is forwarded "as attachment" and it helps if no note is added by sender and the "Subject" header is not altered. For my purposes I add these addressees to the email: spoof/at/millersmiles.co.uk reportphishing/at/antiphishing.org nophishing/at/cbbb.bbb.org (Better Business Bureau) submit/at/phishcop.net Glenn From nobody at spamcop.net Sun Aug 7 16:16:55 2005 From: nobody at spamcop.net (GregR) Date: Sun Aug 7 18:20:17 2005 Subject: [SpamCop-Mail] Re: Gov of China is phishing! In-Reply-To: References: Message-ID: Glenn Daniels wrote: > For my purposes I add these addressees to the > email: > spoof/at/millersmiles.co.uk > reportphishing/at/antiphishing.org > nophishing/at/cbbb.bbb.org (Better Business Bureau) > submit/at/phishcop.net Thank you for those - phish attempts are about all I report these days (but only if the phish website is still active), especially since SC usually dev/nulls reports about the original spam. :-/ -- GregR - Another Beemer Biker ...o&o> From ronNOSPAMisaiah at gmail.com Thu Aug 11 01:29:26 2005 From: ronNOSPAMisaiah at gmail.com (Ron Isaiah) Date: Thu Aug 11 00:30:16 2005 Subject: [SpamCop-Mail] Millionaire at 31 ... on the Internet! Listen to how he is doing it. Message-ID: If you're ready to listen to a Millionaire speak on how he got there and receive for free the amazing new Formula that has made him wealthy... CLICK THIS LINK NOW: http://www.superiormarketingpartners.com/audioebook.html Again, you DO NOT NEED A WEB SITE to make money. YOU DO NOT NEED A PRODUCT to make money. YOU DO NOT NEED EXPERIENCE... You just need to SIT BACK, RELAX AND LISTEN TO THIS AUDIO EBOOK: "MILLIONAIRE AT 31... ON THE INTERNET - LISTEN TO HOW HE'S DOING IT" http://www.superiormarketingpartners.com/audioebook.html A new Internet marketing age has begun. Now is your chance to catch the new wave of internet marketing before everyone else does. Discover Stephan Ducharme's Secret Formula for yourself and your family: I personally recommend it and endorse it 100%, with all my reputation. Happy listening... Jodi Hans, CEO The Wealth Guide PS. Do yourself a favor. Take the next 20 minutes and listen to a 31 year old millionaire reveal in his own words how he went from 0 to 1 MILLION VISITORS paying him over 1 MILLION DOLLARS in just the past weeks. Here's the link to his amazing audio ebook interview where you can learn the simple 9-Step Formula that if applied within the next few hours will begin earning money by the end of the week. http://www.superiormarketingpartners.com/audioebook.html --- MAF Anti-Spam ID: 20050809180825Q8t6AxM3 From 79ytka802 at sneakemail.com Sun Aug 14 09:50:20 2005 From: 79ytka802 at sneakemail.com (Aviatrix) Date: Sun Aug 14 03:55:07 2005 Subject: [SpamCop-Mail] "Release and whitelist" not working today Message-ID: Hope somebody is still reading this... Just tried to "release and whitelist" an item of goodmail from my Spamcop account, and it didn't work! Got the usual "message has been released" message on my screen, but the message was still sitting in my Spamcop webmail account. Tried a second time, and a third time - same result. Checked the mailbox to which mail gets forwarded from my Spamcop account (to see if maybe the message had been forwarded without being deleted from my Spamcop account), but so far it hasn't arrived there. Something clearly not working as it should! From jeffg at spamcop.net Sun Aug 14 11:58:07 2005 From: jeffg at spamcop.net (Jeff G.) Date: Sun Aug 14 11:00:02 2005 Subject: [SpamCop-Mail] Re: "Release and whitelist" not working today References: Message-ID: Aviatrix wrote: > Hope somebody is still reading this... > > Just tried to "release and whitelist" an item of goodmail from my > Spamcop account, and it didn't work! > > Got the usual "message has been released" message on my screen, but > the message was still sitting in my Spamcop webmail account. Tried a > second time, and a third time - same result. Checked the mailbox to > which mail gets forwarded from my Spamcop account (to see if maybe > the message had been forwarded without being deleted from my Spamcop > account), but so far it hasn't arrived there. > > Something clearly not working as it should! "Release and Whitelist" just worked for me, but I don't forward. I have posted this info at http://forum.spamcop.net/forums/index.php?showtopic=4729 . -- Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From 79ytka802 at sneakemail.com Sun Aug 14 17:31:40 2005 From: 79ytka802 at sneakemail.com (Aviatrix) Date: Sun Aug 14 11:35:03 2005 Subject: [SpamCop-Mail] Re: "Release and whitelist" not working today In-Reply-To: References: Message-ID: Jeff G. wrote: > "Release and Whitelist" just worked for me, but I don't forward. I have > posted this info at > http://forum.spamcop.net/forums/index.php?showtopic=4729 . Still doesn't work for me - so it seems like it has stopped working with forwarding. I haven't changed anything at my end; "release and whitelist" worked fine for me for many years, until today. Can you have another look please? From nobody at devnull.spamcop.net Sun Aug 14 11:47:24 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Sun Aug 14 11:50:03 2005 Subject: [SpamCop-Mail] Re: "Release and whitelist" not working today References: Message-ID: "Aviatrix" <79ytka802@sneakemail.com> wrote in message news:ddno4o$ss1$1@news.spamcop.net... > > Jeff G. wrote: > > > "Release and Whitelist" just worked for me, but I don't forward. I have > > posted this info at > > http://forum.spamcop.net/forums/index.php?showtopic=4729 . > > Still doesn't work for me - so it seems like it has stopped working with > forwarding. > > I haven't changed anything at my end; "release and whitelist" worked > fine for me for many years, until today. > > Can you have another look please? As stated "over there" ... with only a single user reporting a problem, it's hard to go with "the system is broken" .... Another approach .. what are the odds that the account you forward to has been flagged as bouncing, normally causing the SpamCop server to quit making attempts at making that connection? From jeffg at spamcop.net Sun Aug 14 13:58:38 2005 From: jeffg at spamcop.net (Jeff G.) Date: Sun Aug 14 13:05:04 2005 Subject: [SpamCop-Mail] Re: "Release and whitelist" not working today References: Message-ID: Aviatrix wrote: > Jeff G. wrote: > >> "Release and Whitelist" just worked for me, but I don't forward. I >> have posted this info at >> http://forum.spamcop.net/forums/index.php?showtopic=4729 . > > Still doesn't work for me - so it seems like it has stopped working > with forwarding. > > I haven't changed anything at my end; "release and whitelist" worked > fine for me for many years, until today. > > Can you have another look please? I have done the following testing, using one test email message from my Archive mailbox/Folder, and using my Yahoo! UK account as a destination: 1. Forward. OK. 2. Redirect. OK (except for the mangling of the old Received Header Lines which I've reported before). 3. Release and Whitelist (to my Webmail Inbox mailbox/Folder). OK. 4. Turn on Webmail Forwarding and watch a "SpamCop Quick reporting data" email message be forwarded. OK. 5. Release and Whitelist. OK. 6. Turn off Webmail Forwarding. OK. Please contact JT via support[at]spamcop.net, as this problem is happening with your account, but not mine. [posted to both spamcop.mail and http://forum.spamcop.net/forums/index.php?showtopic=4729 .] -- Thanks and Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From nospam at dev.null Mon Aug 15 00:08:45 2005 From: nospam at dev.null (No Spam) Date: Sun Aug 14 17:10:03 2005 Subject: [SpamCop-Mail] Ever wondered about Yahoo's abuse desk literacy Message-ID: <42FFB2DD.5080609@dev.null> Hi All In case anybody ever wondered about Yahoo's help desk, the following correspondence speaks for itself. I have put the correspondence, starting with a spam with only the relevant parts, and how the attempt at ??communcicating?? with Yahoo's abuse desk proceeded. No wonder spammers have found a haven at Yahoo, registering their domains with Yahoo addresses. Illiteracy at Yahoo "Ru!zez z00Pr eme" Cheers all Anty Spam -------------- SPAM -------------- Return-Path: X-Sieve: Server Sieve 2.2 Envelope-to: X Sat, 30 Jul 2005 20:03:03 +0200 (CEST) Received: from pcp09010130pcs.watrfd01.mi.comcast.net (pcp09010130pcs.watrfd01.mi.comcast.net [69.244.140.167]) by X with SMTP id X; Sat, 30 Jul 2005 20:02:47 +0200 (CEST) X-ME-UUID: X Received: from [247.108.112.32] (helo=..dearriba.com) by smtp2.cistron.nl with esmtp ( 3.35 #1 ()) id 272LFL-0008PT-53 Message-ID: Sender: freeradius-devel-grcjmir@yahoo.com X-Mailman-Version: 2.0.1 Date: Sat, 30 Jul 2005 23:52:19 +0500 From: "Dusty Cox" To: X Subject: Harder, Last Longer E-Rections MGJ4 ....snip..... http://commodious.net/spur/?ronn o-ut of mai-lling lisst: http://commodious.net/rm.php?ronn ....snip...... -----------Message to Yahoo --------------- Dear abuse team Mail user whois77001@yahoo.com refers: Below spam not only using fake Yahoo! headers, but pointing to a spam domain, commodious.net, belonging to one of your users, whois77001@yahoo.com. As such also commercial usage of Yahoo! email addres in violation of your AUP. Domain Name : commodious.net ::Registrant:: Name : Miles Smith Email : whois77001@yahoo.com Address : 110 east Tugalo St, Zipcode : 30577 Nation : GE Tel : +995-706-821-0632 Fax : Please terminate for spamming and commercial use. Thank you X --------1st Reply from Yahoo - wrong button 1 ----------------- Message Received: Jul 30 2005, 11:45 PM From: "Yahoo!Mail" To: X Cc: Subject: RE: FW: Harder, Last Longer E-Rections MGJ4 (KMM20530835V60478L0KM) Hello, Thank you for contacting Yahoo! Customer Care. Thank you for contacting Yahoo! Mail Investigations regarding the unsolicited email message you have received. After careful evaluation, we have determined that this email message did not originate from the Yahoo! Mail system. The "yahoo.com" address associated with the email does not exist. It appears the true sender of this message forged the header information to give the impression that it came from Yahoo! Mail. Forging the Yahoo! domain is a violation of our Terms of Service (TOS) and appropriate action will be taken against any accounts engaging in such acts. Forgery is an industry-wide issue and Yahoo! has committed itself to work in collaboration with other companies to combat this and other types of spam. Thank you again for contacting Yahoo! Customer Care. Regards, Yahoo! Customer Care ------------- Response to Yahoo ----------------------------- Hi ????? "After careful evaluation, we have determined that this email message did not originate from the Yahoo!" ???? I think you must have misread. I myself am saying in my orginal mail the headers are fake and this mail did not orginate from you. Please reread mail! However, I am also pointing out to you that the perpetrator had in fact used your own services to: create an email address - whois77001@yahoo.com, which in turn was used to register a domain, which in turn is now being used as his spam target domain, and sending mail using fake Yahoo! addresses. commodious.net is the spam target. This belongs to whois77001@yahoo.com as per registered whois included. As such whois77001@yahoo.com is using this address for commercial usage, not direct spamming, but the first phase in the spam chain, domain registrations and as such is abuse. Please refer to your own AUP on this issue. Commercial usageis clearly covered! In fact this spammer is registering many domains with the address whois77001@yahoo.com! If you do not understand this mail, please refer to your supervisor. -------------------------------------------------------------------- I suspect they must have hit the "Respond to Yahoo! Mailbox button" by accident???? ======================================== Message Received: Aug 02 2005, 04:20 AM From: "Yahoo!Mail" To: X Cc: Subject: RE: FW: *** SPAM *** Harder, Last Longer E-Rections MGJ4 (KMM20564962V52676L0KM) Hello, Thank you for writing to Yahoo! Mail. It is possible for someone to forge an email address within an email message to make it appear to be deriving from a particular email address, when in reality it is not. Unfortunately, this is an industry-wide problem. Through the implementation of DomainKeys, a cryptographic email authentication solution, we are increasing protection against email forgery. For more information about DomainKeys, please visit: http://antispam.yahoo.com/domainkeys While Yahoo! cannot technically prevent its domain from being forged in the headers of an email message, actions have been taken against companies in an effort to prevent further forgery of the Yahoo! brand and to seek damages as appropriate. Individuals are strongly discouraged from forging the Yahoo! domain in the future and appropriate action will be taken as necessary. We understand your concerns about receiving unsolicited email, and can certainly empathize with your frustration. Yahoo! Mail offers several tools to help you keep spam out of your Inbox: 1. "Spam" and "Not Spam" buttons -- The most effective way to prevent spam from entering your Inbox is by using the "Spam" button in your Inbox or the "Not Spam" button in your Bulk Mail folder. If a spam message is delivered to your Inbox - click "Spam." If a non-spam message is delivered to your Bulk Mail folder - click "Not spam." By sending examples of spam to Yahoo! for review, it will increase the effectiveness of Spamguard, Yahoo! Mail's filtering system. Yahoo! will use the messages you send to constantly improve the Spamguard technology and help ensure that unwanted messages are delivered to your Bulk Mail Folder rather than your Inbox. 2. Filters -- Yahoo! Mail offers you the ability to create filters for your account. You can create filters to deliver emails to a special folder, or to the Trash folder that: * contain specific words or phrases * are from a sender's domain * contain other characteristics you find in spam Learn more about setting up filters at the Help Desk, located at: http://help.yahoo.com/help/mail/manage/manage-06.html 3. Block an address -- Use this feature to block email addresses you do not want to receive email from. When an address is blocked, incoming email from these addresses will be automatically disposed of, without bouncing back to the sender. When you remove an address from your Blocked Addresses list, you will once again be able to receive mail from that address. For directions on how to block an email address, please visit: http://help.yahoo.com/help/us/mail/read/read-22.html 4. Report the spam -- If you receive harassing or unwanted mail from what appears to be a "@yahoo.com" address, you can forward the message directly to us for review at: abuse@yahoo.com Please include an unedited copy of the original message along with the full Internet headers. To learn how to display full headers in Yahoo! Mail, please visit: http://help.yahoo.com/help/us/mail/config/config-11.html If you receive unwanted mail from a non-"@yahoo.com" address, you may try contacting the sender's email provider by identifying the sender's domain and contacting the administrator of that domain. Unfortunately, Yahoo! has no control over activities outside its service, and therefore we cannot take action in these situations. The sender's provider should be in a better position to take appropriate action against the sender's account. If you have any further questions about spam, please see our Online Support web page at: http://help.yahoo.com/help/mail/spam/ Thank you again for contacting Yahoo! Customer Care. Regards, Louis Yahoo! Customer Care http://www.yahoo.com/ 14987051 Original Message Follows: ------------------------- From nospam at dev.null Mon Aug 15 00:10:20 2005 From: nospam at dev.null (No Spam) Date: Sun Aug 14 17:15:02 2005 Subject: [SpamCop-Mail] Ever wondered about Yahoo's abuse desk literacy Message-ID: Hi All In case anybody ever wondered about Yahoo's help desk, the following correspondence speaks for itself. I have put the correspondence, starting with a spam with only the relevant parts, and how the attempt at ??communcicating?? with Yahoo's abuse desk proceeded. No wonder spammers have found a haven at Yahoo, registering their domains with Yahoo addresses. Illiteracy at Yahoo "Ru!zez z00Pr eme" Cheers all Anty Spam -------------- SPAM -------------- Return-Path: X-Sieve: Server Sieve 2.2 Envelope-to: X Sat, 30 Jul 2005 20:03:03 +0200 (CEST) Received: from pcp09010130pcs.watrfd01.mi.comcast.net (pcp09010130pcs.watrfd01.mi.comcast.net [69.244.140.167]) by X with SMTP id X; Sat, 30 Jul 2005 20:02:47 +0200 (CEST) X-ME-UUID: X Received: from [247.108.112.32] (helo=..dearriba.com) by smtp2.cistron.nl with esmtp ( 3.35 #1 ()) id 272LFL-0008PT-53 Message-ID: Sender: freeradius-devel-grcjmir@yahoo.com X-Mailman-Version: 2.0.1 Date: Sat, 30 Jul 2005 23:52:19 +0500 From: "Dusty Cox" To: X Subject: Harder, Last Longer E-Rections MGJ4 ....snip..... http://commodious.net/spur/?ronn o-ut of mai-lling lisst: http://commodious.net/rm.php?ronn ....snip...... -----------Message to Yahoo --------------- Dear abuse team Mail user whois77001@yahoo.com refers: Below spam not only using fake Yahoo! headers, but pointing to a spam domain, commodious.net, belonging to one of your users, whois77001@yahoo.com. As such also commercial usage of Yahoo! email addres in violation of your AUP. Domain Name : commodious.net ::Registrant:: Name : Miles Smith Email : whois77001@yahoo.com Address : 110 east Tugalo St, Zipcode : 30577 Nation : GE Tel : +995-706-821-0632 Fax : Please terminate for spamming and commercial use. Thank you X --------1st Reply from Yahoo - wrong button 1 ----------------- Message Received: Jul 30 2005, 11:45 PM From: "Yahoo!Mail" To: X Cc: Subject: RE: FW: Harder, Last Longer E-Rections MGJ4 (KMM20530835V60478L0KM) Hello, Thank you for contacting Yahoo! Customer Care. Thank you for contacting Yahoo! Mail Investigations regarding the unsolicited email message you have received. After careful evaluation, we have determined that this email message did not originate from the Yahoo! Mail system. The "yahoo.com" address associated with the email does not exist. It appears the true sender of this message forged the header information to give the impression that it came from Yahoo! Mail. Forging the Yahoo! domain is a violation of our Terms of Service (TOS) and appropriate action will be taken against any accounts engaging in such acts. Forgery is an industry-wide issue and Yahoo! has committed itself to work in collaboration with other companies to combat this and other types of spam. Thank you again for contacting Yahoo! Customer Care. Regards, Yahoo! Customer Care ------------- Response to Yahoo ----------------------------- Hi ????? "After careful evaluation, we have determined that this email message did not originate from the Yahoo!" ???? I think you must have misread. I myself am saying in my orginal mail the headers are fake and this mail did not orginate from you. Please reread mail! However, I am also pointing out to you that the perpetrator had in fact used your own services to: create an email address - whois77001@yahoo.com, which in turn was used to register a domain, which in turn is now being used as his spam target domain, and sending mail using fake Yahoo! addresses. commodious.net is the spam target. This belongs to whois77001@yahoo.com as per registered whois included. As such whois77001@yahoo.com is using this address for commercial usage, not direct spamming, but the first phase in the spam chain, domain registrations and as such is abuse. Please refer to your own AUP on this issue. Commercial usageis clearly covered! In fact this spammer is registering many domains with the address whois77001@yahoo.com! If you do not understand this mail, please refer to your supervisor. -------------------------------------------------------------------- I suspect they must have hit the "Respond to Yahoo! Mailbox button" by accident???? ======================================== Message Received: Aug 02 2005, 04:20 AM From: "Yahoo!Mail" To: X Cc: Subject: RE: FW: *** SPAM *** Harder, Last Longer E-Rections MGJ4 (KMM20564962V52676L0KM) Hello, Thank you for writing to Yahoo! Mail. It is possible for someone to forge an email address within an email message to make it appear to be deriving from a particular email address, when in reality it is not. Unfortunately, this is an industry-wide problem. Through the implementation of DomainKeys, a cryptographic email authentication solution, we are increasing protection against email forgery. For more information about DomainKeys, please visit: http://antispam.yahoo.com/domainkeys While Yahoo! cannot technically prevent its domain from being forged in the headers of an email message, actions have been taken against companies in an effort to prevent further forgery of the Yahoo! brand and to seek damages as appropriate. Individuals are strongly discouraged from forging the Yahoo! domain in the future and appropriate action will be taken as necessary. We understand your concerns about receiving unsolicited email, and can certainly empathize with your frustration. Yahoo! Mail offers several tools to help you keep spam out of your Inbox: 1. "Spam" and "Not Spam" buttons -- The most effective way to prevent spam from entering your Inbox is by using the "Spam" button in your Inbox or the "Not Spam" button in your Bulk Mail folder. If a spam message is delivered to your Inbox - click "Spam." If a non-spam message is delivered to your Bulk Mail folder - click "Not spam." By sending examples of spam to Yahoo! for review, it will increase the effectiveness of Spamguard, Yahoo! Mail's filtering system. Yahoo! will use the messages you send to constantly improve the Spamguard technology and help ensure that unwanted messages are delivered to your Bulk Mail Folder rather than your Inbox. 2. Filters -- Yahoo! Mail offers you the ability to create filters for your account. You can create filters to deliver emails to a special folder, or to the Trash folder that: * contain specific words or phrases * are from a sender's domain * contain other characteristics you find in spam Learn more about setting up filters at the Help Desk, located at: http://help.yahoo.com/help/mail/manage/manage-06.html 3. Block an address -- Use this feature to block email addresses you do not want to receive email from. When an address is blocked, incoming email from these addresses will be automatically disposed of, without bouncing back to the sender. When you remove an address from your Blocked Addresses list, you will once again be able to receive mail from that address. For directions on how to block an email address, please visit: http://help.yahoo.com/help/us/mail/read/read-22.html 4. Report the spam -- If you receive harassing or unwanted mail from what appears to be a "@yahoo.com" address, you can forward the message directly to us for review at: abuse@yahoo.com Please include an unedited copy of the original message along with the full Internet headers. To learn how to display full headers in Yahoo! Mail, please visit: http://help.yahoo.com/help/us/mail/config/config-11.html If you receive unwanted mail from a non-"@yahoo.com" address, you may try contacting the sender's email provider by identifying the sender's domain and contacting the administrator of that domain. Unfortunately, Yahoo! has no control over activities outside its service, and therefore we cannot take action in these situations. The sender's provider should be in a better position to take appropriate action against the sender's account. If you have any further questions about spam, please see our Online Support web page at: http://help.yahoo.com/help/mail/spam/ Thank you again for contacting Yahoo! Customer Care. Regards, Louis Yahoo! Customer Care http://www.yahoo.com/ 14987051 Original Message Follows: ------------------------- From nobody at spamcop.net Tue Aug 16 15:50:18 2005 From: nobody at spamcop.net (Ellen) Date: Tue Aug 16 14:55:25 2005 Subject: [SpamCop-Mail] SpamCop Maintenance Window Thursday, Aug 18, 2005 Message-ID: SpamCop Maintenance Window: The SC reporting system will be down Thursday August 18, 2005 starting at approximately 10AM PDT -0700 for a period of 6-8 hours. No mail/spam will be lost; it will be queued until maintenance is completed. You may notice some delays as we process the queued mail when the system comes back up. This maintenance window does NOT affect the SpamCop email system. Thanks. Ellen SpamCop From nobody at spamcop.net Wed Aug 17 16:51:58 2005 From: nobody at spamcop.net (Ellen) Date: Wed Aug 17 16:00:20 2005 Subject: [SpamCop-Mail] SC Maint Window -- Date change Message-ID: SpamCop Maintenance Window: ** Please note change of date ** The SC reporting system will be down Tuesday August 23, 2005 starting at approximately 10AM PDT -0700 for a period of 6-8 hours. No mail/spam will be lost; it will be queued until maintenance is completed. You may notice some delays as we process the queued mail when the system comes back up. This maintenance window does NOT affect the SpamCop email system. Thanks. Ellen SpamCop From nobody at spamcop.net Tue Aug 23 12:20:36 2005 From: nobody at spamcop.net (Ellen) Date: Tue Aug 23 11:25:21 2005 Subject: [SpamCop-Mail] Reminder - maintenance window Message-ID: *****Reminder:****** The system will be going into maintenance mode some time after 10AM PDT -0700 for a period that we expect to last for 6-8 hours. The reporting system website will show a maintenance message. The system will not be parsing spam while in maintenance mode so any spam that you submit via mail or "report as spam" will be queued for later processing. It will then take the servers some time to work thru that backlog so expect slower responses to spam submission for some number of hours after the system comes back up. Mail to deputies and to other role addresses will be queued while the system is down and answered after it comes back up; this will put us behind in responding to mail but it will all get answered as we plow thru it. The SpamCop *email system* will not be affected by this maintenance window. Ellen SpamCop From nobody at spamcop.net Wed Aug 24 06:11:08 2005 From: nobody at spamcop.net (Ellen) Date: Wed Aug 24 05:30:51 2005 Subject: [SpamCop-Mail] Re: still down for maintenance? References: Message-ID: "Don Wannit" wrote in message news:deh1ns$21c$2@news.spamcop.net... > The 6-8 hour downtime for maintenance seems to be taking a mite > longer than planned. Or am I seeing some web cache shenanigans? > > (22:48 PDT) > The maintenance encountered some problems which unfortunately persist. The systems folks are working the problems as fast as they can. As is not uncommon with major upgrades, the things one worries about intensely before the event all went perfectly and the things that were supposed to be slam dunks didn't necessarily happen as expected. As always - thanks for your patience and when I know something I'll let you know. Ellen SpamCop From nobody at spamcop.net Wed Aug 24 07:52:33 2005 From: nobody at spamcop.net (Ellen) Date: Wed Aug 24 06:55:21 2005 Subject: [SpamCop-Mail] Re: still down for maintenance? References: Message-ID: "Steven Maesslein" wrote in message news:slrndgoisr.u8u.nobody@127.0.0.1... > On Wed, 24 Aug 2005 05:11:08 -0400, Ellen coughed into spamcop and left > this in : > > > The maintenance encountered some problems which unfortunately persist. The > > systems folks are working the problems as fast as they can. > > It appears to be back up again as of now - 10:27 GMT. > The system is up -- if you see anything weird let me know. You may see some slowness due to grinding thru the mail backlog. Ellen From jeffg at spamcop.net Wed Aug 24 11:06:32 2005 From: jeffg at spamcop.net (Jeff G.) Date: Wed Aug 24 10:10:36 2005 Subject: [SpamCop-Mail] SpamCop Maintenance Update Message-ID: The SpamCop Parsing and Reporting Service was down Tuesday August 23, 2005 starting at approximately 10AM PDT -0700 for a longer period than expected. It is up, but with residual impact to the Mailhost Configuration Feature and an ongoing email backlog. We will continue to post updates to http://forum.spamcop.net/forums/index.php?showtopic=4743 as the situation develops. Thank you for your patience. -- Thanks and Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From nobody at spamcop.net Wed Aug 24 11:25:36 2005 From: nobody at spamcop.net (Ellen) Date: Wed Aug 24 10:30:23 2005 Subject: [SpamCop-Mail] Official system status posts Message-ID: Please note that *official system status information* can be found on the SpamCop reporting site and/or is posted to the newsgroups by SpamCop employees only. Any other posts may or may not reflect the current status of the system and may or may not be out of date or incorrect. The system is up and operational. There are no backlogged mail queues at this time. We continue to chase down small issues as they arise. If you see any operational problems that appear to be a result of the maintenance please post them here. We do have an issue with mailhost probes being accepted at this moment however existing mailhosts are working fine. The only impact of this problem is that people who are trying to set up new mailhosts will not be able to do so at this time. Thanks Ellen SpamCop From jeffg at spamcop.net Wed Aug 24 12:05:18 2005 From: jeffg at spamcop.net (Jeff G.) Date: Wed Aug 24 11:10:23 2005 Subject: [SpamCop-Mail] Re: SpamCop Maintenance Update References: Message-ID: Jeff G. wrote: > The SpamCop Parsing and Reporting Service was down Tuesday August 23, > 2005 starting at approximately 10AM PDT -0700 for a longer period than > expected. It is up, but with residual impact to the Mailhost > Configuration Feature I'm sorry if my statement above was misinterpreted. To be clear, the only impact is on creation/addition of new Mailhosts. > and an ongoing email backlog. I'm sorry that I posted that in error. It was what I believed at the time based on the last official post from a SpamCop employee. I am not a SpamCop employee. > We will continue to post updates to > http://forum.spamcop.net/forums/index.php?showtopic=4743 as the > situation develops. > > Thank you for your patience. -- Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From markadorne at email.uophx.edu Fri Aug 26 18:29:01 2005 From: markadorne at email.uophx.edu (Mark Adornetto {Faculty}) Date: Fri Aug 26 20:30:04 2005 Subject: [SpamCop-Mail] Multiple email address??? Message-ID: I use MailWasher Pro with the SpamCop function turned on but I have several email accounts and I don't see an option on SpamCop that enables multiple email addresses. How do I make my account work with multiple email addresses? Mark From nobody at devnull.spamcop.net Fri Aug 26 20:38:32 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Fri Aug 26 20:40:03 2005 Subject: [SpamCop-Mail] Re: Multiple email address??? References: Message-ID: "Mark Adornetto {Faculty}" wrote in message news:deoc4d$vu0$1@news.spamcop.net... > I use MailWasher Pro with the SpamCop function > turned on but I have several email accounts and I > don't see an option on SpamCop that enables > multiple email addresses. How do I make my > account work with multiple email addresses? First of all, plain text only here. Second, you've got something backwards .. or perhaps something not correct at all. For instance, all you say is that you "have the SpamCop function turned on" but don't actually say that you have a spamcop.net reporting or e-mail account. That said, you can report any/all of your e-mail through your SpamCop.net account. If that doesn't answer your query, then there needs to be some research done at your end to better explain exactly what the issue actually is. From g.hyde at bigpond.net.au Sat Aug 27 19:50:46 2005 From: g.hyde at bigpond.net.au (Geoffrey Hyde) Date: Sat Aug 27 04:55:48 2005 Subject: [SpamCop-Mail] Where is an appropriate newsgroup for questions on spam? Message-ID: First off, if this is the wrong newsgroup for posting questions, I apologize, but there doesn't seem to be much info about what can be discussed in the various groups on the mailserver. Somehow, BigPond's mail server is sending me spam emails, although I'm not exactly sure how they're getting to me and bypassing the requirement to get the user receive name (the part before the @ symbol) right. Here's one such spam email - Notice how it doesn't appear to have my real address anywhere in it. Return-Path: Received: from mailops.com ([212.244.23.11]) by imta01ps.mx.bigpond.com with SMTP id <20050827081729.YNFQ25237.imta01ps.mx.bigpond.com@mailops.com>; Sat, 27 Aug 2005 08:17:29 +0000 From: "Puskala Hans" To: "Peral Sergio" Subject: Re[9]: Aibiki Olenevs Raymond Wade Date: Sat, 27 Aug 2005 08:17:14 +0000 Message-ID: <05f001c5aadf$03a38040$54007977@mailops.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2527 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527 SPUR-M - your gennie in a pill. http://Lee.avaunts.net/Seechan Beal Dambrauskas Yoak Saraiva Graham Russell Engels Clark Goddard Privalov Manning gkjkjhjfjujikilnjqjijrkrjhjfjqgtkukmjmgpkjji ijlkmglqlhlsmqjolnlhlqmslglgmjiumrmllfiqmmlh thqhqmqkonqqqiqrprqhqfqqrtnunmomrpnjoi pnuosjrfsqrurqsmtlrkrgrtsprjrhronfrgskrkorshrg ggjgfojfkfjtjtlrjujmjnjfktkrkmgpkqkijiglknju gnjojjkhmhkgkskhjlknklksgjkkkojogfktik trqrniqrpqqinjpgnfnpnioknononrrmnjntonrinuop pkujtlupuguuuouusounuhuqtsugugrjnurrrlsfnqrmsh -- Cheers ... Geoffrey Hyde From jeffg at spamcop.net Sun Aug 28 19:04:58 2005 From: jeffg at spamcop.net (Jeff G.) Date: Sun Aug 28 18:10:19 2005 Subject: [SpamCop-Mail] Re: Multiple email address??? References: Message-ID: WazoO wrote: > "Mark Adornetto {Faculty}" wrote in > message news:deoc4d$vu0$1@news.spamcop.net... >> I use MailWasher Pro with the SpamCop function >> turned on but I have several email accounts and I >> don't see an option on SpamCop that enables >> multiple email addresses. How do I make my >> account work with multiple email addresses? > you can report any/all of > your e-mail through your SpamCop.net account. In addition, you can report spam received at any number of email accounts through any number of SpamCop reporting accounts, although reporting through one SpamCop reporting account would probably be more convenient. -- Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only.