Clicky
Last visit was: Sat Jul 05, 2014 12:49 am
It is currently Sat Jul 05, 2014 12:49 am

The Absolute Scum Of The Earth: Fake Haiti Relief Spammers


All times are UTC - 5 hours [ DST ]


 [ 8 posts ] 
Author Message
 PostPosted: Sun Jan 31, 2010 10:24 am   
Site Admin
User avatar

Joined: Tue May 09, 2006 9:18 am
Posts: 5022
I want to do some pretty unspeakable things to this idiot...

Quote:
From: "BRITISH RED CROSS SOCIETY"<haiti@redcross.com>
Subject: The British Red Cross Society British Red Cross UK Office 44 Moorfields London EC2Y9AL. MAKE YOUR DO
To: undisclosed-recipients:;

The British Red Cross Society British Red Cross UK Office 44 Moorfields London EC2Y9AL. MAKE YOUR DONATIONS NOW. redcross@chemist.com

Dear Reader,

A devastating earthquake measuring 7.3 on the Richter scale struck Haiti on 12th January 2010 sending the Haitian Capital Port-Au-Prince into Chaos,killing hundreds and affecting thousands more.Please give what you can today to help thousands of people in desperate need of humanitarian assistance. Relief aid workers from Red Cross have already been arriving at the Haitian capital with relief materials. Donations have been grouped into three categories.

Many peole in Haiti today are soliciting your help and assistance so please kindly do something for them in this regard while you still live on earth so that you will have a great treasure in Heaven.

1:GROUP A {£100 British pounds to 1,000 British pounds}

2:Group B{£ 1,000 British to 10,000 British pounds and above}

3:Group C { £10,000 and above} Donations are to be made payable immediately via western union money transfer or Money Gram International directly to our donations account liaison officer as

Receiver`s name: MRS AUDREY RAINES
Address: UNITED KINGDOM
Test Quest: SAVE
Answer: HAITI

Send the below informations as they appear on the western union or money gram international slip:

1. NAME AND ADDRESS OF SENDER
2. EXACT AMOUNT SENT.
3. MTCN.

Note: At British Red Cross we are committed to protecting your privacy as a Standard practice. We will not share your information unless you have previously indicated that you are happy for us to do so.

Hope to receive your donations soon, as thousands needs your help.

please send return email with donation details to: redcross@chemist.com,
redcross@chemist.com

Your Sincerely,
For and on behalf of the British Red Cross Society.


SiL


Top
 Profile  
 PostPosted: Sun Jan 31, 2010 12:47 pm   
Spammers' Nightmare
User avatar

Joined: Thu Apr 05, 2007 4:10 pm
Posts: 2777
Quote:


Very stupid. I haven't seen much of these 419 Haiti earthquake spam yet. :roll:

Getting somewhat offtopic but relevant in reporting, but how is this drop email properly reported?

[email protected] belongs to mail.com (Outblaze) which was purchased by IBM last year. My understanding is the mail.com free webmail accounts are now pointing to AOL's mail servers as of late 2009. I wonder if there is a new reporting mechanism in place? I think [email protected] was the email to report these drops for Outblaze (Mail.com).


Top
 Profile  
 PostPosted: Mon Feb 01, 2010 1:05 pm   
Spammer Killing Machine
User avatar

Joined: Thu Apr 03, 2008 4:33 pm
Posts: 590
Location: Florida
I've been forwarding complete headers to [email protected], [email protected], and [email protected] until I can get proper direction.....

Everything from the old "mail.com" still seems to be "in limbo" - nobody knows who has control of what.....I'm afraid it'll be one of the next big abused mail hosts though, if they don't take control soon.

All else fails, I'll add IBM to the forwards...lol.

_________________
SpamPoison


Top
 Profile  
 PostPosted: Tue Feb 02, 2010 1:21 pm   
Spammer Exterminator
User avatar

Joined: Mon Feb 26, 2007 11:13 pm
Posts: 1132
Code:
$ dig mx chemist.com

; <<>> DiG 9.2.3rc4 <<>> mx chemist.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43285
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 6, ADDITIONAL: 2

;; QUESTION SECTION:
;chemist.com.                   IN      MX

;; ANSWER SECTION:
chemist.com.            604800  IN      MX      15 mailin-04.mx.aol.com.
chemist.com.            604800  IN      MX      15 mailin-01.mx.aol.com.
chemist.com.            604800  IN      MX      15 mailin-02.mx.aol.com.
chemist.com.            604800  IN      MX      15 mailin-03.mx.aol.com.

;; AUTHORITY SECTION:
chemist.com.            86400   IN      NS      pdns1.ultradns.net.
chemist.com.            86400   IN      NS      pdns2.ultradns.net.
chemist.com.            86400   IN      NS      pdns3.ultradns.org.
chemist.com.            86400   IN      NS      pdns4.ultradns.org.
chemist.com.            86400   IN      NS      pdns5.ultradns.info.
chemist.com.            86400   IN      NS      pdns6.ultradns.co.uk.

;; ADDITIONAL SECTION:
pdns1.ultradns.net.     172800  IN      A       204.74.108.1
pdns2.ultradns.net.     172800  IN      A       204.74.109.1

;; Query time: 188 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Feb  2 12:16:50 2010
;; MSG SIZE  rcvd: 343


The host chemist.com is resolving to 216.246.74.34 which is at scnet.net

Thus for domain chemist.com:
Mail complaints -> [email protected]
DNS complaints -> [email protected] (for ultradns.net) and [email protected] (for scnet.net) (Source for contacts - abuse.net)

_________________
Only on our site you will find a SPICE under the comprehensible prices!


Top
 Profile  
 PostPosted: Thu Feb 04, 2010 10:31 am   
Site Admin
User avatar

Joined: Tue May 09, 2006 9:18 am
Posts: 5022
Another of the same message, moments ago.

New email address: [email protected]

Reporting as we speak.

We need to shut these idiots down, and quickly.

SiL


Top
 Profile  
 PostPosted: Thu Feb 04, 2010 11:11 am   
Spammers' Nightmare
User avatar

Joined: Thu Apr 05, 2007 4:10 pm
Posts: 2777
Thanks for the updates on abuse contacts, MyCanadian Spammerdeath.
Agree with SiL. Report the fraud as much as possible.


Top
 Profile  
 PostPosted: Fri Feb 05, 2010 11:33 am   
Spammer Killing Machine
User avatar

Joined: Thu Apr 03, 2008 4:33 pm
Posts: 590
Location: Florida
spamislame wrote:
Another of the same message, moments ago.

New email address: [email protected]

Reporting as we speak.

We need to shut these idiots down, and quickly.

SiL

robtex has some good stuff on this domain:
Quote:
discuz.org is a domain controlled by two nameservers having a total of twelve IP numbers. Two nameservers have the same IP number. All of them are on the same IP network. Incoming mail for discuz.org is handled by one mailserver at pamx1.hotmail.com. discuz.org has one IP number. 1j.cn, gzvo.com, 8dou.net, jxust.com, idcdns.cn and at least 57 other hosts share nameservers with this domain. www.discuz.org and mail.discuz.org are subdomains to this hostname. discuz.org is hosted on a server in China. Reputation is not yet known.


The big one being, mail handled by hotmail.com....since their mail is handled by Hotmail, hotmail should be able to block/deny incoming mail to this server....correct?

other than that, contact information for discuz.org
[email protected] (responsible for discuz.org,dns.com.cn)
[email protected] (responsible for com.cn)

Though they could probably care less.

_________________
SpamPoison


Top
 Profile  
 PostPosted: Sun Aug 15, 2010 2:23 pm   
You are kiillllling-a my bizinisss!
User avatar

Joined: Thu Mar 01, 2007 3:01 am
Posts: 5915
I'm not sure what translation program gave this guy the term "phylantropist." I'm thinking it's a Russian who thinks he knows English well enough that he doesn't have to use one?

Quote:
Reply-To: <[email protected]>
From: "Dr.JP.Luis Fernando"<[email protected]>
Subject: Help

Dear Phylantropist,

In regards to the on going program concerning Haiti, sickle,orphanages,widows,and other less privilege in the world which was resently put to public notice on CNN NEWS and your usually assistance has really salvaged the less priviledge once in the society.

As a result of the assistance which part of the public has been financially,materially and morally donated, the mortality rate (DEATH RATE) is now under control.

Sir/Ma ,we are hereby appealling for more fund and other material support of any kind,regardless of the amount to rehabilitate the lives of all present Haiti that are affected by this deadly disease.

God in his grace and infinite mercies will reward people who contribute in anyway to save the lifes of other humans in need,we strongly believe that as you move to assist these less priviledge once. In the name of God you shall never be a victim of this deadly Earthquake Disaster including your families.(AMEN)

Kindly contact the organisations office through phone and email for your assistance.

Thanks for your anticipated reply in assistance for this project.


Dr.JP.Luis Fernando
Tel: +44-7024-035533
Fax: +44-8712-638860
(Secretary General)


Top
 Profile  
 [ 8 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Wayback machine and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style originally created by Volize © 2003 • Redesigned SkyLine by MartectX © 2008