January
29, 2002: Here are the details of forged SPAM e-mail being sent from various
IP addresses having nothing to do with
comicgrader.com:
ns.nextek.com.tw (HELO comicgrader.com) (211.21.236.34) by mta538.mail.yahoo.com
Since it
now appears they are enjoying themselves (note the "HELO
comicgrader.com) in the forged header, I'll stop documenting all of the
bad address SPAM they send that gets forwarded to the comicgrader.com domain.
Suffice it to say that these persons are too cowardly to send out their
SPAM using their own legitimate e-mail address. Poor poor souls...
one thing that is interesting to note is that the ip addrss is a recognized
SPAM generator as can be seen with the "X-Rocket-Spam" and "X-YahooFilteredBulk"
messages in the returned e-mail:
The original message is over 5k. Message truncated to 1K.
X-Track: 560: 2
X-Rocket-Spam: 211.21.236.34
X-YahooFilteredBulk: 211.21.236.34
Received: from ns.nextek.com.tw (HELO
comicgrader.com) (211.21.236.34)
by mta538.mail.yahoo.com with SMTP; 29 Jan 2002 04:34:08 -0800 (PST)
Reply-To: <info407555@comicgrader.com>
Message-ID: <000a55e84dab$7588d7a4$0ee44ca6@pqusbq>
From: <info407555@comicgrader.com>
To: Today
Subject: 75% off your Life Insurance. Get a FREE Quote instantly.
(3053TlFx0-124QkCu3283MgYq@24)
MiME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00D0_75D58D3A.B2487D75"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
Importance: Normal
------=_NextPart_000_00D0_75D58D3A.B2487D75
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: base64
PGJvZHkgYmdjb2xvcj0jRkZGRkZGIG1hcmdpbndpZHRoPTAgbWFyZ2luaGVp
Z2h0PTAgdG9wbWFyZ2luPTAgbGVmdG1hcmdpbj0wPg0KPGNlbnRlcj4NCjxi
cj4NCjxmb250IGZhY2U9InRpbWVzIiBzaXplPSI1IiBjb2xvcj0iI2ZmMDAw
MCI+DQo8aT5Ob3cgaXQncyBlYXNpZXIgdG8gcHJvdmlkZSBmb3IgeW91ciBM
b3ZlZCBPbmVzOjwvaT48L2ZvbnQ+DQo8cD4NCjxmb250IGZhY2U9ImltcGFj
dCwgYXJpYWwiIHNpemU9IjUiIGNvbG9yPSIjMDAwMD
*** MESSAGE TRUNCATED ***
January
28, 2002: Here are the details of forged SPAM e-mail being sent
from:
(ns.fukuroi-cci.or.jp [210.227.167.146]) by rly-yc04.mx.aol.com
It looks
like they may have hacked an aol mail relay too, I don't know for
sure. Help us all out by complainig to the ISP in control of
http://www.or.jp/
so they
can stop this dishonrable scum. Here is an example e-mail, showing the
forged headers:
Received: from comicgrader.com (ns.fukuroi-cci.or.jp
[210.227.167.146]) by rly-yc04.mx.aol.com (v82.22) with ESMTP
id MAILRELAYINYC44-0128054942; Mon, 28 Jan 2002 05:49:42 -0500
Reply-To: <info878320@comicgrader.com>
Message-ID: <007d32e20bad$4452b4c8$5ca78ee8@vvkval>
From: <info878320@comicgrader.com>
To: <abrisard@aol.com>
Cc: <abrisbin@aol.com>, <abrisbon@aol.com>,
<abrisc0@aol.com>
Subject: You've qualified for a Discount on Term Life Insurance!
(9311pHcU3-719m@13)
MiME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00D7_83B02D4A.D1608B43"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
Importance: Normal
------=_NextPart_000_00D7_83B02D4A.D1608B43
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: base64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--FAA22897.1012215006/rly-yc04.mx.aol.com--
For further information or comments:
e-mail
For comic books and related collectibles consider
www.quasarcomics.com |