[guispeak] Re: dangerous spam warning...

  • From: "david poehlman" <david.poehlman@xxxxxxxxxxxxxxxxxxxxxxxx>
  • To: <guispeak@xxxxxxxxxxxxx>
  • Date: Fri, 26 Nov 2004 07:23:51 -0500

Le,

The message you recieved is typical because the ip address might be dynamic 
and use a forwarding service.  There are all kinds of things that are done 
with ip addresses that might cause you to get an error like that.  I'd love 
to examine a message like that and will do so next time I get one because 
there is probably wa way to get at the info.  The thing to remember though 
is that by opening the message, it is possible that your address was logged 
as being a real email address because html messages can send that sort of 
info.

Johnnie Apple Seed

----- Original Message ----- 
From: "Laura Eaves" <leaves1@xxxxxxxxxxxxxxx>
To: <guispeak@xxxxxxxxxxxxx>
Sent: Thursday, November 25, 2004 10:30 PM
Subject: [guispeak] Re: dangerous spam warning...


Hi Dave -- Yes that is why I didn't just click on the link -- I didn't want
them to get the idea that my address was live.  I went to the raw ip address
just to see if I could get an idea if the alleged business was for real,
which I didn't think it was -- but the fact that it gave me a 403 error and
didn't identify itself as being of a particular company, but rather told me
to go search the web for the name of the company I was looking for, really
tells me they are just a scam collecting bank info.
If they were indeed an internet banking solution, like paypal, they would
print their name on the top of the page -- or redirect me to their home
page.
So I was just poking around.
It is interesting to see how these people operate.
Kind of depressing.  What is sadder is that some people get hooked -- not
many as few people would be willing to type in their bank info to an unknown
company -- but unfortunately a few people do.
I am going to forward this one to the abuse site to see if they can sniff
these people out and shut them down.
Take care and have a great weekend!
--le


----- Original Message ----- 
From: "david poehlman" <david.poehlman@xxxxxxxxxxxxxxxxxxxxxxxx>
To: <guispeak@xxxxxxxxxxxxx>
Sent: Thursday, November 25, 2004 6:41 PM
Subject: [guispeak] Re: dangerous spam warning...


> Le,
>
> This is not a problem.  Oneing the message does no harm but may send a
> message that you have a valid address.  Clicking the link will most likely
> result in a form to fill in and as long as you don't fill in the form, you
> are in no danger.
>
> Johnnie Apple Seed
>
> ----- Original Message ----- 
> From: "Laura Eaves" <leaves1@xxxxxxxxxxxxxxx>
> To: <BLIND-L@xxxxxxxxxxxxxxxxx>; "w45"
> <blindwomen-over45-chat@xxxxxxxxxxxxxxx>; "guispeak"
> <guispeak@xxxxxxxxxxxxx>; "Multiple recipients of NFBnet GUI-TALK Mailing
> List" <gui-talk@xxxxxxxxxx>
> Sent: Thursday, November 25, 2004 2:49 PM
> Subject: [guispeak] dangerous spam warning...
>
>
> Hi all --
> I just got a spam in the mail in html format and did some investigation
> and
> found the following:
>
> First, the mail claimed to be from a firm called "internet banking trust"
> from the support department, and asked me to "sign on" and enter my bank
> account numbers so I could do internet bill pay etc.
> Now obviously very few people would do this, but I decided to save the
> message and look at the html source to see if I could learn something.
> Now I put the source in Notepad and searched for "sign on" and found the
> following...
>
> The hyperlink for the sign-on was a raw IP address 200.205.216.74 which I
> copied and went into internet explorer and tried going to that address to
> see what I'd find, with no info as to who I was or the return email path.
>
> But when I got to the link I got a 403 error page with the following
> message:
> -------
> HTTP 403 (Forbidden)
>
> You are not authorized to view this page
>
> You might not have permission to view this directory or page using the
> credentials you supplied.
>
> If you believe you should be able to view this directory or page, please
> try
> to contact the Web site by using any e-mail address or phone number that
> may
> be listed on the
> 200.205.216.74
> home page.
>
> You can click
> search.gif (114 bytes) Search
> to look for information on the Internet.
>
> HTTP Error 403 - Forbidden
> Internet Explorer
> -------
>
> So the link can't be activated without being in the context of the email.
> So if you do receive a suspicious email with a link on it, do not click
> it!
> Who knows what info is sent to the address about you if you click the
> link...
>
> Anyway, happy surfing and have a truely happy and enjoyable Thanksgiving!
> --le
>
> ** To leave the list, click on the immediately-following link:-
> ** [mailto:guispeak-request@xxxxxxxxxxxxx?subject=unsubscribe]
> ** If this link doesn't work then send a message to:
> ** guispeak-request@xxxxxxxxxxxxx
> ** and in the Subject line type
> ** unsubscribe
> ** For other list commands such as vacation mode, click on the
> ** immediately-following link:-
> ** [mailto:guispeak-request@xxxxxxxxxxxxx?subject=faq]
> ** or send a message, to
> ** guispeak-request@xxxxxxxxxxxxx with the Subject:- faq
>
> ** To leave the list, click on the immediately-following link:-
> ** [mailto:guispeak-request@xxxxxxxxxxxxx?subject=unsubscribe]
> ** If this link doesn't work then send a message to:
> ** guispeak-request@xxxxxxxxxxxxx
> ** and in the Subject line type
> ** unsubscribe
> ** For other list commands such as vacation mode, click on the
> ** immediately-following link:-
> ** [mailto:guispeak-request@xxxxxxxxxxxxx?subject=faq]
> ** or send a message, to
> ** guispeak-request@xxxxxxxxxxxxx with the Subject:- faq

** To leave the list, click on the immediately-following link:-
** [mailto:guispeak-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** guispeak-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:guispeak-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** guispeak-request@xxxxxxxxxxxxx with the Subject:- faq

** To leave the list, click on the immediately-following link:-
** [mailto:guispeak-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** guispeak-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:guispeak-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** guispeak-request@xxxxxxxxxxxxx with the Subject:- faq

Other related posts: