spazlabz Posted December 7, 2006 Share Posted December 7, 2006 Here is the body of the e mail I have been receiving the last couple of day except I have redacted the full e mail addresses for obvious reasons [ SpamCop V1.603 ] This message is brief for your comfort. Please use links below for details. User-targeted report, see notes, if any. http://www.spamcop.net/w3m?i=z2053149575z3...63924d4dbb098az [ Offending message ] Return-Path: <RODRIGOCAMPOS[at]***************><this is not my e mail address Delivered-To: x Received: (qmail 20719 invoked from network); 7 Dec 2006 17:35:47 -0000 X-spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-26) on filter7 X-spam-Level: ******* X-spam-Status: hits=7.4 tests=FROM_NO_LOWER,HTML_MESSAGE,INFO_TLD, MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,URIBL_BLACK,URIBL_JP_SURBL version=3.1.4 Received: from unknown (****************) by filter7.cesmail.net with QMQP; 7 Dec 2006 17:35:47 -0000 Received: from h160n4c1o1104.bredband.skanova.com (HELO mx.spamcop.net) (81.235.10.160) by mailgate.cesmail.net with SMTP; 7 Dec 2006 17:35:47 -0000 Reply-to: "RODRIGO CAMPOS" <RODRIGOCAMPOS[at]*************> From: "RODRIGO CAMPOS" <RODRIGOCAMPOS[at]************> Date: Thu, 7 Dec 2006 18:24:39 +0100 Message-ID: <1232____________________________3320[at]************> To: "x" <x> Content-type: text/html; Charset=Windows-1251 Subject: Krystal X-SpamCop-Checked: ************** <HTML> <BODY> <br>Hey,<br>Blond Teen Interracial Hardcore Sucking<br> <A href="http://www.*****************.com/jump.php?8234715">http://newlookcart.info/pl/tso.html</A><BR><BR><BR> </BODY> </HTML> Now I know this is a stupid... probably very stupid question, but is this e mail saying that spam e mail is coming from my e mail address? Because I know two things for certain; 1) I have not sent the e mail in question to anyone 2) I don't run a mailing list. Any help in defining what this e mail means and what I can do in regards to it would be very appreciated Link to comment Share on other sites More sharing options...
Wazoo Posted December 7, 2006 Share Posted December 7, 2006 SpamCop Report Types A 'user' added 'your' address in the list of target recipients. As you don't really identify yourself, not sure "I" can come up with the logic behind that choice ..... Following the link provided in your post, and the link that that page offered up, you seem to have a strong admirer .... Reports regarding this spam have already been sent: Re: 81.235.10.160 (Administrator of network where email originates) Reportid: 2053149190 To: abuse[at]telia.com Re: ht tp://www.tee nse xmo vs.com/jump.php?8234715 (Administrator of network hosting website referenced in spam) Reportid: 2053149403 To: abuse[at]btnaccess.com Reportid: 2053149499 To: postmaster[at]btnaccess.com Re: z_User_Notification (User defined recipient) Reportid: 2053149575 To: jim[at]royal-cash.com Reportid: 2053149656 To: spam#royal-cash.com[at]devnull.spamcop.net Reportid: 2053149751 To: abuse#royal-cash.com[at]devnull.spamcop.net Reportid: 2053149829 To: affiliates[at]royal-cash.com Reportid: 2053149937 To: webmaster#royal-cash.com[at]devnull.spamcop.net Reportid: 2053150030 To: alex[at]royal-cash.com Re: 81.235.10.160 (Third party interested in email source) Reportid: 2053149301 To: spamcop[at]imaphost.com without checking myself .. are you associated with that web-site or the hosting thereof? Edit: answer appears to be "yes" whois -h whois.godaddy.com teensexmovs.com ... Registrant: S and S Royal Limited, Inc. Suit 606, 1220 N. Market st. Wilmington, Delaware 19801 United States Registered through: GoDaddy.com, Inc. (http://www.godaddy.com) Domain Name: TEENSEXMOVS.COM Created on: 28-Feb-06 Expires on: 28-Feb-08 Last Updated on: 31-May-06 Administrative Contact: Delvoye, Serge royal-cash[at]usa.com P.O. BOX 56538 Limassol, Applicable 3308 Cyprus +44.8701335116 whois -h whois.godaddy.com royal-cash.net ... Registrant: S and S Royal Limited P.O. BOX 56538 Limassol, Applicable 3308 Cyprus Registered through: GoDaddy.com, Inc. (http://www.godaddy.com) Domain Name: ROYAL-CASH.NET Created on: 26-Dec-00 Expires on: 26-Dec-07 Last Updated on: 31-May-06 Administrative Contact: Delvoye, Serge royal-cash[at]usa.com P.O. BOX 56538 Limassol, Applicable 3308 Cyprus +44.8701335116 The appearances are that if you really wanted to, you could put a stop to the spamvertising spew of the web-ste involved. Link to comment Share on other sites More sharing options...
agsteele Posted December 8, 2006 Share Posted December 8, 2006 I may be incorrect but looking at the information provided it seems as if the original reporter manually added your Email address to receive this report - presumably since he/she thought you should be aware. Andrew Link to comment Share on other sites More sharing options...
Miss Betsy Posted December 8, 2006 Share Posted December 8, 2006 Here is the body of the e mail I have been receiving the last couple of day except I have redacted the full e mail addresses for obvious reasons Now I know this is a stupid... probably very stupid question, but is this e mail saying that spam e mail is coming from my e mail address? Because I know two things for certain; 1) I have not sent the e mail in question to anyone 2) I don't run a mailing list. Any help in defining what this e mail means and what I can do in regards to it would be very appreciated Since other people have looked at the evidence and it seems that you are associated with the IP address that is sending spam, then since you don't run a mailing list and do not spam, the spam is probably being generated unbeknownst to you by a trojan. Only the *sending* end can actually stop spam. If you have trouble finding the source, ask here and those who know how to find the source will help you. Miss Betsy Link to comment Share on other sites More sharing options...
Wazoo Posted December 8, 2006 Share Posted December 8, 2006 The issue is a spamvertised web-site. The Topic Starter is in receipt of a user-added notification ... assumedly added by the reporter due to noting the 'affiliation' between the teensex web-site and the 'follow-the-money' trail to the folks at S and S Royal .... Why this isn't 'clear' to the recipient may be becuse the money isn't flowing in that direction for some reason .... Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.