Jump to content

Spam template received


bogbrush

Recommended Posts

Seems like somebody (hosted by HopOne.net) is having trouble configuring their new automatic spamming software. I received two similar messages from their IP block, both with unfilled placeholders for variables. I especially like the placeholder for a fake IP/host in the Received header :D

Return-path: <%CUSTOM_FINANCIAL_TERMS[at]gmail.com>

Envelope-to: x

Delivery-date: Tue, 21 Feb 2006 21:26:42 +0000

Received: from [212.84.175.149] (port=52903 helo=fwd0.hosts.co.uk)

by bh2.bargainhosts.co.uk with esmtp (Exim 4.52)

id 1FBf1s-0004Qv-Ct

for x; Tue, 21 Feb 2006 21:26:40 +0000

Received: from [66.148.69.237] (helo=DM)

by fwd0.hosts.co.uk with smtp (Exim 4.52)

id 1FBf1x-0000UL-Bn

for x; Tue, 21 Feb 2006 21:26:45 +0000

Received: from %RND_HOST (8.8.8/8.8.8) id XAA69062; Tue, 21 Feb 2006 15:26:47 -0600

Message-Id: <144619070459.XAA13898%CUSTOM_FINANCIAL_TERMS[at]gmail.com>

From: "Stone Otero" <%CUSTOM_FINANCIAL_TERMS[at]gmail.com>

To: x

Subject: In Reference to Your February Account Details

X-Mailer: Opera/7.11 (Windows NT 5.0; U)

Date: Tue, 21 Feb 2006 15:26:47 -0600

X-Original-To: x

%CUSTOM_TO_ALIAS,

%CUSTOM_ACCOUNT - %CUSTOM_LINK 

Stone Otero, Account Rep. %CUSTOM_REP_NUMBER

After processing, the mail should look like this:

Return-path: <Floor_Trader_teat[at]gmail.com>

Envelope-to: x

Delivery-date: Tue, 21 Feb 2006 23:28:37 +0000

Received: from [212.84.175.149] (port=45037 helo=fwd0.hosts.co.uk)

      by bh2.bargainhosts.co.uk with esmtp (Exim 4.52)

      id 1FBgvt-0006Lu-Av

      for x; Tue, 21 Feb 2006 23:28:37 +0000

Received: from [208.65.60.102] (helo=DM)

      by fwd0.hosts.co.uk with smtp (Exim 4.52)

      id 1FBgvy-0003un-2G

      for x; Tue, 21 Feb 2006 23:28:42 +0000

Received: from gmail.com (8.8.8/8.8.8) id XAA73362; Tue, 21 Feb 2006 17:28:44 -0600

Message-Id: <1894______________________________teat[at]gmail.com>

From: "Payton Savage" <Floor_Trader_teat[at]gmail.com>

To: x

Subject: In Reference to Your February Account Summary

X-Mailer: Opera/7.11 (Windows NT 5.0; U)

Date: Tue, 21 Feb 2006 17:28:44 -0600

X-Original-To: x

Edwardo Pierce,

February Summary Account.

http://it.geocities.com/perplexed55851/

Payton Savage, Account Rep. wb114749

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...