Jump to content

I have been receiving e mails from spamcop


spazlabz
 Share

Recommended Posts

Here is the body of the e mail I have been receiving the last couple of day except I have redacted the full e mail addresses for obvious reasons

[ SpamCop V1.603 ]

This message is brief for your comfort. Please use links below for details.

User-targeted report, see notes, if any.

http://www.spamcop.net/w3m?i=z2053149575z3...63924d4dbb098az

[ Offending message ]

Return-Path: <RODRIGOCAMPOS[at]***************><this is not my e mail address

Delivered-To: x

Received: (qmail 20719 invoked from network); 7 Dec 2006 17:35:47 -0000

X-spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-26) on filter7

X-spam-Level: *******

X-spam-Status: hits=7.4 tests=FROM_NO_LOWER,HTML_MESSAGE,INFO_TLD,

MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,URIBL_BLACK,URIBL_JP_SURBL

version=3.1.4

Received: from unknown (****************)

by filter7.cesmail.net with QMQP; 7 Dec 2006 17:35:47 -0000

Received: from h160n4c1o1104.bredband.skanova.com (HELO mx.spamcop.net) (81.235.10.160)

by mailgate.cesmail.net with SMTP; 7 Dec 2006 17:35:47 -0000

Reply-to: "RODRIGO CAMPOS" <RODRIGOCAMPOS[at]*************>

From: "RODRIGO CAMPOS" <RODRIGOCAMPOS[at]************>

Date: Thu, 7 Dec 2006 18:24:39 +0100

Message-ID: <1232____________________________3320[at]************>

To: "x" <x>

Content-type: text/html;

Charset=Windows-1251

Subject: Krystal

X-SpamCop-Checked: **************

<HTML>

<BODY>

<br>Hey,<br>Blond Teen Interracial Hardcore Sucking<br>

<A href="http://www.*****************.com/jump.php?8234715">http://newlookcart.info/pl/tso.html</A><BR><BR><BR>

</BODY>

</HTML>

Now I know this is a stupid... probably very stupid question, but is this e mail saying that spam e mail is coming from my e mail address? Because I know two things for certain;

1) I have not sent the e mail in question to anyone

2) I don't run a mailing list.

Any help in defining what this e mail means and what I can do in regards to it would be very appreciated

Link to comment
Share on other sites

SpamCop Report Types

A 'user' added 'your' address in the list of target recipients. As you don't really identify yourself, not sure "I" can come up with the logic behind that choice .....

Following the link provided in your post, and the link that that page offered up, you seem to have a strong admirer ....

Reports regarding this spam have already been sent:

Re: 81.235.10.160 (Administrator of network where email originates)

Reportid: 2053149190 To: abuse[at]telia.com

Re: ht tp://www.tee nse xmo vs.com/jump.php?8234715

(Administrator of network hosting website referenced in spam)

Reportid: 2053149403 To: abuse[at]btnaccess.com

Reportid: 2053149499 To: postmaster[at]btnaccess.com

Re: z_User_Notification (User defined recipient)

Reportid: 2053149575 To: jim[at]royal-cash.com

Reportid: 2053149656 To: spam#royal-cash.com[at]devnull.spamcop.net

Reportid: 2053149751 To: abuse#royal-cash.com[at]devnull.spamcop.net

Reportid: 2053149829 To: affiliates[at]royal-cash.com

Reportid: 2053149937 To: webmaster#royal-cash.com[at]devnull.spamcop.net

Reportid: 2053150030 To: alex[at]royal-cash.com

Re: 81.235.10.160 (Third party interested in email source)

Reportid: 2053149301 To: spamcop[at]imaphost.com

without checking myself .. are you associated with that web-site or the hosting thereof?

Edit: answer appears to be "yes"

whois -h whois.godaddy.com teensexmovs.com ...

Registrant:

S and S Royal Limited, Inc.

Suit 606, 1220 N. Market st.

Wilmington, Delaware 19801

United States

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)

Domain Name: TEENSEXMOVS.COM

Created on: 28-Feb-06

Expires on: 28-Feb-08

Last Updated on: 31-May-06

Administrative Contact:

Delvoye, Serge royal-cash[at]usa.com

P.O. BOX 56538

Limassol, Applicable 3308

Cyprus

+44.8701335116

whois -h whois.godaddy.com royal-cash.net ...

Registrant:

S and S Royal Limited

P.O. BOX 56538

Limassol, Applicable 3308

Cyprus

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)

Domain Name: ROYAL-CASH.NET

Created on: 26-Dec-00

Expires on: 26-Dec-07

Last Updated on: 31-May-06

Administrative Contact:

Delvoye, Serge royal-cash[at]usa.com

P.O. BOX 56538

Limassol, Applicable 3308

Cyprus

+44.8701335116

The appearances are that if you really wanted to, you could put a stop to the spamvertising spew of the web-ste involved.

Link to comment
Share on other sites

Here is the body of the e mail I have been receiving the last couple of day except I have redacted the full e mail addresses for obvious reasons

Now I know this is a stupid... probably very stupid question, but is this e mail saying that spam e mail is coming from my e mail address? Because I know two things for certain;

1) I have not sent the e mail in question to anyone

2) I don't run a mailing list.

Any help in defining what this e mail means and what I can do in regards to it would be very appreciated

Since other people have looked at the evidence and it seems that you are associated with the IP address that is sending spam, then since you don't run a mailing list and do not spam, the spam is probably being generated unbeknownst to you by a trojan.

Only the *sending* end can actually stop spam. If you have trouble finding the source, ask here and those who know how to find the source will help you.

Miss Betsy

Link to comment
Share on other sites

The issue is a spamvertised web-site. The Topic Starter is in receipt of a user-added notification ... assumedly added by the reporter due to noting the 'affiliation' between the teensex web-site and the 'follow-the-money' trail to the folks at S and S Royal .... Why this isn't 'clear' to the recipient may be becuse the money isn't flowing in that direction for some reason ....

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...