To LUGNET HomepageTo LUGNET News HomepageTo LUGNET Guide Homepage
 Help on Searching
 
Post new message to lugnet.generalOpen lugnet.general in your NNTP NewsreaderTo LUGNET News Traffic PageSign In (Members)
 General / 53621
53620  |  53622
Subject: 
Spam using harvested addresses from lugnet
Newsgroups: 
lugnet.general
Date: 
Tue, 29 May 2007 14:31:03 GMT
Viewed: 
2831 times
  
Hi all.

There seems to be a bot that is using email addresses harvested from
lugnet news.

I have attached the headers here (after removing 66 other lego related
recipients).

Return-Path: <cate@laurencecrew.com>
Received: from pecan.exetel.com.au (pecan.exetel.com.au [220.233.0.17])
by tom.earlsoft.co.uk (8.11.6/8.11.6) with ESMTP id l4TCiVP07752
for <dean@earlsoft.co.uk>; Tue, 29 May 2007 13:44:32 +0100
Received: from 204.125.233.220.exetel.com.au ([220.233.125.204]
helo=gateway)
by pecan.exetel.com.au with smtp (Exim 4.63)
(envelope-from <cate@laurencecrew.com>)
id 1Ht12P-00048w-5Q; Tue, 29 May 2007 22:43:13 +1000
From: "Catherine Lyons-Crew" <cate@laurencecrew.com>
To: <dean@earlsoft.co.uk>, 66 other addresses
Subject: FWD: Taste these security update from Microsoft.
Date: Tue, 29 May 2007 22:54:23 +1000
Message-ID: <000101c7a1f0$7b15fcd0$0400a8c0@gateway>
MIME-Version: 1.0
Content-Type: application/x-msdownload;
name="q125781.exe"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="q125781.exe"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

--
Dean Earley, Dee (dean@earlsoft.co.uk)

irc:    irc://irc.blitzed.org/
web:    http://personal.earlsoft.co.uk
phone:  +44 (0)780 8369596



Message has 3 Replies:
  Re: Spam using harvested addresses from lugnet
 
(...) Hi Dean, Maybe I'm missing something in the heading information here but if you have an MOCpages account using the same address it is a more likely source (MOCpages actually uses full email addresses in links...). Is that a possibility? Tim (18 years ago, 29-May-07, to lugnet.general)
  Re: Spam using harvested addresses from lugnet
 
(...) I just noticed that you sign your posts with your name and e-mail address. My guess is that the e-mail is being harvested from there. Lugnet wouldn't be able to do anything about that, as the bot is probably reading the rendered HTML. It might (...) (18 years ago, 29-May-07, to lugnet.general)
  Re: Spam using harvested addresses from lugnet
 
One of the problems I think Lugnet has with spam is that, even if it automatically adds spamcakes to obfuscate lightly the email addresses of people, these addresses are plainly visible when one clicks the "view raw message" option (which renders (...) (18 years ago, 29-May-07, to lugnet.general)

5 Messages in This Thread:



Entire Thread on One Page:
Nested:  All | Brief | Compact | Dots
Linear:  All | Brief | Compact
    

Custom Search

©2005 LUGNET. All rights reserved. - hosted by steinbruch.info GbR