Discuss April 2005

discuss@lists.surbl.org

48 participants
112 discussions

Abused Open ZDNet Redirector
by Spam Control 14 Apr '05

14 Apr '05

Hello Yahoo!, Several of our users receive your Yahoo! Alerts. This is a valuable service for our users. Included in your Yahoo! Alerts are links which frequently use a redirector at zdnet.com, such as: http://chkpt.zdnet.com/chkpt/siliconfeed/http://networks.silicon.com/teleco… Unfortunately, this is an "open" redirector, readily available for abuse, and readily, frequently, and repeatedly abused by spammers. zdnet.com has so far chosen to NOT close this redirector. Instead of limiting … [View More]

1 0

RE: [SURBL-Discuss] Capital One redirector
by List Mail User 14 Apr '05

14 Apr '05

Worthless form letter - obviously no human ever read it. Also, I was initially wrong, postmaster(a)capitolone.com *does* bounce. The chances of my ever accepting a CapitolOne credit card offer have just gone to zero. Paul Shupak track(a)plectere.com -------------------------------------------------------------------------------- >From maverick(a)capitalone.com Wed Apr 13 19:35:10 2005 >X-Server-Uuid: 80E87EA0-9936-41C1-8001-884D959F42CB >Date: Wed, 13 Apr 2005 14:23:27 -0400 >… [View More]To: "List Mail User" <track(a)Plectere.com> >Subject: RE: [SURBL-Discuss] Capital One redirector >From: Maverick <maverick(a)capitalone.com> >MIME-Version: 1.0 >X-Mailer: Kana 6.0 >X-WSS-ID: 6E43BC13148132-24-01 >Content-Type: text/plain; > charset=us-ascii >Content-Transfer-Encoding: 8bit >X-MIME-Autoconverted: from quoted-printable to 8bit by Plectere.com id j3E2ZABh013550 > >Thank you for notifying us of this suspicious email. Please note that the >email was not originated by Capital One and you should not respond to it. >While this email has not compromised Capital One's systems in any way, we >take these incidents seriously and work with law enforcement agencies to >investigate them. > >In the future, you should respond to emails only sent from valid/secured >websites. Make sure you are responding to an email from Capital One by >typing in the url (or website address) and not clicking on a link. We >would encourage you to contact the company [or Capital One] if you receive >a questionable email to verify that it was sent from the company. To >verify that emails are sent from Capital One or not, please forward them to >Capital One at abuse(a)capitalone.com. Customer Relations representatives >will respond in writing. > >We do appreciate your concerns and if you have additional questions, please >do not hesitate to contact us. > >Sincerely, > >Capital One Services(R) > >Visit us online at http://www.capitalone.com, where you can access valuable >products and services. > > > >Original Message Follows: >------------------------- > >>... >>>-----Original Message----- >>>From: Craig Baird [mailto:craig@xpressweb.com] >>>Sent: Wednesday, April 13, 2005 11:58 AM >>>To: discuss(a)lists.surbl.org >>>Subject: [SURBL-Discuss] Capital One redirector >>> >>> >>>Wow! Look at this open Capital One redirector in a phishing >>>spam. Talk about >>>a phisher's dream come true! >> >>HOLY Shiznat!! You have got to be kidding me! WOW! >> >>What the hell are they thinking? >> >>--Chris > > Chris, > > Where's that list of redirectors? > > How do these large companies find such stupid people to do this >for them? Wouldn't you think any programmer would tell his boss why >these shouldn't exist? Or is there some book with an example every idiot >is copying from? > > Paul Shupak > track(a)plectere.com > >P.S. There seem to be no limits on where this one will take you, porn, >pills, >and penis gadgets, etc.. > > >http://www.capitalone.com/redirect.html?linkid=I_sell_drugs_any_kiddie_porn >&dest=http://www.google.com > > > [View Less]

1 0

Re: [SURBL-Discuss] Capital One redirector
by List Mail User 14 Apr '05

14 Apr '05

>... > >On Wednesday, April 13, 2005, 8:57:49 AM, Craig Baird wrote: >> Wow! Look at this open Capital One redirector in a phishing spam. Talk about >> a phisher's dream come true! > >More importantly is anyone contacting Capital One? If not, >then please do. > >Jeff C. >-- >"If it appears in hams, then don't list it." > Jeff, On one of the first messages I "Cc" about four addresses at Capitol One; And Chris S. replied, leaving the "Cc"'s … [View More]

1 0

Capital One redirector
by Craig Baird 14 Apr '05

14 Apr '05

Wow! Look at this open Capital One redirector in a phishing spam. Talk about a phisher's dream come true! Capital One is committed to maintaining a safe environment for its community of buyers and sellers. To protect the security of your account, Capital One Bank employs some of the most advanced security systems in the world and our anti-fraud teams regularly screen the Capital One Bank system for unusual activity. We recently have determined that different computers have logged … [View More]

4 3

RE: [SURBL-Discuss] Capital One redirector
by Matthew.van.Eerde＠hbinc.com 13 Apr '05

13 Apr '05

Craig Baird wrote: > Wow! Look at this open Capital One redirector in a phishing spam. > Talk about a phisher's dream come true! > http://www.capitalone.com/redirect.html?linkid=SECURITY+VALIDATION&dest=htt… EBay had one of these recently... actually it took you to a login page, and redirected you once you logged in. Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer perl -e"map{y/a-z/l-za-k/;… [View More]

1 0

RE: [SURBL-Discuss] Capital One redirector
by Chris Santerre 13 Apr '05

13 Apr '05

>-----Original Message----- >From: List Mail User [mailto:track@plectere.com] >Sent: Wednesday, April 13, 2005 1:49 PM >To: discuss(a)lists.surbl.org >Cc: legal(a)capitalone.com; postmaster(a)capitalone.com; >abuse(a)capitalone.com; hostmaster(a)capitalone.com >Subject: RE: [SURBL-Discuss] Capital One redirector > > >>... >>>-----Original Message----- >>>From: Craig Baird [mailto:craig@xpressweb.com] >>>Sent: Wednesday, April 13, 2005 … [View More]

1 0

RE: [SURBL-Discuss] Capital One redirector
by List Mail User 13 Apr '05

13 Apr '05

>... >>-----Original Message----- >>From: Craig Baird [mailto:craig@xpressweb.com] >>Sent: Wednesday, April 13, 2005 11:58 AM >>To: discuss(a)lists.surbl.org >>Subject: [SURBL-Discuss] Capital One redirector >> >> >>Wow! Look at this open Capital One redirector in a phishing >>spam. Talk about >>a phisher's dream come true! > >HOLY Shiznat!! You have got to be kidding me! WOW! > >What the hell are they thinking? > … [View More]

1 0

RE: [SURBL-Discuss] Capital One redirector
by Chris Santerre 13 Apr '05

13 Apr '05

>-----Original Message----- >From: Craig Baird [mailto:craig@xpressweb.com] >Sent: Wednesday, April 13, 2005 11:58 AM >To: discuss(a)lists.surbl.org >Subject: [SURBL-Discuss] Capital One redirector > > >Wow! Look at this open Capital One redirector in a phishing >spam. Talk about >a phisher's dream come true! HOLY Shiznat!! You have got to be kidding me! WOW! What the hell are they thinking? --Chris

2 1

Re: [SURBL-Discuss] avsMUNGED-gold.com
by List Mail User 12 Apr '05

12 Apr '05

Jeff, Look again, dtag. de is listed at rfci for whois, postmaster, and abuse! Paul Shupak track(a)plectere.com

1 0

Re: [SURBL-Discuss] avsMUNGED-gold.com
by List Mail User 12 Apr '05

12 Apr '05

>... > >I received a spam from avsMUNGED-gold.com. They are a porn site and all signs >lead to blocking them except how long their domain has been around and the >lack of information showing up in the tools I didn't block them. >Comments? > >Lindsay >_______________________________________________ >... > % jwhois avs-gold.com [Querying whois.internic. net] [Redirected to whois.registrar.telekom. de] [Querying whois.registrar.telekom. de] [whois.registrar.… [View More]telekom. de] [whois.registrar.telekom. de] % Copyright (c)2003 by Deutsche Telekom AG % % Restricted rights. % % % Except for agreed Internet operational purposes, no part of this % information may be reproduced, stored in a retrieval system, or % transmitted, in any form or by any means, electronic, mechanical, % recording, or otherwise, without prior permission of the Deutsche Telekom AG % on behalf of itself and/or the copyright holders. Any use of this % material to target advertising or similar activities are explicitly % forbidden and will be prosecuted. The Deutsche Telekom AG requests % to be notified of any such activities or suspicions thereof. domain: avs-gold.com registrant-hdl: RDT-H70 admin-c: RDT-AM174 tech-c: RDT-UH124 zone-c: RDT-HM3 nserver: pns.dtag. de nserver: secondary000.dtag. net. status: connected changed: 2004-01-14 source: DEUTSCHE TELEKOM AG % jwhois -h whois.registrar.telekom. de ha RDT-AM174 [Querying whois.registrar.telekom. de] [whois.registrar.telekom. de] [whois.registrar.telekom. de] % Copyright (c)2003 by Deutsche Telekom AG % % Restricted rights. % % % Except for agreed Internet operational purposes, no part of this % information may be reproduced, stored in a retrieval system, or % transmitted, in any form or by any means, electronic, mechanical, % recording, or otherwise, without prior permission of the Deutsche Telekom AG % on behalf of itself and/or the copyright holders. Any use of this % material to target advertising or similar activities are explicitly % forbidden and will be prosecuted. The Deutsche Telekom AG requests % to be notified of any such activities or suspicions thereof. nic-hdl: RDT-AM174 type: person firstname: Achim lastname: Maier address: Rosengarten 14 pcode: D-80805 city: Muenchen country: DE e-mail: A-Maier22@gmx. de phone: +49 899945687 fax-no: changed: 2002-08-05 source: DEUTSCHE TELEKOM AG The adminitrative contact appears to have an invalid telephone number; Too few digits for the prefix code of +49:89. If rfci accepts it (the person who actually checks is likely to be German), then I'll wdprs it. Paul Shupak track(a)plectere.com P.S. Note, the name servers are listed at rfci already (trivial, but real). [View Less]

1 0

← Newer
1
...
5
6
7
8
9
10
11
12
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss April 2005