« previous next »
Pages: [1]   Go Down

Author Topic: This is a different kind of spam email  (Read 2100 times)

Offline Frances144

  • TS Addict
  • *****
  • Posts: 5916
    • View Profile
    • http://www.myshetland.co.uk
This is a different kind of spam email
« on: March 28, 2008, 05:10:03 PM »
I got sent a blank email - from nobody to me with no subject.  So, basically, someone sent me a blank piece of paper!

Why?  What is the point?

I looked at the Raw Source and found this:

Envelope-to: frances@mycorrectemailaddress.co.uk
Received: from 0908ds1-rdo.0.fullrate.dk ([90.184.100.100])
   by mx13.global.net.uk with smtp (Exim 4.42)
   id 1JfMPu-0001xd-HA
   for frances@mycorrectemailaddress.co.uk; Fri, 28 Mar 2008 21:47:19 +0000
Received: from refract.smapxsmap.net (unknown [12.188.170.16])
        by ebaystatic.com with SMTP id N[10
X-SPF-Warn: hsbc.com Sender, but not from approved relay.
X-BV-Spam-Score: 15.1 (+++++++++++++++)
X-BV-Spam-Flag: YES
X-BV-Spam-Report: .
   0.0 MISSING_MID            Missing Message-Id: header
   2.1 UNCLOSED_BRACKET       Headers contain an unclosed bracket
   1.6 MISSING_DATE           Missing Date: header
   3.0 BVSPF1                 mail from sender where sender domain has SPF records did not
   pass
   2.1 RCVD_BAD_ID            RCVD_BAD_ID
   1.6 MISSING_HEADERS        Missing To: header
   2.9 TVD_SPACE_RATIO        BODY: TVD_SPACE_RATIO
   1.3 MISSING_SUBJECT        Missing Subject: header
   0.6 EMPTY_MESSAGE          Message appears to have no textual parts and no
   Subject: text
X-Envelope-From: c_support.id10989206304007bib@hsbc.com

Can anyone shed any light on this?

Thanks
Frances
Logged

Offline Paddy

  • Administrator
  • TS Addict
  • *****
  • Posts: 13797
    • View Profile
    • https://www.paddyduncan.com
This is a different kind of spam email
« Reply #1 on: March 28, 2008, 08:07:44 PM »
Well, if there was nothing at all in the body of the email then who knows? (is this actually everything you see when you look at the raw source?) Spammers testing something? Spammers hitting send before they meant to?

It bounced around a bit - appears to have come from an eBay domain (that domain is owned by ebay) and the IP is in the US. The other URL, fullrate.dk is a Danish ISP. The IP also resolves to Denmark. I don't read Danish - can't tell you anything more about them! wink.gif
Logged
"If computers get too powerful, we can organize them into committees. That'll do them in." ~Author unknown •iMac 5K, 27" 3.6Ghz i9 (2019) • 16" M1 MBP(2021) • 9.7" iPad Pro • iPhone 13

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
This is a different kind of spam email
« Reply #2 on: March 29, 2008, 05:09:46 PM »
Did you look at the message before you downloaded it?
Logged
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes:

Offline Frances144

  • TS Addict
  • *****
  • Posts: 5916
    • View Profile
    • http://www.myshetland.co.uk
This is a different kind of spam email
« Reply #3 on: March 30, 2008, 12:54:13 PM »
Not sure. I think so.  It was just a blank page.

That is why I looked at the View Source.

Ah well.

Fx
Logged

Offline Gregg

  • TS Addict
  • *****
  • Posts: 11748
    • View Profile
    • http://
This is a different kind of spam email
« Reply #4 on: March 30, 2008, 07:35:30 PM »
Simple, it was a senior moment.

Somebody hit "Send" before typing the
Logged
Ya gotta applaud those bunnies for sacrificing their hearing just so some guy in Cupertino can have better TV reception.

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
This is a different kind of spam email
« Reply #5 on: March 31, 2008, 05:22:16 PM »
QUOTE
Not sure. I think so. It was just a blank page.

That is why I looked at the View Source.
What that tells me is that you did download it. And probably viewed it in Mail (but that doesn't really matter).

The point is, with an unknown message, you should either view it via a web-based function or use a non-image loading/requesting reader such as "POPmonitor" to see what's actually in it. There could have been a simple html call for an invisible, 1 x 1 pixel image. Naturally, nothing would show up in an email app. Since you didn't report what was after the header, we can't tell if that was the case or not. If it was, your email program automatically sent a request to the sender server and rconfirmed you as a "live" recipient from whatever list they may have bought.

That's the main reason for not allowing html to be displayed/used/downloaded in an email program. Second only to the usually useless advertizements that are being fed to you... wallbash.gif

My philosophy: Email is made for communications. Images can sometimes help but usually don't. Images belong on websites, not email. YMMV. smile.gif And, as as been described above, images can really add to your SPAM count! sad.gif
Logged
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes:

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
This is a different kind of spam email
« Reply #6 on: April 01, 2008, 04:40:38 PM »
How about this one...
QUOTE
$B!|6bLY$1$NC#?M(B

$B!D!D!D!D!D(B
$B!z#10L(B
$B!D!D!D!D!D(B
$B!c#I#Q%W%i%9!]3t<0Ej;q!d(B
$B@dBP$N>!$F$k!*3t<01?MQ!#4JC1%N%&%O%&$,$3$3$K$"$k!#(B
$B!D!D!D!D!D(B
$B!&#20L(B
$B!D!D!D!D!D(B
$B!c#I#Q%W%i%9!]%M%C%H%S%8%M%9!d(B
$B?2$F$$$F$b$*6b$,F~$k!*%M%C%H%S%8%M%9$G2/K|D9<T!#(B
$B!D!D!D!D!D(B
$B!&#30L(B
$B!D!D!D!D!D(B
$B!c7|>^%k%Q%s!d(B
$B7|>^$N2&MM9_NW"v%?%@!#7|>^$GLY$1$k!#;q6b#0!A(B

$B(.(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,
,(B
$B(.!y(/:#2s$O6bLY$1$NC#?M%i%s%-%s%0$NCf$+$i!V7|>^%k%Q%s!W$5$s$N$4>R2p!#(B
$B(-$4(-G/4V!"2?==K|$b$N@.2L$r5s$2$F$k?M$,$$$k$H8@$o$l$k!V7|>^!W!#(B
$B(->R(-$3$N%5%$%H$5$s$NNI$5$O2?$H8@$C$F$b<j7Z$5!#(B
$B(-2p(-0lEY!"%A%'%C%/$7$F$_$F2<$5$$!#7JIJ$NNI$5$O%T%+%$%A!*(B
$B(1!y(0%/%*%+!<%I$+$i(BHV$B%F%l%S$^$G"*(B http://ooana.org
$B(1(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(B
R$B(,(B

$B!|H~$NC#?M(B
$B!D!D!D!D!D(B
$B!z#10L(B
$B!D!D!D!D!D(B
 $B!c#Q%W%i%9!]%@%$%(%C%H!d(B
$B5f6K$N%@%$%(%C%HJ}K!"v$N%N%&%O%&$r<j$KF~$l$h$&!*(B
$B!D!D!D!D!D(B
$B!&#20L(B
$B!D!D!D!D!D(B
$B!c%(%k%;!<%L!d(B
$B3d0z7t!ZAm3[(B10$BK|1_J,![1~Jg<TA40w$K%W%l%<%s%H!*(B
$B!D!D!D!D!D(B
$B!&#30L(B
$B!D!D!D!D!D(B
$B!c#I#Q%W%i%9!]H~MF!d(B
$B$3$l$rFI$`$HC/$b$,H~$7$/"v<+J,$K<+?.$,;}$F$k$h$&$K!#(B

$B!|N"5;$NC#?M(B
$B!D!D!D!D!D(B
$B!z#10L(B
$B!D!D!D!D!D(B
$B!c#I#Q%W%i%9!d(B
$B$_$s$J$NG>$r;I7c$9$k"vN"5;EE;R=q@R$N7hDjHG!*(B
$B!D!D!D!D!D(B
$B!&#20L(B
$B!D!D!D!D!D(B
$B!c#I#Q%W%i%9!]N"5;!d(B
$B@83h$NCf$N$"$i$f$kN"5;!#<Z6bC&=P!*%W%A>.8/$$"v(B
$B!D!D!D!D!D(B
$B!&#30L(B
$B!D!D!D!D!D(B
$B!c#I#Q%W%i%9!]%=%U%H!d(B
$B$3$s$J%=%U%H$r;}$C$F$$$k$H$"$i$f$kLdBj$r2r7h=PMh$k!*(B

$B(.(,(B http://ooana.org $B(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(B
$B(-(B $B!z!y(B $B>\$7$$%i%s%-%s%0$O!c(B http://ooana.org $B!d(B $B$+$i%A%'%C%/!*!*!y!z(B
$B(-!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D!D(B
$B(-Nx0&!?%.%c%s%V%k!?7]G=!?H~MF!!I}9-$/LVMe$7$?!":G?7%i%s%-%s%0%5%$%H!*(B
$B(1(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(B http://ooana.org $B(,(,(B
I was 'hooked' after the "$B!c#I#Q%W%i%9!]3t<0Ej;q!d(B" tongue.gif Actually, there were a lot of non-printing characters in each line of 'text' (line feeds and carriage returns). Might even be some Asian language. dntknw.gif SPAMsieve grabbed as soon as it came through, of course. clap.gif
Logged
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes:

Offline tacit

  • TS Addict
  • *****
  • Posts: 1628
    • View Profile
    • http://www.xeromag.com/
This is a different kind of spam email
« Reply #7 on: April 02, 2008, 01:39:21 PM »
I get emails like this all the time.

Usually, the cause is very simple. A spammer is using spam software but did not configure it correctly, so it did not send the message body.

I've seen spam messages that say things like

From: $From_Address_Goes_Here

which indicate that the spammer didn't correctly set up his database of fake From: names when he hit send. Or I'll see messages with no body, or messages with no subject line... It's just a mistake on the part of the spammer, that's all.
Logged
A whole lot about me: www.xeromag.com/franklin.html
Pages: [1]   Go Up
« previous next »