[ale] Mystery Spam

Jeff Hubbs hbbs at comcast.net
Wed Nov 19 07:51:33 EST 2003


I got some spam today (forwarded) that I viewed the source of out of
curiosity and I got a surprise.

The message text that I saw in Evolution read like this:

These are what they look like today 
they are still down
best to you 
Tara Stevens
Information 

"Information" was a link which pointed to
http://www.shengwuqiji.net/app/ (obtained by right-clicking on it,
slecting "Copy Link Location", and pasting it to Kate so I could see it.

What I thought was weird was that upon viewing the source, what I saw
was this:

Received: from t R @
        (p1107-ipad45osakakita.osaka.ocn.ne.jp[220.106.213.107](untrusted sender))
        by sccrmxc12.comcast.net (sccrmxc12) with SMTP id
        <20031119073348s1200eu6rqe>; Wed, 19 Nov 2003 07:33:49 +0000
X-Originating-IP: [220.106.213.107]
From: "chester" <iwontbytdrfc at aol.com>
To: "hbbs at attbi.com" <hbbs at attbi.com>
Subject: Purchase it now
Date: Wed, 19 Nov 2003 16:39:42 +0900
X-Priority: 3 (normal)
Importance: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2616
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: base64
X-Evolution-Source: pop://hbbs@mail.comcast.net
Message-Id: <1069227281.2742.1133.camel at localhost>
X-Evolution: 00000da6-0010

PGh0bWw+DQpUaGVzZSBhcmUgd2hhdCB0aGV5IGxvb2sgbGlrZSB0b2RheSA8YnI+DQp0aGV5IGFy
ZSBzdGlsbCBkb3duPGJyPg0KYmVzdCB0byB5b3UgPGJyPg0KVGFyYSBTdGV2ZW5zPGJyPg0KPGEg
aHJlZj0iaHR0cDovL3d3dy5zaGVuZ3d1cWlqaS5uZXQvYXBwLyI+IEluZm9ybWF0aW9uIDwvYT48
YnI+DQo8L2h0bWw+DQo=

How is "These are what they look like today..." and the link getting
made out of the hash there, or, is Evolution not showing me the whole
thing?

- Jeff


-------------- next part --------------
An embedded message was scrubbed...
From: "chester" <iwontbytdrfc at aol.com>
Subject: Purchase it now
Date: Wed, 19 Nov 2003 16:39:42 +0900
Size: 836




More information about the Ale mailing list