Spam EmailMost of us
are learning to deal with spam in many ways, to start with, the
delete key works well for e-mail with any title that does not look genuine
or is clearly advertising. If this annoying e-mail is in sufficient volume
to be annoying, you can apply filters to your e-mail program so its automatically filtered
into your trash bin.
A new round of spam
commenced in 2011 with several people using a return email address at intervision
for their spam mail campaigns. Please be assured that it is not from
us. In fact unless you are an intervision client, intervisio does not
send any email. To assist us in tracking down the
culprits, we would appreciate if you can copy the email including it's
source code and send to us via our email form.
The current round of spam
is of job vacancies asking for a reply to a non existent email @cv-wug.com
is coming from various I.P. addresses. Read down to learn more :
IP Address: 85.198.151.88
return address @intervision.co.nz
ISP Cdc catv network
Region - Dnipropetrovs'ka Oblast'
City - Dnepropetrovsk
Country - Ukraine
79.206.2.40
return address @intervision.co.nz
Deutsche telekom ag
Host : p4fce0228.dip0.t-ipconnect.de
Rheinland-Pfalz
City: Trier
Country : Germany
IP 78.31.176.79
return address @tessutimax.com.au
Host ip176-79.telenet.dn.ua
Country Code UA
Country Name Ukraine
Region Code 05
Region Name Donets'ka Oblast'
City Donetsk
@acda.com.au -
return address @qmbs.co.nz
IP 46.130.71.32
Host 32.71.130.46.in-addr.mts.am
Country Code AM
Country Name Armenia
return address @mq.com.au
- @qmbs.co.nz
IP 77.34.80.61
Host n/a
ISP Open joint stock company far east telecommunications company
Domain sakhalin.ru
Country Code RU
Country Name Russian Federation
Region Name Primor'ye
City Nahodka
IP 84.228.87.138 -
return address @qmbs.co.nz
Host IGLD-84-228-87-138.inter.net.il
ISP Smile internet gold
Domain inter.net.il
Country Code IL
Country Name Israel
Region Code 05
Region Name Tel Aviv
City Ramat Gan
Here is a typical email
complete with header:
X-Persona: <Vision>
Return-Path: <info@aussie2aussie.com>
X-Original-To: vision@intervision.co.nz
Delivered-To: vision@intervision.co.nz
Received: from localhost (localhost.localdomain [127.0.0.1])
by landry.iserve.net.nz (Postfix) with ESMTP id 735F0810A;
Mon, 31 Jan 2011 08:17:45 +1300 (NZDT)
X-Virus-Scanned: amavisd-new at iserve.net.nz
Received: from landry.iserve.net.nz ([127.0.0.1])
by localhost (landry.iserve.net.nz [127.0.0.1]) (amavisd-new, port
10024)
with LMTP id PLMBA2YmJs+o; Mon, 31 Jan 2011 08:17:45 +1300 (NZDT)
Received: from 72-56-113-92.pool.ukrtel.net
(72-56-113-92.pool.ukrtel.net [92.113.56.72])
by landry.iserve.net.nz (Postfix) with ESMTP id CDC30815E;
Mon, 31 Jan 2011 08:17:43 +1300 (NZDT)
From: <vision@intervision.co.nz>,
<visiond@intervision.co.nz>
To: <vision@intervision.co.nz>,
<visiond@intervision.co.nz>
Subject: Position opening in your area
Mime-Version: 1.0
Content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-Id: <20110130191743.CDC30815E@landry.iserve.net.nz>
Date: Mon, 31 Jan 2011 08:17:43 +1300 (NZDT)
Hello.
We would like to introduce you our company.
Our company is a large international holding complex that provides
supporting services for businesses
of the clients with main office in Berlin (Germany).
We deal with:
- tax planning consulting;
- registration of companies and;
- additional supporting services for foreign based companies.
Now there are some vacancies in our company. If you are willing to
have
some extra money and interested in part-time job then this offer is
for you.
We need some personal information about you:
* your first name,
* your last name,
* country you live in,
* the date of your birth,
* your email address,
* you primary phone number,
* extra phone number,
* convenient time for a call.
Tell us about your other work experience.
Also we would like to know if you have got a criminal record?
If you have interest to work with us, please send me your information
to Darrin@cv-wug.com
We would be glad to cooperate with you further and will be looking
forward to your reply.
Sincerely.
Now if you go to
http://ip2geolocation.com and
type in the ip address in the received from line in bold:
IP 92.113.56.72
Host 72-56-113-92.pool.ukrtel.net
ISP Ukrtelecom
Domain ukrtel.net
Country Code UA
Country Name Ukraine
All these emails are
somehow routed through different servers and finding the culprits is
close to impossible and its best practice to add this type of spam to
your email filter..
|