Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

Genuine University Degree in notime (sic!)

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam
View previous topic :: View next topic  
Author Message
olliver
Expert Developer


Joined: 27 Jan 2006
Last Visit: 02 Dec 2010
Posts: 1157
Location: yes

PostPosted: Wed May 23, 2007 10:01 am    Post subject: Genuine University Degree in notime (sic!) Reply with quote

Another proof that spammers aren't the brightest bulbs in our universe: A campaign for an University Degree isn't very convincing with a catastrophic grammar, punctuation and spelling. This way it's too obvious that there's something wrong, even for a technically challenged computer user (hopefully!).

At first the body:
Quote:
Hi <spamtrap>!
A Genuine University Degree in notime!

Have you ever thought that the only thing stopping you form a great job and better pay was a few letters behind you name?
Well now you can get them!

Want the degree but canít find the time? WHAT A GREAT IDEA! We provide a concept that will allow anyone with sufficient work experience to obtain afully veriifable University Degree.Bachelors, Masters or even a Doctorate.Think of it, within four to six weeks, you too could be a college graduate.Many people share the same frustration, they are all doing the work fo the person that hasthe degree and the person that has the degree is getting all the money.Donít you think that it is time you were paid fair compensation for the level of work youare already doing?

This is your chance to finalyl make the right move and receive your due benefits.If you are like most people, you are more than qualified with your experience, but arelacking that prestigious piece of paper known as a diploma that is often the passport tosuccess.
100% Verifiable!

These are real, genuine degrees that include Bahcelors, Masters, MBA and Doctorate Degrees. They are fully verifiable and certified transcripts are also available.

Just call the number below.
You?ll thank m elater?

Call Whenever +1 (270) 818-7244
Operators Online Now
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*









over, bemused about whether an arrow had hit a lung and how long itthese sons of his die for pride and treachery, shot full of Parthiantribune, but at that moment he would have followed him as his own


Headers:
Quote:
Return-Path: <151brose @ luminaa.de>
X-Flags: 1001
Delivered-To: <spamtrap>
Received: (qmail invoked by alias); 21 May 2007 11:19:14 -0000
Received: from 212-73-45-196.red-acceso.airtel.net (EHLO ACER-3504C741D7.3xzu3.com) [212.73.45.196]
by mx0.gmx.net (mx091) with SMTP; 21 May 2007 13:19:14 +0200
Message-ID: <35794366090746.7E8B05AEC6@CZS0XA9>
From: "(270) 818-7244 Leopoldo " <875tiler @ jgilges.de>
To: <spamtrap>
Subject: Fw: Re: You Need a Better Degree,{} and we can Hlep!
Date: Mon, 21 May 2007 13:23:28 +0200
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: j9HPcFp0ggDlO3chA3Y3UnfvadZEKdvh3ypT
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 8bit


From and return address are probably forgeries and it seems that this was sent via a b0tted Windows machine, as the whois suggests:

Quote:
inetnum: 212.73.45.0 - 212.73.45.255
netname: VODAFONE_SPAIN_NETWORK
descr: GLOBAL MOBILE OPERATOR
country: ES
admin-c: AIRT1-RIPE
tech-c: OPG2-RIPE
status: ASSIGNED PA
mnt-by: AIRTELNET-MNT
source: RIPE
changed: *************@vodafone.com 20070117

role: AIRTELNET ROLE
address: Vodafone Spain
address: Isabel Colbrand 22
address: 28050
address: Madrid
address: Spain
phone: +34 610514249
phone: +34 610513345
abuse-mailbox: *****@corp.vodafone.es
e-mail: **************@vodafone.com
e-mail: ************@vodafone.com
e-mail: **********@vodafone.com
admin-c: ACM8-RIPE
tech-c: ACM8-RIPE
tech-c: JMP75-RIPE
nic-hdl: AIRT1-RIPE
notify: **************@vodafone.com
notify: ************@vodafone.com
notify: **********@vodafone.com
mnt-by: AIRTELNET-MNT
changed: ********@airtel.es 20010312
changed: **************@vodafone.com 20050530
source: RIPE

person: Oscar Pantoja Garcia
address: Vodafone
address: Parque Empresarial Castellana Norte
address: 28050 Madrid
address: Spain
phone: +34 610517463
e-mail: *************@vodafone.com
nic-hdl: OPG2-RIPE
mnt-by: AIRTELNET-MNT
source: RIPE
changed: **************@vodafone.com 20050801


Listed by Spamhaus and UCEprotect:
http://www.spamhaus.org/query/bl?ip=212.73.45.196
http://www.uceprotect.net/rblcheck.php?ipr=212.73.45.196

Anyone from the US who's got an idea where this phone number +1 (270) 8187244 will actually lead to? Would be interesting to learn about the business behind this scam.

Olliver
Back to top
View user's profile Send private message
olliver
Expert Developer


Joined: 27 Jan 2006
Last Visit: 02 Dec 2010
Posts: 1157
Location: yes

PostPosted: Wed May 23, 2007 10:34 am    Post subject: Reply with quote

Just found another turdlet from the same twit, its subject line is even more hilarious...

Subject line:
Quote:
Fw: Obtain degrees from Prestigious non-accredite dUniversities


Mail body:
Quote:
Hello <spamtrap>!



Want the degree but cantf ind the time?

WHAT A GREAT IDEA!
We provide a concept that will allow anyone with sufficient work experience to obtain a fully verifiable University Degree.
aBchelors, Masters or even a Doctorate.
Think of it, within four to six weeks, you too could be a college grdauate.
Many people share the same frustration, they are all doing the work of the person that has the degree and the person that has the degree is getting all the money.
Don?t you think that it is time you were paid fair compensation for the level of work you are already doing?
This is your chance to finally make the right move and receive your due benefits.
If you are like most people, you are more than qualified with your experience, but are lacking that prsetigious piece of paper known as a diploma that is often the passport to success.
CALL US TODAY AND GIVE YOUR WORK
EXPERIECNE THE CHANCE TO EARN YOU
THE HIGHER COMPENSATION YOU DESERVE!



Phone Right Now! +1 (270) 818-7244
Operators Online Now

________________











in the midst of a proper camp, with all the other patricians aroundattacked, condemned Crassus and his army openly and sternly? Any sane


Headers:
Quote:
Return-Path: <356napoleon @ mailpont.hu>
X-Flags: 1001
Delivered-To: <spamtrap>
Received: (qmail invoked by alias); 21 May 2007 04:54:56 -0000
Received: from kraspost.ru (EHLO 3rc6uog0.ej3ij6.optonline.net) [213.228.111.34]
by mx0.gmx.net (mx083) with SMTP; 21 May 2007 06:54:56 +0200
Message-ID: <61560185408608.5F0E40A262@ZF5MV4E>
From: "(270) 818-7244 Wesley " <618webb @ indiatimes.com>
To: <spamtrap>
Subject: Fw: Obtain degrees from Prestigious non-accredite dUniversities
Date: Mon, 21 May 2007 12:59:15 +0800
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: USg7kT8odZpCCdREG7eKav3dq5JKKRnselSR
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 8bit


Again return address forgeries. Note the Russian server kraspost.ru (213.228.111.34) posing as optonline.net address (fake EHLO).

Whois of 213.228.111.34:
Quote:
inetnum: 213.228.111.32 - 213.228.111.39
netname: KRASUFPS
descr: Management federal postal relationship krasnoyarsk edges -a branch fgup "mail to russia"
descr: 102, mira avenue
descr: 660017, Krasnoyarsk
descr: Russia
country: RU
admin-c: HKST1-RIPE
tech-c: HKST1-RIPE
status: ASSIGNED PA
mnt-by: NSOELSV-NCC
mnt-lower: AS5573-MNT
mnt-domains: AS5573-MNT
source: RIPE # Filtered

person: Hostmaster KRASNET
address: KRASNET Regional Telecommunications Network
address: 80, Karl Marks str.
address: 660049 Krasnoyarsk
address: Russia
phone: +7 3912 660607
fax-no: +7 3912 661465
e-mail: hostmaster @ krasnet.ru
nic-hdl: HKST1-RIPE
mnt-by: AS5573-MNT
source: RIPE # Filtered


Blacklisted by Spamhaus:
http://www.spamhaus.org/query/bl?ip=213.228.111.34

Olliver
Back to top
View user's profile Send private message
suzi
Site Admin


Joined: 27 Jul 2003
Last Visit: 26 Jul 2014
Posts: 10320
Location: sunny California

PostPosted: Wed May 23, 2007 5:22 pm    Post subject: Reply with quote

Those are good for a laugh! Laughing
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile
Back to top
View user's profile Send private message Visit poster's website
olliver
Expert Developer


Joined: 27 Jan 2006
Last Visit: 02 Dec 2010
Posts: 1157
Location: yes

PostPosted: Thu May 24, 2007 1:18 pm    Post subject: Reply with quote

suzi wrote:
Those are good for a laugh! Laughing


I wonder whether spamtard was one of the graduates of that dipl0ma insititute and what conclusions could be drawn from it, if this assertion were actually true. Wink

Olliver
Back to top
View user's profile Send private message
olliver
Expert Developer


Joined: 27 Jan 2006
Last Visit: 02 Dec 2010
Posts: 1157
Location: yes

PostPosted: Thu May 24, 2007 3:11 pm    Post subject: Reply with quote

A Giggle search on (270) 818-7244 university reveals that this campaign has been running for a couple of months now. Note that a lot of Open Source mailing lists were targeted, probably aiming at self taught programmers. So one has the impression, that only people with a particular profile were recipients of that spam.

Olliver
Back to top
View user's profile Send private message
Nightmaretony
Warrior


Joined: 15 Mar 2005
Last Visit: 30 Jun 2011
Posts: 256
Location: Meadowbrook

PostPosted: Thu May 31, 2007 12:55 pm    Post subject: Reply with quote

There seems to be quite a few spams coming in which list a 270 area code for phone numbers.

ok, I thought it was one of those 800 redirects to charge 100 bucks a minute, but i looks like Kentucky.

but still a tad strange getting a bit of spam with 270 for the code....
_________________
For this is the place
where dreams
and nightmares
are birthed
and bred

Nightmare Park
Back to top
View user's profile Send private message Visit poster's website AIM Address
olliver
Expert Developer


Joined: 27 Jan 2006
Last Visit: 02 Dec 2010
Posts: 1157
Location: yes

PostPosted: Fri Jun 01, 2007 11:42 am    Post subject: Reply with quote

Nightmaretony wrote:
ok, I thought it was one of those 800 redirects to charge 100 bucks a minute, but i[t] looks like Kentucky.


Thanks for that info.

Olliver
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group