ylg

totally creeped out

May 23, 2017 23:06

The hacker taking hold of a friend's account that has already spammed this old community entry... keeps sending more and more spam to this very same entry, always as an answer to the very same old comment, even though I've deleted the parent comment, frozen the whole thread, and even banned the jacked account.
What the fuck is happening out there???



(screened comment) 1a2. try this stuff
Date: 2017-03-16 06:39 (local)
[redacted]: (Default)
From: [personal profile] [redacted]

Spam detection software, running on the system "va-mail01", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @[profile] contact_address@@ for details.

Content preview: Hi friend! I wanted to share with you my experience about using that cool stuff, just take a look httx://key.aihdp.com/1c1d Hope this helps, [redacted] [...]

Content analysis details: (6.4 points, 5.0 required)

pts rule name description

1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available. [123.21.242.186 listed in bb.barracudacentral.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See httx://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: aihdp.com] 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [123.21.242.186 listed in zen.spamhaus.org] 0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address [123.21.242.186 listed in dnsbl.sorbs.net] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider ([redacted][at]laposte.net) 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.4522] 0.0 HTML_MESSAGE BODY: HTML included in message 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.
Select:

Delete Unscreen Freeze

Link Reply Thread from start Parent

(screened comment) 1a3. nice trip
Date: 2017-03-30 13:42 (local)
[redacted]: (Default)
From: [personal profile] [redacted]

Spam detection software, running on the system "va-mail01", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @[profile] contact_address@@ for details.

Content preview: Hello, We are planning a short trip this summer and wanted to share some routes with you, what do you think? More info here httx://scotsindependent.scot/response.php?ebea Best, [redacted][...]

Content analysis details: (6.8 points, 5.0 required)

pts rule name description

1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available. [14.161.77.128 listed in bb.barracudacentral.org] 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [14.161.77.128 listed in zen.spamhaus.org] 0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider ([redacted][at]laposte.net) 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.4742] 0.0 HTML_MESSAGE BODY: HTML included in message 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.
Select:

Delete Unscreen Freeze

Link Reply Thread from start Parent

(screened comment) 1a4. good news
Date: 2017-04-19 05:37 (local)
[redacted]: (Default)
From: [personal profile] [redacted]

Spam detection software, running on the system "va-mail01", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @[profile] contact_address@@ for details.

Content preview: Hi friend! I've got good news for you! You're going to be pleasantly surprised)) Please read it here httx://www.ungereimt.org/transform.php?eced [redacted] [...]

Content analysis details: (6.8 points, 5.0 required)

pts rule name description

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See httx://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ungereimt.org] 0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [113.184.167.238 listed in zen.spamhaus.org] 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider ([redacted][at]laposte.net) 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.4610] 0.0 HTML_MESSAGE BODY: HTML included in message 1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available. [113.184.167.238 listed in bb.barracudacentral.org] 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.
Select:

Delete Unscreen Freeze

Link Reply Thread from start Parent

(screened comment) 1a5. Re: fantastic
Date: 2017-05-01 07:45 (local)
[redacted]: (Default)
From: [personal profile] [redacted]

Hello friend,

If you were looking for something really fantastic and cool, then you found it! Just take a look httx://abiezer.growbi.us

Wishes, [redacted]

From: Reply as [redacted] [mailto:1348813-1334922-2064684-1116972-65ccef488fa8d89c80d605459a8802a18b33bfcd2715e3da4894b4c1183882ec@comments.dreamwidth.org] Sent: Monday, May 01, 2017 1:45 AM To: [redacted]Subject: Fuck Erin.

They are sympathizing with the fact that many of those people could have been "normal" like you or I. Yea some people are inherently bad but I would say that is the minority. You don't know what happened to these people that drove them to where they are at the point they are being arrested (molestation, extreme poverty, drugs).

To be clear, I don't sympathize with criminals. Especially when innocent people are hurt in the process. I do understand feeling empathy for them.

Sent from Mail for Windows 10
Select:

Delete Unscreen Freeze

Link Reply Thread from start Parent

(frozen) 1a6. ✈it is simply divine
Date: 2017-05-23 12:18 (local)
[redacted]: (Default)
From: [personal profile] [redacted]

Spam detection software, running on the system "va-mail01", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @[profile] contact_address@@ for details.

Content preview: Hello, I've just come across something really divine, you've got to take a look at that httx://check.cbchevychase.com Very truly yours, [redacted][...]

Content analysis details: (6.7 points, 5.0 required)

pts rule name description

1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see httx://www.spamcop.net/bl.shtml?14.187.203.3] 0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [14.187.203.3 listed in zen.spamhaus.org] 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider ([redacted]o[at]laposte.net) 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5007] 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.
Select:

Delete Screen Unfreeze

Link Frozen Thread from start Parent

1a7. ☑Fw: miss you
Date: 2017-05-23 22:56 (local)
[redacted]: (Default)
From: [personal profile] [redacted]

Spam detection software, running on the system "va-mail01", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @[profile] contact_address@@ for details.

Content preview: Dear! I haven't heard anything from you lately, so I wanted to share with you some of my thoughts, you can read them here httx://principle.buffalocreektaxgroup.com Yours truly, [redacted][...]

Content analysis details: (7.3 points, 5.0 required)

pts rule name description

0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [14.186.57.106 listed in zen.spamhaus.org] 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL 1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available. [14.186.57.106 listed in bb.barracudacentral.org] 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see httx://www.spamcop.net/bl.shtml?14.186.57.106] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See httx://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: buffalocreektaxgroup.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider ([redacted][at]laposte.net) 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area -0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40% [score: 0.3224] 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.
Select:

commentaires : sur DW | comment utiliser OpenID

amis, crétins de spammers

Previous post Next post
Up