No Way to Spam - Search Tool

Sunday, July 22, 2007

Is Google a Spammer?

NO, it is not, of course. But, why not block those spammers who are using this great company's services to ripe-off other people?

I am providing these details about the following scam I have received right now (on 23, July 2007; 08:06):

Return-Path: (this is a forwarded from gmail address)
Received: (qmail 15633 invoked from network); 18 Jul 2007 02:53:30 -0000
Received-SPF: neutral (IP address here, is neither permitted nor denied by SPF record at _spf.google.com)
Received: from my ISP but the following IP is not theirs ([209.85.146.179])
Received: from wa-out-1112.google.com ([209.85.146.179])
Received: by wa-out-1112.google.com with SMTP id v27so55267wah

Received: by 10.114.152.17 with SMTP id z17mr1016653wad.1184727202590; Tue, 17 Jul 2007 19:53:22 -0700 (PDT)

X-Forwarded-To: my email address X-Forwarded-For: my gmail address and my email address again here.
Delivered-to: my gmail address
Received: by 10.114.152.4 with SMTP id z4cs553993wad; Tue, 17 Jul 2007 19:53:20 -0700 (PDT)
Received: by 10.35.86.12 with SMTP id o12mr1789865pyl.1184727200449; Tue, 17 Jul 2007 19:53:20 -0700 (PDT)

Return-Path: nobody at server14.01domain.net
Received: from server14.01domain.net (server14.01domain.net [65.38.180.8]) by mx.google.com with ESMTP id i5si98470nzi.2007.07.17.19.53.18; Tue, 17 Jul 2007 19:53:20 -0700 (PDT)

Received-SPF: pass (google.com: best guess record for domain of nobody at server14.01domain.net designates 65.38.180.8 as permitted sender)
Received: from nobody by server14.01domain.net with local (Exim 4.66) (envelope-from nobody at server14.01domain.net) id 1IAzhd-0006jL-3m for my gmail address; Tue, 17 Jul 2007 20:55:50 -0600
To: gmail address

Subject: Please Restore Your Account Access
From: service at paypal.
com service at paypal. com
Reply-To: billingsade at paypal. com
Message-Id: E1IAzhd-0006jL-3m at server14.01domain. net
Sender: Nobody nobody at server14.01domain. net
Date: Tue, 17 Jul 2007 20:55:49 -0600

... And they speak about ABUSE in the following:

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server14.01domain. net

X-AntiAbuse: Original Domain - gmail. com

X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]

X-AntiAbuse: Sender Address Domain - server14.01domain. net

X-Scrubber-List: not listed
X-Scrubber-ClamAV: clean
X-Scrubber-VpopQuota: space available
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit

The PayPal's image goes and redirects to this URL:
a target="_blank" _ _ _ _ href="http : // www . acapulco. ch/news/paypal.php" > (img src="http : // images . paypal . com/en_US/i/logo/email_logo.gif" border=0 alt=PayPal)

The Message Says:

Update Your Information
It has came to our attention that your PayPal billing information are out of date. This require you to update your billing information as soon as possible.

This billing update is also a new PayPal security statement which goes according to the established norms on our terms of service (TOS) to reduce the instance of fraud on our website.Please update your records .

A failure to update your records may result on a suspension of your account.

To update your PayPal records click on the following link:
http : // www. paypal . com/us/ (this is a text link redirected to http : // www . acapulco . ch/news/paypal.php

This new security statement will helps us continue to offer PayPal as a secure and cost-effective payment service. We appreciate your cooperation and assistance.

Sincerely,
The PayPal Team

A column at the top right of the message says:


Protect Your Account Info
Make sure you never provide your password to fraudulent websites.
PayPal will never ask you to enter your password in an email.
For more information on protecting yourself from fraud, please review our Security Tips at https : // www. paypal .com/us/securitytips (not clickable)
Protect Your Password
You should never give your PayPal password to anyone, including PayPal employees.

The message bottom says:

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, login (redirected to acapulco . ch/) to your PayPal account and choose the Help link located in the top right corner of any PayPal page.
PayPal Email ID PP295

What do those scammers want?

See more spamming IPs at http://www.ezine-act-politics-business-and-love.com/IP-address.html

No comments:

Anti Spam Followers! Say NO to Spam! Join the NO!

Fujitsu Computer Systems Corporation

Bookmarks

Add to Netvibes StumbleUpon Stumbleupon It AddThis Social Bookmark Button
Add2Netvouz

Feeds