Samples of spam received, part 2
This page lists, for the perusal of the public, some of the spam
(bulk junk email, unsolicited commercial email, etc.) received here.
Spammers steal other people's resources for their
advertising, so please don't do business with them.
This is page 2; page 1 is here,
page 3 is here,
page 4 is here,
and page 5 is here.
-
A French spam, from
affiliation@digitall.fr
and also containing the email address
benjamin.lohou@grolier.fr.
The contact page at the apparent spamvertised web site
gave these addresses:
service@digitall.fr and
and webmaster@digitall.fr.
Looking up at
http://www.nic.fr/cgi-bin/whois
revealed this information,
including these contacts:
dnsmaster@grolier.fr and
sylvain.bizoirre@grolier.fr.
-
Three essentially identical spams,
spam 1,
spam 2, and
spam 3,
from alojetic@satyam.net.in
in India, claiming to have job opportunities with a company whose
apparent main selling point is this it is American.
A reply brought
this monstrosity.
-
A spam from
int10132@rediffmail.com
claiming somebody in BC can help me make large amounts of money
stuffing envelopes.
Here is another,
this time from
int10166@rediffmail.com,
advertising the same thing.
-
A spam from
jojimmy@angelfire.com
which contains so much superfluous html coding (in an email message!)
that I couldn't figure out very well what the spam was really for.
-
A spam from
shaliczer@higheredworld.org,
who claims to be a "Distinguished Research Professor"
at the Northern Illinois University.
Searching their web site revealed that there is indeed such a person in
their history department.
The spam referred to "Senate Bill 1618", which never passed,
and was in any case introduced in the 1997-1998 congressional session.
Since the spam was sent in October 2000, if it was really from a
"Distinguished Research Professor" then it was from an
astoundingly ignorant "Distinguished Research Professor".
An email to the address in the spam got
this reply
(with no message body) from the address
haliczer@addr12.addr.com.
Sam Spade
revealed this information
about the spamvertised site, including the contact address
shaliczer@NIU.EDU.
-
A spam from
PriceFile@yahoo.com.
Sam Spade
revealed this information
about the spamvertised site, including the contact addresses
max@BITSTREAM.NET
and smileycpro@AOL.COM.
-
A spam from
i_luv_spam@unbounded.com,
also using the address
spammers_rule@yahoo.com
in the headers, clearly an unrepentant spammer who knows exactly
what he is doing.
The real contact address is found in the body of the message:
rewindmail@excite.com.
-
A spam from
b.toro@numeritek.com,
advertising numerical software.
Needless to say, I won't be using it.
Sam Spade
revealed this information
about the spamvertised site, including the contact addresses
hostmaster@GXN.NET and
internic-accounts@GLOBAL.NET.UK.
The spamvertised web site also revealed the address
inquiries@numeritek.com.
The author of the spamvertised item is probably Eleuterio F. Toro
(E.F.Toro@doc.mmu.ac.uk).
I never received a reply to my complaint to this address.
(This information was obtained by using the
American Mathematical
Society Combined Membership List, and following up at the web site
of the university listed in the address.)
-
Another textbook spam, this time
from
mbova@harcourt.com
(Harcourt/Academic Press), also using the address
hapmktg@harcourt.com
in the headers.
The spam is about one tenth of a megabyte, an outrageous size,
and mostly consists of unreadable encoded files.
Poking around in the spamming publisher's web site yielded the
following contact addresses:
inquiries@harcourt-ap.com,
jhayhurst@harcourt.com,
ndonaghy@acad.com,
baholland@harcourt.com,
kfrost@harcourt.com,
mrutter@harcourt.com,
sstevens@harcourt.com,
and van_strength@harcourt.com.
-
A spam from
webmaster@dllCentral.com,
wanting me to find "dll files" on his web site.
I would certainly never trust a file on my computer from a spammer!
The spam also uses the sequence "=20" instead of spaces,
making it very hard to read.
Sam Spade
revealed this information
about the spamvertised site, including the contact address
lildones@aol.com.
Some of the web pages at its site are actually on the domain
r41h158.res.gatech.edu, and for this domain
Sam Spade revealed
this information,
including the contact addresses
Herbert.Baines@OIT.GATECH.EDU
and hostmaster@GATECH.EDU.
Poking around in the website also revealed the email addresses
incoming@dllCentral.com
and info@ikonboard.com.
Here, according to Sam Spade, is the
registration information
for the people that apparently provide the spamvertised web site's
discussion board, with contact addresses
matt@ikondiscussion.com
and
webmaster@webfusion.co.uk.
-
A spam from
rosenstiel.1@osu.edu,
who claims to be a dental professor at The Ohio State University.
-
A spam from
rscott4584@hotmail.com,
promising "tons of Free Stuff For signing up".
-
A spam from
krieger101@hotmail.com,
consisting mostly of html coding, advertising a web site
(since closed) and a large number of web based "programs"
the spammer wants me to participate in.
The PayPal program advertisement suggests that the spammer's real
email address might be
tom-krieger@socket.net.
-
A spam from
skeletonkey@hbzmail.com,
who wants to sell me a key which can
"Open ANY lock in seconds!!!".
-
A spam from
coolstuff@thespark.com,
who also wants to sell me a key which can
"Open ALL locks quickly with ease", as well as some other
things that look rather questionable.
-
A chain letter spam from
(depending on which header line you believe)
dragsterpr@yahoo.com,
tunes@coqui.net,
hpw2@swr3.de,
or appli@aol.com.
-
A spam from
info2@shanghai-industry.com,
who claims to have something to do with some business development
project in Shanghai, and a
second spam
from the same source.
Sam Spade
revealed this information
about the spamvertised site, including the contact addresses
susan_z@163.NET
and domainadm@HICHINA.COM.
Checking again after the second spam gave
this new information
about the spamvertised site, including the contact addresses
susan_z@163.NET
(same as before) and
domain@1STCHINA.COM.
-
A spam from
winatrip@yahoo.com,
which, in a blatant falsehood, claims
"You received this e-mail at the request of your friend,
who is indicated in the "From" line of this e-mail."
Sam Spade
revealed this information
about the spamvertised site, including the contact addresses
jeffc@FIBER.NET
and hostmaster@FIBER.NET.
From the spamvertised web site, I obtained the email address
members@webmiles.com.
-
Some time ago, I received
this spam from
Seth_H_Reichlin@prenhall.com
of Prentice-Hall
(or, according to the message body,
seth@prenhall.com)
advertising mathematics textbooks.
(The claim that I "teach Multivariable Calculus regularly"
is, as usual with spammers, a blatant lie.)
Complaining to the company brought the admission that the spammer knew
people would be annoyed, but went ahead and did it anyway.
I tracked down the authors of the spamvertised books,
herb@riemann.math.mun.ca,
rogers@math.mit.edu,
sjcolley@math.oberlin.edu,
and swami@math.mun.ca,
using the
American Mathematical
Society Combined Membership List,
but email to them brought either no response or merely platitudes.
More recently, I got
another spam
from the same company, emailed from
Math_Service@prenhall.com
or maybe
sreichli@prenhall.com
(according to the headers), and containing the email address
sara_bredbenner@prenhall.com.
Of course,
I don't teach the course related to this book regularly either.
My complaint this time led to email correspondence in which eventually
someone from the company seemed to be claiming that sending me an
unsolicted free sample created a prior business relationship with me!
Sam Spade
revealed this information
about the spamvertised site, including the contact address
hostmaster@PRENHALL.COM.
-
A spam from
LOGIC@imneverwrong.com,
a particularly blatant crank.
Complaints to the apparent provider of the domain from which the
email originated yielded, at least at first, no response
(despite a promising sounding abuse policy).
Sam Spade
revealed this information
about the domain provider, including the contact address
abuse@MYOWNEMAIL.COM.
and hostmaster@FIBER.NET.
-
A spam from another crank,
yqk@yun-qi.com.
He operates his own domain;
Sam Spade
revealed this information
about it, including the contact address
cywang@yun-qi.com.
From the spamvertised web site, I obtained the email address
y-q@yun-qi.com.
-
Three unsolicited commercial email messages from
"Norwest Textbooks", which wants to buy old textbooks from me:
spam 1,
spam 2,
and spam 3,
email
norwesttextbooks@worldlogon.com.
They were addressed to me by name, so I simply ignored the first one.
But they kept on coming.
Apparently I was added to a mailing list without my permission.
-
A spam apparently from
Abdellatif Bourhim, who claims
to have just received a Ph.D. in mathematics and be looking for a job.
It was sent from
bourhim@ictp.trieste.it,
with the additional email address
abourhim@fsr.ac.ma
in the text of the message.
If it were someone in my area and clearly directed to me,
or if I were on the hiring committee, I would accept it.
But this message appears to have been emailed indiscriminately to a
large number of mathematicians whose research has little to do with
that of the sender.
-
A spam from somebody
apparently trying to sell me insurance (but it is hard to tell).
The addresses in the headers apparently don't exist, but it was
possible (with some effort) to extract the apparently real addresses
reply1551@xyz002.com
and
remove1551@xyz002.com
from the text.
-
A spam from
pohanl@hotmail.com,
advertising a web page about Taoism.
This person apparently operates the entire domain, since
the same address is listed as the contact address when one
follows the appropriate link, and since it is also given as
administrative and billing contact in the
information
about the spamvertised site obtained from
Sam Spade.
-
A spam from
sdre341@yahoo.com,
who is apparently trying to start a chain letter disguised
as report orders.
-
Nine abusive emails:
no. 1,
no. 2,
no. 3,
no. 4,
no. 5,
no. 6,
no. 7,
no. 8,
no. 9,
all apparently from the same source,
kentrbaker@pcu.net.
All are large (typically over 100K) and encoded;
decoding them gives incomprehensible binary files.
The apparent source domain, pcu.net,
bounces complaints sent through
abuse.net.