Glaswegian

If you wish to read the original article you can find it by clicking on this link


Good job bry - these types of e-mail are a nuisance.

Fr4665

good job i like it and makes the point. this is very annoying especially to ppl that arent very computer savy

cnrimgr1

i think all chain letters are stupid and a waste of time has anyone heard of a adress book to spread the word ?

ebackhus

I'm glad you mentioned Snopes.com in there as it's a GREAT resource for getting the truth on virtually anything. Great article!

Zazula

This is a very helpful article; people are victimized every day due to ignorance of how to tell an email they received is a chain letter.

ebackhus

I am nigerian royalty. Recently I happened to lose my entire family to a freak hamster accident. This has caused an enormous sum of money ($6,200,000 USD) to come into my posession. I need to offload this funds in order to avoid windfall taxes brought about by the regime. I have come to you in order that you might help me with this effort. For your assistance I will offer you HALF of the total amount, or $3.1 million dollars.

Please respond and I will give you the information necessary to start the transfer of funds.

JohnthePilot

Further to your post re emails, I received numerous emails from someone called "Sally Anne". As I didn't know a Sally Anne I set my Spamkiller to mark it as Spam. Over a period of two or three months I received about twenty of these. An example is shown below. My girlfriend found one of these deleted emails and thought I was having an affair. She would not believe it was spam and it caused us to split up. I found out how to trace the nodes the email had passed through by clicking Alt+Enter on the header. In each case, the email had come from a hotmail account, but the address varied for each email. See below. I contacted MSN and was informed that the account DID NOT originate from hotmail. See their reply below. The originators of this type of Spam don't realise how much damage they can do.
Pilot.

Hi ,

Sent you an email from my Yahoo datefolder but no
reply ?

Are you fixed up ?

Anyway, as I said, Just back into the UK from the USA
and found your email address in my (UK) Yahoo date
folder - must be a bit old ?

If still OK on a meet please let me know and I'll send
you my pic and details.

Please reply to my UK yahoo address direct - not to my
datefolder - maybe that was the mistake.

thanks - later ?.

xx

Sally Anne


Received: from smtp-in4.blueyonder.co.uk ([172.23.146.15]) by cluster5 with
Microsoft SMTPSVC(5.0.2195.6713); Fri, 28 Jul 2006 12:28:19 +0100
Received: from eback01.blueyonder.co.uk ([195.188.53.212]) by
smtp-in4.blueyonder.co.uk with Microsoft SMTPSVC(5.0.2195.6713); Fri, 28 Jul
2006 12:28:18 +0100
Received: from [172.23.170.138] (helo=anti-virus01-09) by
eback01.blueyonder.co.uk with smtp (Exim 4.52) id 1G6QZ4-00053z-Ts; Fri, 28
Jul 2006 12:31:34 +0100
Received: from [65.54.246.91] (helo=bay0-omc1-s19.bay0.hotmail.com) by
exim13.blueyonder.co.uk with esmtp (Exim 4.52) id 1G6QYx-0005lw-Je; Fri, 28
Jul 2006 12:31:27 +0100
Received: from hotmail.com ([64.4.31.9]) by bay0-omc1-s19.bay0.hotmail.com
with Microsoft SMTPSVC(6.0.3790.1830); Fri, 28 Jul 2006 04:31:26 -0700
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Fri, 28 Jul 2006 04:31:25 -0700
Message-ID: <BAY13-F96234A0A14DA4DFA6DF4FC2590@phx.gbl>
Received: from 80.188.236.69 by by13fd.bay13.hotmail.msn.com with HTTP; Fri,
28 Jul 2006 11:31:22 GMT
X-Originating-IP: [80.188.236.69]
X-Originating-Email: [sally_anne_ccb@hotmail.com]
X-Sender: sally_anne_ccb@hotmail.com
Reply-To: sally_anne_datefolder37847602@yahoo.co.uk
From: "sally anne" <sally_anne_ccb@hotmail.com>
To: datefolder_22_45345671@hotmail.co.uk
Bcc:
Subject: [SPAM] Did you get my email I sent to you last week?
Date: Fri, 28 Jul 2006 11:31:22 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 28 Jul 2006 11:31:25.0970 (UTC)
FILETIME=[5C65E720:01C6B239]
X-Envelope-To: bpmc@blueyonder.co.uk
Return-Path: sally_anne_ccb@hotmail.com
X-SpamKiller-AcctId: 2
X-SpamKiller-MsgId: AAw0D4HAAAgjzyar0dfXCy0nS2qIkg2H
_________________________________________________________________
Be the first to hear what's new at MSN - sign up to our free newsletters!
http://www.msn.co.uk/newsletters

Received: from smtp-in3.blueyonder.co.uk ([172.23.146.14]) by cluster5 with
Microsoft SMTPSVC(5.0.2195.6713); Wed, 30 Aug 2006 19:22:47 +0100
Received: from eback01.blueyonder.co.uk ([195.188.53.212]) by
smtp-in3.blueyonder.co.uk with Microsoft SMTPSVC(5.0.2195.6713); Wed, 30 Aug
2006 19:22:47 +0100
Received: from [172.23.170.147] (helo=anti-virus03-10) by
eback01.blueyonder.co.uk with smtp (Exim 4.52) id 1GIUlC-0007fC-RW; Wed, 30
Aug 2006 19:25:58 +0100
Received: from [65.54.246.103] (helo=bay0-omc1-s31.bay0.hotmail.com) by
exim9.blueyonder.co.uk with esmtp (Exim 4.52) id 1GIUl6-0006fE-9L; Wed, 30
Aug 2006 19:25:52 +0100
Received: from hotmail.com ([65.54.186.65]) by bay0-omc1-s31.bay0.hotmail.com
with Microsoft SMTPSVC(6.0.3790.1830); Wed, 30 Aug 2006 11:25:50 -0700
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Wed, 30 Aug 2006 11:25:50 -0700
Message-ID: <BAY16-F156ACDABB8D5FA29E91FC5983E0@phx.gbl>
Received: from 193.165.79.34 by by16fd.bay16.hotmail.msn.com with HTTP; Wed,
30 Aug 2006 18:25:49 GMT
X-Originating-IP: [193.165.79.34]
X-Originating-Email: [sally_anne_mfn@hotmail.co.uk]
X-Sender: sally_anne_mfn@hotmail.co.uk
Reply-To: sally_anne_datefolder37847632@yahoo.co.uk
From: "sally anne" <sally_anne_mfn@hotmail.co.uk>
To: datefolder_442_45345671@hotmail.co.uk
Bcc:
Subject: [SPAM] My email
Date: Wed, 30 Aug 2006 19:25:49 +0100
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 30 Aug 2006 18:25:50.0482 (UTC)
FILETIME=[B86F1720:01C6CC61]
X-Envelope-To: john.wafford@blueyonder.co.uk
Return-Path: sally_anne_mfn@hotmail.co.uk
X-SpamKiller-AcctId: 1
X-SpamKiller-MsgId: AAg5bMOEAAArBGuV9TtWQqUHLtAuIZsf
_________________________________________________________________
Windows Live™ Messenger has arrived. Click here to download it for free!
http://imagine-msn.com/messenger/launch80/?locale=en-gb

Received: from smtp-in3.blueyonder.co.uk ([172.23.146.14]) by cluster5 with
Microsoft SMTPSVC(5.0.2195.6713); Fri, 15 Sep 2006 13:30:17 +0100
Received: from eback02.blueyonder.co.uk ([195.188.53.213]) by
smtp-in3.blueyonder.co.uk with Microsoft SMTPSVC(5.0.2195.6713); Fri, 15 Sep
2006 13:30:17 +0100
Received: from [172.23.170.147] (helo=anti-virus03-10) by
eback02.blueyonder.co.uk with smtp (Exim 4.52) id 1GOCso-0005ov-1O; Fri, 15
Sep 2006 13:33:26 +0100
Received: from [65.54.246.137] (helo=bay0-omc2-s1.bay0.hotmail.com) by
exim11.blueyonder.co.uk with esmtp (Exim 4.52) id 1GOCsj-0002sj-H4; Fri, 15
Sep 2006 13:33:21 +0100
Received: from hotmail.com ([64.4.54.113]) by bay0-omc2-s1.bay0.hotmail.com
with Microsoft SMTPSVC(6.0.3790.1830); Fri, 15 Sep 2006 05:33:20 -0700
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Fri, 15 Sep 2006 05:33:19 -0700
Message-ID: <BAY20-F240195944F93EC818AF0E9B12E0@phx.gbl>
Received: from 193.165.79.34 by by20fd.bay20.hotmail.msn.com with HTTP; Fri,
15 Sep 2006 12:33:18 GMT
X-Originating-IP: [193.165.79.34]
X-Originating-Email: [sally_anne_eata@hotmail.com]
X-Sender: sally_anne_eata@hotmail.com
Reply-To: sally_anne_datefolder37847632@yahoo.co.uk
From: "sally anne" <sally_anne_eata@hotmail.com>
To: datefolder_42_45345671@hotmail.co.uk
Bcc:
Subject: [SPAM] Found your email in my bulk folder ?
Date: Fri, 15 Sep 2006 12:33:18 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 15 Sep 2006 12:33:19.0483 (UTC)
FILETIME=[2010C4B0:01C6D8C3]
X-Envelope-To: john.wafford@blueyonder.co.uk
Return-Path: sally_anne_eata@hotmail.com
X-SpamKiller-AcctId: 1
X-SpamKiller-MsgId: AAwvcMOEAAArBGuV9TtWQqUHLtAuIZsf
_________________________________________________________________
Download the new Windows Live Toolbar, including Desktop search!
http://toolbar.live.com/?mkt=en-gb

Received: from smtp-in4.blueyonder.co.uk ([172.23.146.15]) by cluster5 with
Microsoft SMTPSVC(5.0.2195.6713); Wed, 11 Oct 2006 10:50:32 +0100
Received: from eback02.blueyonder.co.uk ([195.188.53.213]) by
smtp-in4.blueyonder.co.uk with Microsoft SMTPSVC(5.0.2195.6713); Wed, 11 Oct
2006 10:50:32 +0100
Received: from [172.23.170.141] (helo=anti-virus02-08) by
eback02.blueyonder.co.uk with smtp (Exim 4.52) id 1GXajP-0005vg-PL; Wed, 11
Oct 2006 10:50:31 +0100
Received: from [65.54.246.212] (helo=bay0-omc3-s12.bay0.hotmail.com) by
exim14.blueyonder.co.uk with esmtp (Exim 4.52) id 1GXajD-0008EB-QM; Wed, 11
Oct 2006 10:50:20 +0100
Received: from hotmail.com ([207.46.8.111]) by bay0-omc3-s12.bay0.hotmail.com
with Microsoft SMTPSVC(6.0.3790.1830); Wed, 11 Oct 2006 02:50:17 -0700
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Wed, 11 Oct 2006 02:50:15 -0700
Message-ID: <BAY117-F313397AE4F014888BA2FCA87140@phx.gbl>
Received: from 207.46.8.123 by by117fd.bay117.hotmail.msn.com with HTTP; Wed,
11 Oct 2006 09:50:14 GMT
X-Originating-IP: [193.165.79.34]
X-Originating-Email: [sally_anne_ive@hotmail.co.uk]
X-Sender: sally_anne_ive@hotmail.co.uk
Reply-To: sally_anne_datefolder37847602@yahoo.co.uk
From: "sally anne" <sally_anne_ive@hotmail.co.uk>
To: datefolder_22_45345671@hotmail.com
Bcc:
Subject: [SPAM] My last email
Date: Wed, 11 Oct 2006 09:50:14 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 11 Oct 2006 09:50:15.0978 (UTC)
FILETIME=[A761E0A0:01C6ED1A]
X-Envelope-To: bpmc@blueyonder.co.uk
Return-Path: sally_anne_ive@hotmail.co.uk
X-SpamKiller-AcctId: 2
X-SpamKiller-MsgId: AAAGE4HAAAgjzyar0dfXCy0nS2qIkg2H
_________________________________________________________________
The new Windows Live Toolbar helps you guard against viruses
http://toolbar.live.com/?mkt=en-gb

Received: from smtp-in1.blueyonder.co.uk ([172.23.146.12]) by cluster5 with
Microsoft SMTPSVC(5.0.2195.6713); Thu, 26 Oct 2006 05:49:57 +0100
Received: from eback03.blueyonder.co.uk ([195.188.53.214]) by
smtp-in1.blueyonder.co.uk with Microsoft SMTPSVC(5.0.2195.6713); Thu, 26 Oct
2006 05:49:57 +0100
Received: from [172.23.170.146] (helo=anti-virus03-09) by
eback03.blueyonder.co.uk with smtp (Exim 4.52) id 1GcxBl-0000om-5Y; Thu, 26
Oct 2006 05:49:57 +0100
Received: from [64.4.56.36] (helo=hotmail.com) by exim14.blueyonder.co.uk
with esmtp (Exim 4.52) id 1GcxBh-0003SR-Oa; Thu, 26 Oct 2006 05:49:53 +0100
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Wed, 25 Oct 2006 21:49:52 -0700
Message-ID: <BAY101-F26DB7A8D10C4CDFFDC1BFCFE070@phx.gbl>
Received: from 64.4.56.200 by by101fd.bay101.hotmail.msn.com with HTTP; Thu,
26 Oct 2006 04:49:47 GMT
X-Originating-IP: [193.165.79.34]
X-Originating-Email: [sally_anne_gd@hotmail.co.uk]
X-Sender: sally_anne_gd@hotmail.co.uk
Reply-To: sally_anne_datefolder37847632@yahoo.co.uk
From: "sally anne" <sally_anne_gd@hotmail.co.uk>
To: datefolder_42_45345671@hotmail.com
Bcc:
Subject: Back in the UK again !
Date: Thu, 26 Oct 2006 05:49:47 +0100
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 26 Oct 2006 04:49:52.0247 (UTC)
FILETIME=[2C990870:01C6F8BA]
X-Envelope-To: johnwafford@blueyonder.co.uk
Return-Path: sally_anne_gd@hotmail.co.uk
X-SpamKiller-AcctId: 1
X-SpamKiller-MsgId: AAA/fMOEAAArBGuV9TtWQqUHLtAuIZsf
_________________________________________________________________
Windows Live™ Messenger has arrived. Click here to download it for free!
http://imagine-msn.com/messenger/launch80/?locale=en-gb

Hello John,


Thank you for writing to MSN Hotmail Technical Support.

This is Jo-ann and I am responding to your concern about receiving unsolicited e-mail from a Hotmail user. I understand how frustrating this is and I appreciate the time you took in sending this e-mail.

I apologize for the delay in answering your e-mail. I appreciate your patience as we handle every customer request as quickly as possible.

John, the account you reported, sally_anne_ccb@hotmail.com, is not a valid Hotmail account. The message was sent using a forged header.

From time to time, individuals may forge message headers in order to suggest that the message originated with MSN Hotmail. In addition, these "spammers" may use similar fake "reply-to" accounts, "remove me" accounts, and other types of drop boxes either in the headers or in the body of messages, on Web pages, in Web forms or in postings such as newsgroups. This is an extremely difficult practice to guard against, but one we will continue our efforts to prevent.

Thank you for time.


Sincerely,


Jo-ann F.
MSN Hotmail Technical Support


--- Original Message ---
From: john.wafford@blueyonder.co.uk
Sent: Tuesday, October 31, 2006 3:54:36 AM UTC
To: support_x
Subject: MSN Hotmail:I have a comment about Ho:Other

Service : [Service:]
MSN Hotmail

What type of problem do you have? [What type of problem do you have?]
I have a comment about Hotmail []
Other []


Full Name: [Full Name:]
John Wafford

What e-mail address would you like a response sent to? [What e-mail address would you like a response sent to?]
john.wafford@blueyonder.co.uk

Primary e-mail address/member ID associated with the account you are inquiring about: [Primary e-mail address/member ID associated with the account you are inquiring about:]
sally_anne_ccb@hotmail.com

Be specific when describing your problem. The details that you include enable us to promptly send you the most likely solution to your issue. [Be specific when describing your problem. The details that you include enable us to promptly send you the most likely solution to your issue.]
I have been trying to report possible Spam from sally_anne_ccb@hotmail.com to report_spam@hotmail.com but keep getting automated replies saying you cannot deal with this as it did not come from a hotmail account. I don't understand as the sender's address ends in hotmail.com.

What is the frequency of the problem? [Frequency of the issue:]
Intermittent

How do you access your Hotmail account? [How do you access your Hotmail account?]
Other

What type of internet connection do you have? [Type of Internet connection:]
Cable Modem

Have you recently installed any new software (if you enter yes please add more comments in the text box above)? [Have you recently installed any new software (if you enter yes please add more comments in the text box above)?]
No



Which operating system are you using?Windows XP: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; BCD2000; .NET CLR 1.1.4322; HbTools 4.7.3) [Which operating system are you using?]

Which browser are you using: IE7 [Which browser are you using]

Location: en-gb - English (Great Britain) [Location: en-gb - English (Great Britain)]

Type of Support: E-mail Support
Type of Support: E-mail Support

dm01

I would like to mention Sam Spade: a completely free tool utilizing several different utilities: Ping, Whois, IPBlock, dig, Trace, Finger, SMTP, KeepAlive, Blacklists, and Abuse@. I have found this program useful in tracing spam e-mail.

The most important of these is abuse@. This tool will find the e-mail address to the abuse department of the e-mail provider you specify. This is useful for a few obvious reasons.

Spam-squishing is referred to as whack-a-mole, because in order to squish spam, it is often necessary to hit the spammer more than once. The particualy mix of tools used is known as the "mallet" If a user who manages to stop enough spam e-mail becomes eligible for the (entirely virtual)
"Golden Mallet" award.

chauffeur2

Another annoyance are those 'fake' emails from banks.

Recently, my bank [The Commonwealth Bank of Australia] was inundated with customers that fell victim to these spammers/hackers.

I received one of these, but being the suspicious character that I am sometimes, I "highlighted" the link, and it was going to take me to some web address in Eastern Europe!
Naturally, I didn't oblige these cretins; in stead, I took a copy of it and the 'Header and Footer' to the bank!
The Bank rang me a few hours later to tell me that this was the 'newest' type of fraudulent email [2 days old] that they had received, and that it was so 'professionally' created that even the Security Section of the bank was nearly convinced of its authenticity!

I personally know what its like to be compromised by these hackers, as another bank account that I had was 'creamed' in August, costing me $AUD 4,500. [But that is another story!]

The moral of this is; Never, ever take any email on face value unless you completely 'trust' the source, and then check the authenticity of it through the "Properties" of the email when you receive it.

Sorry for the rant...but I thought it relevent.

KoosHopeloos

@ JohnthePilot: I'm very sorry to hear that the ex didn't believe you... Next time something like this happens show her www.419eater.com -> Forum ->Love/Dating scams!

@ chauffeur2: "I personally know what its like to be compromised by these hackers, as another bank account that I had was 'creamed' in August, costing me $AUD 4,500. [But that is another story!]" And now I would like to hear the complete story if it is not to embarrassing. So please elaborate...

JohnthePilot

Unfortunately, it's gone too far for that and there won't be another time, I'm afraid. The damage it did is irreparable.

Kalim

Here's one that is taking all the youngsters and any soft hearted benefit-of-the-doubt givers, those who don't believe (fact) that many people are actually sick minded, into duping them immensely and its spreading fast!

My wife's sister decided to start a big argument with me with all the women in the family siding her that I was being nasty and cruel; evil. Women!!

Sorry about that John, I know how that feels a little.

Here's the REAL Make-A-Wish Foundation:

International Office
Make-A-Wish Foundation®International
4041 North Central Avenue Suite 555
Phoenix, Arizona 85012 USA
Monday - Friday, 8 a.m. - 5 p.m.
Arizona, USA Time -7 GMT

Phone: (602) 230-9900
Fax: (602) 230-9627
Web site: www.worldwish.org

Make-A-Wish Foundation® of America
3550 North Central Avenue, Suite 300
Phoenix, Arizona 85012-2127
Monday - Friday, 7 a.m. - 4 p.m. MST

Phone: (602) 279-WISH (9474)
Toll-free: (800) 722-WISH (9474)
Fax: (602) 279-0855

Kalim

I got this today but to 11 of my 15 accounts at the same time :shock:

Fraud.

carsey

ha...thats a clever way of getting round it. Have a IP then the URL of address. Firefox got me out of there tho.

STINEHART

I wouldnt trust Snopes for their reliability. THe dont ever seem to recant things from being hoxes after they are found real. Like hogzilla. The caught another one a few weeks ago.
http://www.snopes.com/photos/animals/hogzilla.asp

Go The Power

I hate spam, Nice article bry623