PDA

View Full Version : Spam to my dedicated vb.org e-mail


AlexanderT
05-08-2008, 02:25 PM
Ok,

I am not sure what the deal is, but today I received a spam mail that was sent to my e-mail address that I only use at vbulletin.org. It's not some random address that a spammer can accidentally send mail to. Somehow the address must have been leaked, and I wonder how. Anyways, here is the spam message (without links):

Union Privacy Ltd

Union Privacy group is the world's largest provider and expeditor of global travel documents and passports. We service people, companies of all sizes, from small neighborhood businesses, to large tour and cruise ship operators, to most of the FORTUNE 500. Union Privacy has the unique advantage of offering clients the best of all worlds - highly trained visa and passport professionals combined with attention to flexible, responsive service.

We offer Comprehensive guide to obtaining second passports and citizenships, camouflage passports, new identities, legal residency and more.

Through our long time reliable and trusted contacts at governmental level, we are finally able to offer a genuine United Nations Diplomatic appointment and passport from a respected UN member country. Also you can take apart in our Passport Programs for your Second Passport (even with New Identity).

Our Passport Programs:
----------------------------
1. Southern Africa Passport
2. Asian Passport
3. South America Passport
4. United Nations Diplomatic Passport

Union Privacy offers world wide Financial Services and Bank accounts, especially in Switzerland, because Switzerland can be a 'safe bet' when comes to your money. No perceived threats of war, financial and political stability, low inflation rate a major factors influencing world famous bank accounts in Switzerland. Switzerland is still a non European-union country highly regarding for their world's most stable currency CHF Swiss franc.

Our Private Offshore Bank Accounts Program (Tax free):
--------------------------------------------------------
1. Swiss Numbered Account
2. Swiss Private Bank Account
3. Credit Suisse Account
4. Classic Euro Account

Start your second life with your second passport.
Experience tax free private bank accounts.
Open all closed doors in your life with your new UN Diplomatic Passport.

Union Privacy Ltd

King Kovifor
05-08-2008, 03:31 PM
Ok,

I am not sure what the deal is, but today I received a spam mail that was sent to my e-mail address that I only use at vbulletin.org. It's not some random address that a spammer can accidentally send mail to. Somehow the address must have been leaked, and I wonder how. Anyways, here is the spam message (without links):

You have the ability for members to send your email. I am not sure how this happened, but I am certain that vBulletin.com doesn't give out emails.

Marco van Herwaarden
05-08-2008, 04:16 PM
We never give out email addresses.

Either they have just tried the email address (i even get spam on some accounts i had created but have not even used!), or someone has contacted you using the Email contact option and you have replied to it (or an automated reply was sent).

I don't see any other way someone could have got hold of your address.

nochkin
05-11-2008, 03:31 AM
Many spammer use random and pseudo-random e-mail addresses to spam.
They split login and domain parts, and switch them around to get new e-mail addresses. I'm getting spam on e-mail accounts I did not even create!
Good thing that I have server-side spam filter...

davidw
05-11-2008, 01:26 PM
Are you seeing variants of your email address in the CC location? - which is typical of a blanket spammer. Or do you have a catch-all set up to your account?

AlexanderT
05-12-2008, 10:36 AM
I have a catch-all; but this one got directly sent to my vbulletin.org address. Here is the header (sensitive information removed):

Return-Path: <apache@mercury.sabren.com>
Received: from mail.foobar.com ([unix socket])
by mail.foobar.com (Cyrus v2.2.13-Debian-2.2.13-10) with LMTPA;
Thu, 08 May 2008 16:08:49 +0200
X-Sieve: CMU Sieve 2.2
X-Virus-Scan: amavisd-new at av.foobar.com
X-Spam-Score: 4.972
X-Spam-Level: ****
X-Spam-Status: No, score=4.972 tagged_above=-999 required=7.31
tests=[BAYES_50=0.001, DCC_CHECK=2.17, DIGEST_MULTIPLE=0.001,
RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5,
RAZOR2_CHECK=0.5, SARE_WEOFFER=0.3]
Received: from mercury.sabren.com (mercury.sabren.com [67.19.173.36])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mail.foobar.com (Postfix) with ESMTP id 45675798041
for <vbulletinorg@myemail.com>; Thu, 8 May 2008 16:08:42 +0200 (CEST)
Received: from mercury.sabren.com (localhost.localdomain [127.0.0.1])
by mercury.sabren.com (8.12.11.20060308/8.12.11) with ESMTP id m48E8bCv015791
for <vbulletinorg@myemail.com>; Thu, 8 May 2008 10:08:37 -0400
Received: (from apache@localhost)
by mercury.sabren.com (8.12.11.20060308/8.12.11/Submit) id m48E8bl3015789;
Thu, 8 May 2008 10:08:37 -0400
Date: Thu, 8 May 2008 10:08:37 -0400
Message-Id: <200805081408.m48E8bl3015789@mercury.sabren.com>
To: vbulletinorg@myemail.com
Subject: UN Diplomatic Passport & Swiss Private Bank Accounts
From: Union Privacy Ltd <commercialads@unionprivacy.com>
Reply-To:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit

My guess is that nochkin is right; the spammer tried various e-mail combinations and one hit my address, vbulletinorg@myemail.com.

Dream
05-13-2008, 02:19 AM
Spam bots can get your email if you have the paypal options enabled and released a mod.

Paul M
05-13-2008, 06:41 AM
Not unless they log in as a licensed member.

Marco van Herwaarden
05-13-2008, 07:11 AM
And the coder has setup for PayPal donations.