vb.org Archive - Spam to my dedicated vb.org e-mail

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin.org Site Feedback (https://vborg.vbsupport.ru/forumdisplay.php?f=7)

- - Spam to my dedicated vb.org e-mail (https://vborg.vbsupport.ru/showthread.php?t=178541)

Spam to my dedicated vb.org e-mail

Ok,

I am not sure what the deal is, but today I received a spam mail that was sent to my e-mail address that I only use at vbulletin.org. It's not some random address that a spammer can accidentally send mail to. Somehow the address must have been leaked, and I wonder how. Anyways, here is the spam message (without links):

Quote:

Union Privacy Ltd

Union Privacy group is the world's largest provider and expeditor of global travel documents and passports. We service people, companies of all sizes, from small neighborhood businesses, to large tour and cruise ship operators, to most of the FORTUNE 500. Union Privacy has the unique advantage of offering clients the best of all worlds - highly trained visa and passport professionals combined with attention to flexible, responsive service.

We offer Comprehensive guide to obtaining second passports and citizenships, camouflage passports, new identities, legal residency and more.

Through our long time reliable and trusted contacts at governmental level, we are finally able to offer a genuine United Nations Diplomatic appointment and passport from a respected UN member country. Also you can take apart in our Passport Programs for your Second Passport (even with New Identity).

Our Passport Programs:
----------------------------
1. Southern Africa Passport
2. Asian Passport
3. South America Passport
4. United Nations Diplomatic Passport

Union Privacy offers world wide Financial Services and Bank accounts, especially in Switzerland, because Switzerland can be a 'safe bet' when comes to your money. No perceived threats of war, financial and political stability, low inflation rate a major factors influencing world famous bank accounts in Switzerland. Switzerland is still a non European-union country highly regarding for their world's most stable currency CHF Swiss franc.

Our Private Offshore Bank Accounts Program (Tax free):
--------------------------------------------------------
1. Swiss Numbered Account
2. Swiss Private Bank Account
3. Credit Suisse Account
4. Classic Euro Account

Start your second life with your second passport.
Experience tax free private bank accounts.
Open all closed doors in your life with your new UN Diplomatic Passport.

Union Privacy Ltd

Quote:

Originally Posted by AlexanderT (Post 1512717)

You have the ability for members to send your email. I am not sure how this happened, but I am certain that vBulletin.com doesn't give out emails.

We never give out email addresses.

Either they have just tried the email address (i even get spam on some accounts i had created but have not even used!), or someone has contacted you using the Email contact option and you have replied to it (or an automated reply was sent).

I don't see any other way someone could have got hold of your address.

Many spammer use random and pseudo-random e-mail addresses to spam.
They split login and domain parts, and switch them around to get new e-mail addresses. I'm getting spam on e-mail accounts I did not even create!
Good thing that I have server-side spam filter...

Are you seeing variants of your email address in the CC location? - which is typical of a blanket spammer. Or do you have a catch-all set up to your account?

I have a catch-all; but this one got directly sent to my vbulletin.org address. Here is the header (sensitive information removed):

Quote:

Return-Path: <apache@mercury.sabren.com>
Received: from mail.foobar.com ([unix socket])
by mail.foobar.com (Cyrus v2.2.13-Debian-2.2.13-10) with LMTPA;
Thu, 08 May 2008 16:08:49 +0200
X-Sieve: CMU Sieve 2.2
X-Virus-Scan: amavisd-new at av.foobar.com
X-Spam-Score: 4.972
X-Spam-Level: ****
X-Spam-Status: No, score=4.972 tagged_above=-999 required=7.31
tests=[BAYES_50=0.001, DCC_CHECK=2.17, DIGEST_MULTIPLE=0.001,
RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5,
RAZOR2_CHECK=0.5, SARE_WEOFFER=0.3]
Received: from mercury.sabren.com (mercury.sabren.com [67.19.173.36])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mail.foobar.com (Postfix) with ESMTP id 45675798041
for <vbulletinorg@myemail.com>; Thu, 8 May 2008 16:08:42 +0200 (CEST)
Received: from mercury.sabren.com (localhost.localdomain [127.0.0.1])
by mercury.sabren.com (8.12.11.20060308/8.12.11) with ESMTP id m48E8bCv015791
for <vbulletinorg@myemail.com>; Thu, 8 May 2008 10:08:37 -0400
Received: (from apache@localhost)
by mercury.sabren.com (8.12.11.20060308/8.12.11/Submit) id m48E8bl3015789;
Thu, 8 May 2008 10:08:37 -0400
Date: Thu, 8 May 2008 10:08:37 -0400
Message-Id: <200805081408.m48E8bl3015789@mercury.sabren.com>
To: vbulletinorg@myemail.com
Subject: UN Diplomatic Passport & Swiss Private Bank Accounts
From: Union Privacy Ltd <commercialads@unionprivacy.com>
Reply-To:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit

My guess is that nochkin is right; the spammer tried various e-mail combinations and one hit my address, vbulletinorg@myemail.com.

Spam bots can get your email if you have the paypal options enabled and released a mod.

Not unless they log in as a licensed member.

And the coder has setup for PayPal donations.

X vBulletin 3.8.12 by vBS Debug Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (3)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (9)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages:

Phrase Groups Available:

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01066 seconds Memory Usage 1,737KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (3)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (9)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: