🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: ucam.comp.mail
Article #5

Re: Another nasty scam

#5
From: Jón Fairbairn
Date: Fri, 21 May 2004 09:07
59 lines
2958 bytes
DR de Lacey <del2@cam.ac.uk> writes:

> [fu to cam.misc in case any interested party can't access ucam groups]
> Just received a confirmation of an order I never placed,
> stating that my bank account will be debited �1099.99 and
> with a url to track my order or query it.

I got one too. Where yours has
> From: "Krista Bright" <shyefq@msn.com>
mine has "From: "Rory Bower" <effvoygawckc@hotmail.com>" but
otherwise looks much the same

> Company calls itself SunLight Electronics of London: no
> address or phone no of course.

 whois sunairthebest.org says:
...
Registrant ID:D108490598178149
Registrant Name:LEW inc
Registrant Organization:LEW inc
Registrant Street1:200 Sutton Passeys Crescent
Registrant City:Wollaton
Registrant State/Province:NA
Registrant Postal Code:NG8 1DZ
Registrant Country:GB
Registrant Phone:+44.07899980958
Registrant FAX:+613.86242499
Registrant Email:hillaryjknowles@yahoo.co.uk
Admin ID:D108490598178146
Admin Name:Hillary Knowles
Admin Organization:LEW inc
Admin Street1:200 Sutton Passeys Crescent
Admin City:Wollaton
Admin State/Province:NA
Admin Postal Code:NG8 1DZ
Admin Country:GB
Admin Phone:+44.07899980958
Admin Email:hillaryjknowles@yahoo.co.uk
...

> I'd almost have been taken in were not the message (a) sent
> to a number of @cam addresses and (b) sent again in a
> different name to a different randon set of @cam addresses.

What would have happened if you had been "taken in"? The
random-looking part of the URLs

> http://sunairthebest.org/index.html?trackorder=29992kkE999
> 
> To cancel or delay the order visit:
> 
> http://sunairthebest.org/index.html?stoporder=29992kkE999

in the one you got is the same as mine, so they aren't even
going to get much information if you follow the link.

-- 
J�n Fairbairn                                 Jon.Fairbairn@cl.cam.ac.uk
http://www.chaos.org.uk/~jf/Stuff-I-dont-want.html  (updated 2004-03-03)
Technical Details
Message-ID: <wfr7teno6b.fsf@calligramme.cl.cam.ac.uk>
Path: arc1-ca.pugleaf.net!controlnews3.google.com!news2.google.com!news.maxwell.syr.edu!easynet-monga!easynet.net!feed4.jnfs.ja.net!feed2.jnfs.ja.net!jnfs.ja.net!pegasus.csx.cam.ac.uk!not-for-mail
References: <c8kd4p$hs3$1@pegasus.csx.cam.ac.uk>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII
X-Google-Thread: 102f53,99c1a8ad650e2532
X-Google-Attributes: gid102f53,public
Path: arc1-ca.pugleaf.net!controlnews3.google.com!news2.google.com!news.maxwell.syr.edu!easynet-monga!easynet.net!feed4.jnfs.ja.net!feed2.jnfs.ja.net!jnfs.ja.net!pegasus.csx.cam.ac.uk!not-for-mail
From: "Jón Fairbairn" <jon.fairbairn@cl.cam.ac.uk>
Newsgroups: ucam.comp.mail,ucam.misc,cam.misc
Subject: Re: Another nasty scam
Followup-To: cam.misc
Date: 21 May 2004 10:07:40 +0100
Organization: University of Cambridge, England
Lines: 59
Sender: jf@calligramme.cl.cam.ac.uk
Message-ID: <wfr7teno6b.fsf@calligramme.cl.cam.ac.uk>
References: <c8kd4p$hs3$1@pegasus.csx.cam.ac.uk>
NNTP-Posting-Host: calligramme.cl.cam.ac.uk
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Face: H#SM:U1U-/6#NN83s6?Die557~]Dfifz~-|V:wSKGL6T-|!qk{U4/M7+k5Py!-{q=2Q/%0@
        E29yc_kQC&^
User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.2