Article View: ucam.comp.mail
Article #5Re: Another nasty scam
From: Jón Fairbairn
Date: Fri, 21 May 2004 09:07
Date: Fri, 21 May 2004 09:07
59 lines
2958 bytes
2958 bytes
DR de Lacey <del2@cam.ac.uk> writes: > [fu to cam.misc in case any interested party can't access ucam groups] > Just received a confirmation of an order I never placed, > stating that my bank account will be debited �1099.99 and > with a url to track my order or query it. I got one too. Where yours has > From: "Krista Bright" <shyefq@msn.com> mine has "From: "Rory Bower" <effvoygawckc@hotmail.com>" but otherwise looks much the same > Company calls itself SunLight Electronics of London: no > address or phone no of course. whois sunairthebest.org says: ... Registrant ID:D108490598178149 Registrant Name:LEW inc Registrant Organization:LEW inc Registrant Street1:200 Sutton Passeys Crescent Registrant City:Wollaton Registrant State/Province:NA Registrant Postal Code:NG8 1DZ Registrant Country:GB Registrant Phone:+44.07899980958 Registrant FAX:+613.86242499 Registrant Email:hillaryjknowles@yahoo.co.uk Admin ID:D108490598178146 Admin Name:Hillary Knowles Admin Organization:LEW inc Admin Street1:200 Sutton Passeys Crescent Admin City:Wollaton Admin State/Province:NA Admin Postal Code:NG8 1DZ Admin Country:GB Admin Phone:+44.07899980958 Admin Email:hillaryjknowles@yahoo.co.uk ... > I'd almost have been taken in were not the message (a) sent > to a number of @cam addresses and (b) sent again in a > different name to a different randon set of @cam addresses. What would have happened if you had been "taken in"? The random-looking part of the URLs > http://sunairthebest.org/index.html?trackorder=29992kkE999 > > To cancel or delay the order visit: > > http://sunairthebest.org/index.html?stoporder=29992kkE999 in the one you got is the same as mine, so they aren't even going to get much information if you follow the link. -- J�n Fairbairn Jon.Fairbairn@cl.cam.ac.uk http://www.chaos.org.uk/~jf/Stuff-I-dont-want.html (updated 2004-03-03)
Technical Details
Message-ID:
<wfr7teno6b.fsf@calligramme.cl.cam.ac.uk>Path:
arc1-ca.pugleaf.net!controlnews3.google.com!news2.google.com!news.maxwell.syr.edu!easynet-monga!easynet.net!feed4.jnfs.ja.net!feed2.jnfs.ja.net!jnfs.ja.net!pegasus.csx.cam.ac.uk!not-for-mailReferences:
<c8kd4p$hs3$1@pegasus.csx.cam.ac.uk>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII
X-Google-Thread: 102f53,99c1a8ad650e2532
X-Google-Attributes: gid102f53,public
Path: arc1-ca.pugleaf.net!controlnews3.google.com!news2.google.com!news.maxwell.syr.edu!easynet-monga!easynet.net!feed4.jnfs.ja.net!feed2.jnfs.ja.net!jnfs.ja.net!pegasus.csx.cam.ac.uk!not-for-mail
From: "Jón Fairbairn" <jon.fairbairn@cl.cam.ac.uk>
Newsgroups: ucam.comp.mail,ucam.misc,cam.misc
Subject: Re: Another nasty scam
Followup-To: cam.misc
Date: 21 May 2004 10:07:40 +0100
Organization: University of Cambridge, England
Lines: 59
Sender: jf@calligramme.cl.cam.ac.uk
Message-ID: <wfr7teno6b.fsf@calligramme.cl.cam.ac.uk>
References: <c8kd4p$hs3$1@pegasus.csx.cam.ac.uk>
NNTP-Posting-Host: calligramme.cl.cam.ac.uk
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Face: H#SM:U1U-/6#NN83s6?Die557~]Dfifz~-|V:wSKGL6T-|!qk{U4/M7+k5Py!-{q=2Q/%0@
E29yc_kQC&^
User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.2