You mean H this company is
using zombies
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Kami Razvan
Sent: Tuesday, January 20, 2004
7:19 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail]
Interesting concept..
I guess this qualifies
Guess they have 60,000 very very greedy
individuals. Of course they also have probably 60,000 people violating their
Terms of Service so when I report them through SpamCop they are likely to lose
their DSL / Cable line if they have a respectable ISP.
http://www.virtualmda.com/
--Joshua
It's a very good way for them to get around IP blacklists.
I wonder how the headers look. Pretty much legit, I would guess.
Content is king!
Now if only I could remember who said that
I could have been _M, but it wasn't.
-Dave Doherty
Skywaves, Inc.
- Original Message -
t: Tuesday, January 20, 2004
2:48 PMTo: [EMAIL PROTECTED]Subject: RE:
[Declude.JunkMail] Interesting concept..
You mean H this
company is using zombies
-Original
Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Kami
RazvanSent: Tuesday, Jan
I've collected some information about this
"concept":
On http://www.virtualmda.com/services.htmis a "how it works" for their client called
"VirtualMDA"
This
about the revenues for VirtualMDA users:"2.Payment. Upon completing the registration procedure, you
will be given a unique
Throw the following in an ipfile filter and it should take care of the
problem :)
63.254.68.0/22 Virtumundo/vmlocal.com/adknow-net.com (Spam
House) [63.254.68.0 - 63.254.71.255] 01/17/2003
65.164.176.192/26 Virtumundo/vmlocal.com/adknow-net.com (Spam House)
[65.164.176.192 - 65.164.176.255]
Kami,
Maybe you already know this but just in case you or others don't,
mailserveruser.com is a domain that belongs to Green Horse Corporation (aka
atriks.com). There is quite a list of domains (60+?) that this group of scum
own. I made a filter looking for those domains in the body of the email
Funny how these companies have 100 different names :) I think I've
shared these before, but here's some lines that work on Green Horse
Corporation:
NOTE: replace $ with a dot (changed not to trip some filters).
# Green Horse Corporation (SBL12495)
BODY28CONTAINS/img/c$0/
BODY
Marc,
Would you share your filter? Save me some efforts!
Thanks
-Nick
From: Marc Hilliker [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject:Re: [Declude.JunkMail] Interesting concept..
Date sent: Tue, 20 Jan 2004 11:42
