It's a phishing scam: http://isc.sans.org/diary.html?storyid=7918&rss
On Fri, 8 Jan 2010 12:41:07 -0700 Blake Pfankuch <[email protected]> wrote: > I too have been receiving these to my spamtrap domain... again any > ideas to combat this would be helpful. > > -----Original Message----- > From: Shane Ronan [mailto:[email protected]] > Sent: Friday, January 08, 2010 12:34 PM > To: Owen DeLong > Cc: Nanog list > Subject: Re: New SPAM DOS > > I recently started receiving these as well for my domain. > > Would appreciate anyone's input on what the deal is. > > On Jan 8, 2010, at 2:22 PM, Owen DeLong wrote: > > > At least this is new for me... > > > > I host scvrs.org on one of my servers, and, it does not have any > > outlook or owa services. For some reason, someone decided to try > > and send this message out to various internet recipients: > > > >> Dear user of the scvrs.org mailing service! > >> > >> We are informing you that because of the security upgrade of the > >> mailing service your mailbox (x) settings were changed. In order to > >> apply the new set of settings click on the following link: > >> > >> http://scvrs.org/owa/service_directory/settings.php?email=x&from= > >> scvrs.org&fromname=wa2ibm > >> > >> Best regards, scvrs.org Technical Support. > > > > An now I'm having to clean up various blacklistings thinking that my > > server is a spamvertised web site. > > > > Anyone seen this before? Any good techniques for combatting it? > > > > Owen > > > > > -- John
