Re: I've got TORA.08 spelled with numbers?
Hi All, After a fair bit of discussion on and off list,and a fair bit of thought I've decided to change tack a little with stock spam. As of this morning (GMT) I'm reporting all stock spam to the SEC (they have a semi-dedicated address for it). I figure they'll either tell me to quit, block me or do something about the problem. I did some digging into TORA and to my (admittedly suspicious) mind there are enough discrepancies in their published memoranda to justify investigation. That one of their principals is a broker didn't alleviate any of my suspicions and the way their accounts read is reminiscent of those old slow-mo's of the Hindenberg one sees. The company is worth zip, it's acquisitions are at best questionable, so, to my mind, it's been/being set up as a means to pull investor money. I guess they are going for penny stocks since no other investor in their right mind would touch them. If anyone else is interested in taking a similar tack, I'm happy to share my current methods and plans (off list for now since this has little to do with SA directly). Best to all Nigel
Re: I've got TORA.08 spelled with numbers?
On Saturday 18 November 2006 10:59 am, Nigel Frankcom wrote: Hi All, After a fair bit of discussion on and off list,and a fair bit of thought I've decided to change tack a little with stock spam. As of this morning (GMT) I'm reporting all stock spam to the SEC (they have a semi-dedicated address for it). I figure they'll either tell me to quit, block me or do something about the problem. I've been reporting stock spam (scams) to the sec for several months now, I did ask what they do with them, if I can remember they said they can't tell me exactly what they do, but that they do in fact look at each report. -- Chris pgpdCDNfvYGQ8.pgp Description: PGP signature
Re: I've got TORA.08 spelled with numbers?
On Sat, 18 Nov 2006 11:16:30 -0600, Chris [EMAIL PROTECTED] wrote: On Saturday 18 November 2006 10:59 am, Nigel Frankcom wrote: Hi All, After a fair bit of discussion on and off list,and a fair bit of thought I've decided to change tack a little with stock spam. As of this morning (GMT) I'm reporting all stock spam to the SEC (they have a semi-dedicated address for it). I figure they'll either tell me to quit, block me or do something about the problem. I've been reporting stock spam (scams) to the sec for several months now, I did ask what they do with them, if I can remember they said they can't tell me exactly what they do, but that they do in fact look at each report. Here's hoping the more reports they get the higher up the list it goes. We can but hope. KR Nigel
I've got TORA.08 spelled with numbers?
I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Regards Jeff Moss
RE: I've got TORA.08 spelled with numbers?
Even I have started getting it. Have any one cracked any rules for this? Warm Regards, Suhas System Administrator QualiSpace - A QuantumPages Enterprise An ICANN Accredited Domain Registrar === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com === For Any Technical Query Please Use: http://helpdesk.qualispace.com QualiSpace Community Discussion forum: http://forum.qualispace.com -Original Message- From: Jeff Moss [mailto:[EMAIL PROTECTED] Sent: Friday, November 17, 2006 9:15 PM To: users@spamassassin.apache.org Subject: I've got TORA.08 spelled with numbers? I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Regards Jeff Moss
Re: I've got TORA.08 spelled with numbers?
At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something?
Re: I've got TORA.08 spelled with numbers?
Hey I got the same thing. On 11/17/06, Evan Platt [EMAIL PROTECTED] wrote: At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something?
Re: I've got TORA.08 spelled with numbers?
So, here is a question... Why spam everyone with TORA.08, I don't even know what the heck that means!!! - Original Message - From: Evan Platt [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Friday, November 17, 2006 10:48 AM Subject: Re: I've got TORA.08 spelled with numbers? At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something?
Re: I've got TORA.08 spelled with numbers?
I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. lordy, lordy! i'm just *SURE* i'm missing the whole point of this sort of spam ... ... but WHY do these spammers even bother with this sort of stuff? even if it *does* temporarily get past filters -- who in their right mind clicks on this stuff? or, worse, would send/invest $$$?
Re: I've got TORA.08 spelled with numbers?
Evan Platt wrote: At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something? AH HA! It is not a url, its a stock symbol! http://finance.yahoo.com/q?s=TORA.OB
RE: I've got TORA.08 spelled with numbers?
So, here is a question... Why spam everyone with TORA.08, I don't even know what the heck that means!!! I guess it is a (japanese?) nickname. Maybe the nickname of the bot/worm/virus maker? It is possible that this advertising is targeted to spammers, not to real customers: it looks like Ehy, see? I can flood people's mailboxes with it! Come and buy my services. Ah, these business people... giampaolo - Original Message - From: Evan Platt [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Friday, November 17, 2006 10:48 AM Subject: Re: I've got TORA.08 spelled with numbers? At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something?
RE: I've got TORA.08 spelled with numbers?
From: Stuart Johnston [mailto:[EMAIL PROTECTED] Evan Platt wrote: At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something? AH HA! It is not a url, its a stock symbol! http://finance.yahoo.com/q?s=TORA.OB So, it's not 08 but OB. What does OB stands for? OBnubilated? OBfuscating? OBsessive? giampaolo
Re: I've got TORA.08 spelled with numbers?
On Fri, 17 Nov 2006 09:03:54 -0700, [EMAIL PROTECTED] wrote: | Wasn't there a stock image spam with TORA.TORA or something? | | AH HA! It is not a url, its a stock symbol! | | http://finance.yahoo.com/q?s=TORA.OB Trading up 4.5%! Geez... At a rough guess that would be 'salt' money. So when someone does click on it/look it up they see rising stock and buy. Check it again in a few days. Nigel
Re: I've got TORA.08 spelled with numbers?
this seems to catch them: header __MAILER_OL_6626 X-Mailer =~ /^Microsoft Outlook, Build 10\.0\.6626$/ header __MOLE_2962 X-MimeOLE =~ /^Produced\ By\ Microsoft\ MimeOLE\ V6\.00\.2900\.2962$/ meta JM_TORA_XM (__MAILER_OL_6626 __MOLE_2962) --j. Billy Huddleston writes: So, here is a question... Why spam everyone with TORA.08, I don't even know what the heck that means!!! - Original Message - From: Evan Platt [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Friday, November 17, 2006 10:48 AM Subject: Re: I've got TORA.08 spelled with numbers? At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something?
RE: I've got TORA.08 spelled with numbers?
Lol Warm Regards, Suhas System Administrator QualiSpace - A QuantumPages Enterprise An ICANN Accredited Domain Registrar === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com === For Any Technical Query Please Use: http://helpdesk.qualispace.com QualiSpace Community Discussion forum: http://forum.qualispace.com -Original Message- From: Giampaolo Tomassoni [mailto:[EMAIL PROTECTED] Sent: Friday, November 17, 2006 9:36 PM To: users@spamassassin.apache.org Subject: RE: I've got TORA.08 spelled with numbers? So, here is a question... Why spam everyone with TORA.08, I don't even know what the heck that means!!! I guess it is a (japanese?) nickname. Maybe the nickname of the bot/worm/virus maker? It is possible that this advertising is targeted to spammers, not to real customers: it looks like Ehy, see? I can flood people's mailboxes with it! Come and buy my services. Ah, these business people... giampaolo - Original Message - From: Evan Platt [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Friday, November 17, 2006 10:48 AM Subject: Re: I've got TORA.08 spelled with numbers? At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something?
Re: I've got TORA.08 spelled with numbers?
On Fri, 17 Nov 2006 17:09:21 +0100, Giampaolo Tomassoni [EMAIL PROTECTED] wrote: From: Stuart Johnston [mailto:[EMAIL PROTECTED] Evan Platt wrote: At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something? AH HA! It is not a url, its a stock symbol! http://finance.yahoo.com/q?s=TORA.OB So, it's not 08 but OB. What does OB stands for? OBnubilated? OBfuscating? OBsessive? giampaolo - If this is a preferred stock, the letters PR and the letter denoting the class will typically be added. For example, a fictional preferred stock called Cory's Tequila Corporate Preferred T's would have a symbol such as CTC.PR.T. - If the company has more than one type of stock currently trading, then it will have the class added to its suffix. For instance, Berkshire Hathaway comes in two forms: BRK.A and BRK.B. - If a stock is trading on the Pink Sheets or the Over-the-Counter Bulletin Board, a PK or OB will be added to the stock symbol. - On the Nasdaq, a fifth symbol is added to stocks that are delinquent in certain exchange requirements. For example, the letter Q will be added to the stock symbol of a company presently in bankruptcy proceedings. From http://www.investopedia.com/ask/answers/03/061903.asp Nigel
Re: I've got TORA.08 spelled with numbers?
Will that not get legit mail from someone sending via Microsoft Outlook ? - Original Message - From: Justin Mason [EMAIL PROTECTED] To: Billy Huddleston [EMAIL PROTECTED] Cc: users@spamassassin.apache.org Sent: Friday, November 17, 2006 11:10 AM Subject: Re: I've got TORA.08 spelled with numbers? this seems to catch them: header __MAILER_OL_6626 X-Mailer =~ /^Microsoft Outlook, Build 10\.0\.6626$/ header __MOLE_2962 X-MimeOLE =~ /^Produced\ By\ Microsoft\ MimeOLE\ V6\.00\.2900\.2962$/ meta JM_TORA_XM (__MAILER_OL_6626 __MOLE_2962) --j. Billy Huddleston writes: So, here is a question... Why spam everyone with TORA.08, I don't even know what the heck that means!!! - Original Message - From: Evan Platt [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Friday, November 17, 2006 10:48 AM Subject: Re: I've got TORA.08 spelled with numbers? At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something?
Re: I've got TORA.08 spelled with numbers?
| | | | http://finance.yahoo.com/q?s=TORA.OB | | Trading up 4.5%! | | Geez... | | At a rough guess that would be 'salt' money. So when someone does | click on it/look it up they see rising stock and buy. Check it again | in a few days. | | Nigel Hey...there is money to be made! Let's all short TORA.OB
RE: I've got TORA.08 spelled with numbers?
Is this safe to try? Warm Regards, Suhas System Administrator QualiSpace - A QuantumPages Enterprise An ICANN Accredited Domain Registrar === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com === For Any Technical Query Please Use: http://helpdesk.qualispace.com QualiSpace Community Discussion forum: http://forum.qualispace.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, November 17, 2006 9:41 PM To: Billy Huddleston Cc: users@spamassassin.apache.org Subject: Re: I've got TORA.08 spelled with numbers? this seems to catch them: header __MAILER_OL_6626 X-Mailer =~ /^Microsoft Outlook, Build 10\.0\.6626$/ header __MOLE_2962 X-MimeOLE =~ /^Produced\ By\ Microsoft\ MimeOLE\ V6\.00\.2900\.2962$/ meta JM_TORA_XM (__MAILER_OL_6626 __MOLE_2962) --j. Billy Huddleston writes: So, here is a question... Why spam everyone with TORA.08, I don't even know what the heck that means!!! - Original Message - From: Evan Platt [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Friday, November 17, 2006 10:48 AM Subject: Re: I've got TORA.08 spelled with numbers? At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something?
Re: I've got TORA.08 spelled with numbers?
Wouldn't a better solution to be check the e-mail for NOT having any alpha chars? All numbers seems like a no-brainer to me, but I'm fairly new at this. :) Something like Body ~= /[^a-zA-A]/ ? Cheers, -=Ray Justin Mason wrote: this seems to catch them: header __MAILER_OL_6626 X-Mailer =~ /^Microsoft Outlook, Build 10\.0\.6626$/ header __MOLE_2962 X-MimeOLE =~ /^Produced\ By\ Microsoft\ MimeOLE\ V6\.00\.2900\.2962$/ meta JM_TORA_XM (__MAILER_OL_6626 __MOLE_2962) --j. Billy Huddleston writes: So, here is a question... Why spam everyone with TORA.08, I don't even know what the heck that means!!! - Original Message - From: Evan Platt [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Friday, November 17, 2006 10:48 AM Subject: Re: I've got TORA.08 spelled with numbers? At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something?
Re: I've got TORA.08 spelled with numbers?
Ray Anderson wrote: Wouldn't a better solution to be check the e-mail for NOT having any alpha chars? All numbers seems like a no-brainer to me, but I'm fairly new at this. :) Something like Body ~= /[^a-zA-A]/ ? Too many false positives with that one. You'd need to be sure you didn't hit real short emails containing only numbers, like phone numbers, passwords, etc.. The one below also FPs on the real outlook client. The Date header seems to be a bit messed up.(space,tab,date) Might look at that too. ;-) Ken A Pacific.Net Cheers, -=Ray Justin Mason wrote: this seems to catch them: header __MAILER_OL_6626 X-Mailer =~ /^Microsoft Outlook, Build 10\.0\.6626$/ header __MOLE_2962 X-MimeOLE =~ /^Produced\ By\ Microsoft\ MimeOLE\ V6\.00\.2900\.2962$/ meta JM_TORA_XM (__MAILER_OL_6626 __MOLE_2962) --j. Billy Huddleston writes: So, here is a question... Why spam everyone with TORA.08, I don't even know what the heck that means!!! - Original Message - From: Evan Platt [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Friday, November 17, 2006 10:48 AM Subject: Re: I've got TORA.08 spelled with numbers? At 07:44 AM 11/17/2006, you wrote: I'm getting a bunch of spams this morning that have TORA.08 spelled out with numbers like this. 4216775 0611576 215556 7 3308011 3258576 6 7 5 153 85 2 7 3 8 3 6 50 4 1 2 7 0 5 7 2 2 257873 5 7 4 1 3387715 6 2 5 7 1 111500075 8 6 2 2 8 2 2 7 7 3 2 656 0 3 0 8 0 6430533 44 8 6 207 5412501 7637213 Does anybody know what this is about. Got 2 also. Wasn't there a stock image spam with TORA.TORA or something?
Re: I've got TORA.08 spelled with numbers? - Tora Acquires www.makeup.com
http://biz.yahoo.com/iw/061020/0175176.html TORA TECHNOLOGIES INC. Robert E. Rook - President Contact: Contacts: Tora Technologies Inc. Robert E. Rook President 1-866-347-5057
Re: I've got TORA.08 spelled with numbers? - Tora Acquires www.makeup.com
i've got this spam too looks like a ASCI ART with TORA writed in the body of mail... :( On 11/17/06, [EMAIL PROTECTED] wrote: http://biz.yahoo.com/iw/061020/0175176.html TORA TECHNOLOGIES INC. Robert E. Rook - President Contact: Contacts: Tora Technologies Inc. Robert E. Rook President 1-866-347-5057 -- -- Thiago LPS C.E.S.A.R - Administrador de Sistemas msn: [EMAIL PROTECTED] 0xx 81 8735 2591 --
Re: I've got TORA.08 spelled with numbers? - Tora Acquires www.makeup.com
how to block this ascii art spams?? i've got many spams with this tora.ob too... Thiago LPS escreveu: i've got this spam too looks like a ASCI ART with TORA writed in the body of mail... :( On 11/17/06, ** [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: http://biz.yahoo.com/iw/061020/0175176.html TORA TECHNOLOGIES INC. Robert E. Rook - President Contact: Contacts: Tora Technologies Inc. Robert E. Rook President 1-866-347-5057 -- -- Thiago LPS C.E.S.A.R - Administrador de Sistemas msn: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 0xx 81 8735 2591 --
