Deadbeats' Hall of Lame
2009 Phish Scam Edition
Do not sign me up for any mail lists. Studio42 does not accept such unsolicited business. Also, since I've recently been getting a flood of such e-mail from various people and organizations I don't wish to deal with, their names will end up here, along with their home and business addresses, and phone numbers, whenever possible.
Please realize that 99.9% of internet users DON'T want your crap in our e-mail boxes.
Minimum fine for violation of this policy allows me to legally bill/invoice for $500 and this can be escalated to a court of law.
This page created on January 1, 2009 for 2009 Deadbeats
This page includes scammers trying to get access to email accounts, Paypal accounts, Ebay accounts or bank accounts, among other ploys to do identity theft.
Subject: Important: Email Account Verification Update!! !
Date: 1/31/2010 23:18
Received: 1/31/2010 23:19
From: Adams, Abigail, aadams@maryville.edu
To: undisclosed-recipients:;
See the spam
Raping a school and setting up operations on a hacked web server.
See the lookups
NTT America, instead of acting on complaints, refuses complaints if they can't respond with
their auto-ignore ack. I will just ensure their netblocks die at the router from now on.
See the denial
Subject: Warning!!!
Date: 2/4/2010 11:36
Received: 2/4/2010 09:43
From: Webmail Closing Down, selena@selena.net.ua
Reply-To: info@ftbcam.com
To: undisclosed-recipients:;
See the spam
Apparently retarded spammers feel attacking my anti-spam address and telling it that it has
expired is a new tactic. Odd. I admin my own server.
Crap out of the Ukraine via Cambodia. Invalid phish URL deliberately used so they can
use a harvesting drop that lives on Google for a domain registered through Enom. Spammer
also uses a Google drop for the domain contact.
See the lookups
Subject: Re: Confirm Your WebMail Details
Date: 2/11/2010 00:47
Received: 2/10/2010 15:51
From: ITS Helpdesk Centre, helpdesk@webmaster.com
Reply-To: helpm@mail2webmaster.com
See the spam
Nigerian abusing Denmark for a phish spam to combat real spam. Right, nice try.
See the lookups
Subject: Dear Account User,
Date: 2/25/2010 01:59
Received: 2/25/2010 06:50
From: System Administrator, selena@selena.net.ua
Reply-To: systemadmniweb@gmail.com
To: undisclosed-recipients:;
See the spam
Abuse of a blind server in the Ukraine for an invalid URL, thus confirming the obvious
stupidity already present in the spam. Google drop. Seems very much like this one.
See the lookups
Subject: Dear Webmail Account Owner
Date: 3/11/2010 07:24
Received: 3/11/2010 08:33
From: Webmail Admin Center, web_admin102@mail2webmaster.com
To: undisclosed-recipients:;
See the spam
Webmaster is once again the target of a lame webmail fish scam. Boring.
Australian abuse via a moron on the Level3 downstream.
See the lookups
Subject: Webmail Verification Update
Date: 4/28/2010 18:06
Received: 4/28/2010 18:30
From: Dawkins, Laquanda, dawkinsl@winthrop.edu
To: undisclosed-recipients:;
See the spam
Lame webmail scam. Raping a school with Dutch hosting and domain registration.
See the lookups
Subject: Your webmail quota system has exceeded the storage limit
Date: 5/21/2010 08:04
Received: 5/21/2010 08:59
From: Technical Support Team, webmaster@nfmjfa.com
To: undisclosed-recipients:;
See the spam
Lame email form site with GoDaddy Registration and a Gmail drop. Spam goes through
Network Solutions via way of Nigeria. Nigerian ISP uses a Live.com drop for contacts.
See the lookups
Form removed. Kill.
See the kill
Subject: Webmail Account Verification Upgrade ! ! !
Date: 7/21/2010 23:20
Received: 7/21/2010 23:17
From: Rick Baumann, rbaumann@tvcc.cc
To: undisclosed-recipients:;
See the spam
Raping a school to push a hosted form to try to steal my "webmail" account. Lame.
Tucows is the registrar for the site being spammed for, and those folks who run
that site aren't easy to get in contact with.
See the lookups
The ISP responsible for letting this out has messed up their abuse whois contact.
See the denial
Subject: Your mailbox is almost full.
Date: 7/22/2010 19:26
Received: 7/22/2010 19:28
From: Catherine Wong, Catherine.Wong@monash.edu
Reply-To: osato_matthew19@yahoo.com
To: info@web.org
See the spam
Nigerian on criminally negligent ISP MTN Nigeria rapes an Australian school and uses a Yahoo
drop.
See the lookups
Subject: Important: Email Account Verification Update!!!
Date: 7/26/2010 11:16
Received: 7/26/2010 11:18
From: Werkx Luc, Luc.Werkx@mil.be
To: upgrade@webmaster.org
See the spam
Abusing Belgum military via a blind server, this apparently British individual with an MSN
domain contact drop, set up a fresh domain for the purposes of phishing using the tired
webmail account threat tactic.
See the lookups
Subject: Important: Email Account Verification Update!!!
Date: 7/27/2010 04:29
Received: 7/27/2010 10:04
From: Carras, Paul, pcarras@wheatland.k12.ca.us
To: undisclosed-recipients:;
See the spam
Raping a blind school from a nearby school, this British dirtbag with an MSN drop
continues to annoy the internet while his hosting provided does nothing.
Same spam or at least web site as this earlier spam from yesterday.
See the lookups
The school abused has a non-functional whois contact.
See the denial
Subject: Important: Email Account Verification Update!!!
Date: 7/29/2010 23:58
Received: 7/29/2010 23:58
From: geoperlo, geoperlo@perlodario.191.it
To: upgrade@webmaster.org
See the spam
Raping a blind Italian server, this same British douchebag earns a third strike, but not
worthy yet of a page of his own. Still uses a MSN drop for his fresh domain, while ee.net
leaves his fresh domain alone.
The domain is registered to:
JOHN BILL (johnbill1960@msn.com)
72 fulbourne road
walthamstow
LONDON
London,E17 4EG
GB
Tel. +701.7865321
And it is responsible for this spam and this spam as well, based on referncing the domain
in the body.
See the lookups
Subject: Sua caixa de correio excedeu o limite
Date: 8/13/2010 05:07
Received: 8/13/2010 12:14
From: Tedford, Rebecca, Rebecca.Tedford@bp.com
To: info@service.com
See the spam
Phish scammer going through MessageLabs from the UK. Pushes for a form on a site hosted
by GNAX and owned by someone in Costa Rica. Sent in Spanish.
See the lookups
Subject: Account Alert
Date: 8/27/2010 22:31
Received: 8/29/2010 10:17
From: Hotmail alert., ernestotinajero@hotmail.com
Reply-To: customer.alert.123@hotmail.com
To: customer.alert.12@hotmail.com
See the spam
Idiot from Nigerian ISP Cybaaspace/Visaphone abusing Hotmail services.
See the lookups
Subject: Your mailbox has exceeded
Date: 9/2/2010 09:49
Received: 9/2/2010 09:50
From: Katja Dahlgaard, katjad@sund.ku.dk
To: Undisclosedrecipients:;
See the spam
Spam from Denmark with a scam site in Singapore.
See the lookups
Subject: System Administrator Update!
Date: 9/19/2010 16:58
Received: 9/19/2010 16:56
From: Danny Seymour, seymourd@nsula.edu
To: undisclosed-recipients:;
See the spam
Blind server abuse for a phish form. Tucows is the registrar for the target domain.
See the lookups
Subject: Your mailbox is almost full.
Date: 9/23/2010 08:33
Received: 9/23/2010 08:29
From: GEORGE H. DALE, gdale@donnaisd.net
To: info@webmaster.edu, info@webmaster.edu
See the spam
RR-originating Phish scam with a Chinese domain on American netspace.
See the lookups
Subject: Dear Email user
Date: 12/1/2010 19:24
Received: 12/1/2010 19:36
From: Mail Provider, info@yourmail.com
Reply-To: reply@yourmail.com
To: undisclosed-recipients:;
See the spam
German account phisher operating off a domain registered through scummy Enom. Spammer appears to like to abuse Canada.
Web form operates off the freedback.com service.
See the lookups
Subject: =?us-ascii?Q?Last=20Warning=20Code=20=3AID67565434?=
Date: 12/9/2010 21:44
Received: 12/9/2010 21:46
From: miloslavsilar@seznam.cz
To: undisclosed-recipients:;
See the spam
1 of 2 from the Czech Republic due to some idiot in India.
See the lookups
Subject: =?us-ascii?Q?Last=20Warning=20Code=20=3AID67565434?=
Date: 12/9/2010 21:44
Received: 12/9/2010 21:51
From: miloslavsilar@seznam.cz
To: undisclosed-recipients:;
See the spam
2 of 2 from the Czech Republic due to some idiot in India.
Wow, 2 last warnings!
See the lookups
Subject: Mail Quota Exceeded
Date: 12/21/2010 08:05
Received: 12/21/2010 10:05
From: Mail Administrator, webacct16@gmail.com
To: admin@web.com
See the spam
1 of 2 sent to postmaster. Nigerian from criminal ISP MTNNigeria uses a Gmail
drop while raping Chile.
See the lookups
Chile administration chooses to use invalid Google links to justify why their
whois contact drops and abuse drops don't exist or work.
See the denial
Subject: Mail Quota Exceeded
Date: 12/21/2010 07:42
Received: 12/21/2010 10:05
From: Mail Administrator, webverifiy@gmail.com
To: admin@web.com
See the spam
2 of 2 sent to postmaster. Nigerian from criminal ISP MTNNigeria usses a Gmail
drop while raping Chile.
See the lookups
Chile administration chooses to use invalid Google links to justify why their
whois contact drops and abuse drops don't exist or work.
See the denial
If you are one of the dilweeds who sent me unsolicited email or are someone thinking about it, drop dead.
Also, if you've got a complaint about my anti-spam feelings or want to scold me for being justifiably sick of spam, I have the following words of wisdom for you:
BLOW IT OUT YOUR ASS!
Anyone else, I'd like to hear from you. Click below and drop me a line.
Anti-Spam Site administrator
|