ar Deadbeats Hall of Lame - 2012 Phish Scam Edition
Anti-Spam The Deadbeats Hall of Lame
Warning: Not all menu items are working. We're working on this but this site is a low-priority project.
16mm, 8mm and Super8 Films put to DVD. Fast Turn-Around for your priceless family films

Deadbeats' Hall of Lame
2012 Phish Scam Edition

WARNING!

Do not sign me up for any mail lists. Studio42 does not accept such unsolicited business. Also, since I've recently been getting a flood of such e-mail from various people and organizations I don't wish to deal with, their names will end up here, along with their home and business addresses, and phone numbers, whenever possible.
Please realize that 99.9% of internet users DON'T want your crap in our e-mail boxes.
Minimum fine for violation of this policy allows me to legally bill/invoice for $500 and this can be escalated to a court of law.

This page created on January 9. 2012


Subject: Dear Email Owner
Date: Wed, 11 Jan 2012 00:45:2
Date:        1/10/2012 16:45
Received:    1/10/2012 17:02
From:        Bachman, Diane M., Diane.Bachman@bp.com


  • See the spam

Coming through MessageLabs in New York in the United States
Spammer is from Great Britain, or at least it appears to be.
Phish site is in the British Virgin Islands.


  • See the lookups

    
Subject: System Administrator Login Up Date
Date:        1/15/2012 04:27
Received:    1/15/2012 22:43
From:        Mikaella Hudspeth, Z1646271@students.niu.edu
To:          info@webmail.co.uk


  • See the spam

Abusing a school in Illinois from Nigeria.
Site is on Google in California.
Google, Califorina and Illinois are part of the .


  • See the lookups

    
Subject: System Administrator Login Up Date
Date:        1/15/2012 04:26
Received:    1/15/2012 22:45
From:        Mikaella Hudspeth, Z1646271@students.niu.edu
To:          info@webmail.co.uk


  • See the spam

Abusing a school in Illinois from Nigeria.
Site is on Google in California.
Google, Califorina and Illinois are part of the .


  • See the lookups

    
Subject: 250MB
Date:        1/18/2012 08:12
Received:    1/18/2012 09:49
From:        Meade, Daphne (MET), Daphne.Meade@AHSS.ORG
To:          li@li.com, li@li.com


  • See the spam

Abusing a network in Florida. Site is hosted by Corporate Colocation Inc. in California.
United States for relay and hosting.


  • See the lookups

    
Subject: WebCT Administrator
Date:        1/22/2012 15:17
Received:    1/22/2012 15:49
From:        Donald Boyd, dboyd@troupco.org
To:          info@admin.org, info@admin.org


  • See the spam

1 of 2
Sending through a blind server in Georgia.
Web site is on the Cogentco network in Washington DC.
All elements are located in the United States.


  • See the lookups

    
Subject: WebCT Administrator
Date:        1/22/2012 15:18
Received:    1/22/2012 15:50
From:        Donald Boyd, dboyd@troupco.org
To:          info@admin.org, info@admin.org


  • See the spam

2 of 2
Sending through a blind server in Georgia.
Web site is on the Cogentco network in Washington DC.
All elements are located in the United States.


  • See the lookups

    
Subject: Admin Message--Your Account Expire In 24Hours
Date:        1/24/2012 05:16
Received:    1/24/2012 09:10
From:        Tiffany Smith, tismith@fruitvale.k12.ca.us
To:          account@domain.org


  • See the spam

Abusing a blind server in California in the United States.
Web site is hosted in the British Virgin Islands.
Another previous spam from the Virgin Islands is located here.
Russian domain registry.


  • See the lookups

    
Subject: Admin Message--Your Account Expire In 24Hours
Date:        1/24/2012 23:15
Received:    1/25/2012 09:45
From:        Palmer, Elaine, epalmer@lvcsd.k12.ny.us
To:          undisclosed-recipients:;


  • See the spam

Abusing a blind server on a school district in New York in the United States.
Web site is hosted in the British Virgin Islands.
Russian domain registry.


  • See the lookups

    
Subject: WebCT Administrator
Date:        1/26/2012 14:23
Received:    1/26/2012 14:28
From:        Dober, Johannes Martin, JohannesMartin.Dober@elkw.de
To:          undisclosed-recipients:;


  • See the spam

Abusing Germany from Nigeria. The phish site is non-functional and located in Dutch netspace.
The subject appears to align with this spam and this spam.


  • See the lookups

    
Subject: ACH transfer rejected
Date:        1/26/2012 02:52
Received:    1/27/2012 09:57
From:        The Electronic Payments Association, transactions@nacha.org
To:          Chris Pickett, chris@studio42.com


  • See the spam

Abuse of a server in Portugal. Target site is in Turkey.
Spammer listed a Virginia address, which is in the United States. This is most likely a forgery.

This has ties to this spam and this spamSee the lookups

    
Subject: For your protection we have suspended your Barclays account
Date:        2/4/2012 04:14
Received:    2/4/2012 10:19
From:        Barclays Internet Banking, xthllc@hotmail.com
To:          undisclosed-recipients:;


  • See the spam

Abusing Sun Microsystems in California, United States, from India.
Claiming to be a British bank. Hotmail forgery.


  • See the lookups

    
Subject:  Your INTUIT INC. account needs update.
Date:        2/6/2012 06:36
Received:    2/7/2012 08:39
From:        INTUIT INC., updates@quickbooks.com
To:          Chris Pickett, chris@studio42.com


  • See the spam

Blind server in Spain is abused. Spam points to a dead Italian site.


  • See the lookups

    
Subject: RE: Confirm Your Email-Account Now!!!
Date:        2/13/2012 05:34
Received:    2/13/2012 10:52
From:        Michele Turpin, mturpin@ceres.k12.ca.us
To:          Michele Turpin, mturpin@ceres.k12.ca.us


  • See the spam

School abuse on the AT&T network in California, United States.
Scam site hosted in Czech Republic.


  • See the lookups

    

Date:        2/21/2012 16:38
Received:    2/21/2012 19:16
From:        Bank of Montreal Alert, kytph@aol.com


  • See the spam

Abusing Canada from AT&T's network in Georgia, United States.


  • See the lookups

    
Subject: Your mailbox is almost full.
Date:        2/24/2012 04:34
Received:    2/24/2012 08:29
From:        Patricia Davies-Gorman, pdavies-gorman@bbpschools.org
To:          undisclosed-recipients:;


  • See the spam

Abusing machines in New York and Massachusetts, United States.
Site itself uses a Yahoo drop, registered to someone in India


  • See the lookups

    
Subject: RE: Your mailbox is almost full.
Date:        2/25/2012 02:09
Received:    2/25/2012 09:11
From:        Student Government, SGA, sga@indwes.edu
To:          Student Government, SGA, sga@indwes.edu


  • See the spam

Abusing systems in Indiana and Massachusetts, United States.
Site itself uses a Yahoo drop, registered to someone in India

2nd in 24 hours.


  • See the lookups

    
Subject: Validate and Update your mailbox
Date:        2/27/2012 13:38
Received:    2/28/2012 10:54
From:        Jan Graham, jangraham@davenport.wednet.edu
To:          info@usa.com


  • See the spam

Raping a School in Washington, United States, for a Yahoo-hosted site in India.


  • See the lookups

    
Subject: 
Date:        2/28/2012 04:05
Received:    2/28/2012 10:48
From:        Aryn Hays, ahays10@austincollege.edu


  • See the spam

Sending through Postini, a Google Company, in California, United States.
Abuse comes from raping a School in Texas.
Phish site is Dutch.


  • See the lookups

    
Subject: 
Date:        2/28/2012 04:05
Received:    2/28/2012 10:54
From:        Aryn Hays, ahays10@austincollege.edu


  • See the spam

Sending through Postini, a Google Company, in California, United States.
Abuse comes from raping a School in Texas.
Phish site is Dutch.


  • See the lookups

    
Subject: Your mailbox is almost full.
Date:        2/29/2012 05:23
Received:    2/29/2012 11:03
From:        Mani R., rm1@soton.ac.uk
To:          undisclosed-recipients:;


  • See the spam

Scam from Great Britain and hosted in Massachesetts, United States.


  • See the lookups

    
Subject: Webmail Account to be deactivated in 24 hours
Date:        3/5/2012 08:20
Received:    3/5/2012 08:37
From:        Kathman, Kathleen (NIH/OD) [E], kathmank@od.nih.gov
To:          undisclosed-recipients:;


  • See the spam

Spammer uses a Google Docs page for their scam.
Spammer abuses blind resourcess to relay though the National Institutes of Health
in Maryland, United States.


  • See the lookups

    
Subject: USPS postage labels receipt.
Date:        3/27/2012 07:00
Received:    3/27/2012 10:00
From:        Buford Otto, USPS_Shipping_Alert@usps.com
To:          Chris Pickett, chris@studio42.com


  • See the spam

Phish scam using the US Postal System as the con.
Comes from the Ukraine via abusing Bulgaria. Site is hosted in Romania.


  • See the lookups

    
Subject: Verify your activity ,
Date:        3/29/2012 00:00
Received:    3/28/2012 18:28
From:        Barclays Bank PLC., secure@barclays.co.uk
To:          undisclosed-recipients:;


  • See the spam

Pretending very poorly to be Barclay's Bank in the UK.
Spam comes from the Czech Republic through origination in Italy.


  • See the lookups

    
Subject: Temporarily suspended your account
Date:        3/29/2012 02:35
Received:    3/29/2012 09:44
From:        Citibank, discover@email.discover.com


  • See the spam

Forging Discover to pretend to be CitiBank to send garbage to my anti-spam account.
Abuse originates in Cyprus and goes through Indonesia to push a China-hosted web site.


  • See the lookups

    
Subject: Keeping Track Of Usage
Date:        3/30/2012 06:02
Received:    3/30/2012 08:47
From:        Bone, Gary, Gary.Bone@abilenetx.com
To:          undisclosed-recipients:;


  • See the spam

Spammer abuses a blind server on SuddenLink in Texas.
Target is  Google Docs page in California.
All sites are in the United States.


  • See the lookups

    
Subject: Validate and Update your mailbox
Date:        4/15/2012 13:50
Received:    4/15/2012 20:54
From:        Bea Martin, bmartin@glenair.com
To:          info@webmail.net, info@webmail.net


  • See the spam

Abusing a server in California, United States, off AT&T's network based in Texas.
Scammer site is in France, but it is registered to a New York address.


  • See the lookups

    
Subject: Keeping Track Of Your Usage
Date:        4/19/2012 07:30
Received:    4/19/2012 12:23
From:        McDaniel, Ken, KMcDaniel@wccusd.net


  • See the spam

Abusing Circuit City's network in Virginia, United States, to push a Google Docs form
in California.


  • See the lookups

    
Subject: Keeping Track Of Your Usage
Date:        4/20/2012 08:45
Received:    4/20/2012 20:09
From:        Greenspan, Judy, JGreenspan@wccusd.net


  • See the spam

Same as above, but this time raping a school in California and still pushing the same 
Google Docs form.
United States spam unfortunately.
This went through the Contra Costa County Office Of Education


  • See the lookups

    
Subject: Your Message is Ready
Date:        4/24/2012 11:24
Received:    4/24/2012 11:55
From:        American Express, AmericanExpress@welcome.aexp.com
To:          Chris Pickett, chris@studio42.com


  • See the spam

Blind server in Portugal. Target site is in California, United States.
Scammer tries to avoid being accused of phishing by directing to the anti-phishing page
of the company they are trying to defraud.


  • See the lookups

    
Subject: Keeping Track Of Your Usage
Date:        5/2/2012 07:16
Received:    5/3/2012 10:47
From:        Brown, Maria, MBrown@wccusd.net


  • See the spam

Abusing the same school network in California as this spam.
Google Docs form.
United States spam unfortunately.
This went through the Contra Costa County Office Of Education


  • See the lookups

    
Subject: Keeping track of your usage.
Date:        5/2/2012 07:40
Received:    5/3/2012 10:47
From:        Brown, Maria, MBrown@wccusd.net


  • See the spam

Abusing the same school network in California.
Google Docs form.
United States spam unfortunately.
It must be escalating, as my non-existant account just went over quota!
This went through the Contra Costa County Office Of Education


  • See the lookups

    
Subject: Keeping track of your usage.
Date:        5/2/2012 07:51
Received:    5/3/2012 10:50
From:        Brown, Maria, MBrown@wccusd.net


  • See the spam

Abusing the same school network in California.
Google Docs form.
United States spam unfortunately.
It must be escalating, as my non-existant account just went over quota!
This went through the Contra Costa County Office Of Education


  • See the lookups

    
Subject: RE: Confirm your identity Webmail
Date:        5/8/2012 03:08
Received:    5/8/2012 11:10
From:        visitor, visitor@llantwitschool.org.uk
To:          visitor, visitor@llantwitschool.org.uk


  • See the spam

Raping a site in Great Britain for a site hosted in California, United States.


  • See the lookups

    
Subject: Keeping Track Of Your Usage
Date:        5/8/2012 08:24
Received:    5/8/2012 11:06
From:        Robert Curran, Curran_R@madera.k12.ca.us
To:          undisclosed-recipients:;


  • See the spam

Abusing school resources and a Google docs site. All resources are in California,
United States.


  • See the lookups

    • If you are one of the dilweeds who sent me unsolicited email or are someone thinking about it, drop dead.

    Also, if you've got a complaint about my anti-spam feelings or want to scold me for being justifiably sick of spam, I have the following words of wisdom for you:

    BLOW IT OUT YOUR ASS!

    Anyone else, I'd like to hear from you. Click below and drop me a line.
    Anti-Spam Site administrator