SatelliteGuys spamming? (No it's not)

[SatelliteGAL]

Lol

 

[chaddux]

That is because that is amazingly close to the way you really spell!

Your own wife digging on you! Too funny.

 

[Pepper]

I raed smowerhe taht it was a haox but I fgoert werhe, alpreatlny the wrdos in taht pgaraparh wree epscealily cafretd to be amzinelgy esay to raed.

 

[iXneonXi]

somewhere my posts are being lost... I posted a reply to that yesterday saying how easy both were to read, but the post is gone, and so is another thing I posted earlier.

 

[Scott Greczkowski]

Please see http://www.satelliteguys.us/showthread.php?t=72566

 

[chaddux]

Well, it has happened again. Same circumstances to my satelliteguys-exclusive email address. However, it's a different website. Did the host ever get the problem corrected?

Subject: FTA Official Pansat site supported by Blacklist himself
From: "BlackList" <jjj@yourhostingaccount.com>

The future of FTA is NOW available at CRAP LINK REMOVED . This is the
"Official" Pansat site supported by Blacklist himself, and will always
have
the latest news, info, & releases concerning Pansat.

Beware of scam attempts using the Blacklist name. They are just that,
SCAM
ATTEMPTS! This email is sent out through a database and doesn't make us
scammers. We are only helpers of FTA, by sending this notice out.
CRAP LINK REMOVED is now an open Forum!

Please feel free to stop by and see the latest in forums supported
FULLY by
Blacklist.

Experience a friendly atmosphere and a lot of helpful people from our
community, as well as some great FTA fun at CRAP LINK REMOVED

Welcome to all, from Blacklist


Regards; Blacklist

 

[BFG]

Yup I got one.

 

[Shawn95GT]

Me three.

Exploits suck.

 

[LER]

post or PM the headers, please. I got one, but it doesn't appear to have traversed SatelliteGuys at all.

 

[LER]

If your headers look like this:

Return-path: <jjj@yourhostingaccount.com>
Envelope-to: ler@lerctr.org
Delivery-date: Sun, 24 Jul 2005 22:37:12 -0500
Received: from outmail.yourhostingaccount.com ([65.254.254.75]:36478 helo=mail18.yourhostingaccount.com)
by lerami.lerctr.org with esmtp (Exim 4.52)
id 1Dwtm8-0000Sa-7y
for ler@lerctr.org; Sun, 24 Jul 2005 22:37:11 -0500
Received: from scan05.yourhostingaccount.com ([10.1.1.235] helo=scan05.yourhostingaccount.com)
by mail18.yourhostingaccount.com with esmtp (Exim)
id 1Dwtm6-0001lL-Tn
for ler@lerctr.org; Sun, 24 Jul 2005 23:37:06 -0400
Received: from cgi13.yourhostingaccount.com ([10.1.1.145] ident=exim)
by scan05.yourhostingaccount.com with spamscanlookuphost (Exim)
id 1Dwtm6-0005te-PB
for ler@lerctr.org; Sun, 24 Jul 2005 23:37:06 -0400
Received: from cgi13.yourhostingaccount.com ([10.1.1.145] helo=yourhostingaccount.com)
by scan05.yourhostingaccount.com with esmtp (Exim)
id 1Dwtm6-0005t8-F4
for ler@lerctr.org; Sun, 24 Jul 2005 23:37:06 -0400
Received: from server.yourhostingaccount.com with local
for ler@lerctr.org
id 1Dwtm1-0003UB-BU (13403); Sun, 24 Jul 2005 23:37:01 -0400
X-EN-Info: U=altrautman P=/store/media/webalizerr/index.php
X-EN-CGIUser: altrautman
X-EN-CGIPath: /store/media/webalizerr/index.php
To: ler@lerctr.org
Subject: FTA Official Pansat site supported by Blacklist himself
From: BlackList <jjj@yourhostingaccount.com>
Reply-To:
MIME-Version: 1.0
X-Mailer: PHPBulkEmailer 1.1 http://www.nukedweb.com/
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <E1Dwtm1-0003UB-BU@yourhostingaccount.com>
Date: Sun, 24 Jul 2005 23:37:01 -0400
Sender: BlackList <jjj@yourhostingaccount.com>
X-Spam-Score: 1.7 (+)
X-LERCTR-Spam-Score: 1.7 (+)
X-Spam-Report: (1.7 points, 5.0 required)
BAYES_40=-1.096 REPLY_TO_EMPTY=1.643 SARE_XMAIL_PHPBulkEmai=1.111 SPF_PASS=-0.001 UNPARSEABLE_RELAY=0.001
X-LERCTR-Spam-Report: (1.7 points, 5.0 required)
BAYES_40=-1.096 REPLY_TO_EMPTY=1.643 SARE_XMAIL_PHPBulkEmai=1.111 SPF_PASS=-0.001 UNPARSEABLE_RELAY=0.001
DomainKey-Status: no signature

please, please file an abuse complaint to:

abuse@bizland-inc.com

the 65.254.254.75 IP address is theirs.

Thanks!

 

[iXneonXi]

Ok gimme instructions how to file abuse complaint to them because I'm annoyed got the same messsage >.<

 

[korsjs]

look at the post right above yours for directions.

 

[mdonnelly]

I got this too. There must be some security hole that lets people harvest our private e-mail addresses from here.

 

[Scott Greczkowski]

It's the same list that was used last time. There was a hole but it was patched awhile ago, and the hole was not even on our server.

(The person harvesting was on the same rack as us at our ISP)

 

[Shawn95GT]

Intersting - mine came from .78

Return-Path: <jjj@yourhostingaccount.com>
Received: from mailout03.yourhostingaccount.com (outmail.yourhostingaccount.com [65.254.254.78])
by mx.gmail.com with ESMTP id 64si3179636wra.2005.07.24.22.03.40;
Sun, 24 Jul 2005 22:03:40 -0700 (PDT)

Sending complaint.

<edit>
Check this out:

Unsolicited Email (Spam): All unsolicited email complaints should include a forwarded copy of the entire text of the unsolicited email message. This copy should include the message headers and the entire text of the message. BizLand will act upon complaints of unsolicited email as follows:

1. If one complaint of a member sending unsolicited email is received without any other complaints, BizLand will notify the member that a complaint has been lodged against them for sending unsolicited email. If necessary, suitable action will be taken against them. If the member sends a different unsolicited message and we receive another complaint, BizLand will turn off the member's account.

2. If multiple complaints are lodged regarding the same message and the member is determined by BizLand to have sent unsolicited email, the member's account will be turned off.

Please note complaints of unsolicited email will not be considered separate instances unless they are from different individuals.

Send in the complaints. If this guy gets his account shut down he might think twice about pulling this trick again.
</edit>

Shawn

 

[korsjs]

thanks for sharing that info. hopefuly all will send the complaint. i am as soon as i get home.

 

[Neutron]

I sent a complaint as well this morning before coming to work.

 

[korsjs]

my complaint has been sent.

 

[tbenning]

If your headers look like this:
....
please, please file an abuse complaint to:

abuse@bizland-inc.com

the 65.254.254.75 IP address is theirs.

Thanks!

I filed my complaint and got this response:

Thank you for contacting us.


We have already disabled the e-mailing capability of this user. You will not receive any further e-mails. from this customer


If you have any further questions, you can e-mail us seven days a week, 24 hours a day.

 

[LER]

kewl. a nuke notice. Thanks all!
LER