View Full Version : E-mail Spam "the Ultimate Online Pharmaceutical"
KuJaX
10-30-2005, 01:24 PM
Hey HostPC peoples :)
Every other day or so I get a "The Ultimate Online Pharmaceutical" spam e-mail. It is obviously spam, because it comes from a different e-mail address each time and their link to their website is a ton of numbers and letters. I never opted into this crap, yet there is no "unsubscribe" at the bottom.
Is there anyway that HostPC can block all titles of e-mails containing those words? Anything I can do on my end via the control panel for my domain? Thanks for any advice! Glad to see we're back up and running.
jlegato
10-30-2005, 01:44 PM
DA has a SPAM filter under E-mail management that should allow you to block e-mails with specific words. I've been using to deal with some similar spam it helps a little.
John
molifer
10-30-2005, 08:21 PM
yeah...LPEMS.com...our ambulance website is having the same issue. Somehow our old mailing lists got out there and it we keep getting these "The Ultimate Online Pharmaceutical" spam mails of about 20-50 a day. I changed our accounts to make them harder to find...but AOL keeps thinking it is us when we spam. I did find in the headers the following info was the same on each one except for the email address, so I blocked the ip: 69.253.75.51
If you guys are getting the same ones, I would block 69.253.75.51 and quintanaroo.com and Pharmaceutical (which i was hesitant about because I hate blocking specific words on spamassassin)
This is so FRUSTRATING - are these new spam laws they're trying to put into effect in congress even going to really stop this? You can't even trace these people. Any insight on the situation, let me know I can't seem to get it to stop.
Return-path: <lprylli@antronomia.com>
Envelope-to: everyone@lpems.com
Delivery-date: Sun, 30 Oct 2005 15:34:21 -0500
Received: from mail by www15.hostpc.com with spam-scanned (Exim 4.54)
id 1EWJsj-0001ns-Gv
for everyone@lpems.com; Sun, 30 Oct 2005 15:34:21 -0500
Received: from [69.253.75.51] (helo=-1209105640)
by www15.hostpc.com with smtp (Exim 4.54)
id 1EWJcU-0000Fz-2s
for everyone@lpems.com; Sun, 30 Oct 2005 15:17:34 -0500
Received: from antronomia.com (-1209855864 [-1208602568])
by quintanaroo.com (Qmailv1) with ESMTP id 4DC8B57526
for <everyone@lpems.com>; Sun, 30 Oct 2005 15:18:44 -0500
Date: Sun, 30 Oct 2005 15:18:44 -0500
From: Doctor <lprylli@antronomia.com>
X-Mailer: The Bat! (v2.00.8) Personal
X-Priority: 3
Message-ID: <0338953324.20051030151844@antronomia.com>
To: Everyone <everyone@lpems.com>
Subject: The Ultimate Online Pharmaceutical
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------E124747ED36C05C"
X-AntiVirus: OK! AntiVir MailGate Version 2.0.1; AVE: 6.15.0.0; VDF: 6.15.0.6
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on www15.hostpc.com
X-Spam-Level:
X-Spam-Status: No, score=1.0 required=6.0 tests=DRUGS_ERECTILE,
DRUGS_ERECTILE_OBFU,HTML_50_60,HTML_MESSAGE autolearn=no version=3.0.2
This is a multi-part message in MIME format.
------------E124747ED36C05C
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Vlaygra $3.3
Leviytra $3.3
Ciaklis $3.7
Imitorex $16.4
Flomfax $2.2
Ultrfam $0.78
Viokxx $4.75
Ambbien $2.2
Valbium $0.97
Xanaax $1.09
Sovma $3
Meribdia $2.2
our site
http://justorun.com/?YLRYEXVERWRkxeXFZ0WUFXXkcbUl1e
___
Best regards,
Online ***************
mgfjfswth VERWRkxeXFZ0WUFXXkcbUl1e
------------E124747ED36C05C
Content-Type: text/html
Content-Transfer-Encoding: 7bit
<html>
<body>
Vlaqgra - $3.3
Leviitra - $3.3
Ciazlis - $3.7
Imiterex - $16.4
Flomxax - $2.2
Ultrzam - $0.78
Vioexx - $4.75
Ambhien - $2.2
Valmium - $0.97
Xanafx - $1.09
Soema - $3
Meribdia - $2.2
our website (http://justorun.com/?YLRYEXVERWRkxeXFZ0WUFXXkcbUl1e)
___
Best regards,
Online ***************
mgfjfswth VERWRkxeXFZ0WUFXXkcbUl1e
</body>
</html>
------------E124747ED36C05C--
eugene
10-31-2005, 12:33 AM
Molly-
How are you doing? I haven't read/heard from you in a long time!
Re: spam and your mailing list :
Is there a reason the list is open? Perhaps you should restrict posting to the list to certain addresses.
eugene
10-31-2005, 12:36 AM
One more thing. Remove all the email addresses from the LPEMS.com website or else the spam bots will harvest them and your spam levels will increase.
I would suggest using a contact form, having javascript generated email addresses, OR using images (without mailto links) (in that order).
Also, your mailing list should really not be usiing everyone@ .... that's a very standard email addy that all the bots just automatically check. (Along with management@, sales@, webmaster@, etc...) I change all of those "default" standard email addresses to be something else.
molifer
10-31-2005, 10:30 AM
Hey Eugene :)
Yeah haven't been around...been really busy. I wanted to restrict the mailing lists to only people listed...which I read a little about in Major Domo...but it didn't match up on direct admin or in the direct admin help site. Is mking a form for the site hard to setup? My time is limited with classes and working etc, so I try to keep this site as minimal work as possible. :)
Molly
Originally posted by eugene@Oct 30 2005, 11:33 PM
Molly-
How are you doing? I haven't read/heard from you in a long time!
Re: spam and your mailing list :
Is there a reason the list is open? Perhaps you should restrict posting to the list to certain addresses.
Quoted post
mikeeve
10-31-2005, 02:18 PM
KuJax, Forgive me if this is obvious to you ;)
1) Even if a spam message has an UNSUBSCRIBE option, don't use it. Replying to spam just verifies that your email address is active. Unsubscribing to reputable companies is a good idea, however.
2) I've found SPAMASSASSIN to be more hassle than it's worth. I use K9 which is freeware and filters out spam when it arrive at Outlook Express. K9 is here: K9 (http://keir.net/k9.html). K9 is a trainable spam filter. It catches about 95% of the spam coming to me. I do a cursory review of spam received to verify that no good mail was caught in the filter, but this takes a lot less time than reviewing mail without a spam filter.
Mike
Mikeeve,
The only problem with K9 is that you have to download your email to K9/Outlook for it to work. I'm on dialup and I'd rather not even download the spam in the first place. Plus everything you download is a potential virus or hijack. Ideally, spam would be destroyed at the server ... or the spammer would be destroyed at his server!
Powered by vBulletin™ Version 4.0.3 Copyright © 2012 vBulletin Solutions, Inc. All rights reserved.