General discussion

Locked

Spam with a truthful subject

By Deadly Ernest ·
Earlier tonight, my time, I received the following email - what got my attention was how truthful the message heading was.

"You have received a greeding e-card"

The truthful subject was a real shock. Below is the email and the source code.


-------- Original Message --------
Subject: You have received a greeding e-card !
Date: Wed, 10 Feb 2010 18:44:42 +0700
From: webmaster@Hallmark.com
To: <removed>


Hallmark.comShop OnlineHallmark MagazineE-Cards & MoreAt Gold Crown
You have recieved A Hallmark E-Card.

Hello!

You have recieved a Hallmark E-Card.

To see it, click here,

There's something special about that E-Card feeling. We invite you to make a friend's day and send one.

Hope to see you soon,
Your friends at Hallmark

Your privacy is our priority. Click the "Privacy and Security" link at the bottom of this E-mail to view our policy.

Hallmark.com | Privacy & Security


source code

From - Wed Feb 10 23:28:28 2010
X-Account-Key: account6
X-UIDL: UID540-1206275658
X-Mozilla-Status: 0003
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path: <bow@thai-report.com>
Envelope-to: <removed>
Delivery-date: Wed, 10 Feb 2010 23:16:02 +1100
Received: from [61.19.255.53] (helo=thai-report.com)
by removed with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <bow@thai-report.com&gt
id 1NfBU9-000798-Cb
for <removed>; Wed, 10 Feb 2010 23:16:02 +1100
Received: from localhost.localdomain (TR-S02 [127.0.0.1])
by thai-report.com (8.12.8/8.12. with ESMTP id o1ABihig019310
for <removed>; Wed, 10 Feb 2010 18:44:44 +0700
Received: (from bow@localhost)
by localhost.localdomain (8.12.8/8.12.8/Submit) id o1ABighN019307;
Wed, 10 Feb 2010 18:44:42 +0700
Date: Wed, 10 Feb 2010 18:44:42 +0700
Message-Id: <201002101144.o1ABighN019307@localhost.localdomain>
To: <removed>
Subject: You have received a greeding e-card !
From: webmaster@Hallmark.com
Content-Type: text/html
X-Spam-Status: No, score=3.7
X-Spam-Score: 37
X-Spam-Bar: +++
X-Spam-Flag: NO


<style type="text/css"> <!-- a { color:#3000A0; text-decoration:none;} a:hover { text-decoration:underline; } -->
</style> <table width="617" border="0" cellspacing="0" cellpadding="0">
<tr> <td><a href="http://xenonshow.gr/hallmark-card.exe"
target="_blank"><img
src="http://www.hallmark.com/wcsstore/HallmarkStore/images/globalNav/gnav_logo.gif" alt="Hallmark.com"
title="Hallmark.com" width="128" height="53" border="0"></a><a
href="http://xenonshow.gr/hallmark-card.exe"
target="_blank"><img
src="http://www.hallmark.com/wcsstore/HallmarkStore/images/globalNav/gnav_shop.gif" alt="Shop Online" title="Shop
Online" width="116" height="53" border="0"></a><a
href="http://xenonshow.gr/hallmark-card.exe"
target="_blank"><img src="http://www.hallmark.com/wcsstore/HallmarkStore/images/globalNav/gnav_hmkmag.gif"
alt="Hallmark Magazine" title="Hallmark Magazine" width="130" height="53" border="0"></a><a
href="http://xenonshow.gr/hallmark-card.exe"
target="_blank"><img
src="http://www.hallmark.com/wcsstore/HallmarkStore/images/globalNav/gnav_ecards.gif" alt="E-Cards & More"
title="E-Cards & More" width="120" height="53" border="0"></a><a
href="http://xenonshow.gr/hallmark-card.exe"
target="_blank"><img src="http://www.hallmark.com/wcsstore/HallmarkStore/images/globalNav/gnav_gcs.gif" alt="At Gold
Crown" title="At Gold Crown" width="123" height="53" border="0"></a></td>
</tr> </table> <table width="617" border="0" cellspacing="0" cellpadding="0" style="border-left: 1px solid #AAA7A1;
border-right: 1px solid #AAA7A1;">
<tr> <td height="28" valign="middle" bgcolor="#E0D8D0"><font size="4" face="Arial, Helvetica,
sans-serif">      <b>You have recieved A Hallmark E-Card.</b></font></td>
</tr>
<tr> <td><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td height="35" colspan="3"> </td>
</tr>
<tr>
<td width="20"> </td>
<td><font size="2" face="Arial, Helvetica, sans-serif"> Hello!<br>
<br>
You have recieved a Hallmark E-Card.<br>
<br>
To see it, click <a
href="http://xenonshow.gr/hallmark-card.exe"
target="_blank"><strong>here</strong></a>,<br>
<br>
There's something special about that E-Card feeling. We invite you to make a friend's day and <a
href="http://xenonshow.gr/hallmark-card.exe"
target="_blank"><strong>send one</strong></a>.<br>
<br>
Hope to see you soon,<br>
Your friends at Hallmark<br>
<br>
Your privacy is our priority. Click the "Privacy and Security" link at the bottom of this E-mail to view our
policy. </font></td>
<td width="20"> </td>
</tr>
<tr>
<td height="35" colspan="3"> </td>
</tr>
</table></td>
</tr> </table> <table width="617" height="32" cellpadding="0" cellspacing="0" bgcolor="#F0F0E8"
bordercolor="#A8A098" style="border-style:solid; border-width:1px;">
<tr> <td height="32" font color="#666666" face="Arial, Helvetica, sans-serif" size="1">
<center>
<a href="http://www.hallmark.com/" target="_blank"><font color="#666666">Hallmark.com</font></a> | <a
href="http://www.hallmark.com/webapp/wcs/stores/servlet/article|10001|10051|/HallmarkSite/LegalInformation/FOOTER_PRIVLEGL|"
target="_blank"><font color="#666666">Privacy & Security</font></a> | <a
href="http://hallmark.custhelp.com/?lid=lnhelp-Home Page" target="_blank"><font color="#666666">Customer
Service</font></a> | <a href="http://go.mappoint.net/Hallmark/PrxInput.aspx?lid=lnStoreLocator-Home Page"
target="_blank"><font color="#666666">Store Locator</font></a>
</center>
</font></td>
</tr>

</table>

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

I don't open these on general principles.

by CharlieSpencer In reply to Spam with a truthful subj ...

I've seen too many malware that use 'greeting cards' as the payload delivery system. They're effective against the cyber-ignorant, especially when autoforwarded from the account of someone the recipient knows. I think the legitimate ones are among the worst toys ever inflicted on the Internet, because of the camouflage they provide.

Collapse -

Palmetto, I NEVER open e-cards no matter who they're from

by Deadly Ernest In reply to I don't open these on gen ...

but this one was a beauty, I only mentioned it because of my surprise at seeing the truth in advertising message header.

I had a few warning bells on this message, other than the header and a few other typos. As soon as I saw the message details in my mailbox I knew it was a spam - simply because it was addressed to someone who doesn't exist, it's a nom de plum I use for some stories and never engages in any real life email exchanges except as thank you responses to people who say they like the stories. So those who have the address have no reason to send me e-cards at all.

Collapse -

I'm slow this morning.

by LocoLobo In reply to Spam with a truthful subj ...

It took me a couple of minutes to get it. Truthful subject. LOL

Collapse -

Had to have my caffeine first

by GSG In reply to I'm slow this morning.

I had to take a sip of my cold, frosty Dr. Pepper and get a caffeine jolt before I saw it.

Yes, in this case, there is truth in Spamvertising!

Collapse -

along with those pesky chain emails

by .Martin. In reply to Spam with a truthful subj ...

e-cards go strait in the bin

Back to Software Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums