Software

Ask something
Discussion Locked

Spam with a truthful subject

0 helpful
5 replies

by deadly ernest

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Earlier tonight, my time, I received the following email - what got my attention was how truthful the message heading was.

"You have received a greeding e-card"

The truthful subject was a real shock. Below is the email and the source code.

-------- Original Message --------
Subject: You have received a greeding e-card !
Date: Wed, 10 Feb 2010 18:44:42 +0700
From: webmaster@Hallmark.com
To:

Hallmark.comShop OnlineHallmark MagazineE-Cards & MoreAt Gold Crown
You have recieved A Hallmark E-Card.

Hello!

You have recieved a Hallmark E-Card.

To see it, click here,

There's something special about that E-Card feeling. We invite you to make a friend's day and send one.

Hope to see you soon,
Your friends at Hallmark

Your privacy is our priority. Click the "Privacy and Security" link at the bottom of this E-mail to view our policy.

Hallmark.com | Privacy & Security

source code

From - Wed Feb 10 23:28:28 2010
X-Account-Key: account6
X-UIDL: UID540-1206275658
X-Mozilla-Status: 0003
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to:
Delivery-date: Wed, 10 Feb 2010 23:16:02 +1100
Received: from [61.19.255.53] (helo=thai-report.com)
by removed with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from )
id 1NfBU9-000798-Cb
for ; Wed, 10 Feb 2010 23:16:02 +1100
Received: from localhost.localdomain (TR-S02 [127.0.0.1])
by thai-report.com (8.12.8/8.12.8) with ESMTP id o1ABihig019310
for ; Wed, 10 Feb 2010 18:44:44 +0700
Received: (from bow@localhost)
by localhost.localdomain (8.12.8/8.12.8/Submit) id o1ABighN019307;
Wed, 10 Feb 2010 18:44:42 +0700
Date: Wed, 10 Feb 2010 18:44:42 +0700
Message-Id: <201002101144.o1ABighN019307@localhost.localdomain>
To:
Subject: You have received a greeding e-card !
From: webmaster@Hallmark.com
Content-Type: text/html
X-Spam-Status: No, score=3.7
X-Spam-Score: 37
X-Spam-Bar: +++
X-Spam-Flag: NO

Hallmark.comShop OnlineHallmark MagazineE-Cards & MoreAt Gold Crown
      You have recieved A Hallmark E-Card.
 
  Hello!

You have recieved a Hallmark E-Card.

To see it, click here,

There's something special about that E-Card feeling. We invite you to make a friend's day and send one.

Hope to see you soon,
Your friends at Hallmark

Your privacy is our priority. Click the "Privacy and Security" link at the bottom of this E-mail to view our
policy.

 
 

Hallmark.com | Privacy & Security | Customer
Service | Store Locator

5 replies

by charliespencer

I've seen too many malware that use 'greeting cards' as the payload delivery system. They're effective against the cyber-ignorant, especially when autoforwarded from the account of someone the recipient knows. I think the legitimate ones are among the worst toys ever inflicted on the Internet, because of the camouflage they provide.

by deadly ernest

but this one was a beauty, I only mentioned it because of my surprise at seeing the truth in advertising message header.

I had a few warning bells on this message, other than the header and a few other typos. As soon as I saw the message details in my mailbox I knew it was a spam - simply because it was addressed to someone who doesn't exist, it's a nom de plum I use for some stories and never engages in any real life email exchanges except as thank you responses to people who say they like the stories. So those who have the address have no reason to send me e-cards at all.

by gsg

I had to take a sip of my cold, frosty Dr. Pepper and get a caffeine jolt before I saw it.

Yes, in this case, there is truth in Spamvertising!

This discussion is closed to new replies.