Re: More on SPAMing

[tturner@ecn.ab.ca ()]

Rubywand (rubywand@swbell.net) wrote:
: Tom Greene writes ...
: > 
: > Rubywand wrote:
: > >
: > >      The recent posting --> EARN $1000 TO $5000 WEEKLY!!! 7774
: > > is a good example of newsgroup spamming.
<snip>
: > 
: > > The header claims complaints should go to abuse@worldnet.att.net but, I
: > > distrust this claim. (Normally, how reliable is this information?)
: > 
: > Usually the abuse address given (on the X-Complaints-To: line) in the
: > headers is reliable. Its added by the news server when the message is
: > posted. I have never seen one that was spoofed.
: > 
: > 
: > >      Of course, we do have the URL in the message itself ...
: > >
: > >  ....
: > > > A SIMPLE ONLINE SYSTEM FOR MAKING FAST, EASY, MONEY THAT LASTS !!!
: > > >
: > > > A TOTAL NO-BRAINER THAT ANYONE IN THE WORLD CAN DO !!!
: > > >
: > > > Go to: http://opportunity.valuenetusa.com/JL2836/
: > > >
: > >
: > > So, however the message was sent, since opportunity.valuenetusa.com
: > > is hosting this business, that seems like a good place to email an abuse
: > > complaint (e.g. to abuse@opportunity.valuenetusa.com).
: > 
: > I wouldn't trust any addresses found in the body of the message too
: > much. They can be somewhat spammer friendly.
: > 
: > In this case I would send an e-mail to both abuse@worldnet.att.net and
: > abuse@uu.net. If you are unsure of the abuse address for a particular
: > provider you can try the abuse.net lookup at
: > http://www.abuse.net/lookup.phtml, or by using a command like 'whois -h
: > whois.abuse.net uu.net' in a shell. It should return an email address.
: > Most - but not all - respectable providers are registered in abuse.net's
: > database.
<snip>

--> Thanks for the excellent info. Yeah, I was wondering about the
    advisability of attempting to email the URL in the spam itself;
    as the spammer would likely just consider it a harvestable and
    obviously valid email address. IOW, it would likely open one up
    to even more spam. If I took the extra step of also attempting
    to contact someone `at' the URLed target; I think I'd do it via
    anonymous re-mailer, for some protection from further spamming
    (if, indeed, this was allowed). Again; thanks for the info . . .

--
E.A.G.L.E Librarian A3 BBS:403/481-3133  email:tturner@freenet.edmonton.ab.ca