Press "Enter" to skip to content

Spam: N ENZO & CO

[Removing the Spam : Email Processing and Filtering (Addison-Wesley Networking Basics Series)]
I’m really annoyed as I’ve now had over 600(!) spams from the same idiot. Well, I say ‘had’, they’ve got as far as my mail filters but have then been automatically tagged as spam: but it’s still annoying they got that far. I tried to change my server settings so that they couldn’t even that that far (IP blocking etc), but unfortunately they relayed them through my secondary MX (ie my ‘backup mailserver’) which is now passing them to their proper destination (ie my primary mailserver). Obviously, I can’t block that IP as then all mail that does end up on by secondary MX won’t reach me – so grr. (Ok, a few were directed at my primary MX, but by looks of things it’s mainly my secondary one that’s had the brunt of the spam)

I have installed SpamAssassin on the server, but I’ve still got to correctly configure Qmail to use it (currently I’m relying on MailWasher to do all my spam filtering – mainly because I’ve got a domain which cannot, for historical reasons, that cannot support server-side filtering).

The Spam email takes the form of:
Return-Path [random letters]believablehcd@hotmail.com
From: UK HACKER CD [same random letters]believablehcd@hotmail.com
To: [random numbers+somes a few random letters]@mydomain.tld
Subject: HACKER CD - NOW �3.99 [although I've had a few others

However, despite them ‘fiddling’ the headers of the mail, HotMail has nothing to do with this mail. Unfortunately, MailWasher bounces back a ‘User unknown’ message to the Hotmail address (since it’s operating as a client of a POP3 server it can’t do ‘mail rejects’ just ‘mail bounces’).

I intercepted a couple of the mails before they got bounced+deleted and looked up the details. They seem to be from various IPs (sample list arranged in numerical order with the results of Open Relay testing from ‘ORDB):

  • 61.133.8.14
  • 61.194.11.2
  • 80.61.65.108
  • 195.174.133.192 – not open relay according to ORDB, but is according to third party databases
  • 200.24.218.58
  • 200.67.151.116
  • 217.59.109.245
  • 218.22.70.54
  • 218.76.80.7 – not open relay according to ORDB, but is according to third party databases

In no instance have I (yet) found a common IP address, but I’ve got a collection of around 2 dozen of the spams to look through when I feel like it.

The body of the email is in HTML format (created by Microsoft FrontPage 4.0) but doesn’t include any “web-bugs” which would help me track a ‘single source’. It reads as thusly (in plain text): [Skip]

The Unbelievable Secrets & Free Software CD – NOW JUST �3.99
SAVE �9 – Resell rights included! LAST CHANCE TO BUY!

Yes, this is the …

Mother Warned You About CD Like This! CD

This CD is jam Packed, with almost a FULL 700 megs of stuff including…

No More Going To Work in The Morning
A WORK FROM HOME SECRET REVEALED!!

You could make �1,000-�2,500 A MONTH WORKING PART-TIME, or up to �4,000 A MONTH WORKING FULL-TIME!

GET PAID HOLIDAYS!
THIS ISN’T A GET RICH SCHEME
NO SPECIAL QUALIFICATIONS OR SKILLS
LEARN ABOUT HOW YOU CAN DO THIS ON THIS CD-ROM
Be a Spy on the Internet

Learn EVERYTHING about your friends, neighbours, enemies, employees, co-workers, even your boss, even yourself!

Here’s An Idea Of The SECRETS you will discover !!!

Get anyone’s address, driving record, national insurance number – with just a name!
Trace anyone by their national insurance number!
Unlisted phone numbers! Get anyone’s phone number with just a name – even unlisted numbers!
Find people using their phone number
Bank account information
Tax liens
Locate! Long lost friends, relatives, a past lover who broke your heart!
Send anonymous e-mail completely untraceable!
Dirty secrets! Discover dirty secrets your in-laws don’t want you to know!
Investigate anyone! Use the sources that private investigators use (all on the Internet) secretly!
Ex-spouse! Learn how to get information on an ex-spouse that will help you win in court! (Dig up the old skeletons in someone’s closet)
Criminal search-Background check! Find out about your daughters boyfriend! (or her husband)
Create a map showing directions right to a person’s door
Education verification! Did he really graduate college?
Find out! If you are being investigated!
Learn all about your mysterious neighbours!
Find out what they have to hide!
People you work with!
Be astonished by what you’ll learn about people you work with!
Find out almost anything!
Revenge Kit

WANT TO PLAY A PRANK on Someone? Complete list of harmless pranks you can play on friends, relatives, boss, and employees.

Alka-Seltzer
Annoy Your Roommates
Answering Machines
Automotive
Camping
Computers
Dorms/Rooms
Krazy Glue
Mail/Postal
Body
Miscellaneous
Restaurants
Rigged Doors
School Fun
School Revenge
Showering
Super Soakers
Tapes & Movies
Toilet/Bathroom
Telemarketing
Vending Machines
Warranty Failure & More!

Amazing E-Books!

110 OF THE MOST POPULAR EBOOKS EVER MADE

6,000 Game Cheats

3D Cube Hopper
3D Cyperpuck
3D Hunting: Grizzly
3D Lemmings
Barons
1830: Railroad
Robber Barons
1942: Pacific Air War
2067 B.C.
3 Dirty Dwarves
3 Sisters Story
3001: Space Survival
3D Cube Hopper
5th Element Cheats
688 Attack sub
7 Cities Of Gold
Quake 2 Mission Pack 1
Quake 2 Mission Pack 2
Quake 2: Ground Zero
Quake 2: Juggernaut
Quarantine
Queen: Eye Hints
Quest For Glory
Zelda
Zorro
Atari
A Fork in the Tale
A Mind Forever Voyaging
A-10 Cuba
A-10 Tank Killer
A-Train
A.P.B.
7-Up
A2 Racer 2
Dreamcast
Game Boy
Game.Com… Game.Com Pocket Pro…
7th Guest
Game Gear
Genesis Megadrive…Nomad
Intellivision
Jaguar
Lynx
CD-i
Commodore
ColecoVision
DOS/Windows PC
Free Cell >
Half Life
Hexen
Aargh
Riven
Quake 2
GameShark…
Pro Action Replay…
Xploder
Who Wants to be
a Millionaire
Macintosh
NEC PC-FX
Neo*Geo Pocket Color…
NES… Famicom…
Nintendo 64
PlayStation
Saturn
Sega
Super Nintendo
Famicom
TurboGrafx 16
TurboExpress
Virtual Boy
9: Last Resort
Game Genie
Playstation 2 ( PS2)
3DO Multiplayer
The Sims
Age of Empires: Rise of Rome

Finally, beat that kid at their own game! Cheat Codes for almost every game imaginable! Most Popular Platforms Supported! ALMOST ANY GAME YOU CAN IMAGINE IS HERE.

Free Land…
Learn how To Claim 20 Acres Of Public Land…Free! This is a Little Known Government Program That Allows You To Claim 20 Acres Of Land For *FREE*!! Legally!!

Get AAA Credit Fast, Easy & Legally!

These Are The Secrets For Erasing Bad Credit Ratings; Obtaining, Maintaining, and Keeping AAA Credit FOREVER!!

Imagine having perfect credit, able to obtain as many credit cards, purchase a house, a brand new car, with NO HASSLES. Sound too good to be true? Well, it isn’t. Thousands of individuals use these time proven techniques successfully everyday. I don’t give you just one source but FOUR huge sources for getting AAA credit.

Special software that will double the speed of your computer!

I installed these programs to my computer and they really do work!

Web Lightning is a revolutionary program that speeds up your Internet connection in two ways. First, it optimizes your registry settings to make your computer’s software work at it’s fastest potential. (Yes it’s Geeky technical talk but there really are no laymen’s terms for that.) Second, Web Lightning turns your computer into it’s own DNS (Domain Name Server).

Increase Your Internet Connection Speed Up to 220%!!
Web pages will load faster.
You can send and receive email much faster.
You will get quicker downloads of files, graphics, pictures, and more.
You’ll get faster internet speeds without buying costly hardware, special high speed lines, or a new computer.
Works will all browsers, including Explorer, Netscape, and AOL, Windows 95 and 98.
A �19.95 Value!
Computer Software:

NETSONIC: This is the program that will DRAMATICALLY increase the speed that you surf the internet, especially if you currently have a 56k or less modem. RAM BOOSTER: This one frees up your RAM constantly, without you having to attend to it, so your PC runs faster. The reason why your PC runs slower and slower is because Windows 95/98 puts needless info into your RAM memory over time. This cleans your RAM of all that stuff that it practically never needed. No more unnecessary boot-ups.
WATERFALL: Decrease your CPU temperature up to 20C! Waterfall is a wonderful little program that uses advanced instructions found in Intel, Cyrix, and AMD to make them run much cooler, without any loss in performance or stability! Instead of replacing your fan/heatsink combo, give Waterfall a try!
ISPEED: This modifies your settings to improve throughput online!
CACHE MAN: Cache Man is a utility which tweaks the disk cache settings and prevents frequent swapping of the data to disk resulting in an improved performance and stability.
GOZILLA!: This is a FANTASTIC download manager, that will speed up your surfing even more!!! Gozilla lets you schedule downloads and surf at the same time. Gozilla is a must have for anyone who takes advantage of the great downloads on the web. If you have ever experienced bad downloads due to internet traffic and a slow internet connection, you know the frustration of repeated downloads due to loss of connection. This utility will monitor your connection and ensure a quality download .
GATOR: Free online tool that helps fill out forms and remember passwords. Gator stores all your information in an encrypted file for extra security.
Screen Savers:

Amazing Dancing Baby
Anna Nicole Smith
Alicia Silverstone
A Bug’s Life
Beatles
Brad Pitt
Sandra Bullock
Drew Barrymore
Carmen Electra
Cindy Crawford
Cameron Diaz
Demi Moore
The Doors
Kathy Ireland
Forest Gump
Fighter Jets
Frank Sinatra
George Clooney
Goodwill Hunting
Heather Locklear
Furbys
Drunken Baby
John Lenon
Jimi Hendrix
Di Caprio
Men In Black
Monet
Monster Trucks
Sports Cars
Saving Private Ryan
Sailboats
Waterfalls
World Cup Soccer
Yellow Submarine
Stone Cold
Space Shuttle
Star Trek
Titanic
Troy Aikman
Star Wars
Unabomber
Vincent Van Gogh
many more….
But you get the idea!

Reports

More reports, guides, and tutorials that you can use or sell. Beat speeding tickets
Ripoff Secrets of the automotive industry
What Happened This Day In History
Lots of Baby names
IRS forgiveness program
Bust that spammer
How to Pass a Drug Test
Accept checks over the internet – Increase Sales!
Close Outs
College Degrees In 24 Hours
Dancing Baby Screen Savers
Eavesdrop on the police
Free Guest Books
Guide to Casino Gaming
How to set up a web cam
Importers
Send email in 5 languages
Sniping program
Stop Smoking in 7 Days
Liquidators
Hundreds more!!!
Free Pagers
UFO Sites
Happy 99 Virus Cleaner
How To Books
Adult Business Opportunities
Own your own book, art, or music store
MLM opportunities
Automotive Opportunities
Get Paid to watch TV
List of Computer Businesses
List of Home based Businesses
Mail Order
Direct Marketing
Get Paid to Shop
Real Estate with Nothing Down
Make money answering surveys online
Build your own RADAR JAMMER from an ordinary radar detector!
28,500,000 Email addresses

Buy It Wholesale!

Massive listings of wholesalers where many of the auction sellers get their products. Many of these wholesalers will ship directly to your high bidders to save you the money and hassle.

START SELLING! STOCK YOUR STORE! START YOUR OWN ON LINE BUSINESS! THOUSANDS OF ITEMS AVAILABLE! NEVER PAY FULL PRICE AGAIN! EVER!!!

One Million Wholesalers
Price Comparing Sites
Wholesale links in Hong Kong & Taiwan
Wholesalers & Drop Shippers
Drop Shippers, Surplus, Liquidators
Importers, Excess Merchandise
Close Outs
Watches, Jewelry
Clothing, Leather goods
Food, Electronics, Furniture
Tools, Sporting goods
Shoes, Crafts, Cosmetics
House hold items, Books
Holiday Discounts

Never pay full price again! YOU can even upgrade to First Class for free when you use this generous amount of resources. Get magnificent discounts on your dream holiday. Australia, Thailand, Japan, Europe!!! You can use this to save thousands on holiday travel….

Consolidators can slash airfare costs on your travels. They are companies that buy blocks of tickets on scheduled airlines and sell them at wholesale prices. You can get tickets that may be up to 50 percent below the cost of APEX fares (advance purchase tickets on scheduled airlines that carry certain restrictions) or up to 75 percent below the cost of full-fare economy seats

World News

READ OVER 3,600 ONLINE NEWSPAPERS FROM AROUND THE WORLD!

Download Music CDs FREE!

Download music files and store them on your computer in such a way that the file sizes are relatively small, but the songs sound near perfect.

Internet Radio

WORLDWIDE – MUSIC – MM – NEWS – SPORTS

Government & Private Auctions

Close Outs, Surplus, Drop Shippers Domestic & Foreign

Just click your way to the exclusive information I provide you to buy homes, cars, boats, planes, fishing, camping, world wide weapons surplus, land, computers, hardware, software, watches, jewelry, clothing, electronics, furniture, tools, sporting goods, shoes, house hold items, books, health, etc.. for just pennies on the dollar. You can keep and enjoy what you buy-or turn around and sell it and make HUGE profits.

You can shop auctions world wide right from the comfort of your own computer.

Recipes the restaurants don’t want you to have!!
Make all your favorite take-out, right from your own kitchen.

Black Angus
Bob Evan’s Coconut Cream Pie
Boston Market Creamed Spinach
Boston Market Meatloaf
Brass Parrot Baked Potato Soup
Brennan’s Stuffed Baked Potato
Brookville Hotel Cole Slaw
Burbanks
Gallagher’s
KFC
Hard Rock Cafe
Houston’s
La Madeline Lamb Stew
Luther’s BBQ Sauce
McDonald’s Secret Sauce
Macaroni Grill Ravioli De Gamberi
Mason Jar Grilled Chicken Salad
Mason Jar Mesquite Chicken
Ninfa’s Green Sauce
Ninfa’s Red Hot Sauce
Red Lobster Shrimp Scampi
Ruby Tuesday’s Apple Pie
Planet Hollywood Chicken Crunch
Pappasito’s Mixed Grill
Treebeards Red Beans
T.G.I. Friday’s Soy Dressing
Taco Bell Cinnamon Twists
Taco Bell Crispitos
Wendy’s Chili
Whole Earth Special Summer Salad
Willie G’s Oyster Bar Trash

Terms & Shipping & Other Information:

Shipping….
All orders are shipped by First Class Mail

All orders are usually shipped the day after payment is received, exception – weekends and holidays.

Payment….

THE “UK HACKER CD” IS AVAILABLE FOR JUST �3.99 +�2 P&P

TOTAL=�5.99 [SAVE �9!]

Resell rights included! Copy/Sell/Modify this CD at your leisure!

PLEASE SEND CHEQUE OR POSTAL ORDER FOR �5.99 TO:

“N ENZO & CO”,
DEPT 207,
9 ST JOHNS ST,
COLCHESTER,
ESSEX CO2 7NN

NOTICE: THIS CD IS FOR IMPORTANT INFORMATION/KNOWLEDGE PURPOSE ONLY, WE ARE NOT RESPONSABLE FOR ANYTHING YOU MIGHT DO WITH ANY INFORMATION OR SOFTWARE ON THIS CD.

All of the information is available FREE on the internet by the way (use Google or the ODP). Do you really think they could offer all that “worthwhile” information for such a low-cost if you couldn’t already get it free?

The address they ask you to send your cheque to actually belongs to:

MAILBOXES ETC
9 ST. JOHNS STREET
COLCHESTER
CO2 7NN
Telephone: 01206 368 881
Fax: 01206 368 882
Website: http://www.mbe.uk.com/048/index.htm

So, presumably they’ve rented out a mailbox there and are either going to pick up their mail or having it forwarded on for an extra charge. I’ve just sent them the following message via their website feedback form:

I was wondering what your policy was for someone using illegal (under UK law) advertising goods to be ordered from one of your mailboxes.

Surely you have terms+conditions in place to prevent someone using your service for illegal purposes?

If you could get back to me via email as soon as possible, I would be grateful as it would help my investigations a lot.

Many thanks.

Ok, even after reading this page on The European Coalition Against Unsolicited Commercial Email I’m not 100% sure if “spam” technically is outlawed (even though they say on their front page ‘EU Parliament “Opts In”: Commercial Email in European Economic Area will not be allowed without recipients’ prior consent’), but under the UK’s Computer Misuse Act, Section 3 subsection 2 they did “impair the operation of any computer;” (ie my server and home machine). So, therefore, once I’ve got their name and address (normally I don’t bother, but 600+ spams is a different matter), I may see if I can get the prosecuted which may result in:

A person guilty of an offence under this section shall be liable�
(a) on summary conviction, to imprisonment for a term not exceeding six months or to a fine not exceeding the statutory maximum or to both; and
(b) on conviction on indictment, to imprisonment for a term not exceeding five years or to a fine or to both.

We’ll see….

4 Comments

  1. Brian H Brian H

    Hi

    I don’t know how you’re getting on with your N Enzo campaign, but they’re obviously still operating as I have received the said email today. The source information as follows, indicates an Excite.com email address so have reported sender to their abuse dept.

    X-From_: twenickenzo@excite.com Tue Jan 14 21:36:44 2003
    Return-path:
    Envelope-to: xxxxx@xxxxx.co.uk
    Delivery-date: Tue, 14 Jan 2003 21:36:44 +0000
    Received: from [67.32.158.242] (helo=193.220.40.3)
    by imailm2.svr.pol.co.uk with smtp (Exim 3.35 #1)
    id 18YYje-0004rd-00
    for xxxxx@xxxxx.co.uk; Tue, 14 Jan 2003 21:36:41 +0000
    Received: from [137.155.98.192] by f64.law4.hotmail.com with QMQP; Jan, 14 2003 21:16:08 -0700
    Received: from unknown (77.222.200.106) by rly-xw01.mx.aol.com with SMTP; Jan, 14 2003 20:32:59 -0200
    Received: from 184.244.108.80 ([184.244.108.80]) by rly-xr02.mx.aol.com with SMTP; Jan, 14 2003 19:23:56 -0800
    From: Nicholas
    To: xxxxx@xxxxx.co.uk

    Hopefully this is just a one off, and not 1 down & 599 to go!

    Might also try Colchester Trading Standards Office.

    Kind Regards & Good Luck !

  2. I was just wondering how you got on with MAILBOXES ETC regarding N ENZO & CO as they have been spamming my organistion (Local Government) and I have requested that the IT Dept place a block on the spammer’s address (@excite.com)

  3. Herb Booth Herb Booth

    I have received the same unsolicited email to buy this “Unbelieveable secrets” for £9.95 but I am asked to send my cheque to Unit 608, 28 Old Brompton Rd, London, SW7 3SS.
    I am also given a 0700 phone number in order to unsubscribe.

  4. Jimmy Jimmy

    Got this spam today, usually just delete them but this one has and address and a telephone number.

    “Unit 608, 28 Old Brompton Rd, London SW7 3SS”

    “To unsubscribe call 0700 535 5252”

    Makes me want to get all righteous.

Comments are closed.