Spam Email

[Darren]

Hey there Guys,
It has been bought to my attention that emails which can only be described as spam emails have been doing the rounds today to the best of my knowledge.

It goes along the lines as the following:

Hello

How are you,hope you are doing well,am rose a lovely girl,and i drop at your profile,
forums.justcommodores.com.au and i love what i saw there,i love what i saw there,i believe we can get acquainted,so if it interests you,pls reach me back here okay for further communications okay.i stop here awaiting your respond. Regards,

Ms rose
rose_12v1@yahoo.com

Please contact me direct to my email address for me to send
my picture and further communications

Thanks to everyone that has bought it to my attention, is it possible for someone to send through the full mail header so I can establish it's origin.

My initial thought is whoever it may have extracted this information from the member list.

I will do a little more digging and see what I can find.

Cheers
Darren

[Troy711]

Dude.. take up the offer! I've scored so many times from these!














(kidding)

[00vxsc]

From: Rose Anderson <rose_12v1@yahoo.com> Add to Contacts
To: sales@ajmanagement.com.au
is that what you are looking for darren?

[00vxsc]

heres the full email, betFull ViewHello
From: Rose Anderson <rose_12v1@yahoo.com> Add to Contacts
To: sales@ajmanagement.com.au


--------------------------------------------------------------------------------


Hello

How are you,hope you are doing well,am rose a lovely girl,and i drop at your profile,
forums.justcommodores.com.au and i love what i saw there,i love what i saw there,i believe we can get acquainted,so if it interests you,pls reach me back here okay for further communications okay.i stop here awaiting your respond. Regards,

Ms rose
rose_12v1@yahoo.com

Please contact me direct to my email address for me to send
my picture and further communications

rose_12v1@yahoo.com

the wife loves this one lol

[Darren]

Actually something like the following

X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <rpp.em.94f5d28fe815e3b3d1b8d1c1edc0bcda@em1.ratep oint.com>
Delivered-To: xxxxxn@justcommodores.com.au
Received: (qmail 5479 invoked from network); 29 Sep 2009 14:17:34 -0000
Received: from unknown (HELO em6.ratepoint.com) (202.191.98.12)
by 0 with SMTP; 29 Sep 2009 14:17:34 -0000
Received: from em6.ratepoint.com ([209.85.93.44] helo=em6.ratepoint.com) by
ASSP.nospam; 29 Sep 2009 23:47:33 +0930
Return-Path: <rpp.em.94f5d28fe815e3b3d1b8d1c1edc0bcda@em1.ratep oint.com>
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
s=s1024; d=ratepoint.com;
h=Receivedate:From:Sender:Reply-To:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Rp-Mail:X-Rp-Hash;
b=D6bmUhvnlDC8dEl90Uvp2/8342n3CUb3LPFY8BUseU/E8uazXX1+9e3z0rgvld7/
fvnHSmIPzCWQusi0L7Voil+iPQU4MOh+lsoq/8tac2kGvgBBBVnskeBBazlNA+Vj
fjurZJqdvmxLajqJMxoGrKkADdtNpeMfpz12wVAA0Sg=
Received: from [209.85.93.8] ([209.85.93.8:39666] helo=dot8.ratepoint.com)
by em1.ratepoint.com (envelope-from <rpp.em.94f5d28fe815e3b3d1b8d1c1edc0bcda@em1.ratep oint.com>)
(ecelerity 2.2.2.31 r(24168/24420)) with ESMTP
id 7F/AE-30144-CF612CA4; Tue, 29 Sep 2009 10:17:32 -0400
Date: Tue, 29 Sep 2009 10:17:32 -0400 (EDT)
From: Northern Brewer <info@northernbrewer.com>
Sender: mail@ratepoint.com
Reply-To: info@northernbrewer.com
To: "xxxxxn@justcommodores.com.au" <xxxxxn@justcommodores.com.au>
Message-ID: <17569646.26592758.1254233852571.JavaMail.root@dot 8.ratepoint.com>
Subject: Northern Brewer Weekly Fermenter
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: Quoted-printable
X-Rp-Mail: 99692
X-Rp-Hash: BAh7CDoNcXVldWVfaWRpAzATAjoQbWVyY2hhbnRfaWRpAh59Oh ZlbWFpbF9jYW1wYWlnbl9pZGkDbIUB
X-Assp-Delay: not delayed (auto accepted); 29 Sep 2009 23:47:33 +0930
X-Assp-SPF: pass ip=209.85.93.44 mailfrom=rpp.em.94f5d28fe815e3b3d1b8d1c1edc0bcda@e m1.ratepoint.com
helo=em6.ratepoint.com
X-Assp-Envelope-From: rpp.em.94f5d28fe815e3b3d1b8d1c1edc0b...atepo int.com
X-Antivirus: avast! (VPS 090928-0, 28/09/2009), Inbound message
X-Antivirus-Status: Clean

What mail client are you using?

[axemurderer101]

haha i got the same email too, i was gonna post something on here about it but you beat me too it lol

[00vxsc]

sorry mate im retarded at computers, my emails with yahoo if that what you mean?

[Benjamin K]

Header source emailed Darren.

[Darren]

sorry mate im retarded at computers, my emails with yahoo if that what you mean?

No worries, it's all good, I have a copy of the source

Header source emailed Darren.

Thanks a million for that, I'm hoping it's as simple as them gathering the email address from the member list.

If we see some more floating around then I'll have to do a bit more digging.

[arrow224]

I got one, but from a gmail account. As you can see, this is my hotmail account.


X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9NA==

X-Message-Status: n:0

X-SID-PRA: rose anderson <roseanderson00@gmail.com>

X-Message-Info: bKPJ5fID7nsj7SPiUWpHLBWGJs8ebtctVivgByh1zp7KLTdVrC dJ3I6/wruJpOAFfXpb/Kp5jYU5JCSEa2hc/7nKF76o9fXP

Received: from mail-fx0-f173.google.com ([209.85.220.173]) by col0-mc1-f30.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);

Tue, 29 Sep 2009 15:40:28 -0700

Received: by fxm21 with SMTP id 21so168763fxm.10

for <multiple recipients>; Tue, 29 Sep 2009 15:40:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=gamma;

h=domainkey-signature:mime-version:received:date:message-idubject

:from:to:content-type;

bh=rTiovrnjkZEXazranWAuUKx2QeTTr4fhglSE//gJA2Q=;

b=O90skUyO9uXi/LIpx3ApEETTc4MlbHBk0y9pcfv5Lz7+PuErQhRXyitG0Bkpt7u glI

XuldsrNqbsKur0LxsgW1GfIjGD+KnRREbq/esAY0jktj0MAJJydbW4vplQvvHvcoN7HG

YUQvWMg/ed/3nTMv1HtLDtv2RUYEWsP+B3COs=

DomainKey-Signature: a=rsa-sha1; c=nofws;

d=gmail.com; s=gamma;

h=mime-version:date:message-idubject:from:to:content-type;

b=qP9jN/75cK0PLzxW84VvZAn036GGhH0rOaxVF686cWZKvTgt23tt6bO6 lV13WMQ7YU

OU16U2o2wQeMwBppScR/8rRrcGS9WgRDN0+2AZAKuh7Hzw+i0s61tYCi/bpmi5lHMoO8

ig0VoUkiby2rprd1C76SVaJwYCZLmhUfUCAj4=

MIME-Version: 1.0

Received: by 10.103.67.32 with SMTP id u32mr1886462muk.133.1254262445404; Tue,

29 Sep 2009 15:14:05 -0700 (PDT)

Date: Wed, 30 Sep 2009 00:14:04 +0200

Message-ID: <db8bdd0e0909291514k6a4708ffn9794e04c1960f9de@mail .gmail.com>

Subject: Hello

From: rose anderson <roseanderson00@gmail.com>

To: asmodai78@optusnet.com.au

Content-Type: multipart/alternative; boundary=0016e65c8bf28389cf0474bebbe9

Return-Path: roseanderson00@gmail.com

X-OriginalArrivalTime: 29 Sep 2009 22:40:28.0175 (UTC) FILETIME=[D7C889F0:01CA4155]



--0016e65c8bf28389cf0474bebbe9

Content-Type: text/plain; charset=ISO-8859-1



Hello



How are you,hope you are doing well,am rose a lovely girl,and i drop at your

profile,

forums.justcommodores.com.au and i love what i saw there,i love what i saw

there,i believe we can get acquainted,so if it interests you,pls reach me

back here okay for further communications okay.i stop here awaiting your

respond. Regards,



Ms rose

rose_2v2@yahoo.com



Please contact me direct to my email address for me to send

my picture and further communications



rose_2v2@yahoo.com



--0016e65c8bf28389cf0474bebbe9

Content-Type: text/html; charset=ISO-8859-1

Content-Transfer-Encoding: quoted-printable



<br>Hello<br><br>How are you,hope you are doing well,am rose a lovely girl,=

and i drop at your profile,<br>=A0<a href=3D"http://forums.justcommodores.c=

om.au">forums.justcommodores.com.au</a> and i love what i saw there,i love =

what i saw there,i believe we can get acquainted,so if it interests you,pls=

reach me back here okay for further communications okay.i stop here awaiti=

ng your respond. Regards,<br>

<br>Ms=A0 rose<br>=A0<a href=3D"mailto:rose_2v2@yahoo.com">rose_2v2@yahoo. c=

om</a><br><br>Please contact me direct to my email address for me to send<b=

r>my picture and further communications<br><br>=A0<a href=3D"mailto:rose_2v=

2@yahoo.com">rose_2v2@yahoo.com</a><br>



--0016e65c8bf28389cf0474bebbe9--

</

[holdensupporter2005]

I got one to looks like it is from the same person.

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9NA==X-Message-Status: n:0X-SID-PRA: rose anderson <roseanderson00@gmail.com>X-Message-Info: 6sSXyD95QpXjFzpAUTjEyW2C68EjlsIOffGqJqeoUGS6ZREjYQ Oi9mX3d/b+TxfkP/n42JF2yd8o9/eTHNdCIiQ5PWItzqINReceived: from mail-ew0-f162.google.com ([209.85.219.162]) by snt0-mc4-f41.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 1 Oct 2009 02:19:44 -0700Received: by ewy6 with SMTP id 6so590383ewy.8 for <holdensupporter2005@hotmail.com>; Thu, 01 Oct 2009 02:19:43 -0700 (PDT)DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-idubject :from:to:content-type; bh=OkQTkVNPD/e28aZsjCLsoKtiqvaNOHIUHWiueIM1h1M=; b=Pzi3QI91lYwvKRVmv1j2Ei8bsx6MYaMmHFh1mc5qQdCsmxA1 n1abhaXwW9rIhakwbN QGS/ubT14zbRepQpYxzwk/rbA0A8v6GK4pMWORKAfwQa2TTu69jALQstEKNEh5X8+nvY GeeYe061+SHRuaHMqaMlK5p5JDuHGzDdnAMSc=DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-idubject:from:to:content-type; b=M6FbIGWQv91+QBibWgNn4bvCfGYmLkPmXMUPU5YaBm9JShjZ PxO+eD85dn407MYPIk 7nm/xmNIK4R/R2Pyez8eG+t7RhYE+Or4D9241uElvzLy5BFmkv858G4Y4NfmEt t6bm2g 8iz1xJ4jgKM7b+6t37arof5gZ7l/JMTM151bo=MIME-Version: 1.0Received: by 10.211.142.11 with SMTP id u11mr1026206ebn.8.1254382888675; Thu, 01 Oct 2009 00:41:28 -0700 (PDT)Date: Thu, 1 Oct 2009 09:41:28 +0200Message-ID: <db8bdd0e0910010041w725dd845idef2d55b79fdae97@mail .gmail.com>Subject: Hello,From: rose anderson <roseanderson00@gmail.com>To: call_911_now_biatch@hotmail.comContent-Type: multipart/alternative; boundary=00504502b03c7dee890474dac63aReturn-Path: roseanderson00@gmail.comX-OriginalArrivalTime: 01 Oct 2009 09:19:44.0491 (UTC) FILETIME=[5057A3B0:01CA4278]--00504502b03c7dee890474dac63aContent-Type: text/plain; charset=ISO-8859-1Hello,How are you,hope you are doing well,am rose anderson a lovely girl,and idrop at your profile forums.justcommodores.com.au and i love what i sawthere,i beleive we can get aquainted,so if it interests you,pls reach meback here okay for further communications okay.i stop here awaiting yourrespond.Regards,Miss rose( rose_12v1@yahoo.com )please Contact me in my mail box so that i will send my picture to you andfor further communicationrose_12v1@yahoo.com--00504502b03c7dee890474dac63aContent-Type: text/html; charset=ISO-8859-1Content-Transfer-Encoding: quoted-printableHello,<br><br>How are you,hope you are doing well,am rose anderson a lovely= girl,and i drop at your profile <a href=3D"http://forums.justcommodores.co=m.au">forums.justcommodor es.com.au</a> and i love what i saw there,i beleiv=e we can get aquainted,so if it interests you,pls reach me back here okay f=or further communications okay.i stop here awaiting your respond.<br>Regards,<br>Miss rose<br>( <a href=3D"mailto:rose_12v1@yahoo.com">rose_12v1=@yah oo.com</a> )<br><br>please Contact me in my mail box so that i will sen=d my picture to you and for further communication<br><br><a href=3D"mailto:=rose_12v1@yahoo.com">rose_12v1@yah oo.com</a><br><br>--00504502b03c7dee890474dac63a--</

The To email address is not addressed to me???

(Sorry about the formatting. Just how it pasted in.)

[ScoHar]

she sent me a msg last night.

[bluecar]

Well, Rose it is. Leaving for Senegal first light.





Hang on. I'm married already.

Sorry, Didn't realize I was in feed back. This is the link I got when I googled General Donatus Anderson, her deceased father.

[fuzzy2308]

i havent got one yet

[vlv8vic]

Me either fuzzy, still waiting. not feeling the love.

[fuzzy2308]

Me either fuzzy, still waiting. not feeling the love.

tell me about it

[Darren]

haha I'm sure your time will come I'm not sure whether they are getting email addresses from the member list which has been turned into a more secure mode or the other possibility is being an email address has been listed on the site at some stage.

I am fairly confident and so is the host it's not the server so that's a relief in itself As you could imagine.

[andyman]

i got it the other day,

not on my normal computer atm, did you want the e-mail header still, i got mine on bigpond using windows mail

[fuzzy2308]

i still havent got one can someone email me one