channelingstocks.com selling email addresses?

C

cdcolvin

Here is a spam message I recently received. Considering signing up with Channeling Stocks.com? You may wish to reconsider.



An Open Letter To ChannelingStocks.com

I must say, I was shocked when I received the following email (headers included). Please note, this was sent to channelingstocks.com@colvin.net. I used this email address when I signed up at your website. It was never used in any other venue which leads me to believe you sold it to third parties. This is unacceptable. I shall also be posting this email on the usenet sites you frequent to warn others who may choose to visit your site not to sign up with you.

To the FBI (posted to https://tips.fbi.gov/):

You may be intrested in the message below. If you have any questions, feel free to reply to this message. I will keep this email box open for 30 days, then set up a redirect to cs@channelingstocks.com.

Regards,
Chris Colvin

======================== Begin Offending Email =================






Return-Path: <support@carderplanet.net>
Received: from ns1.accesscom.com (enter.accesscom.com [206.40.44.3])
by shell.accesscom.com (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id OAA10181
for <>; Thu, 13 Feb 2003 14:37:33 -0800
X-Authentication-Warning: shell.accesscom.com: Host enter.accesscom.com [206.40.44.3] claimed to be ns1.accesscom.com
Received: from intaserv ([216.14.200.111])
by ns1.accesscom.com (8.12.1/8.12.1) with SMTP id h1DMbdQA060172
for <channelingstocks.com@colvin.net>; Thu, 13 Feb 2003 14:37:40 -0800 (PST)
Message-Id: <200302132237.h1DMbdQA060172@ns1.accesscom.com>
Reply-To: <hostmaster@lacnic.net>
From: "CarderPlanet" <support@carderplanet.net>
Subject: Welcome to the site selling stolen cards, ganja, bullets, guns and kid-napping techniques!
Date: Fri, 14 Feb 2003 09:37:38 +1100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
X-DCC-Hypersurf-Metrics: ns1.accesscom.com 1047; Body=1 Fuz1=1 Fuz2=1
To: undisclosed-recipients:;
X-UIDL: dfb7502af7dfd843a898d5f7ba9aebdd

Hello,

Welcome to http://carderplanet.net/
don't use "www" in the url!
Here you can buy:

Stolen cards
Ganja (Cocain sometimes too and all other illegal drugs)
Guns (Beretta, Desert Eagle, Glock and some others too)
Bullets for this guns.
Child porno photography.
Child porno videos.

Here you can talk about :

How to steal a credit card number
How to use this card numbers.
You can ask our lawyer wether it is legal
How to steal kids and then sell their organs to us. (we pay for $70.000
each stolen kid and $90.000 for nice 10 year old girls).

Welcome! Welcome! Welcome!
http://carderplanet.net/
Contact me by email - support@carderplanet.net or
script4dumps@ukr.net
Contact me by ICQ - #100316 or #100630

We want to say thanks a lot to our hosting provider.
With this hosting we can always sell Child Porno, Guns, Stolen Credit Cards
and everything and just say "FUCK YOU" to all, who don't like our spam.
So, dear abusers - FUCK YOU ALL!
 
I guess you didn't know that there are spammers out there using randomly generated email addresses huh?

It spits out millions of permutations and combinations. The ones that get bounced back get erased from the list. The ones that don't get reused and sold. Go ahead and try it. Create an email and don't give it to ANYONE. Then check in 1-2 months time and see how much spam you've gotten.
 
Here is the scoop on channeling stocks.com


It works very well if you want to trade HNZ

Channel%20stocks.jpg
 
Quote from Babak:

I guess you didn't know that there are spammers out there using randomly generated email addresses huh?

It spits out millions of permutations and combinations. The ones that get bounced back get erased from the list. The ones that don't get reused and sold. Go ahead and try it. Create an email and don't give it to ANYONE. Then check in 1-2 months time and see how much spam you've gotten.
More...


While I don't doubt that you are correct, I've had an email account for over 2 years that has never received any spam. I have actually given my address out to a few select online services.
 
babak - however, when you own a domain name and tag the message header (in this case, channelingstocks @ domainname)...

if it was a randomly generated thing, you'd receive a ton of other messages. they wouldn't get bounced, because they'd all be sent to the domain name's "real" address.

unless, of course, you set your domain up to whitelist - that is, only accept certain email addresses. in that case, you could check the logs.

cdcolvin - i hope that you complained to channelingstocks upstream provider - in this case, twtelecom.net - about this. abuse@twtelecom.net would work; if you look in the newsgroup news.admin.net-abuse.email (search through google's groups area) there is, sometime in the last 4 weeks, a posting from a tw tele abuse person. that'll give you a name and number...
 
I don't see ANYTHING in the headers indicating that this email came from channelingstocks.com OR that it went to channelingstocks.com@colvin.net.

In fact, everything about it indicatates that its a randomly generated email. If you are creating email addresses such as channelingstocks.com@colvin.net to give to sites, then you must have your domain setup as a white list. Therefore, you will get any email going to your domain.

Indicate where you see that it was addressed to channelingstocks.com@colvin.net in the first place. BTW, now that you posted that email address here, expect a ton of spam :)
 
Quote from j_medved:



Indicate where you see that it was addressed to channelingstocks.com@colvin.net in the first place. BTW, now that you posted that email address here, expect a ton of spam :)
More...


If you post an address on a message board look out.

I suggest posting channelingstocks.com at colvin dot net
 
Quote from Babak:

I guess you didn't know that there are spammers out there using randomly generated email addresses huh?

[snip]
More...

Actually, I h ave several "bogus," email addresses. Very few have been spammed, this was one of them, along with Tax Cut and one other. I'm aware of the randomly generated email addresses. If this were the case, a lot more mail would be sent to anyaddress@mydomain.net.
 
Quote from j_medved:

I don't see ANYTHING in the headers indicating that this email came from channelingstocks.com OR that it went to channelingstocks.com@colvin.net.
More...

Now that it has been spammed, I've set the redirect to send it to channelingstocks.com. I removed email addresses which are redirects so they wouldn't be listed, but since you asked:

Return-Path: support@carderplanet.net
Received: from ns1.accesscom.com (enter.accesscom.com [206.40.44.3])
by shell.accesscom.com (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id OAA10181
for Removed@RootEmailAddress; Thu, 13 Feb 2003 14:37:33 -0800
X-Authentication-Warning: shell.accesscom.com: Host enter.accesscom.com [206.40.44.3] claimed to be ns1.accesscom.com
Received: from intaserv ([216.14.200.111])
by ns1.accesscom.com (8.12.1/8.12.1) with SMTP id h1DMbdQA060172
for channelingstocks.com@RemovedDomain.net; Thu, 13 Feb 2003 14:37:40 -0800 (PST)
Message-Id: 200302132237.h1DMbdQA060172@ns1.accesscom.com
Reply-To: hostmaster@lacnic.net
From: "CarderPlanet" support@carderplanet.net
Subject: Welcome to the site selling stolen cards, ganja, bullets, guns and kid-napping techniques!
Date: Fri, 14 Feb 2003 09:37:38 +1100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
X-DCC-Hypersurf-Metrics: ns1.accesscom.com 1047; Body=1 Fuz1=1 Fuz2=1
To: undisclosed-recipients:;
X-UIDL: dfb7502af7dfd843a898d5f7ba9aebdd


========================================
Interesting, the email addresses you were referring to were enclosed in HTML tags, therefore didn't show up in the original post.
 
You must log in or register to reply here.
Back
Top