Note these are two of many spams sent to at least three attrition accounts, neither of which
had subscribed to their site or any services. The spam continued even after following the unsubscribe
instructions for one account two weeks ago, and the other today.
"Because your business is at risk" - from them spamming you.
Return-Path: (firstname.lastname@example.org) X-Spam-Checker-Version: SpamAssassin 3.1.3 (2006-06-01) on forced.attrition.org X-Spam-Level: ** X-Spam-Status: No, score=2.7 required=4.6 tests=HTML_MESSAGE, MSGID_FROM_MTA_ID,MY_S_AV autolearn=disabled version=3.1.3 X-Original-To: jericho[at]attrition.org Delivered-To: jericho[at]attrition.org Received: from DGQQC62J (fw-wol.villagebroadband.com [22.214.171.124]) by forced.attrition.org (Postfix) with SMTP id 12E72FB8C for (jericho[at]attrition.org); Thu, 23 Nov 2006 08:52:40 -0500 (EST) From: secureIT weekly update(email@example.com) To: (jericho[at]attrition.org) Date: Thu, 23 Nov 2006 13:53:49 +0000 Subject: Tested and Reviewed - Business Anti-virus X-Mailer: TOL Mailer MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=_0_.__.__TOL__Mailer__Part_Boundary_ Message-Id: <20061123135241.12E72FB8C@forced.attrition.org> Parts/Attachments: 1.1.1 Shown 76 lines Text 1.1.2 OK ~77 lines Text (charset: ISO-8859-1) ---------------------------------------- <img src="http://www.secureit-online.com/images/secureit-logo.jpg" alt="IT business security" width="171" height="54" /> <a href="http://www.secureit-online.com/about.php" target="_top" style="FONT-SIZE: 11px;"> [..] <a href="http://www.gr8white.net" target="_top" style="FONT-SIZE: 11px;"> WEEKLY UPDATE [..] secureIT have carried out a comparative test amongst the top anti-virus products available for businesses. We ran them through our unique "Recommended For Business" assault course to find which product performed the best in terms of installation, administration/updating, integration within a corporate environment, effectiveness, ease of use, support and value for money.
The results are detailed below. You can read a full review of each product and see exactly how the product on your desktop right now compares! [..] [links to doubleclick removed]
This was sent to two addresses. Leaving HTML in tact.
Return-Path: (firstname.lastname@example.org) X-Spam-Checker-Version: SpamAssassin 3.1.3 (2006-06-01) on forced.attrition.org X-Spam-Level: ** X-Spam-Status: No, score=2.1 required=4.6 tests=HTML_IMAGE_ONLY_20, HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MSGID_FROM_MTA_ID autolearn=disabled version=3.1.3 X-Original-To: bmartin[at]attrition.org Delivered-To: bmartin[at]attrition.org Received: from DGQQC62J (fw-wol.villagebroadband.com [126.96.36.199]) by forced.attrition.org (Postfix) with SMTP id E64247F743 for (bmartin[at]attrition.org); Tue, 28 Nov 2006 11:32:32 -0500 (EST) From: secureIT Weekly Update(email@example.com) To: (bmartin[at]attrition.org) Date: Tue, 28 Nov 2006 16:33:47 +0000 Subject: New secureIT competition X-Mailer: TOL Mailer MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=_0_.__.__TOL__Mailer__Part_Boundary_ Message-Id: <20061128163235.E64247F743@forced.attrition.org> Parts/Attachments: 1.1.1 Shown 28 lines Text 1.1.2 OK ~28 lines Text (charset: ISO-8859-1) ----------------------------------------
|This week you are asked to put your film knowledge to the test to try and win an awesome LG KG800 mobile phone, which has proven itself to be one of the hottest items this year!|
|I do not wish to receive any more updates|
From: flipz Sent: 01 December 2006 14:27 To: firstname.lastname@example.org Subject: Spam Notice Dear Sir or Madam: It has come to my attention that unsolicited commercial bulk email has been sent to this domain from your site. After several complaints from other users about failed opt-out requests, I am taking this to the next level. As of this date, I request that you remove all attrition.org email addresses from your mailing list. Failure to comply will result in a violation of US and UK Anti-Spam laws. I give one week for this to occur. If after that time more mail is sent, I will take further action, as needed. Thanks.
Date: Fri, 1 Dec 2006 16:00:29 -0000 From: email@example.com To: 'flipz' Subject: RE: Spam Notice Dear Flipz I am unaware of previous requests to have any users from the attrition.org domain removed from our mailing lists. With this reply, I am recognizing your request to have all attrition.org addresses removed from any lists we may use for mailings. I will endeavor to ensure no mailings come to you or any other users of attrition.org within 5 days. Best regards Stuart Cole
Date: Wed, 21 Feb 2007 16:53:13 -0000 From: Stuart Cole
To: 'flipz' Subject: RE: Spam Notice Dear Flipz I was surprised and disappointed to take note how you have used our name on your website, and that you are misrepresenting the facts. At no point have we claimed to have 'never mailed' anyone at attrition.org so your comment stating so is oddly out of place. We had mailed people at attrition.org - and upon receiving requests to unsubscribe them, had done. When I received your mail on Dec 1 I replied immediately and then checked our data - there were no attrition.org mailing addresses within our systems. Although the data we bought may have had rogue data within (anyone at attrition.org for a start) I have tried to treat this matter professionally and with respect and would appreciate it if you would do the same. Regards.
Date: Thu, 22 Feb 2007 09:07:58 -0500 (EST) From: flipz To: Stuart Cole (firstname.lastname@example.org) Cc: lyger, jericho Subject: RE: Spam Notice I very much acted in a professional matter. I wrote to you, stating that users attempts to remove themselves from your list had failed. I gave you a time frame in which to work, and you complied. For that I thank you. However the fact of the matter is that you did in fact email this domain, as our records have proof of the incident. That being said, none of the users on this system would ever sign-up for a mailing list that spam people out of the blue. Problems like this occur when you don't send an opt-in request before you start mailing. Furthermore, the webpage you noticed me acting unprofessionally will stay up. And I will include any and all correspondance from anyone from your domain. Tough love. flipz