Re: U.K. Lottery Spam / URL "Previously Appealed"
Tim McGraw <[email protected]> Fri, 19 May 2006 14:17:04 -0700
| Newsgroups | gmane.mail.spam.spamcop.user |
|---|---|
| Organization | SpamCop |
| Message-ID | <[email protected]> |
Michael Brennan wrote: > This phony U.K. lottery spam > > http://www.spamcop.net/sc?id=z948355688z7f00015eb266672cf1d7d5c584e4cc54z > > returned a Yahoo URL link that was referenced in the SpamCop report as > "previously appealed". > > This required me to look at the spam and it appears the Yahoo! mail > address is a customer-service address possibly associated with a real > U.K. lottery operation. > > Does anyone know enough about the U.K. lottery ops to say whether this > e-mail address should be LARTed? 1) The FROM address in spam is almost always forged and meaningless. 2) I can pretty much assure you that lotteries do not pay out through email notifications. > I just noticed a posting from Berny about a new trend toward IB links > being deliberately included by spammers. Would this be an example? No. > Interestingly, I found two other e-mail addresses in the spambody at > katamail.com and myway.com, which looked like they could be spammer > contacts, which were not picked out by the parser. The parser does not operate on email addresses. There are rare instances when it is appropriate to report an embedded email address (419 scams come to mind), but you have to do it manually.