full-disclosure - RE: Full-Disclosure: Interesting but suspicious possible phishing mail

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <41E4A87C.9020106@dacave.de>
From: spam at dacave.de (jigmed pema)
Subject: RE: Full-Disclosure: Interesting but suspicious
	possible phishing mail

Hi, i am new to the list therefore greetings and kudos to all first,

been monitoring this kind of strange mails  myself, they all land in my 
catchall inbox. What baffles me about them is just the same fact them 
being addressed to a mailaccount on one of my subdomains i never used so 
far (the site is not even up yet), and which is not existant on that 
domain, starting to hit me right some hours after i had this domain 
registered. They all come either from a bogus yahoo or otherwise 
suspicious (spoofed??) account, all to something like jwsch <at> 
mysubdomain dot com. The same subdomainname is registered by me with the 
.org, .info, .net and .de extensions, those have not been addressed so 
far and i wonder?
Personally i think it's random spam to check if this domain or 
mailaccount on this domain are reachable, but i don't have proof for 
that yet.
I shall keep an eye on those suspicious stuff furtheron.

Thank you for letting me being part on here, regards,
Jigmed Pema

RandallM wrote:

>Have been getting a number of these come thru also at work. 
>Of course all the users are asking me questions about these.
>They all have the strange words, paragraphs, and questions like this one.
>They really got my attention. I at first thought they were hidden messages
>but
>Not so as the one we receive come as text. 
>
>thank you
>Randall M
> 
> 
>
><|>------------------------------
><|>
><|>Message: 4
><|>Date: Tue, 11 Jan 2005 02:27:55 +0000
><|>From: "DAN MORRILL" <dan_20407@....com>
><|>Subject: [Full-Disclosure] Interesting but suspicious possible
><|>	phishing mail
><|>To: full-disclosure@...ts.netsys.com
><|>Message-ID: <BAY3-F6DFC3B80597953B0FA3E1C0880@....gbl>
><|>Content-Type: text/plain; format=flowed
><|>
><|>Hi folks,
><|>
><|>Got this really interesting mail in my box today, and 
><|>knowing that I haven't 
><|>used that e-mail address or ordered anything on line lately. 
><|>Wondering if it 
><|>might not be a phishing e-mail. Haven't seen anything like 
><|>this before. 
><|>Anyone see anything similar?
><|>r/
><|>Dan
><|>
><|>
><|>
><|>from :  Gabrielle U. Philips, Jr <gbhclayddnoglk@...e-mail.net>
><|>Sent :  Monday, January 10, 2005 10:40 PM
><|>To :  "Gabrielle U. Philips, Jr" <MickeyandSnake7tit@...e-mail.net>
><|>CC :  mdamon@...st.net, mdamore@...st.net, mdan12@...st.net, 
><|>mdan22@...st.net, mdan32@...st.net
><|>Subject :  Shipping Notification, Tracking Number 
>
- - - - - - - -  snip  - - - - - - - - -  -