Spam Gets More Pathetic Every Day
I just got this email:
From windowsupdate@windowsupdatenow.com Mon May 12 15:21:23 2003
Return-Path: windowsupdate@windowsupdatenow.com
Delivered-To: alan@ufies.org
Received: from windowsupdatenow.com (adsl-68-120-92-122.dsl.irvnca.pacbell.net [68.120.92.122])
by master.ufies.org (Postfix) with SMTP id B4CE93E2103
for
Message-ID: <30502d6dd478$126128b2$a4b0bb15@memkutbdbfxos.y>
From: windowsupdate@windowsupdatenow.com
To: Registered@ufies.org, Users@ufies.org
Subject: Windows Update Notification
Date: Tue, 13 May 2003 02:56:30 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
X-Priority: 1
User-Agent: Microsoft Outlook Express 5.00.2919.6700
Content-Transfer-Encoding: quoted-printable
X-Bogosity: No, tests=bogofilter, spamicity=0.167027, version=0.12.3
WINDOWS SECURITY WARNING!!
A VIRUS HAS BEEN DETECTED ON YOUR COMPUTER. IN ORDER FOR YOUR
COMPUTER
NOT TO CRASH YOU WILL NEED TO GO TO:
HTTP://WWW.WINDOWSUPDATENOW.COM
AND IT WILL AUTOMATICALLY UPDATE YOUR COMPUTERS SECURITY PATCHES.
SIMPLY TYPE IN HTTP://WWW.WINDOWSUPDATENOW.COM INTO YOUR BROWSER.
OTHERWISE
YOU WILL KEEP RECEIVING THIS SECURITY ALERT EMAIL EVERY DAY.
In a fit of irony I decided to go and see what the site was... pron, penis enlargement, or something that will bombard me with ActiveX controls trying desparately to install themselves into Opera on Redha Linux. Sadly, the website is pointed at 127.0.0.1, so it did nothing. Oh well. I can only hope that normal users out there realize that any email with more than 50% CAPITAL LETTERS IS SPAM. I can hope can't I?
I wish bogofilter would have picked it up. Only a spamicity rating of 1.16.... I'll have to train it some more :(
well, just had to check this one.
from whois;
Registrant:
Microsoft Corp (WINDOWSUPDATE-DOM)
1 Microsoft Way
Redmond, WA 98052
hmmm...
www.windowsupdate.com CNAME windowsupdate.microsoft.nsatc.net
whois for nsatc.net;
Organization:
Digital Island, Inc
wierd, so a MS domain points to digital island?
digital islands site is digisle.net and that
did not return anything via http.
totally wierd, but wierder is the web page at windowsupdate.com
One of the first lines is ;
"Note You must be running a validly licensed Windows operating system to access the Windows Update Web site."
what a bunch of asshats!