Page 1 of 1

is this a new kind of spam ??

Posted: Thu Jun 13, 2013 8:10 pm
by DaFoxx
my dad died almost a year ago now
I monitor his account to ensure that any mails from real contacts are informed of his passing
but I also update and chop spam
until recently
started getting some containing no apparent links
all in Japanese pictograms and when I try to add to blocked list, it pops up to say it is an invalid address !!!!!!!

so have they figured a way to deliver through the system, or am I missing a trick here
post details below - suitably edited
Authentication-Results:; spf=pass (sender IP is; identity alignment result is fail and alignment mode is relaxed); dkim=none (identity alignment result is pass and alignment mode is relaxed); x-hmca=none
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0w
X-Message-Info: HY0JcSSCx0ouXGGebbcoTNuonsg4diGVefPGMJ3OoXbTj1mRGPo33mj63C/rD7aatbKNOu04InRMKdZbM8gyPPLWvQPa1D5KQ4JjlZDw5k9QgP7hzduA9/g35xQZw2ivuDSFYD2n2gr3EfXTD0tkjcCBO6dtZmF8+i2/i/W3/HY=
Received: from ([]) by with Microsoft SMTPSVC(6.0.3790.4900);
Thu, 13 Jun 2013 03:25:08 -0700
Received: from localhost ( by id hn6f080n7lgi for <>; Thu, 13 Jun 2013 06:25:06 -0400 (envelope-from <>)
From: Unfair Bank-Charges Claims
From: <>
From: Unfair Bank-Charges Claims..<>
Content-Type: text/html
Message-ID: <>
X-OriginalArrivalTime: 13 Jun 2013 10:25:08.0863 (UTC) FILETIME=[478788F0:01CE6820]
Date: 13 Jun 2013 03:25:08 -0700
I can see the within the header info, but it isn't in mail when I try to add to blocked list
so where I may be able to figure a way to block, what chance jo blogs

Re: is this a new kind of spam ??

Posted: Fri Jun 14, 2013 7:50 am
by rapier57
Whois shows this is owned by Live Wire Software, Ft Lauderdale, FLA, registered through just redirects to, so you can't get more info. I suspect the site and registrar are all messed up.

I also suspect you get an invalid email address when you try to block it because you can't get a reverse lookup on

'Cause is messed up.

Just sayin'!

Re: is this a new kind of spam ??

Posted: Fri Jun 14, 2013 4:28 pm
by DaFoxx
I added to blacklist anyway :)

we shall see what else arrives

Re: is this a new kind of spam ??

Posted: Tue Jun 18, 2013 8:49 pm
by DaFoxx
still getting similar mails to dads account, and so I clicked reply
DIDN'T send :P

got EuroMillions Club in header with a load of other guff that wont C+P

so typing to the fore
gawd help us if this is code :P

EuroMillions Club <=?UTF-8?B?RXVyb01pbGxpb25zIENsdWI=?=>

all of that lot shows as active in the reply mail - I assume there is a coding element in there ?

Re: is this a new kind of spam ??

Posted: Thu Jun 20, 2013 5:40 am
by rapier57
Well, I'm very rusty on this kind of stuff, but it looks like an embedded/compressed java script in UTF.

If you have java script enabled in your browser, it could run.

I don't. It won't.

If it came in an email, they want you to hit a web site and trigger this script.

I could be wrong.