Robin
Premium Member
Registered: 7th Jan 04
Location: Northants Drives: Clio 182 Cup
User status: Offline
|
i keep getting spam emails from the bank of scotland 
theres no option to unsubscribe from them, and i cant seem to get them to go away by marking them as spam
pissing me off now, i get about 5 a day
what can i do?
|
Dan B
Member
Registered: 25th Feb 01
User status: Offline
|
Firstly, check they're actually from the Bank of Scotland. If you don't know your way around email-headers, paste the full headers in a reply in here, and I'll confirm where they're originating from...
If you don't know how to view headers, post your email-client (including version) in here - most clients will tell you the version if you go into the Help menu, and click on the "About..." option in there.
|
Robin
Premium Member
Registered: 7th Jan 04
Location: Northants Drives: Clio 182 Cup
User status: Offline
|
this is the address they are from
support-ref8602527242id@bankofscotland.co.uk
im using outlook express 6 (6.00.2900.2180)
|
Sam
Moderator
Premium Member
Registered: 24th Dec 99
Location: West Midlands
User status: Offline
|
In your Inboxc or wherever the email is, right-click on the message and select Properties, click on the Details tab, then click on the Message Details button, copy + paste what's in there, as the From: bit can be faked by spammers - i.e. the email may not actually be from BoS!
|
Robin
Premium Member
Registered: 7th Jan 04
Location: Northants Drives: Clio 182 Cup
User status: Offline
|
i did, its the address ^^ up there
the link in the email is genuine, links to the BoS site (i googled it, didnt click)
|
abdus
Member
Registered: 23rd Feb 06
User status: Offline
|
can't you report it as spam from within you mail settings?
|
Robin
Premium Member
Registered: 7th Jan 04
Location: Northants Drives: Clio 182 Cup
User status: Offline
|
doesnt work, the address changes
|
abdus
Member
Registered: 23rd Feb 06
User status: Offline
|
try reporting it directly or phone customer services. Seems weird though for a bank to spam 
|
Dan B
Member
Registered: 25th Feb 01
User status: Offline
|
If the address changes, I'd be even more suspicious of it being a phishing scam......you've still not pasted the email-headers.
And, if you didn't click on the link, how do you know it goes to the same site that it SAYS it does? Most phishing scams work in exactly the same way, as below:
http://www.barclays.co.uk (it is safe to click this one, don't worry, just showing you how they tend to do it - most email-programs won't show you the "true" address if you hover over the link, like you can do in a browser)
|
Sam
Moderator
Premium Member
Registered: 24th Dec 99
Location: West Midlands
User status: Offline
|
Yes paste the mail headers in FFS!
|
Robin
Premium Member
Registered: 7th Jan 04
Location: Northants Drives: Clio 182 Cup
User status: Offline
|
the link in the bottom corner is the same as the link shown...
i dont know how to post the headers, its all random computer jargon that i dont understand 
|
Robin
Premium Member
Registered: 7th Jan 04
Location: Northants Drives: Clio 182 Cup
User status: Offline
|
is this it?
Return-Path: <onlinesupport_id_31068422420id@bankofscotland.co.uk>
Delivered-To: robin@smallblockxe.com
Received: from Postfix filter 42a77884ce2a0a03efc6bb50a6dcdb21 (smtpin21l.fasthosts.co.uk [127.0.0.1])
by smtpin121.livemail.co.uk (Postfix) with SMTP id 349191A0095
for <robin@smallblockxe.com>; Sat, 19 Aug 2006 05:15:52 +0100 (BST)
Received: from smtpin-124.livemail.co.uk (smtpin124.livemail.co.uk [213.171.216.124])
by smtpin121.livemail.co.uk (Postfix) with ESMTP id 140D01A008A;
Sat, 19 Aug 2006 05:15:52 +0100 (BST)
Received: from Postfix filter 42a77884ce2a0a03efc6bb50a6dcdb21 (smtpin-124.livemail.co.uk [127.0.0.1])
by smtpin-124.livemail.co.uk (Postfix) with SMTP id E4F9C86409D
for <projects@smallblockxe.com>; Sat, 19 Aug 2006 05:15:51 +0100 (BST)
Received: from 213.171.216.65 (unknown [219.250.246.207])
by smtpin-124.livemail.co.uk (Postfix) with SMTP id 0DAB58640AB
for <projects@smallblockxe.com>; Sat, 19 Aug 2006 05:15:49 +0100 (BST)
Received: from [120.47.208.243] (HELO malaysia.net)
by sailorwhores.com with SMTP id SY64TF7Q9R
for <projects@smallblockxe.com>; Fri, 18 Aug 2006 21:15:50 -0800
From: "Bank Of Scotland" <support-ref8602527242id@bankofscotland.co.uk>
To: "Projects" <projects@smallblockxe.com>
X-MSMail-Priority: 3 (Normal)
Subject: Bank of Scotland: Please Confirm Your Information
User-Agent: Mutt/1.5.1i
X-Mailer: Mutt/1.5.1i
X-Priority: 3 (Normal)
Message-Id: <20060819041549.0DAB58640AB@smtpin-124.livemail.co.uk>
Date: Sat, 19 Aug 2006 05:15:49 +0100 (BST)
X-Original-To: projects@smallblockxe.com
X-Antivirus: AVG for E-mail 7.1.405 [268.10.5/406]
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="=======AVGMAIL-44E71B2A4DAF======="
|
Sam
Moderator
Premium Member
Registered: 24th Dec 99
Location: West Midlands
User status: Offline
|
Yes, and it's fake, I'm pretty sure BoS isn't affiliated with sailorwhores.com or malaysia.net... 
|
Robin
Premium Member
Registered: 7th Jan 04
Location: Northants Drives: Clio 182 Cup
User status: Offline
|
how the bloody hell do i stop it then?
|
Sam
Moderator
Premium Member
Registered: 24th Dec 99
Location: West Midlands
User status: Offline
|
Mate I get about 20 of these emails a day in the corsagsi.co.uk inbox!
Just have to install an anti-virus system which has email spam filters for Outlook installed, or do as I do and delete them. 
I tried reporting said emails to spamcop.net but because these geeks use different Internet connections to send this shit out, it's very hard to stop them. 
|
Dan B
Member
Registered: 25th Feb 01
User status: Offline
|
Looking at those headers, I'd say that the originating IP was 219.250.246.207 (the IP beginning 120.xxx.xxx.xxx is fake, it's a reserved block for IANA), with owner-details as below:
IPv4 Address : 219.250.240.0-219.250.255.255
Network Name : HANANET-INFRA
Connect ISP Name : HANANET
Connect Date : 20041124
Registration Date : 20041124
Publishes : Y
[ Organization Information ]
Organization ID : ORG3930
Org Name : Hanaro Telecom Inc.
Address : Yeoeuido-dong Yeongdeungpo-gu SEOUL
Detail address : 17-7 Asia One Bldg.
Zip Code : 150-874
If you want to take it further, drop an email to:
[ ISP Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-106-2
E-Mail : abuse@hanaro.com
I can guarantee, though, that you won't get a response and it won't get looked into......it's very rare that any ISPs outside of the UK actually even look into spam-reports.
|
abdus
Member
Registered: 23rd Feb 06
User status: Offline
|
quote:
Originally posted by Dan B
[ ISP Network Abuse Contact Information ]
Name : Network Abuse
Phone : +82-2-106-2
E-Mail : abuse@hanaro.com
I read abdus
[Edited on 20-08-2006 by abdus]
|
Sam
Moderator
Premium Member
Registered: 24th Dec 99
Location: West Midlands
User status: Offline
|
|
Dan B
Member
Registered: 25th Feb 01
User status: Offline
|
|
