{"id":109,"date":"2011-09-28T18:09:22","date_gmt":"2011-09-28T08:09:22","guid":{"rendered":"http:\/\/sijnstra.name\/blog\/?p=109"},"modified":"2011-09-28T18:09:22","modified_gmt":"2011-09-28T08:09:22","slug":"spam-irony-and-the-same-scammers-are-still-out-there","status":"publish","type":"post","link":"http:\/\/sijnstra.name\/blog\/2011\/09\/28\/spam-irony-and-the-same-scammers-are-still-out-there\/","title":{"rendered":"Spam irony, and the same scammers are still out there"},"content":{"rendered":"

In a twist of irony, I have now been sent the same type of spam as the one that was created using my stolen credit card details and name earlier this year.<\/p>\n

This time, the content of the spam is (with extra spaces in the URLs to break them):
\n[sourcecode language=”html”]
\nDear Shawn Sijnstra,<\/p>\n

This is to notify that new updates have been released for Skype.<\/p>\n

http:\/\/www. official – skype – update.com\/<\/p>\n

Following are major new features :<\/p>\n

* Up to 5-way group video call.
\n* Redesigned calling experience.
\n* Improved video snapshots gallery.
\n* Improved browser plugins performance on some websites.
\n* Reduced false positives on browser plugin phone number recognition.
\n* New presence icons.
\n* Improved handling of calling attempts made when the user has run out of credit.
\n* Improved access to sharing functionality<\/p>\n

To download the latest version , go to :<\/p>\n

http:\/\/www. official – skype – update.com\/<\/p>\n

Start downloading the update right now and let us know what you think
\nabout it.<\/p>\n

Talk soon,<\/p>\n

The people at SkypeUnsubscribe (http:\/\/jenadyco.offthepageemarketing.com.au\/unsubscribe.php?cid=145&pid=755316&auth=13b78fdbd9b406c40959611b276d3546&upw=)
\n[\/sourcecode]<\/p>\n

It would appear to be the same group as the whois record for the address is registered in the same way, with the same or similar registrar, with the same fields used and a very similar address used. I have left the name of the registrant out for obvious reasons:<\/p>\n

\n% By submitting a query to RU-CENTER's Whois Service\n% you agree to abide by the following terms of use:\n% http:\/\/www.nic.ru\/about\/servpol.html (in Russian)\n% http:\/\/www.nic.ru\/about\/en\/servpol.html (in English).\n\nDomain name:             OFFICIAL-SKYPE-UPDATE.COM\nName Server:             ns1.official-skype-update.com 122.224.4.108\nName Server:             ns2.official-skype-update.com 122.224.4.108\nCreation Date:           2011.09.27\nUpdated Date:            2011.09.28\nExpiration Date:         2012.09.27\n\nStatus:                  DELEGATED\n\nRegistrant ID:           QH9BLSG-RU\nRegistrant Name:         \nRegistrant Organization: \nRegistrant Street1:      1039 Avenue Street\nRegistrant City:         New York\nRegistrant Postal Code:  10023\nRegistrant Country:      US\n\nAdministrative, Technical Contact\nContact ID:              QH9BLSG-RU\nContact Name:            \nContact Organization:    \nContact Street1:         1039 Avenue Street\nContact City:            New York\nContact Postal Code:     10023\nContact Country:         US\nContact Phone:           +1 800 2379293\nContact E-mail:          adobe@awssportswear.com\n\nRegistrar:               Regional Network Information Center, JSC dba RU-CENTER\n\nLast updated on 2011.09.28 10:34:48 MSK\/MSD\n<\/pre>\n
The individual whose name was used has a much more common name so hopefully does not have the same issues I have.<\/p>\n","protected":false},"excerpt":{"rendered":"
In a twist of irony, I have now been sent the same type of spam as the one that was created using my stolen credit card details and name earlier this year. This time, the content of the spam is (with extra spaces in the URLs to break them): [sourcecode language=”html”] Dear Shawn Sijnstra, This … <\/p>\n
Continue reading “Spam irony, and the same scammers are still out there”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3,6],"tags":[24,31,33,34],"_links":{"self":[{"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/posts\/109"}],"collection":[{"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/comments?post=109"}],"version-history":[{"count":0,"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/posts\/109\/revisions"}],"wp:attachment":[{"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/media?parent=109"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/categories?post=109"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/sijnstra.name\/blog\/wp-json\/wp\/v2\/tags?post=109"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}