Identity Theft : 2007

Spammers routinely forge the From: line in their junk emails, causing the inevitable flood of bounces, auto-acknowledgements and complaints to land in some innocent third-party's inbox. Like so many other domain names, obliquity.com is sometimes used in these forgeries.

January (1026 bounces)

Bounces from the pharmacy spammer of last December continued to dribble in.

First bounce
January 1 01:20:59 (GMT)
Last bounce
January 31 23:19:52 (GMT)
Forged address
bobliquitye
Sample subject lines
See December 2006
Bounces
75

The "random letter" address spammer also kept busy.

First bounce
January 1 10:16:07 (GMT)
Last bounce
January 26 01:06:18 (GMT)
Forged address
Random letters
Sample subject lines
Random words or sentences
Bounces
335

The August spammer returned this month too. A few bounces trickled in during the beginning of the month with a new spam run commencing on 25 January at 19:04:25 (GMT) with 498 bounces arriving in the first ten minutes (an average of nearly one per second).

First bounce
January 1 15:21:57 (GMT)
Last bounce
January 30 19:49:50 (GMT)
Forged address
Several random words strung together along with one or more random letters or numbers
Sample subject lines
See August 2006
Bounces
616

March (2211 bounces)

The pharmacy spammer from last December went at it again, this time using the address "dwobliquitym" in the obliquity.com domain. The sites advertised were

This spammer has used the same tactic (using a From: address in the form dwexamplem@example.com) against a large number of other domains.

First bounce
March 1 15:50:35 (GMT)
Last bounce
March 20 20:37:09 (GMT)
Forged address
dwobliquitym
Sample subject lines
See December 2006
Buy Cialis for $2.19 per pill!
Don't forget to ask for discount!
Don't miss this unique chance
Forget about fake medicines!
Introduce special discounts for all our customers!
Online store offers special discounts
Order now and don't forget about a discount
Read this special offer
Special discount on medications
Special discounts
Special discounts for all our customers!
Special offer
Special offer from our store
Special offer on medications!
Special price on our medications!
We?d like to present you a special offer
Bounces
2211

April (669 bounces)

Early on the morning of 19 April, a Russian spammer began abusing the obliquity.com domain. The advertised domain was 5851078.ru but the emails also included a link to a file hosted at radiodeejay.hr which contained an inline frame referencing c-commando.info, a web site associated with certain computer viruses and Trojans. A particularly insidious point about this attack was that the spammer inserted a fake but realistic-looking Received: line into the headers, making it look as if the email really did originate here. It did not! Five more bounces dribbled in the following month.

First bounce
April 19 04:06:08 (GMT)
Last bounce
April 30 09:53:27 (GMT)
Forged address
Various names, role accounts or random letters
Sample subject lines
In Cyrillic
Bounces
669

June (9975 bounces)

The pharmacy spammer from March (and last year) returned this month, this time using the address "obliquitym" in the obliquity.com domain. The sites advertised were

Isn't it odd that so many of these "Canadian pharmacy" web sites have Hong Kong domain names!

Less than 24 hours later someone started shilling fake university diplomas using exactly the same forged address. (This is particularly insulting to us as we have earned two bachelors degrees, two masters degrees and one doctorate between us, as well as several other educational and professional qualifications.) The same telephone number, 682-626-0008, was always mentioned. At the time of this spam run, this was a land line in Atlas, Texas, USA. 626 is a CLEC (Competitive Local Exchange Carrier) prefix and is used by those not wishing to use regular telephone companies. Dialing one of these CLEC prefixes may incur additional charges.

This spammer has used the same tactic (using a From: address in the form examplem@example.com) against a large number of other domains.

A short-lived spam run abusing the same forged address began on 29 June. The subject lines on these were nonsensical phrases.

First bounce
June 14 10:36:58 (GMT)
Last bounce
June 30 23:59:39 (GMT)
Forged address
obliquitym
Sample subject lines (Pharmacy)
See December 2006 and March 2007
All products to cure yourself
Best rates on drug, shipping worldwide
Best way to cure yourself
CanadianPharmacy has announced a half-price offer
CanadianPharmacy has announced great discounts
CanadianPharmacy introduced really amazing seasonal discounts
CanadianPharmacy often announces discounts
Can't afford drugs you need?
Can't be a lover anymore?
Can't find good drug store
Can you imagine that you are healthy
Change your sexual life for the better
Cheapest way to solve health problems
Don't have time to visit local drug store
Don?t miss our summer discounts
Don't waste your time. Cheap pills are here.
Drugs for US residents
Drugs worldwide at low price
Enjoy our summer discounts
Improve your health and save money
Introduce special discounts for all our customers
Looking for drugs ?
Make absolutely safe purchase with CanadianPharmacy
Must have drugs
Need some help
Need to buy drugs but don't know where?
New season, new discounts! Be ready to discover
Nobody will know bout your problems
No doctor appointment is necessary
Now with the 50% discount it offers the best Net prices
Online store offers special discounts
On-line generic store
Order meds with pleasure and make significant savings
Order with CanadianPharmacy and get incredible summer discounts
Our half price offer is valid till the end of the summer
Products that can improve you life
Purchase with pleasure, enjoy discounts
Reproduction and ED problems
Some useful advices for your health
Special summer offer from CanadianPharmacy
Special offer from our store
Summer season is a great time to improve your health
Thanks for being our customer
Thanks for being with CanadianPharmacy
Top listed drugs for you
Top pills at low prices
Try our service and you?ll find long-term reliable partner with CanadianPharmacy
Try our service and you will get deep-discounted quality products
We are flexible and take care of every customer
We are grateful to all our devoted customers
We have everything you need
We hope this information will help you to make the right choice
We offer best prices for best people
We've done our best to offer the cheapest possible prices
Why don't you buy some drugs to be healthy
Wide selection of medications
your email message
Sample subject lines (Diploma)
Add a University Degree to your experience and get that promotion.
Bachelor Degree in 4 weeks, Masters Degree in no more than 2 months.
Earn more money with your brand-new University Degree
Get a step up real quick with your new University Degree.
Get a University Degree in terms shorter than you can imagine.
Getting a Degree of a respected university has never been that easy.
Getting a well-paid job is not a problem with a University Degree.
Getting the job of your dream is easier with a University Degree.
Invest into your future - get a University Degree now.
No more need to beg for a promotion - get a University Degree.
No more theory - use your professional experience to get a Degree.
Obtain the University Degree suitable for your qualification now.
Prove that you are better than the others - get a University Degree.
The quickest and easiest way to obtain a University Degree.
Time to achieve new heights with a University Degree
Time to obtain the University Degree that you really do deserve.
Turn your career dream into reality with a University Degree.
University Degree breaks the glass ceiling over your head
University Degree - essential for a would-be high-flier.
University Degree - makes the course of your career perfect.
University Degree - the choice of the most perspective.
University Degree - we know that you do deserve it.
University Degree your boss will beg you to take the promotion.
We prove that getting a University Degree can be easy.
You won't believe how easy it is to obtain a University Degree.
Bounces
7191

A weight-loss spammer advertising HoodiaPlus began abusing the obliquity.com domain late in the month. A total of 1950 bounces were received in the first ten minutes of this run, an average of over 3 per second. This may be the same spammer who first struck in August 2006.

First bounce
June 24 23:53:49 (GMT)
Last bounce
June 30 01:49:11 (GMT)
Forged address
Male name followed by random words or letters
Sample subject lines
See August 2006
One or three random words, sometimes followed by random punctuation
Appetite suppressants
Control your eating habits safely
Cut down on portion sizes
Eat less, loose more
Eat less, lose more
Enjoy a slimmer life
Enjoy a slimmer looking figure
Enjoy fast weight loss
Feel the power of weight loss
Gain more confidence in an instant
Get the perfect looking body
Give your body the chance to lose weight
Live a simple, slimmer life
Loose more weight, feel much better
Lose weight and feel great
Lose weight naturally
Lose weight now and do it quick
Lower your weight quickly
Reduce your appetite and reduce your weight
Reducing your appetite means increasing your self esteem
Shed the pounds and reap the benefits
Shed the weight and gain confidence
Slim down and boost your self esteem
Super weight loss, super confidence
Tone down you eating
Trick your mind
Bounces
2239

The Russian spammer returned late this month, forging various nonexistant addresses in the obliquity.com domain. The advertised telephone number +7 (495) 788-77-18 was associated with mobile telphones and SIM cards. A particularly insidious point about this attack was that the spammer inserted a fake but realistic-looking Received: line into the headers, making it look as if the email really did originate here. It did not! Fourteen more bounces dribbled in the following month.

First bounce
June 28 09:27:14 (GMT)
Last bounce
June 30 16:05:06 (GMT)
Forged address
Various names, role accounts or random letters
Sample subject lines
In Cyrillic
Bounces
540

July (13064 bounces)

The deluge of spam advertising

continued this month.

First bounce
July 1 00:00:16 (GMT)
Last bounce
July 31 23:42:30 (GMT)
Forged address
obliquitym
Sample subject lines
See December 2006, March 2007 and June 2007
All the medications from really impressive selection for a half price
Healthy life is your dream?
Let CanadianPharmacy help you to manage your health and save money
Must have drugs with the best quality
Must have pills
Top listed drugs for you
We are here for you to live a healthier and happier life!
You need these pills
Bounces
11679

Another spammer struck mid-month. This may be the same person responsible for the "Hoodia" flood last month. In the first wave, 470 bounces arrived in the first ten minutes (nearly one per second). In the second wave (which commenced nearly four hours after the first), 714 bounces showed up in the first ten minutes.

First bounce
July 19 16:16:51 (GMT)
Last bounce
July 29 23:50:44 (GMT)
Forged address
Random letters and numbers
Sample subject lines
One or more random words
Bounces
1361

Finally, at least a dozen bounces from a German "pump and dump" spammer ended up in our inbox during the latter half of the month.

August (4384 bounces)

The bounces from

continued this month, with fresh attacks commencing on 10 August, 19 August, 20 August, 24 August and 31 August.

A software spammer, variously known as

began abusing this same address on 28 August, advertising domains such as

among many others. The same person or organisation is responsible for these attacks since many of these domains have also been used to sell drugs (and mortgages and replica watches and ....) for well over a year. As well as being used fraudulently as the return address, "obliquitym" now attracts considerable amounts of spam (and virus-laden payloads) addressed to it.

First bounce
August 1 01:12:39 (GMT)
Last bounce
August 31 22:25:27 (GMT)
Forged address
obliquitym
Sample subject lines (Pharmacy)
See December 2006, March 2007, June 2007 and July 2007
Pharmacy Shop
Sample subject lines (Software)
75% Off for All New Software
Best software prices.
Don't be a fuddy-duddy...use the software everyone's using...
Learn to build simple and clean websites that can bring in the dough...
Looking for cheap high-quality software?
Photoshop, Windows, Office. Cheap.
Soft at incredibly low prices
Software Compatibility....ain't it great?
Software taking a bite out of your budget? Try OEM.
Three steps to the software you need at the Prices You Want
You know how it? To work with stable software.
You want to work stable? Just buy licensed WINDOWS
Bounces
2503

The subject lines promised pornography but the spamvertised web sites simply contained the sentence "If you do not see the Secure Login Window please install our Secure Login Applet." with a link to an executable file called applet.exe. This file was malware known as Storm Worm and it would be a very bad idea to download it onto your computer.

First bounce
August 19 21:04:07 (GMT)
Last bounce
August 27 04:51:32 (GMT)
Forged address
akhil, ash10sparks, claire.e.anderson, collinphung, gary.reiman, heiso, hhorowitz, irexe, seretta55, spyd, spygirl1424, ying
Sample subject lines
Single words like Abuse, Alert, Check, e-mail, File, graph, headline, print, Post, Proposal, Publication, Suggestion
I am glad you liked my pics, here.s a few you will really like.
I need a real man who knows how to please me. Check out my photos. Is it you?
My EX-boyfriend took these of me in bed. Do you think he misses me.
Oh man this girl is a freak, lol. She was so wild. Check out the pics we took.
Yo Dude, I took these pics of my sister-in-law. OMG she is so hot. See for yourself!
You got me so hot the other night. I took these pictures when I got home. Check em out. (wink)
Bounces
1801

An unknown spammer sporadically attacked the orange.fr network this month, always using the same return address in the obliquity.com domain.

First bounce
August 23 15:32:55 (GMT)
Last bounce
August 31 16:11:31 (GMT)
Forged address
horrified
Bounces
80

September (6778 bounces)

The bounces from

continued, with fresh attacks occurring through this month.

First bounce
September 1 00:06:44 (GMT)
Last bounce
September 21 12:11:02 (GMT)
Forged address
obliquitym
Sample subject lines
See December 2006, March 2007 and June-August 2007
Bounces
1717

A real mixed bag of bounces arrived on 18 September. Some were pushing cialis/viagra websites like

whilst others were "pump and dump" scams. The most insidious were the emails promising computer games but whose links led to a file called ArcadeWorld.exe, another incarnation of malware known as Storm Worm. It would be a very bad idea to download this file onto your computer.

First bounce
September 18 10:34:52 (GMT)
Last bounce
September 24 05:46:03 (GMT)
Forged address
angelralph105, jean-louis.paiusco, marija.patalic, steadypushin
Sample subject lines (Pharmacy)
Buy cialis - High Quality Medication
Cheap Viagra Online Directory
Cialis Soft Tabs is the new impotence treatment drug that everyone is talking about
Sample subject lines (Pump and Dump)
Random punctuation like -!)++.)+!*]*).*   and   (. ) )[***) -!+])(+]*]:[:[-
Sample subject lines (Storm Worm)
1000+ Free Games!
All the free games you want
Wow, free games!
Bounces
227

Dodgy loans were available at telephone numbers

as well assorted web sites like

Or perhaps they wanted your personal financial details for some other reason. Within the first ten minutes of this spam run 3041 bounces arrived, averaging just over five per second. Later that day another spam run resulted in 1010 bounces within the first ten minutes, an average of nearly two bounces per second.

First bounce
September 19 02:16:00 (GMT)
Last bounce
September 30 22:35:03 (GMT)
Forged address
Name followed by a word followed by another name
Sample subject lines
Are you paying too much?
Cut your bills by at least half
Don't know how to get a lower rate? I do!
Enjoy financial security
Enjoy the freedom from financial burdens
Enjoy the freedom of les monthly outgoings
Experience the nicer things in life
Find release from being tied down
Get the freedom you want
Increase the money in your pocket
Lower prices really are a possibility!
Lower rates have never been easier
No more worrying needed
No need to tighten your purse strings
Reduce your monthly payments
Spend more when you want and less when you need to
Thanks, we accepted your company application
Thanks, we accepted your company business loan request
Thanks, we accepted your refinance application
Thanks, we are accepting your application
Thanks, we are accepting your company application
Thanks, we are accepting your company business loan request
Thanks, we are accepting your company loan request
Thanks, we are accepting your debt request
Thanks, we are ready to give a business loan for a low month payment
Thanks, we are ready to give a loan for a low month payment
Thanks, we are ready to give you a loan
Thanks, we are ready to give your company a loan
Thanks, we are ready to lend money
Thanks, we are ready to lend some cash
Thanks, we are ready to lend some cash regardless of Credit
Thanks, we are ready to lend you money regardless of Credit
Thanks, we are ready to lend you some cash
Thanks, we are ready to lend your company money
Thanks, we are ready to lend your company some cash regardless of Credit
Thanks, we will help you fight out the cash crunch
Thank you, we accepted your company application
Thank you, we accepted your company business loan request
Thank you, we accepted your refinance application
Thank you, we are accepting your application
Thank you, we are accepting your company application
Thank you, we are accepting your company business loan request
Thank you, we are accepting your company loan request
Thank you, we are accepting your debt request
Thank you, we are accepting your refinance loan request
Thank you, we are ready to give a business loan for a low month payment
Thank you, we are ready to give a loan for a low month payment
Thank you, we are ready to give you a loan
Thank you, we are ready to give your company a loan
Thank you, we are ready to lend money
Thank you, we are ready to lend some cash
Thank you, we are ready to lend some cash regardless of Credit
Thank you, we are ready to lend you money regardless of Credit
Thank you, we are ready to lend you some cash
Thank you, we are ready to lend your company money
Thank you, we are ready to lend your company some cash regardless of Credit
Thank you, we will help you fight out the cash crunch
Want a way to lower your payments?
What can we offer you?
Worry less and spend more
Would you like financial freedom?
Would you like to be paying less each month?
Would you like to see more cash in your purse?
Bounces
4789

A short-lived spam run beginning at 19:11:51 on 25 September resulted in 23 bounces. The forged addresses were random letters and numbers, with some resembling names.

The unknown orange.fr spammer returned this month, still using the same "horrified" address in the obliquity.com domain. Two separate attacks resulted in 22 bounces.

October (1129 bounces)

The Russian spammer returned early this month, forging various nonexistant addresses in the obliquity.com domain. The advertised web site 1069.ru was registered by someone calling himself Boris V. Andreev on 12 September 2007 and was used to sell a book and CD authored by Russian tax attorney A.A. Nikolayev-Polynovskiy. A particularly insidious point about this attack was that the spammer inserted a fake but realistic-looking Received: line into the headers, making it look as if the email really did originate here. It did not!

First bounce
October 6 09:27:47 (GMT)
Last bounce
October 15 17:05:37 (GMT)
Forged address
Various names, role accounts or random letters
Sample subject lines
In Cyrillic
Bounces
398

The bounces from

began again on 19 October. Now (or perhaps always) associated with

one of the products on offer this time was a penis patch.

First bounce
October 19 13:02:08 (GMT)
Last bounce
October 27 00:59:20 (GMT)
Forged address
obliquitym
Sample subject lines
See December 2006, March 2007 and June-September 2007
Be happy about your size
Don't hesitate, grab the chance of your lifetime
Don't put off your happy life, order our patch today
Don't worry about your equipment any more.
Let MyCanadianStore help you to manage your health and save money
Start a new life of success and happiness
Welcome to the world of happy and confident men
You don't have to worry any more! It's time for pure enjoyment
Your problems with cock size will become history
Bounces
437

Shortly after the pharmacy bounces started, another spammer struck on 19 October. Most of the bounces came from Russian and other European and Asian domains.

First bounce
October 19 18:48:11 (GMT)
Last bounce
October 21 07:51:21 (GMT)
Forged address
Random names, words and/or numbers, mixed together, sometimes with punctuation
Sample subject lines
Nonsense words
Bounces
113

It was supposed to be a funny dancing skeleton but the file named halloween.exe was just another manifestation of the malware known as Storm Worm. It would be a very bad idea to download this file onto your computer.

First bounce
October 31 18:02:08 (GMT)
Last bounce
October 31 23:48:43 (GMT)
Forged address
bnvstratton, captain, gjust, info23, paulsapla, tranquillitesante
Sample subject lines
Halloween Fun
I played with this for hours
Man this is funny
Nothing is funnier this Halloween
You'll laugh your but off
Bounces
160

The unknown orange.fr spammer was at it again, still using the same "horrified" address in the obliquity.com domain. A spam run on 4 October resulted in 21 bounces.

November (438 bounces)

The Storm Worm bounces from Halloween continued into this month with ten in total.

Sadly, our "friends" at

won't lay down and die. As a side line, they also shill computer software:

Clearly the two spam runs were linked. Pills and programs were similarly linked in August 2007. Two spam runs occurred this month, with the second starting on the last day of November.

First bounce
November 28 14:32:41 (GMT)
Last bounce
November 30 21:20:33 (GMT)
Forged address
obliquitym
Sample subject lines (Pharmacy)
See December 2006, March 2007 and June-October 2007
Sample subject lines (Software)
See August 2007
Brand new software at old price
Cheap and excellent software - too good to be true? Read information below
Cut-price OEM software e-shop
Just click to buy OEM. Best worldwide soft at increadeable prices
Legal software sales
OEM net value here
Software full line in cheap&quick OEM e-shop
Bounces
428

December (11466 bounces)

The bounces from

continued this month, with a fresh run commencing on 2 December and another short-lived one on 7 December.

First bounce
December 1 01:36:27 (GMT)
Last bounce
December 10 11:45:50 (GMT)
Forged address
obliquitym
Sample subject lines (Pharmacy)
See December 2006, March 2007 and June-November 2007
Sample subject lines (Software)
See August 2007 and November 2007
Cheap and excellent software - too good to be true? Read information below
Microsost Windows XP Professional(with sp2)-pay the
MS office cheap as chips!
New software issues strongly recommended!
Quick as flash software download, no extra fee charged!
Righteous software- righteous price!
Yummy soft deals online!
Bounces
180

We also received a report on 7 December of spam being sent out containing a link to our web site logo within the body of the email. The ones responsible were the prolific "MegaDik" spammers (who use a variety of other names such as EliteHerbal, Express Herbals, HerbalKing, HerbalMart, ManSter Penis Enlargement Formula, VPXL, XtraSize+, etc.). They helped themselves to our domain name again later in the month.

First bounce
December 19 22:15:42 (GMT)
Last bounce
December 27 04:05:26 (GMT)
Forged address
Name followed by random letters, numbers or words
Sample subject lines
Nonsense words beginning with the letter v
Bounces
413

The Canadian pharmacy spammers returned with a vengeance at the end of the month, adding casinos (Golden Gate Casino, Vegas VIP Casino, etc.) and replica watches (Diamond Replicas, Prestige Replicas, etc.) to their repertoire. During the first run of 27 December, 6623 bounces arrived in the first ten minutes, an average of over 11 bounces per second! A second spam run began later that same day at 20:37:00 GMT. This time, 2456 bounces arrived in the first ten minutes (a much more sedate 4 bounces per second).

First bounce
December 27 06:17:53 (GMT)
Last bounce
December 31 21:57:59 (GMT)
Forged address
two names, three names or a name followed by a random word and a name
Sample subject lines (Casino - First Spam Run)
$2400 welcome bonus will be deposited in your new casino account!
After thatit's only fun and winning
Best offer in gambling history
Come see what it means to be a VIP
Download our casino in 20 seconds to get $2400 richer
Free money free fun
Get $2400 welcome bonus
Get your bonus and walk the red carpet to winnings and fun
Hey, start seeing dollars pouring in
How about a $2400 welcome bonus
How about the best service around
If you're in the US or anywhere else, join your new casino paradise
If you're in the US, join your new casino paradise.
it's only fun and winning
Join your new casino paradise
Multi-hand..
Multi-hand and single-hand blackjack
Our casino is for everyone who likes to win!
Our casino is for you who likes to win!
Our safe, secure games will get you smiling
Play your favorite games and get $2400 welcome bonus
Play your favorite games from the comfort of your home
Players from around the world!
Players from the United States and around the world!
Relax and have fun with blackjack
Relax and have fun with progressive video slots
Relax and have fun with roulette
Single-hand blackjack..
Slots..
Slots, multi-hand, and single-hand blackjack
Travel no further than your screen and get your free $2400!
USA players ARE welcome!
USA players too! Download and GO!
Visit and start seeing the dollars coming
We pay you to play
We're serious about fun
When YOU WIN, we win!
Win $$$ instead of throwing it all away at other casinos
Sample subject lines (Casino - Second Spam Run)
750 dollars just for you
750 dollars only for you
750 dollars to welcome you
750 dollars Welcome Bonus
750 dols just for you
750 dols only for you
750 dols to welcome you
750 dols Welcome Bonus
750 USD just for you
750 USD only for you
750 USD to welcome you
750 USD Welcome Bonus
Sample subject lines (Pharmacy - First Spam Run)
Approval process
Confirmation link
Hi
Your family
Your health
Your life
Your order
Your order approved
Sample subject lines (Pharmacy - Second Spam Run)
Are you a real man?
At present the increase of your instrument size is not a dream
Become a real man...
Become a real man increase your aggregate
Become a real man increase your instrument
Become a real man increase your male device
Chicks like when you have big device
Chicks like when you have big male aggregate
Chicks like when you have big male machine
Forget about the problem with your instrument
Forget about the problem with your male instrument
Forget about the trouble with your male machine
Girls like when you have big instrument
Girls like when you have big male device
Girls like when you have big male machine
Have you increased your aggregate?
Have you increased your instrument?
Have you increased your male device?
Now the increase of your instrument size is not a dream
Now the increase of your male aggregate size is not a dream
Right now the increase of your male aggregate size is not a dream
Satisfy her!
Small instrument is not a problem
Small machine is not a trouble
Small male aggregate is not a problem
Small male instrument is not a trouble
Today the increase of your instrument size is not a dream
Women like when you have big instrument
Women like when you have big male aggregate
Women like when you have big male machine
You have chance to become a real man
You have possibility to become a real man
Sample subject lines (Replica Watches)
a luxury look without spending too much
affordable prices rolex
brand name luxury timepieces
brand name quality rolex
diamond Replicas
exclusive replica rolex
exclusive watches
exclusive watches rolex
lowest prices possible rolex
perfectly crafted rolex
the most beautiful timepieces
unbelievably low prices
Bounces
10811

The bounces continued into the next year.

The infamous Storm Worm made one last appearance on 30 December.

First bounce
December 30 01:15:36 (GMT)
Last bounce
December 30 02:45:28 (GMT)
Forged address
barbarafwic, bercan, franco, ftrxuffba, grantfjivlq, gtr4u2cm, penn, pflyer
Sample subject lines
Assorted New Year's greetings, including "It's the longest of the year..."
Bounces
62

Sporadic Bounces

We started getting sporadic bounces this year. They occur one or two at a time and are addressed to nonexistant addresses which have been spammed for years.

JanFebMarAprMayJunJulAugSepOctNovDecTotal
39 43 142 228 194 216 234 156 271 300 328 2151
Email Forgery Spam 'n' Scam Copyright © 2007 by David Harper and L.M. Stockman
Designed and maintained by Obliquity
http://www.obliquity.com/computer/spambait/theft2007.html