ISP Alerts

Dear ISP Member,

Some of your incoming emails are currently being rejected as your storage limit of 30MB has being exceeded; click below to increase storage on your next signin.

 www.yourisp.net/storage [1]

 Thank you for using our mail system.

 Online Services Team.

© Copyright Your ISP 2012. All rights reserved.

4/3/15 Virus infected spam

Subject: RE-CONFIRM ORDER 
Date: 2015-04-03 01:02 
From: impandex@zastava-arms.rs 
To: customer@yourdomain.net 

On 2 April 2015 at 09:23, automatic home <info@zastava.com> 
wrote: 

Dear Customer, 

Kindly reconfirm  us with  the status of the PO we are a bit 
confused with your payment information as stated in the 
enclosed attached Order. 

With Regards 
MOLLY MOON 

Sales Manager 
**************************** 
Further Inquires please: 
**************************** 
Company: Energy supply LTD.INDIA 
Invoice Request Number: M0P1YY1 
Carrier: MAERSK LINE xxll112**12 
Invoice Type: International Delivery Charges 
Cargo Destination: Within Europe & Africa&Asia 
Bill of Lading Number: 864822292 
Consignee Name: XYZ TRANSPORT LTD 
Clearing Agent Name: MAERSK FREIGHT FORWARDERS CO. LTD 
TRA License Number: 11613 

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 
Important Note:- 

Seat availability and rates are subject to change without any 
prior notice.Please note that the above mentioned Fares are only 
Guaranteed for Today. Hence Please advise us at the earliest for 
confirming the same. 

Hope that everything mentioned is clear and in order. Please feel 
free to contact for any further assistance on the same. 

Our office  timings - 8.00AM - 12.00PM / 4.00PM -8.00PM 

Thanks & Regards, 

Binu Antony 
Senior Travel Consultant, 
Cleopatra Travels, 
P.O.Box 989 
Doha,Qatar 
Tel: 44444403, 44368128, 44437788, 44329282 
Fax: 44329301/44444010 
Mobile:  +974 55707334 
Email - user1985@gmail.com 

Binu Antony <user1985@gmail.com> 
-----------------------     1:07 AM (4 hours ago) 

2/1/15 General Spam

From: testing [mailto:testing@newsfeedback.us] 
Sent: Saturday, January 31, 2015 10:24 AM
To: user@sbtc.net
Subject: test html

Sample Clickthru
Click
Click
Sample view


Sample Unsub
unsub
Click
Variables 1 01 |resak@sbtc.net| Email Address
2 02 |145517| Email Mailing ID ( ROBOMAIL ASSIGNS THIS ONE )
3 03 || Personalization field 2
4 04 || Personalization field 3
5 05 || Personalization field 4
8 cb |-----293005401398P113BE6| Randomized from the Content-Boundry template
9 CX || where X can be 0 to 9, a random line from the wordX files, but stays constant through the email
10 rX || where X can be 0 to 9, a random line from the wordX files, but variable through the email
11 rw |crocein| A random line from the word0 file
12 r0 |coco| A random line from the word0 file
13 dd |sbtc.net| The domain part of the To: address
14 db |31 Jan 2015 21:53:40 +0500| Date with no time
15 dh |Sat, 31 Jan 2015 21:53:40 +0530| Complient Date: header formatted date
16 dD |Sat| Current Week Day Name
17 dM |Jan| Current Month Name
18 dm |1| Current Month Number
19 dn |31| Current Day of the Month Number
20 dy |2015| Current Year
21 fr || The next line from the "from" file.
22 ho |combine.newsfeedback.us| full hostname for sending ip
23 hd |newsfeedback.us| 2nd level domain of sending ip hos

24 HX || where X can be 1 to 9, substitue X random Hexidecimal numbers
25 ip |37.9.62.111| sending IP address
26 NX || where X can be 1 to 9, substitue X random number
27 m0 |403| The unique robomial mailing id for that campaign
28 qd |201501312153| Qmail style Message ID timestamp
29 rw |honourableness| A random line from the word0 file
30 rx |deadhead| where X can be 1 to 9, a random line from the wordX file
31 su || The next line from the "subjects" file
32 tm |1422721420| The unix timestamp
33 uu |resak| The user part of the To: address
34 yX || where X can be 1 to 9, substitute X random lower case letters
35 YX || where X can be 1 to 9, substitute X random upper case letters and numbers
36 XX |8F0RP139QQ| where X can be 1 to 9, substitute X random upper case letters and numbers constant per email
37 x0 |erfnx^fogp(arg| rot13 of email address
38 rd || rotate domain 

1/30/15 Phishing spam

From: VENTURECOMM <ksacket3@kent.edu>

Date: January 30, 2015 at 1:47:26 PM CST
To: undisclosed-recipients:;
Subject:Dear Email user

Dear VENTURECOMM Email user,

   Due to database maintenance equipment that is happening in our VENTURECOMM mail message center. Our VENTURECOMM

 message center must be reset due to the large number of spam messages we receive daily in our database. The maintenance of quarantine will help us avoid this dilemma every day and with the new improved software will provides our VENTURECOMM

Email users with a secure mail system and new security system to protect our users from getting their VENTURECOMM

 accounts being hacked.

   To validate your VENTURECOMM Email mailbox, kindly CLICK HERE  to visit the Mris customer secure LINK specified on this email and fill out the account validation form to validate your VENTURECOMM email powered account:

 Thanks,

Copyright © 2015 Metropolitan Regional Information Systems