jwSpamSpy Recent spam domains Spam domain blacklist
Links joewein.de joewein.net Contact |
|
|
"Joe Job" against shadowcrew.com
A "Joe Job" is a "spam run forged to appear as though it came from an innocent party, who is then generally flooded by the bounces; or, the act of performing such a run." (http://catb.org/~esr/jargon/html/J/joe-job.html
A frequent victim of such Joe Job attacks was the website shadowcrew.com, a rather dubious site where people appear to trade information about fake ID, stolen credit card information and other fraudulent and illegal activity.
On Oct 28 the leaders of this organization were charged in the US district court of New Jersey with electronic theft, credit card and debit card fraud and production and sale of false ID:
I understand why someone wanted to shut this site down, but the means of doing so were questionable. Here are some of the emails:
Received: from [219.241.91.45] (helo=219.241.91.45) by zeta.mc1.#########.## with smtp (Exim 4.34)
id 1CAF81-0004M5-40
for #######@########; Wed, 22 Sep 2004 23:58:25 +0200
From: sales at onlinenic.com
To: #######@########
Subject: How one can become a terrorist?
Date: Wed, 22 Sep 2004 16:58:18 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
Welcome to our web site www.shadowcrew.com/phpBB2/index.php
Please use http://63.240.81.5 in case of our domain outage.
You\'re invited to shop for large selection of bombs and different
kinds of rockets such as surface-to-air,
surface-to-surface and weaponry available at reduced price. With the
following types of rockets you will be
able to commit terrorist attacks, destroy buildings, electric power
stations, bridges, factories and anything
else that comes your mind. Most items are in stock and available for
next day freight delivery in the USA.
Worldwide delivery is available at additional cost. Prices are
negotiable.
Please feel free to inquire by ICQ # 176928755 or contacting us
directly:
+1-305-592-2222
+1-919-319-8249
+1-314-770-3395
Today special:
******* AIR BOMBS *******
OFAB-500U HE fragmentation air bomb
Fuel-air explosive air bombs -Not in stock
BETAB-500U concrete-piercing air bomb
ZB-500RT incendiary tank
500-KG SIZE RBK-500U unified cluster bomb
RBK-500U OAB-2.5PT loaded with fragmentation submunitions
RBK-500U BETAB-M loaded with concrete-piercing submunitions-Not in
stock
RBK-500U OFAB-50UD loaded with HE fragmentation submunitions
******* UNGUIDED AIRCRAFT ROCKETS *******
Main-purpose unguided aircraft rockets
S-8 unguided aircraft rockets
S-8KOM
S-8BM-Not in stock
S-13 unguided aircraft rockets
S-13, S-13T, S-13-OF, S-13D, S-13DF
S-25-0
S-25-OFM
S-24B -Not in stock
RS-82
RS-132-Not in stock
******* ROCKET PODS *******
B-8M pod for S-8 rockets
B-8V20-A pod for S-8 rockets
B-13L pod for S-13 rockets
Recently received *NEW*
Hydra 70 2.75 inch Rockets
Air-Launched 2.75-Inch Rockets
FIM-92A Stinger Weapons System
Stinger 101: Anti-Air
Our clients are well known Al-Qaida, Hizballah, Al-Jihad, HAMAS, Abu
Sayyaf Group and many other terrorist groups. We are well known
supplier in the market and looking forward to expand our clientage
with assistance of Internet.
Do not hesitate to contact us via ICQ # 176928755
Impatiently awaiting for your orders,
ShadowCrew
Return-Path: <7741 at earthlink.net>
Received: from [24.147.44.177] by #############
(Post.Office MTA v3.5.3 release 223 ID# 0-###############)
with SMTP id net for <####@#########>;
Sat, 6 Mar 2004 16:04:52 -0800
From: hostmaster@cnchost.com
To: ####@#########
Subject: Your credit card has been successfully charged for $69.95
Date: Sun, 07 Mar 2004 00:10:31 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.115
8 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Administration of www.shadowcrew.com online store would like to thank you for your purchase of Viagra tablets. Couple of words about our products and services. Viagra is a prescription drug used to treat erection difficulties, such as erectile dysfunction, which also refers to as an impotence. At this condition men do not experience normal erection, necessary for the sexual act. VIAGRA works only in reply to sexual excitation and does not influence reproductive function in any way. Your tablets will be sent to the address specified by you within 24 hours. You should store VIAGRA at temperature below 30 degrees in original packing and out of reach of children. Do not take preparation after expiry date which is located on top of the package. We are the only official dealers that offer you tablets in original packaging. We guarantee to refund your money during 30 days.
If you never purchased this product please contact us at: 1.888.575.6398
To cancel this purchase please contact us at: 1.408-817-2800
To change the shipping address on the order: 1.877.999.8779
If you suffer any side effects please contact: 1.866.963.9696
For bulk purchases please contact: 1.703.547.2000
Thank you for choosing www.shadowcrew.com
We are the first - the best.
Other Joe Job information:
This page was quoted in an
Article in tigerweekly.com on 2004-10-13.