404-549-4731

SPAM offering college degree.  Text copied from email pasted below.


WHAT A GREAT IDEA!

Ring anytime 1-213-403-0169

We provide a concept that will allow anyone with sufficient work experience to obtain a fully verifiable University Degree.
Bachelors, Masters or even a Doctorate.

Think of it, within four to six weeks, you too could be a college graduate.
Many people share the same frustration, they are doing the work of the person that has the degree and the person that has the degree is getting all the money.
Don't you think that it is time you were paid fair compensation for the level of work you are already doing?

This is your chance to finally make the right move and receive your due benefits.
If you are more than qualified with your experience, but are lacking that prestigious piece of paper known as a diploma that is often the passport to success.

CALL US TODAY AND GIVE YOUR WORK
EXPERIENCE THE CHANCE TO EARN YOU
THE HIGHER COMPENSATION YOU DESERVE!

Ring anytime 1-404-549-4731

Quit spamming me

FUNNY THING IS THEY HACKED OUR EMAIL ADDRESS AND SENT IT TO US

They appear to have some old mailing lists.  They sent this "from" addresses that we retired 10 years ago.  The sad part about this is the degrees they are selling are worthless.  Why pay them thousands of dollars for a diploma when you could photoshop one yourself for pennies?  If you're going to have a fake degree, why pay more?  No real University issues a degree for "work experience".  You have to attend classes, write papers, read books and pass exams to get a University degree.

We started receiving these spams 2 days ago.

It looks like they spoofed our domain to bypass the spam filter.

We should be able to filter them by IP address and get them blocked.

I got the same email, and the return email address was spoofed to appear that it came from me. The header says that the email actually came from laura.manzi@sitel.co.uk, but the originating domain appears to be from Saudi Arabia.

Here is the full header:


rom:     - Thu Dec 1 17:06:06 2011
X-Account-Key:     account2
X-UIDL:     0001b78b46499acd
X-Mozilla-Status:     0001
X-Mozilla-Status2:     00000000
X-Mozilla-Keys:     
Return-path:     <0-laura.manzi@sitel.co.uk>
Envelope-to:     1x2x3x@1x2x3x4x.com
Delivery-date:     Thu, 01 Dec 2011 12:57:53 -0500
Received:     from [86.60.35.44] by www554.xxx.com with esmtp (Exim 4.72) (envelope-from <0-laura.manzi@sitel.co.uk>) id 1RWAtG-00053u-06 for 1x2x3x@1x2x3x4x.com; Thu, 01 Dec 2011 12:57:52 -0500
Received:     from 86.60.35.44(helo=yeccfmnhit.uotiej.biz) by with esmtpa (Exim 4.69) (envelope-from ) id 1MMAUD-9697av-0Q for 1x2x3x@1x2x3x4x.com; Thu, 1 Dec 2011 20:57:49 +0300
From:     <1x2x3x@1x2x3x4x.com>
To:     <1x2x3x@1x2x3x4x.com>
Subject:     Tiered of been passed over for that promotion because you don't have the proper Degree?
Date:     Thu, 1 Dec 2011 20:57:49 +0300
MIME-Version:     1.0
Content-Type:     text/plain; charset="windows-1250"
Content-Transfer-Encoding:     7bit
X-Mailer:     fckkwbxqlc.10
Message-ID:     <6505705033.XKSVHKW7266402@knuxdzfbgmptyxm.swyskmv.su>

-----------------END HEADER---------------

The originating IP address according to the header is 86.60.35.44

RIPE.NET whois says this belongs to:

Whois has started…

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '86.60.32.0 - 86.60.47.255'

inetnum:        86.60.32.0 - 86.60.47.255
netname:        Awalnet_ADSL_PrePaid-01
descr:          ADSL Allocation for Jeddah
country:        SA
admin-c:        shaz110-ripe
tech-c:         shaz110-ripe
status:         ASSIGNED PA
mnt-by:         AAA28-RIPE-MNT
mnt-lower:      AAA28-RIPE-MNT
mnt-routes:     AAA28-RIPE-MNT
source:         RIPE # Filtered

person:         Shahzad Akhter
address:        P.o.box-50
address:        Riyadh-11372 SA
phone:          +966 1 4600111
fax-no:         + 966 1 4601110
nic-hdl:        SHAZ110-RIPE
abuse-mailbox:  abuse@awalnet.net.sa
source:         RIPE # Filtered

% Information related to '86.60.0.0/17AS25233'

route:          86.60.0.0/17
descr:          Awalnet
origin:         AS25233
mnt-by:         AAA28-RIPE-MNT
source:         RIPE # Filtered

% Information related to '86.60.35.0/24AS25233'

route:          86.60.35.0/24
descr:          Awalnet
origin:         AS25233
mnt-by:         AAA28-RIPE-MNT
source:         RIPE # Filtered

COMPLETE SCAM & I PRAY YOU AND YOUR ENTIRE PAY FOR ALL YOU'RE DOING!