MSGID: 2:221/1.58@fidonet ee1f8b3c
REPLY: 2:280/464 6040abab
PID: OpenXP/5.0.49 (Win32)
CHRS: ASCII 1
TZUTC: -0500
Hello Wilfred!

** On Thursday 04.03.21 - 10:41, you wrote:

 AA>> The "Click here" boils down to:

 AA>>  "h##p://gadfi.andrewbasso.it/fadujk"

 WvV> Why do you spend time on these obvious scams? I don't even
 WvV> see most of them, because my spam filter takes care of
 WvV> them. The few ones that get through I just delete... ;)

Why?  Partly because they don't look entirely obvious. I don't  
use any special spam filters except for what Outlook (desktop)  
might deem suspicious.   Gmail seems to do things pretty well  
autonomously (I've seen repeated spam/scam there) And my ISP's  
web interface using Roundcube has filters that I built to ignore  
certain annoying and obvious ones like the .buzz TLD.

The domain/link above looks entirely benign, although it was  
hidden with the "graphic" button that the html message produced.

And.. I find it rather interesting how persistent some scammers  
are with old techniques.

One of the emails that utilized a header field to trigger the  
potential launch of a script - really pissed me off.

Perhaps the best strategy would be not to share and disclose  
"discoveries" like these in general, anywhere.  That way, the  
perpetrator wouldn't understand why their cleverly designed  
"DHL" emails for example are never taken as bait.

Maybe I am preaching to the choir about these things in this  
echo of followers - albiet the choir is small.   :/
--
  ../|ug

--- OpenXP 5.0.49
 * Origin:  (2:221/1.58)
SEEN-BY: 1/123 90/1 105/81 120/340 123/131 129/305 203/0 221/1 6 360
SEEN-BY: 226/30 227/114 702 229/101 424 426 452 550 664 700 1016 1017
SEEN-BY: 240/5832 249/206 317 400 280/464 5003 282/1038 292/854 317/3
SEEN-BY: 322/757 335/364 342/200 423/81
PATH: 221/1 292/854 229/426