MSGID: 2:221/1.58@fidonet ee1f8b3c
REPLY: 2:280/464 6040abab
PID: OpenXP/5.0.49 (Win32)
CHRS: ASCII 1
TZUTC: -0500
Hello Wilfred!

** On Thursday 04.03.21 - 10:41, you wrote:

 AA>> The "Click here" boils down to:

 AA>>  "h##p://gadfi.andrewbasso.it/fadujk"

 WvV> Why do you spend time on these obvious scams? I don't even
 WvV> see most of them, because my spam filter takes care of
 WvV> them. The few ones that get through I just delete... ;)

Why?  Partly because they don't look entirely obvious. I don't  
use any special spam filters except for what Outlook (desktop)  
might deem suspicious.   Gmail seems to do things pretty well  
autonomously (I've seen repeated spam/scam there) And my ISP's  
web interface using Roundcube has filters that I built to ignore  
certain annoying and obvious ones like the .buzz TLD.

The domain/link above looks entirely benign, although it was  
hidden with the "graphic" button that the html message produced.

And.. I find it rather interesting how persistent some scammers  
are with old techniques.

One of the emails that utilized a header field to trigger the  
potential launch of a script - really pissed me off.

Perhaps the best strategy would be not to share and disclose  
"discoveries" like these in general, anywhere.  That way, the  
perpetrator wouldn't understand why their cleverly designed  
"DHL" emails for example are never taken as bait.

Maybe I am preaching to the choir about these things in this  
echo of followers - albiet the choir is small.   :/
--
  ../|ug

--- OpenXP 5.0.49
 * Origin:  (2:221/1.58)
SEEN-BY: 1/123 90/1 103/705 105/81 120/340 123/131 124/5016 129/305
SEEN-BY: 154/10 203/0 221/1 6 360 226/30 227/114 702 229/101 424 426
SEEN-BY: 229/452 550 664 700 1016 1017 240/5832 249/110 206 317 400
SEEN-BY: 280/464 5003 282/1038 288/100 292/854 8125 310/31 317/3 322/757
SEEN-BY: 342/200 396/45 423/81 120 712/848 770/1 2452/250
PATH: 221/1 280/464 229/101 426