Hi,

We came across your website http://www.itstheguns.com and found it to be
worthwhile for a link trade.

The information and services offered on your site would be of great
value to our visitors, and we believe your visitors would find great
value in our site as our websites are complementary rather than
competitive. We see the synergy here as an opportunity for our mutual
benefit in terms of increased visitors, better page rank and better ranking.

Please consider adding our link here: http://www.itstheguns.com/links.html

We will place your link on our website in the best category here:

http://www.executivegunrunners.com/resources/

To place a link to my site please use the following information:

* Title: Guns for Sale
URL: http://www.executivegunrunners.com
Description: Guns for sale at discount prices. Find a huge selection of
firearms to fit your needs.*

Let’s help each other now – just add our link and reply to this email
with your link information.

Hope to hear from you soon.

Regards,
Zack
ExecutiveGunRunners.com
15721 N. Greenway Hayden Loop, Suite 102
Scottsdale, AZ 85260

Note: If you would like not to receive any further communications from
me, please paste this link into your browser:

http://www.executivegunrunners.com/resources/unsubscribe.html?id=c9QAf285q2a

Or simply respond to this email with Remove as the subject.

Um, so what category does itstheguns.com fit into on their web site? Anti-Gun advocacy groups? Is that a category on a web site that sells guns?

Related posts:

1. Ohio gun dealers seeing surge in sales
2. TwelveHorses.com Sucks on behalf of their Clients
3. Spammers, Phishers, and Thieves – Oh My!

Here is the mail that hit our network at many different addresses yesterday.  Classic gmail spam.  It uses a gmail “from:” and “reply to:”, but it is sent from some lame ISP that permits spammers.

The mail gets accepted in part because most ISPs are unwilling to unilaterally block all gmail accounts.

But the real issue is that gmail has a LAME Sender ID policy.  They have a SPF Record – all very pretty and full of detail.  But look at the last bit of the record – the “~all” section.   This is an explicit declaration that nothing can be said about the validity of the mail from gmail. In their case, this is an understatement.

According to the SPF guidelines at http://www.openspf.org/SPF_Record_Syntax the “?” means “Neutral – The SPF record specifies explicitly that nothing can be said about validity – action is to accept”

Many small ISPs use a similar SPF record – I am certain we do.  But most small ISPs deal with their clients that send bad mail – they terminate the accounts.

Google has a responsibility to the community – quit freeloading on our networks and do the right thing!  At least live up to your Core Principals statement and DO NO EVIL!

Related posts:

1. Spammers, Phishers, and Thieves – Oh My!
2. TwelveHorses.com Sucks on behalf of their Clients
3. Google Maps and Kayakers in Cahoots

You might ask how can this be.  After all how could they be technically challenged – they run a huge on-line banking empire (paid for with our dollars no doubt).

They openly permit spammers, phishers, and thieves to steal their identity and send mail pretending to be from the bank.  These messages lead the user to a spoofed web site that pretends to be the bank – and there they get the “mark” to type in their user and password.  Once the bad guys have that information, they can clean the victims bank accounts out – and end up causing more losses for the bank and we all end up paying for.

bankofamerica.com uses a “sender id” tool called SPF – Sender Policy Framework.  It is a simple protocol where the bank publishes the addresses of the servers that are allowed to send mail as being from “@bankofamerica.com.”   It is very simple and every ISP in the world is able to see it.

This makes it easy for companies like mine that perform the service of checking mail for viruses/spam/phish/etc.  After all, if you know the only places mail could come FROM then you can check and refuse it if it is not.

But the tech wizards at bankofamerica.com must have been in the bottom half of their class or they are all on the payroll of the spammers, phishers, and thieves.

They set up their SPF record all right and it tells us exactly where mail should come from when it claims to be from bankofamerica.com – good so far!  Then they expressly instruct companies like mine to ignore that by instructing us to “soft fail” the e-mail.  It says the sending server is “NOT being allowed to send but is in transition” and that we should “accept but mark.”

They are telling us to go ahead and accept the mail from any spammers/phishers/and thieves that chooses to impersonate them – that they JUST DON’T CARE.

Thank you Bank of America – can I have another for the people that are footing the bill for your bailout!

There really ought to be a law that clearly says ANY institution that uses EMAIL or has an ONLINE presence and handles ANY sort of confidential information MUST use a proper SENDER ID technology to help stop the spammers, phishers, and thieves.

—for those who would like the details —

———-Headers on the above referenced mail———
Return-Path: <message@bankofamerica.com>
X-Original-To: snipped@snipped.net
Delivered-To: snipped@snipped.net
Received: from snipped (unknown [snipped])
by snipped (Postfix) with ESMTP id 68A5D1C6120
for <snipped@snipped; Thu,  8 Oct 2009 14:19:03 -0400 (EDT)
Received: from snipped ([snipped])
by snipped with esmtp ()
id 1MvxZr-0005Wr-00
for snipped@snipped; Thu, 08 Oct 2009 14:18:59 -0400
Received: from ip67-88-159-227.z159-88-67.customer.algx.net ([67.88.159.227]:42029 helo=SOILTECH-FS1.soiltech.local)
by snipped with esmtp (Exim 4.63)
(envelope-from <message@bankofamerica.com>)
id 1MvxZo-0001qd-La
for snipped@snipped; Thu, 08 Oct 2009 14:19:04 -0400
Received: from bankofamerica.com ([66.58.232.199]) by SOILTECH-FS1.soiltech.local with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 8 Oct 2009 11:18:23 -0700
From: Bank of America <message@bankofamerica.com>
To: snipped@snipped
Subject:  Account Information
Date: 08 Oct 2009 10:18:24 -0800
Message-ID: <20091008101824.ED2BC8B2B7611025@bankofamerica.com>

——————

—-the content of the phish mail ———–

Bank of America

Dear Bank of America user,
You have 1 new ALERT message
Please login to your Bank of America Online
and visit the Message Center section in order to read the message.

To Login, please click the link below:

Go To Bank of America Online

Bank of America, N.A. Member FDIC. Equal Housing Lender
© 2009 Bank of America Corporation. All rights reserved.

————————–
—SPF record (from www.dnsstuff.com – note the ~all at the end)——–
You have an SPF record. This is very good, as it will help prevent spammers from abusing your domain. Your SPF record (I don’t check to see if it is well designed!) is:

“v=spf1 include:_sfspf.bankofamerica.com include:_txspf.bankofamerica.com include:_vaspf.bankofamerica.com include:_cfcspf.bankofamerica.com ~all”

—————————–

—-Open SPF – definitions —–
http://www.openspf.org/SPF_Record_Syntax

SoftFail The SPF record has designated the host as NOT being allowed to send but is in transition accept but mark

———————————

Related posts:

1. Google, remember: DO NO EVIL!!!
2. TwelveHorses.com Sucks on behalf of their Clients
3. Domain Submission Service Sucks!

I’m going to think really long and hard about 250 characters I can use to explain to Former (almost ) President Bush how much of a flippin’ loser I think he is. If anyone has any ideas of their own, click the link, sign the card. Do it!!

When you go there, you get to ready the super funny “card.”

President and Mrs. Bush,

Thank you for your outstanding service and courageous leadership. I am grateful for your hard work and commitment to build a better, safer, more prosperous America. Best wishes to you in the years ahead.

A better, safer, more prosperous America? What?!? Better, safer and more prosperous than when? I don’t know what drugs Rush Limbaugh has been passing out at GOP parties, but they must be good ones!

Just because he didn’t get busted getting a blow job in the Oval Office does not mean he brought honor and integrity back! In fact I think he did anything but that.

The following is the spam from the GOP. I only removed my name, email address, some html and some images asking for donations.

Related posts:

1. The Bush Administration Comes To An End!!!!
2. Oh Jeebus
3. Guess the Crime

www.josephmichaels.com and www.twelvehorses.com have either harvested email addresses, or bought and used a list of emails harvested off the internet. This makes them spammers because are sending unsolicited bulk email. Oh, that’s not so bad, the Republican party did the same thing for the election.

Okay, really it is bad. Its as if they were riding around in the back of the mail truck writing “Buy Counterfeit Viagra” on the back of all your mail and then have your mail carrier deliver it to you. Then when you ask him to stop, he tells all of his buddies to join him, then there’s more and more, pretty soon your trash is overflowing and you have to call the trash company and pay extra to have them pick up the extra trash. I would be pretty pissed at the guy doing all of that.

Hey, If you feel like it, give them a call:

Here goes – SPAM – Disguised as legitimate marketing – from the people over at twelvehorses.com and josephmichaels.com. If you like, tell them what you think at 1(800) 786-1099 or 1.866.846.2846

Copy of messages below:

Chris

So what you are saying is that it is OK to send unsolicited commercial mail until someone complains and then you will remove them.

That is not any different than most of the million other unsolicited mailers our network sees every day.

I appreciate more than most the need to get a message out. But I don’t think this is the right way. On the other hand, it clearly makes money for someone. And if that is the primary goal, then what does it matter that you make it a million and one messages into my network.

The right thing to do was to acknowledge that you stole this mail address off the Internet or bought it from someone who did. And that you see the error of your ways and that you are going to go straightaway to work and come by your fortunes the old fashioned way.

But then if I am so smart, why ain’t I rich?

Best to you.

Bruce C

Chris wrote:
>
>
> Hello Bruce,
>
>
>
> You have been unsubscribed from the system. A block has also been placed on our system so that you cannot receive emails from Josephmichaels via our platform ever again. I have confirmed that this unsubscribe/block took place before we ever viewed your email via our automated system. We have also contacted Josephmichaels and they have removed your information from their system as well. I apologize for any inconvenience this has caused you.
>
>
>
> Kind Regards,
>
> Chris – Twelve Horses Technical Support
>
>
>
> * From: * Bruce xxxxxx [mailto:bxxxxxx@xxxxxx.com]
> *Sent:* Wednesday, December 03, 2008 5:57 AM
> *To:* abuse@twelvehorses.com; hostmaster@viawest.net
> *Subject:* abuse from your network – [Fwd: The Network! #216 – Joe Pelayo Radio interview]
>
>
>
> Hello
>
> re: Abuse from your network.
>
> Spry – this is promoting services running on your network.
>
> Viawest – this mail came from your network
>
> Josephmichaels – don’t know if you are even close to a real entity – but
> if you are, you are part of the problem. Get a real job!
>
> Bruce C
>
> Return-Path:
> X-Original-To: brucec@mailtest.xxxxxx.net
> Delivered-To: brucec@mailtest.xxxxxx.net
> Received: from holalesqua.xxxxxx.net (holalesqua.xxxxxx.net [69.214.62.7])
> by falstaff.xxxxxx.net (Postfix) with ESMTP id 1797E1B448
> for ; Tue, 2 Dec 2008 16:09:27 -0500 (EST)
> Received: from correo4.xxxxxx.net ([69.214.62.37])
> by holalesqua.xxxxxx.net with esmtp (Exim 3.35 #1)
> id 1L7cUm-0004X0-00
> for bxxxxxx@xxxxxx.net; Tue, 02 Dec 2008 16:09:24 -0500
> Received: from s02.mailout.twelvehorses.com ([64.90.205.70]:18753)
> by correo4.xxxxxx.net with esmtp (Exim 4.63)
> (envelope-from )
> id 1L7cky-0008KI-Mz
> for bxxxxxx@xxxxxx.net; Tue, 02 Dec 2008 16:26:32 -0500
> Received: from fvdywvj.jmuttc.th.s02.b.12hs.com (192.168.4.54)
> by s02.mailout.twelvehorses.com with SMTP; 02 Dec 2008 14:08:52 -0700
> Message-ID:
> <17196921.1228252132711.JavaMail.dynamo1@app05.prv.twelvehorses.com>
> Date: Tue, 2 Dec 2008 14:08:51 -0700 (MST)
> From: Joe Pelayo
> To:
> Subject: =?ISO-8859-1?Q?The_Network!__#216_=96_Joe_Pelayo_Radio_interview?=
> Mime-Version: 1.0
> Content-Type: multipart/alternative;
> boundary=”—-=_Part_64321_28212338.1228252131098″
> User-Agent: Dialog Server
> Received-SPF: pass
>
> ——=_Part_64321_28212338.1228252131098
> Content-Type: text/plain; charset=ISO-8859-1
> Content-Transfer-Encoding: quoted-printable
> Content-Description: This is text version of an eMessage
>
> =A0
> What do John McCain, Barak Obama and Joe Pelayo have in common?=A0They
> were all interviewed on WSRadio recently.=A0To hear my interview, click
> here: =A0
>
> > ichaels.com/about/president.shtml*http_mm_url_mm_www.josephmichaels.com/abo=
> ut/president.shtml>
>
>
>
> To hear the other interviews, well you?ve probably heard enough from the
> other two in the last several months…
> Click the above link to hear Joe Pelayo interviewed on the
> PriceWaterhouseCoopers Radio show on WSRadio.com with host Steve
> Bengstrom.=A0Be sure you have 5 minutes or so, and have your speakers on.
>
>
>
> Joe Pelayo=A0- On the economy and the stock market:
> Maybe Chicken Little was right after all and the sky IS falling. But,
> you know how the media is so often on the lookout for bad news because
> it sells more newspapers. =A0I?m not saying everything is rosy, but to
> keep things in perspective, here are a few things to consider. =A0
> Yes the Dow fell in big numbers and on one day fell more points than it
> had fallen ever has. =A0But, did you know, that on a percentage basis,
> that big drop would not have even ranked in the top twenty drops of
> all-time?=20
>
> For example in 1987 the Dow dropped a record 500 points. Remember, they
> called it Black Monday? =A0At that time it represented a 22% drop.
> From September 3rd, 1929 to July 8th, 1932, the Dow dropped 339 points.
> That?s nothing in today?s measure in terms of points, but at the time,
> it represented an 89% drop from 389 points to 41.22, Wow! =A0
> So when the media mentions a big point drop, do a few things… First,
> do the math and look at the percentages. =A0Also, realize that for awhile,
> 300 is the new 100, you will see wide fluctuations for a time.=20
> As the media goes wild saying that, at this time, the Dow dropped the
> biggest point total in history. Don?t forget, 5 years ago, the Dow
> reached its high point total in the history of time! Keep things in
> perspective and even if Chicken Little says the sky is falling, remember
> that Joe Pelayo says that it isn?t. But, I am a devout optimist.
> The media would lead you to believe no one is hiring.=A0However, we are
> receiving calls still and new searches. =A0Smart companies, with the
> resources make use of times like these, to strategically top-grade their
> talent.=A0
>
> Joseph Michaels, Inc. can help you recruit executives who don?t think
> the sky is falling. People who you can bank on to get things done, even
> in uncertain times.=A0Call us today at 1(800) 786-1099.
> Warm regards,
>
>
>
> Joe Pelayo, C.E.O.
> Joseph Michaels, Inc.
> One Market Street
> Spear Tower , Suite 3600=20
> San Francisco , CA 94105=20
> Voice (415) 732-6142 FAX (415) 434-1165
> Email: jpelayo@josephmichaels.com
>
> Website:
> > ichaels.com/*http_mm_url_mm_www.josephmichaels.com/>
>
> 30-second Flash Mailer: http://www.josephmichaels.com/flashDemo.htm
> > ichaels.com/flashDemo.htm%20*http_mm_url_mm_www.josephmichaels.com/flashDem=
> o.htm%20>
>
>
>
> The Network is one of the most widley read executive e-newsletters in
> the world.=A0If you were forwarded this email, To add yourself to the
> mailing list click here:=20
>
>
>
> To remove from the mailing list click unsubscribe below:
>
>
>
>
>
>
>
>
>
> ——– Original Message ——–
> Subject: The Network! #216 – Joe Pelayo Radio interview
> Date: Tue, 2 Dec 2008 14:08:51 -0700 (MST)
> From: Joe Pelayo
> To:
>
>
>
> You have just received an HTML-rich eMessage that cannot be displayed by
> your email software. You may view this eMessage online with your
> internet browser by following this
> link:http://www.twelvehorses.com/S1/NLSWG9/J299U5WT/M/TXT/
>
> *The Network *#216
>
> *by Joe Pelayo*
>
> *1-800-786-1099*
>
> jpelayo@josephmichaels.com
>
> What do John McCain, Barak Obama and Joe Pelayo have in common?
>
> They were all interviewed on WSRadio recently.
>
> To hear my interview, click here:
>
> *http://www.josephmichaels.com/about/president.shtml
> *
>
> To hear the other interviews, well…you’ve probably heard enough from the
> other two in the last several months…Click the above link to hear Joe
> Pelayo interviewed on the PriceWaterhouseCoopers Radio show on
> WSRadio.com with host Steve Bengstrom. Be sure you have 5 minutes or so,
> and have your speakers on.
>
> ————————————————————————
>
> Joe Pelayo – On the economy and the stock market:
>
> Maybe Chicken Little was right after all and the sky IS falling. But,
> you know how the media is so often on the lookout for bad news because
> it sells more newspapers. I’m not saying everything is rosy, but to
> keep things in perspective, here are a few things to consider.
>
> Yes the Dow fell in big numbers and on one day fell more *points* than
> it had fallen ever has. But, did you know, that on a percentage basis,
> that big drop would not have even ranked in the top twenty drops of
> all-time? For example in 1987 the Dow dropped a record 500 points.
> Remember, they called it /Black Monday/? At that time it represented a
> 22% drop.
>
> From September 3^rd , 1929 to July 8^th , 1932, the Dow dropped 339
> points. That’s nothing in today’s measure in terms of *points*, but at
> the time, it represented an 89% drop from 389 points to 41.22, Wow!
>
> So when the media mentions a big point drop, do a few things… First,
> do the math and look at the percentages. Also, realize that for awhile,
> 300 is the new 100, you will see wide fluctuations for a time.
>
> As the media goes wild saying that, at this time, the Dow dropped the
> biggest point total in history. Don’t forget, 5 years ago, the Dow
> reached its high point total in the history of time! Keep things in
> perspective and even if Chicken Little says the sky is falling, remember
> that Joe Pelayo says that it isn’t. But, I am a devout optimist.
>
> The media would lead you to believe no one is hiring. However, we are
> receiving calls still for new searches. Smart companies, with the
> resources make use of times like these, to strategically top-grade their
> talent.
>
> Joseph Michaels, Inc. can help you recruit executives who don’t think
> the sky is falling. People who you can bank on to get things done, even
> in uncertain times. Call us today at 1(800) 786-1099.
>
> Warm regards,
>
> Joe Pelayo, C.E.O.
> Joseph Michaels, Inc.
> One Market Street
> Spear Tower, Suite 3600
> San Francisco, CA 94105
> Voice (415) 434-1099FAX (415) 434-1165
> Email: jpelayo@josephmichaels.com
> Website: http://www.josephmichaels.com/
>
>
> The Network is one of the most widley read executive e-newsletters in
> the world. If you were forwarded this email, reply to
> jpelayo@josephmichaels.com to be
> added to the mailing list.
>
> To remove from the mailing list click unsubscribe below:
>
>
>
> *Forward to a friend*
> >
> Unsubscribe from this service
> >
> Change format of future eMessages
> >
>
>
>
>
>
>
>

Related posts:

1. Google, remember: DO NO EVIL!!!
2. Spammers, Phishers, and Thieves – Oh My!
3. Network Solutions Still Sucks

Web Host of Groups That Traffic Spam Kicked Offline

By Brian Krebs
washingtonpost.com Staff Writer
Thursday, November 13, 2008; Page D01

The volume of junk e-mail sent worldwide may have dropped drastically yesterday after a Web-hosting firm, identified by many in the computer security community as a major host of organizations engaged in spam activity, was taken offline.

McColo, a San Jose Web-hosting company that, according to computer security experts, serves as a U.S. staging ground for international firms that sell a variety of items, including counterfeit pharmaceuticals and child pornography, ceased operations after two Internet providers blocked Web access.

SecureWorks, an Atlanta security-services provider, estimates that McColo was responsible for 75 percent of all spam sent in the United States each day.

Global Crossing, a Bermuda company with U.S. operations in New Jersey and one of the two companies that provided Internet access to McColo, would not say why it cut off the company, but said Global Crossing’s policy prohibits “malicious activity.”

Benny Ng, director of marketing for Hurricane Electric, a Fremont, Calif., company that served as McColo’s other Internet provider, said it decided to block the host firm after reading about allegations against McColo.

“We shut them down,” Ng said. “We looked into it a bit, saw the size and scope of the problem . . . Within the hour, we had terminated all of our connections to them.”

read more

This is absolutely wonderful! Hopefully other providers will follow suit. Because, as we all know, SPAM Sucks!!!

Related posts:

1. Domain Submission Service Sucks!
2. TwelveHorses.com Sucks on behalf of their Clients
3. W Certainly sucks, but Oliver Stone is pretty cool

How many corporate accounts payable people receive one of these “solicitations” and go ahead and pay them? Our smaller clients have even called to make sure this is not something they have to pay.

Good reasons to not fall for this scam:

1. Domain name submission with 8 key words/phrases to 75 MAJOR search engines, links lists and Directories.
Okay, seriously, since when are there 75 major search engines? and why would you need someone to submit your domain to them? Just submit to google , have good content and the rest will find you.

2. There is no phone number for this company. Anywhere! Unless you whois the domain, then you come up with:

Registrar: DOTSTER
Domain Name: DOMAINSUBMISSIONSERVICE.COM
Created on: 14-SEP-08
Expires on: 15-SEP-09
Last Updated on: 21-OCT-08

Registrant:
John Teratias
67 Morton Way
Winnipeg, MB R3A037
CA

Administrative Contact:
Teratias, John Qjlojm@privacypost.com
67 Morton Way
Winnipeg, MB R3A037
CA
204-694-5287

And then you wonder, what is this privacypost.com email address? So you go to privacy post.com and find out that it is a service so you can “protect your identity, stop domain related spam, stop the junk mail and phone calls” Ironic.

Anyhow, from their site, you can do another whois on one of their users domains which tells you the real info – I assume. Then you get this:

Domain name: domainsubmission.com

Registrant Contact:
Neustel Law Offices, LTD
Michael Neustel
2534 South University Drive, Suite 4
Fargo, ND 58103
US

Administrative Contact:
PatentWizard, LLC
Michael Neustel (neustel@patent-ideas.com)
+1.7012818822
Fax: 701-237-0544
2534 South University Drive, Suite 4
Fargo, ND 58103
US

3. Try googling “domain submission service.”
Even with quotes, you get no results for them. Why would you trust your web site search engine marketing to a company who doesn’t ever show up in the search engine results?

The bottom line is, throw this notice in the trash and keep your money. If you are interested in search engine optimization for your web site, go with a reputable firm.

For more information about search engine optimization, check these out:Landing Page Optimization: The Definitive Guide to Testing and Tuning for Conversions, Search Engine Optimization For Dummies, Search Engine Optimization: Your visual blueprint for effective Internet marketing

Related posts:

1. Domain Renewal Group
2. Just say no…
3. Network Solutions Sucks

This new section was created out of necessity.  Not surprisingly, the number of spam complaints have risen with the number of spam and viral attacks over the last few months – now we have our very own space to document it.

Prior to the creation of the Spam forum, we also threw in another new category specifically for those who rock.  Not everyone sucks, so tell us who’s been awesome and give them some noteworthy props: http://www.theysuck.org/bbpress/forum/they-rock

Related posts:

1. New Forum Categories – Political and As Seen On TV
2. New Forums – Sports, Music, and Cell Phones
3. Guess the Crime