Victoria Ulter - Business Development/Marketing Assistant - More Spam
February 22nd, 2009Today one of my clients forwarded me a spam email she received from “Victoria Ulter - Business Development / Marketing” and when I read the address, it sounded familiar: “6556 Mother Load Dr”. Why did this sound familiar? Well, it’s because it’s the same address as was listed in the Valerie Zalburn spam mail. Once again, let’s review how to identify spam: no company name, no company address or phone, no company website and a generic return email address (like this one had [email protected]).
Here’s the spam from “Victoria Ulter”
Hello this is Victoria Ulter touching base with you about our V/MC Processing Suite of Services. We were trying to reach you for quite some time and I wanted to see if we could just send you some information in the mail so you could determine if our services were of need at the moment?
The mailing address we have on file is 6556 Mother Lode Dr in Placerville, CA. If this is still correct please let me know and we’ll send you a brochure.
#1.) New - Corporate Group Discount Program
You can join at no cost for our Corporate Group Discount Program which will give you 90% Off an entire host of services from:
>> >> Office Supplies
>> >> Shipping Services
>> >> Printing Services
>> >> And More#2.) Our Main Area- Credit Card Processing Programs
> > Best Rates and Fees: Please Note We Do Not Charge PCI Compliance Fees
Discount Rate: 1.39% swiped and 1.79% keyed
Mid-Qualified and Non-Qualified: 2.25%-3.25%
10 cents for Each Transaction
$5 Monthly Statement Fee
No Contracts
24 Hour Funding/Free Online Reporting> Free Terminals including New Nurit 8400 Landline, New Nurit 8000 Wireless, Virtual Terminal System, OTI Contactless
#3.) 18% Premium Cashflow Loans and/or Cash Advances, Receive Funding In 48 Hours
#4.) Free New Point-Of-Sale System, A $1,000 Value At No Cost
#5.) Check Processing Service For Only $1.00 A Transaction, No Discount Rates For Checks
#6.) 100 Free Custom-Designed Gift and Loyalty Cards
#7.) Free ATM Machine Program, You Receive $1.00 Of Each Surcharge Just For Having Our ATM At Your Location
#8.) Fuel and Fleet Programs Including Voyager and Wright Express
#9.) Private Label Credit Cards So You Can Issue Your Own Credit Lines To Customers
#10.) Partnership Opportunities For Banks
Please let me know if your mailing address is still the same to send the brochure and also if this is the correct email address to forward the Link to our Purchasing Site for the Corporate Group Discount Program.
Thanks,
Vickie Ulter
Business Development/Marketing Assistant
See the end of the email? Notice the complete absence of a company name, a company address, a company email or phone number or website? This is how you can figure out if an email is really a legitimate business. Look at the return email address. In this example, it was [email protected] - again, if someone is a legitimate company sending email, their email address should come from that company. Look for these clues before answering any unsoliticted email you may receive!
Jill--------------
J. Olkoski
Aldebaran Web Design, Seattle
Jill Olkoski has a BS in Engineering, a BS in Computer Science and an MA in Clinical Psychology. She delights in using her advanced technical and psychological skills to help small business owners develop cost-effective and successful websites.
February 23rd, 2009 at 2:49 am
Good articlebut, I wish it did not have my address. I have no relation to the spammer “Vickie Ulter”, but I wish she would use some other address.
Best wishes, Cris.
February 23rd, 2009 at 9:51 am
Hi Cris,
This is YOUR address? I checked your IP address and it does say Placerville CA - This awful spammer is actually using your home address for her emails! What have you done to stop them?
February 26th, 2009 at 6:49 am
I found your site by seraching for autoemailsystem48 .com.
I had suspected the email was spam. However, instead of the Mother Load address, the emails I have been receiving have our office address.
February 26th, 2009 at 9:54 am
Hi Robin,
So the spammer is getting smarter and substituting YOUR address for the “fake” or other person’s address. Sigh. Thanks for letting us know.
March 15th, 2009 at 12:18 pm
Hi, a volunteer organization I work with in Washington, DC would like to make a complaint against this spammer, too. Have you looked at the full headers and can you figure out who their service provider is? Or if you send me the numeric URLs I’ll look them up.
Thanks,
Helen
March 15th, 2009 at 12:25 pm
Hi Helen,
I deleted the original email a while ago so I no longer have it, sorry. But maybe another person will be able to copy and paste the header information into my blog so we can see it.
March 16th, 2009 at 7:26 am
I have been getting these durned things as well. below are the headers from my most recent one… yesterday in the wee hours.
DomainKey-Status: non-participant [email protected];
domainkeys=fail
Received: from pop dot ripco dot com by data dash wave dot com (VPOP3) with POP3 (Sun, 15 Mar 2009 04:45:17 -0500); Sun, 15 Mar 2009 04:43:51 -0500
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on intake2
X-Spam-Level: *
X-Spam-Status: No, score=1.2 required=5.0 tests=BAYES_00,OPTING_OUT_CAPS,
PYZOR_CHECK,SPF_HELO_PASS autolearn=no version=3.1.7
Received: from intake1 dot ripco dot com (intake1 dot ripco dot com [209.100.xxx.xxx])
by intake2.ripco.com (8.14.1/8.14.1) with ESMTP id n2F9hpKJ009081
for ; Sun, 15 Mar 2009 04:43:51 -0500 (CDT)
Received: from mail.test.com ([122.141.80.3])
by intake1 dot ripco dot com (8.13.8/8.13.8) with ESMTP id n2F9hhbx009055
for ; Sun, 15 Mar 2009 04:43:50 -0500 (CDT)
Received: from ldyx ([122.141.80.3]) by test.com with MailEnable ESMTP; Sun, 15 Mar 2009 02:43:49 -0700
Message-ID:
Errors-to: [email protected]
From: “Victoria Ulter”
To: support at data dash wave dot com
Subject: Re: Data Wave, Phone Call/Mailing
Date: Sun, 15 Mar 2009 02:43:50 -0700
March 16th, 2009 at 8:42 am
Thanks for that — one of our members who has been receiving these also sent me headers last night. Both her message and the message shown above were sent from the server 122.141.80.3, which a “whois” search shows is hosted by China Network Communications Group Corporation in Beijing. Wikipedia says it’s a state-owned telecommunications company, so presumably they are not in the business of sending spam to the US (let’s hope). They have an abuse complaint address, so I sent them the message with full headers and a complaint to: [email protected]. In English. I don’t speak Chinese! So let’s hope someone there attends to this.
If you are so inclined, go ahead and complain to them, too — maybe they’ll do something. I have had good luck with stopping other spam after making abuse complaints with other providers in the past.
My message to them was:
Dear Abuse Techs:
Members of the [name of group] in the U.S.A. have asked me to help figure out who is sending spam to their members. The spammer tries to make it appear as if the spam is related to the [name of group]. It appears that the spammer looked on the [name of group] web site, got e-mail addresses of members, and then started sending them spam. The recipients of the spam are upset because they are each getting several spams from this sender. Below is the message with full headers. It is from a server address that you host. Please put a stop to it.
March 16th, 2009 at 10:07 am
I have done it. paraphrased your message.
I have full headers from ALL this senders messages over the last several months. if you would like them, we can play and send in a separate complaint from each of us for each message. LOL I don’t usually bother, based on the volume of messages that come in but now that there is someone else to play with, it will pass the time.
April 3rd, 2009 at 4:54 am
I found this site by Googling “Vickie Ulter.” I have been getting emails from “Vickie Ulter” for a couple months. The body of the message contains my home address, which is also my business address. I would be interested in learning whether anyone gets a response after filing a complaint.
April 3rd, 2009 at 9:21 am
I have sent in three or four of the several dozen that have come across my server but no responses at all so far. On the flip side, I haven’t gotten any more of the messages so…