[DUG] Contact form page

[Jolyon Smith]

Looks like a classic spambot message to me:  Just enough content that looks
plausible enough to sneak through a weak spam filter with a link to entrap
the unwary recipient.


On 20 March 2014 12:25, John C <jc at sunshinesoftware.co.nz> wrote:

> Hi all
> Gary, I use the PHP GeoIPLocation Library see
> http://chir.ag/tech/download/geoiploc  and created routine and an array
> to check against wether it will be granted access to my website at all. In
> case it is from a "blocked" country (as per my block-country array) the
> page shows under the header "Under construction" and doesn't show the menu,
> so no way he/she can read any pages.The other thing I have added, is that
> the submitted form reads the IP country and sends it in the email to me. In
> case of this weird email it happens to be sent from USA.
>
> Steve, the message/comment in this submitted form looks quite bizarre, it
> reads:
>
>
>
> "As I mentioned this she said those that join the official exchange rate
> of 3% from the japanese leader told him to offer an explanation or resign
> as chairman of SAM., <a href=\"http://xn--jpn-qi4b3ah5gqi5isdc.com/\">&#12458;&#12531;&#12521;&#12452;&#12531;&#12459;&#12472;&#12494;&#27604;&#36611;</a>,
> [url=\"http://xn--jpn-qi4b3ah5gqi5isdc.com/\"]&#12458;&#12531;&#12521;&#12452;&#12531;&#12459;&#12472;&#12494;&#27604;&#36611;[/url],
> http://xn--jpn-qi4b3ah5gqi5isdc.com/&#12458;&#12531;&#12521;&#12452;&#12531;&#12459;&#12472;&#12494;&#27604;&#36611;,
> nqdxut,"
>
>
>
> Would this be work of a hacker?
>
>
>
> John Ch
>
>
>
>
>
> *From:* delphi-bounces at listserver.123.net.nz [mailto:
> delphi-bounces at listserver.123.net.nz] *On Behalf Of *Steve Peacocke
> *Sent:* Thursday, 20 March 2014 8:52 a.m.
>
> *To:* NZ Borland Developers Group - Delphi List
> *Subject:* Re: [DUG] Contact form page
>
>
>
> I do ask though, that if this is SpamBot, where's the message?
>
>
>
> Surely they want to sell you bigger body parts, boots, shares, the
> Brooklyn Bridge, or get assistance for that 35 mill they have sitting in an
> account.
>
>
>
> Sending junk specifically designed to get past the email checker seems
> pointless for a spambot.
>
> Steve Peacocke
>
> +64 220 612-611
>
>
>
> _______________________________________________
> NZ Borland Developers Group - Delphi mailing list
> Post: delphi at listserver.123.net.nz
> Admin: http://delphi.org.nz/mailman/listinfo/delphi
> Unsubscribe: send an email to delphi-request at listserver.123.net.nz with
> Subject: unsubscribe
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://listserver.123.net.nz/pipermail/delphi/attachments/20140320/d05199dc/attachment.html