Class Creator Forums: Report a Bug

RE: Spam email concern

2009-11-20T22:17:13-05:00

FYI -- Thought you'd all like to know what Classmates.com said in response to my inquiry about this spam email... "Thank you for contacting us with your concerns. The email that you received did not originate from Classmates nor did the sender get your contact information from us. It appears that the individual who sent this email to you is a spammer who is spoofing the Classmates.com name. These spammers use recognized and trusted names such as Classmates.com in their emails to gain the trust of the recipient of the email. Their main objective is to get someone to open an email and click through to the links they provide. Unfortunately these types of schemes are used quite frequently by these scam artists and have even included the spoofing of such entities as the Department of Justice and the FTC. The best way to quickly address and shut these individuals down is to report the email directly to the company where the sending email address appears to originate such as ?@yahoo.com? or ?@netzero.com? as applicable. If these emails did originate with these reputable companies we are certain that they would want to be informed and that they will take action in accordance with their policies." Never mind that I could search and get a result for the spammer on Classmates.com yesterday but of course can't today...good advice nonetheless, though, I suppose.

RE: Spam email concern

2009-11-20T13:57:16-05:00

:oops:

RE: Spam email concern

2009-11-20T11:53:46-05:00

We've heard from a couple more people who received this strange email. For anyone who received this: 1) Make sure you are not publicly displaying your personal email address anywhere on your web site. 2) Make sure you have not elected to display your email addresss to logged in members if you are NOT using the New Classmate Verification feature under your Preferences area. IF you are using New Classmate Verification then it's fine to continue displaying your email address. 3) Make sure you have not or do not list your personal email address in these forums, which can be read by others. It's very easy for hackers to write bots to sift through the web and collect email addresses it finds and auto send these types of emails. As a general rule, never display your email address on any public web page, forum, or blog. Doing so is a sure fire way to wind up on a spammer's list.

RE: Spam email concern

2009-11-20T03:27:11-05:00

Thank you 2 so much for the help on both issues!!! I am adding you both on my Christmas card list! :)

RE: Spam email concern

2009-11-20T00:18:55-05:00

Answer depends on the software you use to read your personal email. Check the documentation or try hitting help, most likely your software has an easy way to block somebody. Thanks Kyle for spotting the public email address she had on the site, I'm sure that solves the mystery here.

RE: Spam email concern

2009-11-19T22:13:23-05:00

I think I fixed it. I went to every place on my homepage and where it says contact me I linked it to the Contact Us page rather than my email address like you said. Thanks Kyle...I feel better now. One other question and this is not a CC question. How do I block that person's email address from my personal email where I received it?

RE: Spam email concern

2009-11-19T22:11:15-05:00

[quote="Dawn Estep"]Kyle, When I click on the Contact us it shows my email address so how or what do I do to change that? Now I have the eebie jeebies.[/quote] Dawn, I saw two places where you have your email address exposed. One starts with "If you're still stumped," The other one starts with "If you know of a classmate that we left off, please" To fix this, edit site pages, edit home page contents (unless it is in an announcement). Then delete the link (you can delete the "contact me" text and the link should be deleted). Then type the words "contact me" again. Right-click on the "Contact Us" left-hand link. Copy the link location. Now select the text you want to become a link. Click on the INSERT/EDIT LINK and paste the link location you copied in the previous step.

RE: Spam email concern

2009-11-19T22:03:08-05:00

Kyle, When I click on the Contact us it shows my email address so how or what do I do to change that? Now I have the eebie jeebies.

RE: Spam email concern

2009-11-19T21:53:29-05:00

Yes I am.

RE: Spam email concern

2009-11-19T21:47:55-05:00

[quote="Dawn Estep"]Brad - I got the very same email this afternoon.[/quote] Dawn, Your e-mail is public on your home page: If you know of a classmate that we left off, please [b]contact me[/b] and we will add them right away. The CONTACT ME is a link to your e-mail address. It is probably best if you don't want to expose your e-mail address to make the "Contact Me" to point to a link of your Contact Us link.

RE: Spam email concern

2009-11-19T21:46:19-05:00

Wow -- interesting. Are you on Classmates.com too?

RE: Spam email concern

2009-11-19T21:41:31-05:00

Brad - I got the very same email this afternoon.

RE: Spam email concern

2009-11-19T21:26:37-05:00

Nope -- it's not that. My profile on Classmates does not show my email address as far as I can tell. The only place it exists is in my password protected account information.

RE: Spam email concern

2009-11-19T21:11:10-05:00

I don't think so but I'll check it out and let you know. That would explain it, wouldn't it!

RE: Spam email concern

2009-11-19T21:02:32-05:00

Strange... You never in the past have had the checkmark selected to display your personal email addres to logged in members did you?

RE: Spam email concern

2009-11-19T20:53:46-05:00

Also, my Classmates.com listing, however, doesn't mention my email ID (that's hidden) but they could have been hacked into by this person.

RE: Spam email concern

2009-11-19T20:52:47-05:00

I do have a Classmates.com listing and suspect that's where this person hacked and got my email ID from and sent me a message directly to my AOL ID. I'm still waiting to hear from them on this issue. It's entirely possible they got the "classcreator" URL from Classmates because we posted it in a bulletin board in an effort to get our classmates there to join our Classcreator site. So they may have seen that and just mentioned it in their email as a teaser. I have every confidence your security is working as it should!! Now, I think, however, I better take any reference of ClassCreator off of Classmates.com! Too bad -- we were hoping to post info and the URL on the "events" board on Classmates regarding our upcoming 60th Birthday Bash. There are more of our classmates on Classmates.com than we've been able to get onto ClassCreator so far. I'll let you know what response Classmates.com gives me when I get something back from them, OK?

RE: Spam email concern

2009-11-19T20:39:57-05:00

I'm just a little confused, because this email clearly was sent from one POP3 email box to another POP3 email box outside of our system. In our system all emails are internal and have nothing to do with POP3. The only exception to this would be if you choose to display your personal email address to logged in members and at the same time you DON'T have the New Classmate Verification feature enabled. If that were the case, a hacker could presumably log in as a fake member and therefore get access to your private POP3 email address. Then a message such as the one above could be sent. I'm assuming that wasn't the case here. Is your email address listed on Classmates.com anywhere? What's weird is they specifically mention Class Creator Profile. Yet the email sent has nothing to do with our system. I'll run this past the programmers but for the moment I'm cluless on this one.

RE: Spam email concern

2009-11-19T20:10:32-05:00

Also, a little more information on this -- I think it is entirely possible this spam came from someone trolling on Classmates.com and have reported the issue to them as well.

Spam email concern

2009-11-19T19:08:51-05:00

Hi -- not sure where to post this but here it is -- don't know if you can do anything about it but since this spam email (see below) mentioned ClassCreator I wanted to copy you on it. I have my information on our website blocked to the outside world but not everyone in our class chose to do that so I'm a little concerned about those folks getting something similar. I've blocked the ID from my own email but my friend's son just did some research and told me that this is a Russian hacker in Serbia who is all over looking for personal information (???). Thought I'd just let you know! Elaine [u]The email's header details:[/u] Return-Path: Received: from rly-dg05.mx.aol.com (rly-dg05.mail.aol.com [172.19.151.89]) by air-dg06.mail.aol.com (v125.7) with ESMTP id MAILINDG062-5c84b057cf4138; Thu, 19 Nov 2009 12:14:32 -0500 Received: from web43416.mail.sp1.yahoo.com (web43416.mail.sp1.yahoo.com [68.180.198.238]) by rly- dg05.mx.aol.com (v125.7) with ESMTP id MAILRELAYINDG055- 5c84b057cf4138; Thu, 19 Nov 2009 12:14:28 -0500 Received: (qmail 66982 invoked by uid 60001); 19 Nov 2009 17:14:28 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1258650868; bh=xYFYoKnmu6G/wISNsqylq+Tro4hPWhs2yCBq6UJhrBY=; h=Message- ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply- To:Subject:To:MIME-Version:Content-Type; b=hPxUdFK9eOPrQjhZQdb3OcxAyWeC5XUp8A8jgKUszEZdlOG74sdyccSXTx Pv9jV0VEssO6rW2BAmL0392z3ZR0uO5nI84dx8Pv/XAcV97xsWOrduOBFHO9 DcAR/5vyWVBhy7ku+/hde4+SO/wqVtNBqn4bD6Om6wotyTY/LmddU= DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X- Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content- Type; b=V8AP985ZWHtfTdFcNVuebpPSs/aPOFJwe7kEJcv7xjPSDUDKuNFGQCkC5B L6BM6RjGLz4xuZorJ//aM4kNsANrH10ET8xVheAlZ0o0keZXLrxj2etR+o0b ASbJXmyiLF54hfZWAM4MKSDiyEy9PhIXeg76cAZQsJvEcQecnZI7s=; Message-ID: <101808.65488.qm@web43416.mail.sp1.yahoo.com> X-YMail-OSG: upsddR0VM1mJp5OAKV2PkG6MTcxL.gsI2FFySg5PgRL.rYEtEAz_kDoqaiK8 ya5eJNGaIvcgRgrLysRNqbP24rpsewkyPLupBEB3x4m4xMAuNbN80_Z7COU2 X4.UkQE8AK4W3qYikTGjPgO8QcEuRvneI_rD0U.PRBukx.u.MTUaRfu8pL7K Vx1Je7Cu.6x54Gjeon.L4QVNpKhKSIRDpcAMvhwoynXHKsKG2knj._N7ZNZ8 juNQv5LPhh40ubdlhXsqd0FmUaBUpvGMsNB206afmMx19sD73Z0xYALq3jjU zNJwbKAJSvOPgwDxzEGosXaGFqyWi4VQ93.fTj9RhQxy Received: from [77.238.187.13] by web43416.mail.sp1.yahoo.com via HTTP; Thu, 19 Nov 2009 09:14:28 PST X-Mailer: YahooMailClassic/8.1.6 YahooMailWebService/0.8.100.260964 Date: Thu, 19 Nov 2009 09:14:28 -0800 (PST) From: Doris Zarki Reply-To: dorisszarki@yahoo.com Subject: hello To: undisclosed recipients: ; MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-502668915-1258650868=:65488" X-AOL-IP: 68.180.198.238 X-AOL-SCOLL-SCORE:0:2:426750688:93952408 X-AOL-SCOLL-URL_COUNT:0 X-AOL-SCOLL-AUTHENTICATION: mail_rly_antispam_dkim-m212.1 ; domain : yahoo.com DKIM : pass [u]Message Content:[/u] hello ; I'm happy to sent you an inviting message after seeing your nice profile at www.classcreator.com,i was waiting for your reply to my email address. but I have not received your reply. Please do not torment me anymore waiting for your letters. A friendship is the the foundation of things built on other relative things to come. hopes to read from you. Yours Doris.