Educause Security Discussion mailing list archives

Re: Degreedup.org - phishing scam or just junk mail?


From: Jeff Giacobbe <giacobbej () MAIL MONTCLAIR EDU>
Date: Mon, 30 Apr 2012 17:10:46 -0400

All-

Thanks for the additional info/experiences with the source of this
particular email campaign. Based on the collective wisdom we've
redirected degreedup.org to our anti-spam bit bucket :-)

Regards,

Jeff



On 04/30/2012 04:46 PM, Robert Lau wrote:
They spammed us from tccd248-180.tccd.edu (Tarrant County College
District.  Fort Worth, TX).  So if there was any doubt of their 
illegitimacy...

Received Time:        28 Apr 2012 12:03:46 (GMT -07:00) Message Size:
63.32 (KB) Subject:              Student Scholarship (May 27th
Deadline) Envelope Sender:      kmwilson () degreedup org Envelope
Recipients:  x () usc edu Message ID Header:    <p38067 () degreedup org> 
Reverse DNS Hostname: tccd248-180.tccd.edu (verified) IP Address:
64.28.248.180

DegreedUp.org has the same address as another site that we blocked a
while ago for massive spamming, collegegreekbooks.org 
[209.190.30.58].  We mailed complaints to their hosting company,
AlphaNine.com, but never received any replies.

-robert

-----Original Message----- From: The EDUCAUSE Security Constituent
Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of
Jeff Giacobbe Sent: Monday, April 30, 2012 07:46 To:
SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] Degreedup.org -
phishing scam or just junk mail?

Greetings-

Just testing the wind on this one... Our campus seems to get
regular monthly 'spam' from an outfit called DegreedUp.org offering
scholarship applications (for a small fee of course)

I'm trying to determine if this is just your run-of-the-mill
unsolicited junk mail or if it moves into phishing scam territory.

I can provide a copy of the emails we've received privately if
anyone is interested.

Thanks,

Jeff Giacobbe Associate Vice President Enterprise Technology
Services Montclair State University

Attachment: giacobbej.vcf
Description:


Current thread: