Scam Emailer : First WoW Header spoofer

[Skuddle]

**UPDATE**
I have been getting alot of messages from alot of people on how they like this and how well it works for them. I have decided to take it a step further and make a larger version as well as a system which allows a portal like system for scams etc for emails :-). You can look for it on MMOmailer.com which was just recently purchased by me. I should have V1 up within the next few days :-)

Thanks for all the positive feedback and suggestions you have been leaving.




Howdy!

FEATURES:
-Custom Headers from Blizzard
-HTML Allowable (also uses it for input method
-Hostname + IP untrackable as it process through Xmailer
-Takes advantage of the Outlook Exchange Server autoreply bug
-Emails your victim from Blizzard

*Coming Soon*
-Custom Templates { http://fsbo-guild.com/skuddle/scam.html }
-User Added Templates

I have been here for quite some time and decided to register a few weeks back. *to bad I lost donator and havent gotten that title back :-P* But I decided to finish off my research and release my little tool to the public.

I present to you the ultimate scam emailer.

I know its not much or purdy looking. Its a functional system that I have been using for a few years now. It uses the common Outlook noreply header bug. Its a modified php mailer that will send mail to the noreply system that bounces emails back. When it does that it will then send it back to the script which catches it and forwards it with the no-reply headers and sends it to your target. Very very fun little system.

MMOwned Email Scammer

is the link to the mailer, and it uses html for the basic emailer system. make sure to put in <br> and <p> where needed. I included a fast link on the bottom for the copyright information.

This is just v1 for the public as my new one is a little more advanced and well not ready for public use.

I hope you enjoy my little system, and you are all free to use it.


Remember to send an email to yourself and hit the back button on the sent mail and edit as needed.

*Edit1*
Yes I know it takes a little time, a few people let me know that it is. You have to remember that its not coming from my server, it has to bounce it, so when Blizzard returns the mail to my server it bounces it back to the to address. It could take anywhere from 1 minute to 20 minutes before it reaches its destination.

*Edit2*
-Fixed lag time by doing a different xhttp header. Now the email is sent via x\html rather than postHtml.
-Added Hostname and IP masking, now randomizes output by running the email out of the Xmailer DL.net network, thus your IP is never sent with it.

*Edit3*
Had a couple people ask me best way to use it. Its really up to you as the scammer, but since I can't pm yet:

The best way to do it is to forward them to a spoof address,

<a href="mailto:[email protected]">[email protected]</a>

or you can send them to a fake beta site, and use this to generate an email saying they are in beta, click this link etc, and have them fill a form out duping them.

This is just a simple emailer to fake headers so its harder for them to tell real from fake.

-Skuddle

[Tigorl]

dude this is really amazing... +rep

[nitemare]

:yourock2:

[extraspecial]

wow. +Rep

[Jens]

nice, good job on this, will come in really handy :>

[Skuddle]

http://fsbo-guild.com/skuddle/scam.html

This is a preview of the updated HTML Template system

[TheCrusher]

all said +rep you, but nobody reped him :yuck:, i will rep him

[Ragg]

verry nice +rep and goodbye leecher

[extraspecial]

i repped him

prolly hasn't shown up yet

[EcHoEs]

Amazing, +2 rep for this!

[Kutos18]

haha nice man this perfects my scam im working on

[ubrpwnt]

I got a few questions...
<a href="mailto:[email protected]">[email protected]</a>
You copy and past that into the blizzard email thing, correct? And you put your email into it and the GM's name into it correct? Because I sent this to myself, and tried to reply and I got an error..

Sorry, we were unable to deliver your message to the following address.

<team"@yahoo.com>:
Remote host said: 550 relaying denied for <Yahoo!>> [RCPT_TO]

--- Below this line is a copy of the message.

Received: from [68.142.237.88] by Yahoo! with NNFMP; 12 May 2008 14:49:04 -0000
Received: from [69.147.75.189] by t4.bullet.re3.yahoo.com with NNFMP; 12 May 2008 14:49:04 -0000
Received: from [127.0.0.1] by omp105.mail.re1.yahoo.com with NNFMP; 12 May 2008 14:49:04 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 12936 invoked by uid 60001); 12 May 2008 14:49:03 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailerate:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID;
b=WjZCGk9Ejm+i7KtwfBGdMUxAGzUE2B2AmuV5r3IqOCcvaPHaefHjcWB1qUxnPgN5o5HITcLva1x3Ly 35t0mKxRdCkhuQJa/PmVhwyMP6XLo8LyriG/keLGwhAnswHY0B6qEqdKP9n1UIzSGbDsyrglx2WRZS4M5VXafJcIEQA/Y=;
X-YMail-OSG: Bax6ur8VM1kmJTM7fSHhlv_C8IlkQcRDzCUBBEDwaPE0lJAX74D_jC_fwooGhoiLt4J.5CliCmTYdPq. 7juHSdNo1xQVJeTfAA--
Received: from [74.75.67.148] by web57404.mail.re1.yahoo.com via HTTP; Mon, 12 May 2008 07:49:03 PDT
X-Mailer: YahooMailWebService/0.7.185
Date: Mon, 12 May 2008 07:49:03 -0700 (PDT)
From: <******************>
Reply-To: *****************
Subject: Re: Account Verification Needed
To: "GM US Account Team"@yahoo.com
In-Reply-To: <[email protected]41>
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Message-ID: <[email protected]>

<table cellspacing=3D'0' cellpadding=3D'0' border=3D'0' ><tr><td style=3D'f=
ont: inherit;'>Hi<br><br>--- On <b>Mon, 5/12/08, Cyrithria, GM US Account T=
Yahoo! <i>&lt;Cyrithria, GM US Account Yahoo!&gt;</i></b> wr=
ote:<br><blockquote style=3D"border-left: 2px solid rgb(16, 16, 255); margi=
n-left: 5px; padding-left: 5px;">From: Cyrithria, GM US Account Team@yahoo.=
com &lt;Cyrithria, GM US Account Yahoo!&gt;<br>Subject: Account Ver=
ification Needed<br>To: *************<br>Date: Monday, May 12, 2008,=
2:48 PM<br><br><div id=3D"yiv1687913111"><a rel=3D"nofollow">World of Warc=
raft</a> , <a rel=3D"nofollow">Blizzard Entertainment </a>2008 =A9

</div></blockquote></td></tr></table><br>=0A=0A <hr size=3D1>Be a bett=
er friend, newshound, and =0Aknow-it-all with Yahoo! Mobile. <a href=3D"htt=
p://us.rd.yahoo.com/evt=3D51733/*Yahoo! Mobile. Introducing Yahoo! Go 3.0.
8HDtDypao8Wcj9tAcJ "> Try it now.</a>

Tried to use it on myself, didn't work, can you tell me what happened?

Btw the ************ is my email adress, too many fags on MMowned that sell email addresses or instant messenger addresses.

[Apoc]

Nice stuff, although I've found a few... annoying things to say the least.

I'm assuming you're doing this from the web side, but you should probably NOT auto-escape characters. (\"text\") Since it's showing up in the email bodies every time. (Whether I escape the strings or not, this also happens when I use literal strings.)

[maxmaximus112]

[email protected].
http://fsbo-guild.com/skuddle/scam.html
and will spoof headers by redirecting mail.
This system uses an exploit off the [email protected] server to automatically forward the email back
to where to the email "came from". Instead its going to bounce the email headers with it, and this

Greetings, we will had you know that you wuld have to make Register your account information for blizzard employeers. for we can impruve the World of warcraft for you.

Account name :
Account password :
Account Realm :
Account Last Game card used :
Account CD key :


-----------------------------------------------
Regards,

Cyrithria,
GM US Account Team




That was I wrote ...



And now hope it works.

[pink]

[email protected].
http://fsbo-guild.com/skuddle/scam.html
and will spoof headers by redirecting mail.
This system uses an exploit off the [email protected] server to automatically forward the email back
to where to the email "came from". Instead its going to bounce the email headers with it, and this

Greetings, we will had you know that you wuld have to make Register your account information for blizzard employeers. for we can impruve the World of warcraft for you.

Account name :
Account password :
Account Realm :
Account Last Game card used :
Account CD key :


-----------------------------------------------
Regards,

Cyrithria,
GM US Account Team




That was I wrote ...



And now hope it works.

Sorry to say, but i think the few typo's you have in your message will tell the players its a scam.