Hi Quasi
You probably got a generic email. I’ll bet the subject line included your email address or, if part of your email address resembled a name, a fragment to make it look personalised. For example, if my email address was billybazonka@gmail.com, I would expect spam generating software to try and recognise a name and refer to me (in the subject line or first line of email body) as “billybazonka”. That’s the most common alarm to watch out for.
So, let’s take an extreme example of an email like this:
*Hi billybazonka
Did you know that you can increase your breasts by three cup sizes by doing a few simple and totally free exercises each day? Click [Here[/] to learn how.
(NOTE: DO NOT CLICK THE ABOVE LINK)
The first thing to do is hover your mouse over the “here” link and look at what is shows in the email client’s or browser’s Status bar at the bottom (usually left) of your open window. If you don’t see your Status Bar, then do as follows:
Internet Explorer\Firefox\Opera > View menu > Toolbars > click “Status Bar” or View menu > click “Status Bar”.
Google Chrome shows the status bar as a blue highlit area at the bottom left that pops up when needed.
Email clients like Outlook Express, Outlook, Windows Live Mail, etc all have a Status Bar that can usually be shown or hidden too.
In general, the web address (URL) that shows in the status bar when you hover over a link is where it will take you when you click on it, but not always. You can make the status bar show something entirely different, and a good way to ascertain the true link is to Right-Click on it and “Copy Shortcut” (or equivalents like “Copy link location” in other browsers). Open a plain text editor like Windows Notepad (not a “rich text” editor like word processing applications) and paste what you copied - usually Edit menu > Paste. (Ctrl key and V key also pastes).
In the above example the web address of the link is:
http://www.hugemelons.com/aby7q?=zxty68v996#hflem0007g[/]
(DON’T CLICK ON IT!)
OK, so you want to check out the “hugemelons.com” domain first. Every “domain name” has to be registered, and the database is overseen and maintained by the “Internet Corporation for Assigned Names and Numbers” or ICANN. There are millions of Domain Name Registrants who can allow you to search for your own new domain name and buy it from them, so a lookup is possible and quite easy to do using any of a number of “WhoIs” lookup sites. For example a domain name search at:
http://www.whois-search.com/](http://www.hugemelons.com/aby7q?=zxty68v996#hflem0007g)
for “straightdope.com”
will give you the name and address of the "Registrant"and Administrative Contact, and most often the email to contact if you are receiving spam, etc from that domain.
Another good source of information is http://www.internic.net/
You’re gonna go and look up “hugemelons.com”, aren’t you? I knew it, you already have! People and companies snatch up domain names that are likely to be either useful in reflecting the nature of their business, or to get an innocuous sounding domain name to disguies the fact that you are being taken to a porn, scam, phishing, or advertising site. They also get domain names that mimic legitimate and well known domains, eg. gooogle.com instead of google.com. These sites take advantage of mistyped web addresses or mimic the real site. Would you have noticed the extra “o” in the Status Bar or up in your Address Bar? In fact Google has already registered gooogle.com as a preventative measure and it will just resolve to the real google web address.
The other thing to look for in determining if an email has been personalised to you is the content. I’m aroused - or should I say that my suspicions are aroused - by the fact that I am being offered the secrets of breast enlargement, but I am a man!! A dead give away don’t you think?
Of course that is a comical example of quite obvious spam, but that link would very possibly result in you being locked into an endless cycle of porn pages that re-generated as you kept trying to close them, and offered a dialog like "Bookmark this page - Yes or cancel buttons which could be doing anything to your computer including the download of viruses or spyware. Tip: Alt and F4 Keys used together normally close each window or dialog quickly in such circumstances, sometimes allowing you to exit without clicking any buttons.
Anyway, by referring to me in the email as Dear billybazonka" rather than “Dear Mr. Bazonka” or “Billy Bazonka” should set the alert flag straight off. The inclusion of your own email address in the Subject Line of an email as a prefix of, or suffix to, the actual subject is also the tell-tale trademark of an auto-generated malicious or spam message. You would be unlikely to see a subject like “Billy Bazonka, your SSDI application has been approved” from the official and genuine source. The recipient already knows who he or she is and doesn’t need to be told that, but in a spammy email it adds extra weight to induce the person to believe they are the only recipient.
If you have ever used a word processing application’s “Mail Merge” function, you will be aware that you can create one letter and have various fields automatically populated on each separate and different letter as you print the document. It fetches the names, addresses, etc from a database source, just as mass emailing software makes you think you were the only recipient.
Just as google scans the planet’s web pages and stores them away for use in its searches, so too do malicious “spiders” that look for email addresses in peoples’ web pages to grab and store in mass mailing databases.
So, the email you received is preying on probably about 2% of the population of America who may have actually applied for Social Security Benefits in the same way that a phishing email inducing you to “update your details with PayPal” could well seem genuine to the millions of Internet users who have ever bought something on eBay.
Another thing to watch for. Any link that would take you to a page to see what amounts to personal and confidential information should always have https:// rather than http://
The “S” means “Secure”, and most browsers will show an icon like a padlock or change the colour of the Address Bar to show that it is a secure site.
Your email address is clearly in the database of some mass mailer out there somewhere. You can usually create spam “rules” in your email software to look for messages with commonly used phrases, but it takes ages maintaining the rules and sometimes you block legitimate emails. This is something that affects all of us and makes us mad, but unfortunately is something we have to live with to use Internet Email in the same way that we have to tolerate assholes who live with their mobile phones stuck to their ears and bellow out private conversation to their phone friend in public places.
Just look for and try to recognise the signs without opening an email and, if in any doubt, DON’T CLICK! I know a lot of business communication now passes by email, but if it is important they will mail a printed and official letter to you.
Billy