<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Darknet - The Darkside &#187; webflexx</title>
	<atom:link href="http://www.darknet.org.uk/tag/webflexx/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.darknet.org.uk</link>
	<description>Ethical Hacking, Penetration Testing &#38; Computer Security</description>
	<lastBuildDate>Tue, 07 Feb 2012 18:34:17 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>The Tale of a Real Malaysian E-mail Spammer Exposed &#8211; Webflexx</title>
		<link>http://www.darknet.org.uk/2006/04/the-tale-of-a-real-malaysian-e-mail-spammer-exposed-webflexx/</link>
		<comments>http://www.darknet.org.uk/2006/04/the-tale-of-a-real-malaysian-e-mail-spammer-exposed-webflexx/#comments</comments>
		<pubDate>Tue, 04 Apr 2006 09:01:20 +0000</pubDate>
		<dc:creator>Darknet</dc:creator>
				<category><![CDATA[Spammers & Scammers]]></category>
		<category><![CDATA[email-spam]]></category>
		<category><![CDATA[malaysia]]></category>
		<category><![CDATA[malaysian-spammers]]></category>
		<category><![CDATA[meng]]></category>
		<category><![CDATA[meng-foong]]></category>
		<category><![CDATA[ong-meng-foong]]></category>
		<category><![CDATA[scammers]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[spammer]]></category>
		<category><![CDATA[webflexx]]></category>

		<guid isPermaLink="false">http://www.darknet.org.uk/2006/04/the-tale-of-a-real-malaysian-e-mail-spammer-exposed-webflexx/</guid>
		<description><![CDATA[So a friend of mine received a spam, which is not unusual, but this one was a little different. This guy is in Malaysia, and the spam he usually receives is from all over the place, mostly US-centric, but this one was targeting Malaysians, Malaysian spammer producing Malaysian spam, is it the first? I asked [...]]]></description>
			<content:encoded><![CDATA[<p></p>
<p>So a friend of mine received a spam, which is not unusual, but this one was a little different.</p>
<p>This guy is in Malaysia, and the spam he usually receives is from all over the place, mostly US-centric, but this one was targeting Malaysians, Malaysian spammer producing Malaysian spam, is it the first?</p>
<p>I asked for him to forward the mail to me so I could check it out, pretty standard spam.</p>
<p><img src="http://static.flickr.com/38/123109122_5dd30d5be3.jpg?v=0" alt="Malaysian Spam" /></p>
<p>I then noticed Thunderbird was blocking some external images so I checked the source of the e-mail (The from address was pretty anonymous &#8220;eMarketer in Malaysia&#8221; dx8@tm.net.my).</p>
<p><img src="http://static.flickr.com/40/123109123_a541767b6a.jpg?v=0" alt="Thunderbird Image Block" /></p>
<p>The source indeed revealed the location of the imbedded images:</p>
<p><img src="http://static.flickr.com/1/123109124_c4f00c3e32.jpg?v=0" alt="Webflexx Spammer" /></p>
<p><a href="http://www.webflexx.com/meng/wfx/">http://www.webflexx.com/meng/wfx/</a></p>
<blockquote><p>Fee Structure<br />
RM288 &#8211; 150,000 emails  (one day trial)<br />
RM388 &#8211; 500,000 emails<br />
RM688 &#8211; 1,000,000 emails<br />
RM1376 &#8211; 2,000,000 emails<br />
RM2064 &#8211; 3,000,000 emails + 1,000,000 emails FREE + ad design FREE!!</p>
<p>Reply with your contact number. Or call Ms Meng 012-205 1591 or Mr Lim 012- 302 3899</p></blockquote>
<p>It seems this company webflexx does offer spamming services:</p>
<p><img src="http://static.flickr.com/41/123109125_cc1a573102.jpg?v=0" alt="Direct E-mail Marketing" /></p>
<p>&#8220;direct email marketing&#8221; another term for spam right?</p>
<p>Notice the subdirectory of the spammer is /meng and the registrant of the webflexx domain is also an Ong Meng Foong, no coincidence right?</p>
<p><img src="http://static.flickr.com/43/123109127_1908eb09cc.jpg?v=0" alt="Webflexx Registration" /></p>
<blockquote><p>24-2 Plaza Damansara Jalan Medan Setia 2,<br />
    Bukit Damansara,<br />
    KL,50490<br />
    MY<br />
    Tel. +603.22835898</p></blockquote>
<p>Going up one directory allowed me to browse the /meng directory, quite a nice collection of stuff.</p>
<p><img src="http://static.flickr.com/43/123109364_f58f52befc.jpg?v=0" alt="/meng Directory" /></p>
<p>Browsing through the /meng directory I also found a screenshot of a personal &#8216;blog&#8217; from Meng Foong.</p>
<p><img src="http://static.flickr.com/35/123109128_b3ddd62038.jpg?v=0" alt="Meng Foong Blog" /></p>
<p>Now whilst I couldn&#8217;t quite make out the text of the URL I could see the name &#8220;Meng&#8217;s Fickle Rambling Sessions&#8221;, which I of course Googled and found his blog, you can have a read here:</p>
<p><a href="http://omengos.blogspot.com/">http://omengos.blogspot.com/</a></p>
<p>Seems like a nice Christian boy&#8230;from his blog I also found his <a href="http://www.flickr.com/photos/meng_my1">Flickr Page</a> (Inactive) and his old <a href="http://www.xanga.com/ongmengfoong">Xanga page</a>.</p>
<p>From browsing the sub-directories it seems his clients are sexual based so far, sex toys, condoms and so on.</p>
<p><a href="http://www.webflexx.com/meng/kinsei/kinsei.htm">Kinsei Corporation</a></p>
<p><img src="http://static.flickr.com/36/123109366_a5b0f894ee.jpg?v=0'" alt="Kinsei" /></p>
<p><a href="http://www.webflexx.com/meng/index2.htm">I Need House</a></p>
<p><img src="http://static.flickr.com/38/123109365_3a32ddb407.jpg?v=0" alt="Ineedhouse" /></p>
<p><a href="http://www.webflexx.com/meng/RMXXX/">RMXXX</a></p>
<p><img src="http://static.flickr.com/37/123109367_be64eed72e.jpg?v=0" alt="RMXXX" /></p>
<p>All his spam templates have this &#8216;disclaimer&#8217; at the bottom:</p>
<blockquote><p>Note: This email is meant for our potential clients. Should you have received it in error, please reply &#8220;unsubscribe&#8221; at the subject header. Thank you.</p></blockquote>
<p>He or a friend named Amanda seems to be a student or ex-student of <a href="http://www.help.edu.my/">Help University college</a> and a member of the Christian Fellowship there.</p>
<p>A quick <a href="http://www.google.com/search?q=site%3Ahttp%3A%2F%2Fwww.webflexx.com%2F&#038;start=0&#038;ie=utf-8&#038;oe=utf-8&#038;client=firefox-a&#038;rls=org.mozilla:en-US:official">Google Search</a> on his site doesn&#8217;t yield much, just a couple more directories nothing interesting (/images and /multimedia).</p>
<p>I know people have to make a living, but spamming is not the way ok.</p>
<p>I hope no-one out there supports these spammers by paying them for these services, and no one of you uses any of these services advertised through spam.</p>
<p>There are plenty of pictures too in the <a href="http://www.webflexx.com/meng/">http://www.webflexx.com/meng/</a> directory, check /tiomans and /kk to see :)</p>
<p>Have fun and remember don&#8217;t spam. If you really don&#8217;t know why spam is bad, <a href="http://spam.abuse.net/overview/spambad.shtml">read this</a>.</p>
<p>Note: If you read this post by mistake, please e-mail Darknet with &#8220;unsubscribe&#8221; in the subject.</p>
<p></p>
<p><a href="http://digg.com/security/The_Tale_of_a_REAL_E-mail_Spammer_Exposed">Digg This Article</a></p>
<div class="tweetthis" style="text-align:left;"><p> <a class="tt" href="http://twitter.com/intent/tweet?text=The+Tale+of+a+Real+Malaysian+E-mail+Spammer+Exposed+%E2%80%93+Webflexx+http%3A%2F%2Fdarknet.org.uk%2F%3Fp%3D141+from+%40THEdarknet" title="Post to Twitter"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter-micro3.png" alt="Post to Twitter" /></a> <a class="tt" href="http://www.facebook.com/share.php?u=http://www.darknet.org.uk/2006/04/the-tale-of-a-real-malaysian-e-mail-spammer-exposed-webflexx/&amp;t=The+Tale+of+a+Real+Malaysian+E-mail+Spammer+Exposed+%E2%80%93+Webflexx" title="Post to Facebook"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/facebook/tt-facebook-micro3.png" alt="Post to Facebook" /></a> <a class="tt" href="http://www.google.com/buzz/post?url=http://www.darknet.org.uk/2006/04/the-tale-of-a-real-malaysian-e-mail-spammer-exposed-webflexx/&amp;imageurl=" title="Post to Google Buzz"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/gbuzz/tt-gbuzz-micro3.png" alt="Post to Google Buzz" /></a> <a class="tt" href="http://delicious.com/post?url=http://www.darknet.org.uk/2006/04/the-tale-of-a-real-malaysian-e-mail-spammer-exposed-webflexx/&amp;title=The+Tale+of+a+Real+Malaysian+E-mail+Spammer+Exposed+%E2%80%93+Webflexx" title="Post to Delicious"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/delicious/tt-delicious-micro3.png" alt="Post to Delicious" /></a> <a class="tt" href="http://digg.com/submit?url=http://www.darknet.org.uk/2006/04/the-tale-of-a-real-malaysian-e-mail-spammer-exposed-webflexx/&amp;title=The+Tale+of+a+Real+Malaysian+E-mail+Spammer+Exposed+%E2%80%93+Webflexx" title="Post to Digg"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/digg/tt-digg-micro3.png" alt="Post to Digg" /></a> <a class="tt" href="http://reddit.com/submit?url=http://www.darknet.org.uk/2006/04/the-tale-of-a-real-malaysian-e-mail-spammer-exposed-webflexx/&amp;title=The+Tale+of+a+Real+Malaysian+E-mail+Spammer+Exposed+%E2%80%93+Webflexx" title="Post to Reddit"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/reddit/tt-reddit-micro3.png" alt="Post to Reddit" /></a> <a class="tt" href="http://stumbleupon.com/submit?url=http://www.darknet.org.uk/2006/04/the-tale-of-a-real-malaysian-e-mail-spammer-exposed-webflexx/&amp;title=The+Tale+of+a+Real+Malaysian+E-mail+Spammer+Exposed+%E2%80%93+Webflexx" title="Post to StumbleUpon"><img class="nothumb" src="http://www.darknet.org.uk/wp-content/plugins/tweet-this/icons/en/su/tt-su-micro3.png" alt="Post to StumbleUpon" /></a></p></div><div class="AWD_like_button "><iframe src="http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.darknet.org.uk%2F2006%2F04%2Fthe-tale-of-a-real-malaysian-e-mail-spammer-exposed-webflexx%2F&amp;send=false&amp;layout=standard&amp;width=&amp;show_faces=false&amp;action=like&amp;colorscheme=light&amp;font=arial&amp;height=40" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:px; height:40px;" allowTransparency="true"></iframe></div>]]></content:encoded>
			<wfw:commentRss>http://www.darknet.org.uk/2006/04/the-tale-of-a-real-malaysian-e-mail-spammer-exposed-webflexx/feed/</wfw:commentRss>
		<slash:comments>19</slash:comments>
		</item>
	</channel>
</rss>

