[bug] multiple spamgourmet recipients

General discussion re sg.

[bug] multiple spamgourmet recipients

Postby Sebastian » Wed Jul 12, 2006 9:11 am

I just received a spam mail (looks like phishing) through spamgourmet. The "To:" field contains several adresses at spamgourmet.com, all the local parts either are or start with "usenet". I have disabled the addition of the count status to the subject line.
The subject line of that very message now contains two counters (of two other recipients I can see in the "To:" field) and both the "From:" and "Reply-To:" fields had been changed for address masking, but contain not my user name, but the name of another recipient. However, the "X-Spamgourmet:" line seems to be correct.

Here the complete headers (hopefully I did not forget some of the masking):

Return-Path: <#same as to:#>
X-Flags: 0000
Delivered-To: GMX delivery to #censored#
Received: (qmail invoked by alias); 11 Jul 2006 01:09:15 -0000
Received: from gourmet.spamgourmet.com (EHLO gourmet.spamgourmet.com) [216.218.230.146]
by mx0.gmx.net (mx037) with SMTP; 11 Jul 2006 03:09:15 +0200
Received: from gourmet.spamgourmet.com (localhost [127.0.0.1])
by gourmet.spamgourmet.com (8.13.6/8.13.6) with ESMTP id k6B19ZUk023864
for <#censored#>; Mon, 10 Jul 2006 18:09:35 -0700
Received: (from jqh1@localhost)
by gourmet.spamgourmet.com (8.13.6/8.12.11/Submit) id k6B19YWu023852
for #censored#; Mon, 10 Jul 2006 18:09:34 -0700
Received: from 192.168.0.40 (mo-71-51-220-226.dhcp.embarqhsd.net [71.51.220.226])
by gourmet.spamgourmet.com (8.13.6/8.13.6) with SMTP id k6B19Uni023775;
Mon, 10 Jul 2006 18:09:30 -0700
Received: from 240.28.52.103 by ; Tue, 11 Jul 2006 08:01:08 +0600
Message-ID: <KGVBACYGYYPKKFLAFUMJZ@msn.com>
From: "Alaska USA - #their address#"<+usenet-05-01-30+#not my user name#>
Reply-To: "Alaska USA - #their address#"<+usenet-05-01-30+#same as from#>
To: usenet.#someone spamgourmet.com#, usenet.#a#,
usenet.#b#,
usenet.#c#,
usenet_nov05.10.#d#,
usenet_temp_0106.3.#e#,
usenet002.#my elapsed address#, usenet003.#my current address#,
usenet0106.#f#, usenet0206.3.#g#,
usenet-05-01-30.15.#user name as in reply address#,
usenet05-08-08.10.#again user as in reply address#
Subject: Alaska USA FCU Verify Your Account (usenet: message 17 of 20) (usenet-05-01-30: message 14 of 15)
Date: Mon, 10 Jul 2006 20:01:08 -0600
X-Mailer: Microsoft Outlook Express 6.00.2462.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--28030695957327419"
X-Priority: 3
X-MSMail-Priority: Normal
X-Spamgourmet: (usenet003: message 1 of 10)
X-GMX-Antivirus: -1 (not scanned, may not use virus scanner)
X-GMX-Antispam: 0 (Mail was not recognized as spam)
X-GMX-UID: a5/AZEw6eSE5b+pfY3Qh3kN2IGRvb4CD
Sebastian
 
Posts: 10
Joined: Mon Aug 30, 2004 1:53 pm
Location: Munich, Germany

Postby josh » Wed Jul 12, 2006 6:14 pm

thanks for the detailed post -- we'll look into it.
josh
 
Posts: 1371
Joined: Fri Aug 29, 2003 2:28 pm


Return to General Discussion

Who is online

Users browsing this forum: No registered users and 84 guests