bogbrush Posted February 22, 2006 Share Posted February 22, 2006 Seems like somebody (hosted by HopOne.net) is having trouble configuring their new automatic spamming software. I received two similar messages from their IP block, both with unfilled placeholders for variables. I especially like the placeholder for a fake IP/host in the Received header Return-path: <%CUSTOM_FINANCIAL_TERMS[at]gmail.com> Envelope-to: x Delivery-date: Tue, 21 Feb 2006 21:26:42 +0000 Received: from [212.84.175.149] (port=52903 helo=fwd0.hosts.co.uk) by bh2.bargainhosts.co.uk with esmtp (Exim 4.52) id 1FBf1s-0004Qv-Ct for x; Tue, 21 Feb 2006 21:26:40 +0000 Received: from [66.148.69.237] (helo=DM) by fwd0.hosts.co.uk with smtp (Exim 4.52) id 1FBf1x-0000UL-Bn for x; Tue, 21 Feb 2006 21:26:45 +0000 Received: from %RND_HOST (8.8.8/8.8.8) id XAA69062; Tue, 21 Feb 2006 15:26:47 -0600 Message-Id: <144619070459.XAA13898%CUSTOM_FINANCIAL_TERMS[at]gmail.com> From: "Stone Otero" <%CUSTOM_FINANCIAL_TERMS[at]gmail.com> To: x Subject: In Reference to Your February Account Details X-Mailer: Opera/7.11 (Windows NT 5.0; U) Date: Tue, 21 Feb 2006 15:26:47 -0600 X-Original-To: x %CUSTOM_TO_ALIAS, %CUSTOM_ACCOUNT - %CUSTOM_LINK Stone Otero, Account Rep. %CUSTOM_REP_NUMBER After processing, the mail should look like this: Return-path: <Floor_Trader_teat[at]gmail.com> Envelope-to: x Delivery-date: Tue, 21 Feb 2006 23:28:37 +0000 Received: from [212.84.175.149] (port=45037 helo=fwd0.hosts.co.uk) by bh2.bargainhosts.co.uk with esmtp (Exim 4.52) id 1FBgvt-0006Lu-Av for x; Tue, 21 Feb 2006 23:28:37 +0000 Received: from [208.65.60.102] (helo=DM) by fwd0.hosts.co.uk with smtp (Exim 4.52) id 1FBgvy-0003un-2G for x; Tue, 21 Feb 2006 23:28:42 +0000 Received: from gmail.com (8.8.8/8.8.8) id XAA73362; Tue, 21 Feb 2006 17:28:44 -0600 Message-Id: <1894______________________________teat[at]gmail.com> From: "Payton Savage" <Floor_Trader_teat[at]gmail.com> To: x Subject: In Reference to Your February Account Summary X-Mailer: Opera/7.11 (Windows NT 5.0; U) Date: Tue, 21 Feb 2006 17:28:44 -0600 X-Original-To: x Edwardo Pierce, February Summary Account. http://it.geocities.com/perplexed55851/ Payton Savage, Account Rep. wb114749 Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.