Return-Path: <b-...@radar.axi.fr> Received: from d.mx.sonic.net (d.mx.sonic.net [64.142.100.84]) by eth0.a.lds.sonic.net (8.12.11/8.12.11) with ESMTP id jA1IJO16012629 for <REMOVED>; Tue, 1 Nov 2005 10:19:24 -0800 Received: from magic.axicli.com (magic.axicli.com [217.174.197.110]) by d.mx.sonic.net (8.13.3/8.13.3) with ESMTP id jA1IJElJ011377 for <REMOVED>; Tue, 1 Nov 2005 10:19:24 -0800 Received: by magic.axicli.com (Postfix, from userid 1001) id 4E6E597361; Tue, 1 Nov 2005 19:19:10 +0100 (CET) To: REMOVED Subject: Confirmation d'Inscription à la Liste de Diffusion - euros francs From: euros francs <b-...@radar.axicli.com> X-Sender: b-...@radar.axicli.com X-Mailer: POPLIST SENDER Reply-To: euros francs <b-...@radar.axicli.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----f15f29f2294fc47a5b3297f965c6f2ff" Message-Id: <20051101181910.4E6E597...@magic.axicli.com> Date: Tue, 1 Nov 2005 19:19:10 +0100 (CET) X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on b.spam X-Spam-Status: No, score=-1.7 required=1.0 tests=HTML_60_70,HTML_MESSAGE, MPART_ALT_DIFF,UNWANTED_LANGUAGE_BODY,USER_IN_WHITELIST_TO autolearn=disabled version=3.0.4 X-Spam-Level:
Mark Ferguson <washington_resid...@whew.com> wrote: > Greetings,
> Spam from and for these scumbags. ... > Subject: Confirmation d'Inscription à la Liste de Diffusion - euros > francs
I got one of those as well. Might as well be a legitimate mailing list where some spanked spammer (or someone who has an issue with poplist.com) has tried to subscribe the addresses of nanae people. But the mail looked very much like a confirmation request (except for the images), so I decided to delete it and be done with it. If they start sending me more stuff I will revisit that decision. However, your mailbox, your rules.
> Might as well be a legitimate mailing list where some spanked spammer > (or someone who has an issue with poplist.com) has tried to subscribe > the addresses of nanae people. > But the mail looked very much like a confirmation request (except for > the images), so I decided to delete it and be done with it.
Although my knowledge of French is very limited, that's what I make out of it too. So don't click the link and all should be fine.
>> Might as well be a legitimate mailing list where some spanked spammer >> (or someone who has an issue with poplist.com) has tried to subscribe >> the addresses of nanae people. >> But the mail looked very much like a confirmation request (except for >> the images), so I decided to delete it and be done with it.
> Although my knowledge of French is very limited, that's what I make > out of it too. So don't click the link and all should be fine.
On the other hand, I had that range already blocked for previous spamruns. -- Fred Mobach - f...@mobach.nl - postmas...@mobach.nl Systemhouse Mobach bv - The Netherlands - since 1976 website : http://fred.mobach.nl Q: servos ad pilleum vocare ? A: servos fenestrae ad pilleum rubrem vocare !
> Mark Ferguson <washington_resid...@whew.com> wrote: > > Greetings,
> > Spam from and for these scumbags. > ... > > Subject: Confirmation d'Inscription à la Liste de Diffusion - euros > > francs
> I got one of those as well. > Might as well be a legitimate mailing list where some spanked spammer > (or someone who has an issue with poplist.com) has tried to subscribe > the addresses of nanae people. > But the mail looked very much like a confirmation request (except for > the images), so I decided to delete it and be done with it. > If they start sending me more stuff I will revisit that decision. > However, your mailbox, your rules.
I got one too. I haven't had time to run an edited copy (with the URLs removed) through Babelfish yet but it sure *looked* like a confirmation request to me.
Norman "wondering how many of the Chinese ``spams'' that I get are really confirmation requests in Chinese[1]" De Forest
[1] Probably zero but you never know. -- Norman De Forest http://www.chebucto.ns.ca/~af380/Profile.html "> Is there anything Spamazon DOESN'T sell? Clues. The market's too small to justify the effort." -- Stuart Lamble in the scary devil monastery, Fri, 13 May 2005
Without looking into how sleazy (or not) poplist is, I got a subscription confirmation request also. It does say clearly(in French), that if one doesn't wish to subscribe to do nothing, and there is no further advertizing, although there are some phone home hover links.
Methinks spanked spammy, or, a "new" way for a newsletter to advertize, and be able to wiggle out of being deemed a spammer.
>> Spam from and for these scumbags. >... >> Subject: Confirmation d'Inscription à la Liste de Diffusion - euros >> francs
>I got one of those as well. >Might as well be a legitimate mailing list where some spanked spammer >(or someone who has an issue with poplist.com) has tried to subscribe >the addresses of nanae people. >But the mail looked very much like a confirmation request (except for >the images), so I decided to delete it and be done with it. >If they start sending me more stuff I will revisit that decision. >However, your mailbox, your rules.
I recently changed to Thunderbird for email ... oddly enough, when I went to send my LARTs, Thunderbird said it had problems sending the px1.gif (and others) ... I'm guessing that the px1 = a one pixel sneaky. Dunno what the rest of 'em were. <g>
-- Patricia Proud Citizen of the Commonwealth of Virginia
> Hans-Martin Mosner wrote: >> But the mail looked very much like a confirmation request (except for >> the images), so I decided to delete it and be done with it.
> Although my knowledge of French is very limited, that's what I make > out of it too. So don't click the link and all should be fine.
Well, my good knowledge of french tells me that this is precisely the case, so you're not so limited after all… :)
Carel <ca...@xs4all.nl> writes: > Although my knowledge of French is very limited, that's what I make > out of it too. So don't click the link and all should be fine.
I'm fluent in French. It is a confirmation request.
It's also in HTML, twice (the text/plain part also contains the same HTML), and in French only, with no content in English. For >99% of the people on the Internet, it's undistinguishable from other spam they receive.
I would humbly suggest that mailing list confirmation requests should be text only, short and to the point, and include content in English even when the target group of the service speaks another language. The native language content can be left in, but the English content can't be left out. Just my HO.
-- Atro Tossavainen (Mr.) / The Institute of Biotechnology at Systems Analyst, Techno-Amish & / the University of Helsinki, Finland, +358-9-19158939 UNIX Dinosaur / employs me, but my opinions are my own. < URL : http : / / www . helsinki . fi / %7E atossava / > NO FILE ATTACHMENTS
Atro Tossavainen wrote: >> Although my knowledge of French is very limited, that's what I make >> out of it too. So don't click the link and all should be fine.
> I would humbly suggest that mailing list confirmation requests should > be text only, short and to the point, and include content in English > even when the target group of the service speaks another language. The > native language content can be left in, but the English content can't > be left out. Just my HO.
I'm 100% with you on this. But looking at the text of most English COI messages (and the percentage of people that doesn't fully understand the whole COI thing) I don't think it will happen soon.
On 03 Nov 2005 14:17:51 +0200, Atro Tossavainen <Atro.Tossavainen+n...@helsinki.finland.invalid> said:
> I would humbly suggest that mailing list confirmation requests > should be text only, short and to the point, and include content in > English even when the target group of the service speaks another > language. The native language content can be left in, but the > English content can't be left out. Just my HO.
Also, in order to be take seriously, all subscription confirmation requests should include the requesting IP address together with the date/time in UTC.
-- Alan J. Wylie http://www.wylie.me.uk/ "Perfection [in design] is achieved not when there is nothing left to add, but rather when there is nothing left to take away." -- Antoine de Saint-Exupery
> Also, in order to be take seriously, all subscription confirmation > requests should include the requesting IP address together with the > date/time in UTC.
Yes, obviously, seconded.
-- Atro Tossavainen (Mr.) / The Institute of Biotechnology at Systems Analyst, Techno-Amish & / the University of Helsinki, Finland, +358-9-19158939 UNIX Dinosaur / employs me, but my opinions are my own. < URL : http : / / www . helsinki . fi / %7E atossava / > NO FILE ATTACHMENTS
> On 03 Nov 2005 14:17:51 +0200, Atro Tossavainen <Atro.Tossavainen+n...@helsinki.finland.invalid> said:
> > I would humbly suggest that mailing list confirmation requests > > should be text only, short and to the point, and include content in > > English even when the target group of the service speaks another > > language. The native language content can be left in, but the > > English content can't be left out. Just my HO.
> Also, in order to be take seriously, all subscription confirmation > requests should include the requesting IP address together with the > date/time in UTC.
And to avoid false positive confirmations from phishing checkers and web archives of mail, the message should also contain a 'someone forged my address' link or a similar technique. That way, the bad confirmations can be disallowed nearly automatically.
Richard
-- To reply via email, make sure you don't enter the whirlpool on river left.
If it hadn't been for the bogusmx.rfc-ignorant.org eligibility (MX does not resolve, although it does look like a missing '.' at the end of the line in the zone file - mail.poplist.fr does resolve) I would have been inclined to suspect that poplist.com were innocent victims of a spanked spammer.
poplist.com. 38400 IN MX 10 mail.poplist.fr.poplist.com. mail.poplist.fr.poplist.com. (NXDOMAIN) mail.poplist.fr. 172800 IN A 217.174.197.12 poplist.com. 38400 IN NS ns2.axi.fr. poplist.com. 38400 IN NS ns1.axi.fr. ns1.axi.fr. 172800 IN A 217.174.197.100 ns2.axi.fr. 172800 IN A 217.174.197.101
If poplist.com were operating legitimate mailing lists, I would hope that the undeliverable MX would have been fixed a week later.
-- Rob Skedgell <rob+n...@nephelococcygia.demon.co.uk> From: address is a spamtrap, Reply-To: is valid. GnuPG/PGP: 7DA3 1579 C0DD 8748 C05A B984 E2A2 3234 D14B 6DD7
|
