odd message that has me wondering...

odd message that has me wondering...

am 28.06.2007 17:02:42 von sail0r

In my junk mail folder I found something that has me wondering...
You see, I have the address jaialai.technology@gmail.com forward to
mp3@rabbitfarm.com.Today I got some
otherwise ordinary piece of junk mail. Or so I thought. The body was
blank. The From line was
jaialai.technology+caf_=mp3=rabbitfarm.com@gmail.com
Curious! How would someone otherwise know that I had this forwarding
arrangment?(You know, assuming that they didn't use a time machine to
read this message first? :) )
Is this some interesting bit of spammer intelligence or just some
bizarre co-incidence?
What is going on?



The rest of the headers are as shown below:

Return-Path:
Delivered-To: rus20376@infolaunch.com
Received: from localhost (localhost [127.0.0.1])
by mail.infolaunch.com (Postfix) with ESMTP id 506A54848F
for ; Thu, 28 Jun 2007 08:13:08 -0500 (CDT)
X-Spam-Flag: YES
X-Spam-Score: 17.883
X-Spam-Level: *****************
X-Spam-Status: Yes, score=17.883 required=5 tests=[BAYES_20=-0.74,
EMPTY_MESSAGE=2.308, FORGED_RCVD_HELO=0.135, INVALID_MSGID=2.185,
MISSING_SUBJECT=1.816, MSGID_SHORT=3.1, NO_REAL_NAME=0.961,
RCVD_DOUBLE_IP_SPAM=3.69, SARE_HTML_NO_BODY=0.687, SPF_PASS=-0.001,
UNCLOSED_BRACKET=2.9, UNDISC_RECIPS=0.841, UNPARSEABLE_RELAY=0.001]
Received: from mail.infolaunch.com ([127.0.0.1])
by localhost (mail.infolaunch.com [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id 6e6p8tXYAatx for ;
Thu, 28 Jun 2007 08:13:06 -0500 (CDT)
Received: from nz-out-0506.google.com (nz-out-0506.google.com
[64.233.162.231])
by mail.infolaunch.com (Postfix) with ESMTP id F35CB48387
for ; Thu, 28 Jun 2007 08:13:05 -0500 (CDT)
Received: by nz-out-0506.google.com with SMTP id o1so102226nzf
for ; Thu, 28 Jun 2007 06:12:52 -0700
(PDT)
Received: by 10.114.66.2 with SMTP id o2mr1505495waa.1183036371854;
Thu, 28 Jun 2007 06:12:51 -0700 (PDT)
X-Forwarded-To: mp3@rabbitfarm.com
X-Forwarded-For: jaialai.technology@gmail.com mp3@rabbitfarm.com
Delivered-To: jaialai.technology@gmail.com
Received: by 10.115.48.11 with SMTP id a11cs300063wak;
Thu, 28 Jun 2007 06:12:50 -0700 (PDT)
Received: by 10.65.141.18 with SMTP id t18mr2939695qbn.1183036370440;
Thu, 28 Jun 2007 06:12:50 -0700 (PDT)
Received: from secure.charlestoncoffeeroasters.com
(bluekey2.bluekeyinc.com [64.34.180.166])
by mx.google.com with SMTP id 38si429365nza.
2007.06.28.06.12.11;
Thu, 28 Jun 2007 06:12:50 -0700 (PDT)
Received-SPF: neutral (google.com: 64.34.180.166 is neither permitted
nor denied by domain of ujnjsrsvamg@yahoo.com)
Date: Thu, 28 Jun 2007 06:12:50 -0700 (PDT)
Received: from 44.218.64.188 by 64.34.167.151; Sat, 30 Jun 2007
18:09:10 +0500
Message-ID: From: jaialai.technology+caf_=mp3=rabbitfarm.com@gmail.com
To: undisclosed-recipients:;
Subject: SPAM:

Re: odd message that has me wondering...

am 28.06.2007 17:53:22 von patrick

In news:1183042962.649204.94080@u2g2000hsc.googlegroups.com,
sail0r wrote:

> In my junk mail folder I found something that has me wondering...
> You see, I have the address jaialai.technology@gmail.com forward to
> mp3@rabbitfarm.com.Today I got some
> otherwise ordinary piece of junk mail. Or so I thought. The body was
> blank. The From line was
> jaialai.technology+caf_=mp3=rabbitfarm.com@gmail.com
> Curious! How would someone otherwise know that I had this forwarding
> arrangment

Google mail is a spam farm. Anything having to do with gmail.com is a
license to abuse your personal information, if you had bothered to read the
User Agreement.

Re: odd message that has me wondering...

am 28.06.2007 18:39:22 von sail0r

On Jun 28, 11:53 am, "Patrick" wrote:
> Innews:1183042962.649204.94080@u2g2000hsc.googlegroups.com,
>
> sail0r wrote:
> > In my junk mail folder I found something that has me wondering...
> > You see, I have the address jaialai.technol...@gmail.com forward to
> > m...@rabbitfarm.com.Today I got some
> > otherwise ordinary piece of junk mail. Or so I thought. The body was
> > blank. The From line was
> > jaialai.technology+caf_=mp3=rabbitfarm....@gmail.com
> > Curious! How would someone otherwise know that I had this forwarding
> > arrangment
>
> Google mail is a spam farm. Anything having to do with gmail.com is a
> license to abuse your personal information, if you had bothered to read the
> User Agreement.

Here is a copy* http://www.chat11.com/Google_GMail_License_Agreement
I think that you have publicly betrayed your low reading comprehension
ability if you believe that gmail is
a "spam farm" by reading that license agreement.
Of course, please feel free to respond with some ridiculous hand
waving about your interpretation of section such and such!
*I know it is not a direct google link. I don't feel like taking the
additional steps to circumvent my employer's
web filters as the moment. Yeah, I know it sucks. Yes, they pay me
enough to make tolerating the asinine rules worthwhile. ;)

Re: odd message that has me wondering...

am 28.06.2007 23:07:32 von Alan Clifford

On Thu, 28 Jun 2007, sail0r wrote:

s> In my junk mail folder I found something that has me wondering...
s> You see, I have the address jaialai.technology@gmail.com forward to
s> mp3@rabbitfarm.com.Today I got some
s> otherwise ordinary piece of junk mail. Or so I thought. The body was
s> blank. The From line was
s> jaialai.technology+caf_=mp3=rabbitfarm.com@gmail.com
s> Curious! How would someone otherwise know that I had this forwarding
s> arrangment?(You know, assuming that they didn't use a time machine to
s> read this message first? :) )
s> Is this some interesting bit of spammer intelligence or just some
s> bizarre co-incidence?
s> What is going on?
s>
s>
s>
s> The rest of the headers are as shown below:
s>
s> Message-ID: s> From: jaialai.technology+caf_=mp3=rabbitfarm.com@gmail.com
s> To: undisclosed-recipients:;
s> Subject: SPAM:
s>
s>

I'd guess your mail client is messing up the headers as the previous
header, message-id:, is incomplete.

--
Alan

( If replying by mail, please note that all "sardines" are canned.
However, unless this a very old message, a "tuna" will swim right
through. )

Re: odd message that has me wondering...

am 29.06.2007 15:24:18 von patrick

In news:1183048762.040830.87150@n2g2000hse.googlegroups.com,
sail0r wrote:

> I think that you have publicly betrayed your low reading comprehension
> ability if you believe that gmail is a "spam farm" by reading that license
> agreement.

gmail is a spam farm ipso facto and across the board by the simple virtue of
being one, User Agreement notwithstanding. The fact that they say what they
say, and _always_ fail to respond to any complaints of abuse proves the
point. Even Usenet is a much cleaner, more spam-free place when one filters
messages with the header "^From:.*@gmail.com"

Re: odd message that has me wondering...

am 29.06.2007 16:21:09 von Steve Baker

On Thu, 28 Jun 2007 22:07:32 +0100, Alan Clifford
wrote:

>On Thu, 28 Jun 2007, sail0r wrote:
>
>s> In my junk mail folder I found something that has me wondering...
>s> You see, I have the address jaialai.technology@gmail.com forward to
>s> mp3@rabbitfarm.com.Today I got some
>s> otherwise ordinary piece of junk mail. Or so I thought. The body was
>s> blank. The From line was
>s> jaialai.technology+caf_=mp3=rabbitfarm.com@gmail.com
>s> Curious! How would someone otherwise know that I had this forwarding
>s> arrangment?(You know, assuming that they didn't use a time machine to
>s> read this message first? :) )
>s> Is this some interesting bit of spammer intelligence or just some
>s> bizarre co-incidence?
>s> What is going on?
>s>
>s>
>s>
>s> The rest of the headers are as shown below:
>s>
>s> Message-ID: >s> From: jaialai.technology+caf_=mp3=rabbitfarm.com@gmail.com
>s> To: undisclosed-recipients:;
>s> Subject: SPAM:
>s>
>s>
>
>I'd guess your mail client is messing up the headers as the previous
>header, message-id:, is incomplete.

A Message-ID like that with an empty body is the sign of some broken
spamware that was in regular use a few years ago. I'd say that the
original spam ended right at the end of that truncated Message-ID
line, so there was no Subject, From or To line in the original email.

Most likely, Google rewrote the Return-Path to what you see, and the
receiving server created a From line based on the Return-Path.

--
Steve Baker

Re: odd message that has me wondering...

am 30.07.2007 21:20:55 von bonomi

In article ,
Alan Clifford wrote:
>On Thu, 28 Jun 2007, sail0r wrote:
>
>s> In my junk mail folder I found something that has me wondering...
>s> You see, I have the address jaialai.technology@gmail.com forward to
>s> mp3@rabbitfarm.com.Today I got some
>s> otherwise ordinary piece of junk mail. Or so I thought. The body was
>s> blank. The From line was
>s> jaialai.technology+caf_=mp3=rabbitfarm.com@gmail.com
>s> Curious! How would someone otherwise know that I had this forwarding
>s> arrangment?(You know, assuming that they didn't use a time machine to
>s> read this message first? :) )
>s> Is this some interesting bit of spammer intelligence or just some
>s> bizarre co-incidence?
>s> What is going on?
>s>
>s>
>s>
>s> The rest of the headers are as shown below:
>s>
>s> Message-ID: >s> From: jaialai.technology+caf_=mp3=rabbitfarm.com@gmail.com
>s> To: undisclosed-recipients:;
>s> Subject: SPAM:
>s>
>s>
>
>I'd guess your mail client is messing up the headers as the previous
>header, message-id:, is incomplete.

Your guess is 100% wrong.

That message ID is an identifying sign of some specific screwed-up spammerware.
I've seen that -exact- Message-ID on messages for at least 3 years.