Security Basics mailing list archives

Re: strange e-mail message


From: gjgowey () tmo blackberry net
Date: Wed, 7 Feb 2007 18:18:32 +0000

Looks like a broken spam bot trying to send messages.  That's just my guess.

Sent from my BlackBerry wireless handheld.  

-----Original Message-----
From: Santiago L Hasenclever <tuxpoweruser () gmail com>
Date: Tue, 06 Feb 2007 16:52:35 
To:security-basics () securityfocus com
Cc:cristian () subastasweb com
Subject: strange e-mail message

I've been receiving lots of this strange messages. I don't know if email 
is being sent by my postfix smtp server or if is remote and postfix is 
doing the local transport. It's a very rare message because it is full 
of variables even in the header.
can someone point me in the right direction?
Thanks in advance...

De:
"%FROM_NAME" <%FROM_EMAIL>
Fecha:
Tue, 6 Feb 2007 08:41:47 -0300 (ART)

Para:
undisclosed-recipients:;

X-Account-Key:
account6
Return-Path:
<mai9_2003 () yahoo com>
X-Original-To:
ventas () subastasweb com
Delivered-To:
ventas () subastasweb com
Received:
from subastasweb.net (localhost [127.0.0.1]) by subastasweb.net 
(Postfix) with ESMTP id 540BE99F1F for <ventas () subastasweb com>; Tue, 6 
Feb 2007 08:41:48 -0300 (ART)
Received:
from acasa-damu12a5u (unknown [86.106.115.247]) by subastasweb.net 
(Postfix) with ESMTP id BF06599F18 for <ventas () subastasweb com>; Tue, 6 
Feb 2007 08:41:47 -0300 (ART)
Received:
from 192.168.0.%RND_DIGIT (203-219-%DIGSTAT2-%STATDIG.%RND_FROM_DOMAIN 
[203.219.%DIGSTAT2.%STATDIG]) by mail%SINGSTAT.%RND_FROM_DOMAIN 
(envelope-from %FROM_EMAIL) (8.13.6/8.13.6) with SMTP id %STATWORD for 
<%TO_EMAIL>; %CURRENT_DATE_TIME
Message-ID:
<%RND_DIGIT[10].%STATWORD@mail%SINGSTAT.%RND_FROM_DOMAIN>
X-Virus-Scanned:
MMGDesigns security division


%TO_CC_DEFAULT_HANDLER
Subject: %SUBJECT
Sender: "%FROM_NAME" <%FROM_EMAIL>
Mime-Version: 1.0 
Content-Type: text/html
Date: %CURRENT_DATE_TIME

%MESSAGE_BODY






-- 
Atentamente.
Santiago Luis Quaglia hasenclever

Proud Linux user since Y2K.
Know Your Rights and Prepare to Defend Them.

Current thread: