That's funny, in the odd sense. I've seen a few, very few, that were truly blank but wrote them off to misfires by spammers or perhaps the result of some kiddy-script virus. Frankly, I still don't have a better explanation unless there's some mechanism I don't know about to confirm receipt of an email.
Bill > From: Henri Yandell <bayard at generationjava.com> > Reply-To: macgroup at erdos.math.louisville.edu > Date: Sun, 1 Aug 2004 12:39:57 -0400 (EDT) > To: macgroup at erdos.math.louisville.edu > Subject: Re: MacGroup: Fwd: > > > In this case it really is empty. Turns out I lied, my personal account has > been getting them, but SpamAssassin has happily been catching them. > > ------------=_410B9BF5.46402D40------------ > Content-Type: message/rfc822; x-spam-type=original > Content-Description: original message before SpamAssassin > Content-Disposition: inline > Content-Transfer-Encoding: 8bit > > Return-Path: <rpsne at goldmail.ru> > X-Original-To: henri at yandell.org > Delivered-To: hen at flamefew.net > Received: from 68-189-63-62.ca.charter.com > (68-189-63-62.ca.charter.com [68.189.63.62]) > by orinoco.flamefew.net (Postfix on Linux (i386)) with SMTP id 3D9963D116 > for <henri at yandell.org>; Sat, 31 Jul 2004 09:17:41 -0400 (EDT) > X-Message-Info: H[1 > Message-Id: <20040731131741.3D9963D116 at orinoco.flamefew.net> > Date: Sat, 31 Jul 2004 09:17:41 -0400 (EDT) > From: rpsne at goldmail.ru > To: undisclosed-recipients:; > > > ------------=_410B9BF5.46402D40-------------- > > Very bizarre. Possibly it's just checking to see if the email address > accepts the email, and therefore probably exists. Much the same as Bill's > HREF below, but not tied to a mail client that is showing images. However, > many mail servers DROP rather than REJECT, so it's only useful if the mail > server is rejecting fred at yandell.org but allow hen at yandell.org. (Must > check if mine is dropping). > > Hen > > On Sat, 31 Jul 2004, Bill Holt wrote: > >> You might want to look at the source code. Spammers will sometimes send >> lots of seemingly blank messages, but instead of being truly blank, they'll >> contain an html code snipit that one would normally expect to display a >> graphic. >> >> For example, it might read: >> >> HREF="http://www.spammersdomain.com/D845TF5O0.jpg" >> >> which is actually a link to nothing. However, when your email program >> attempts to fetch and render the picture that's expected, the spammer's >> server log records an error and the name of the file that was sought. The >> reason the spammer does this is that he's assigned a unique code to each >> email address in his list (in the above that name is "D845TF5O0") so that >> when your email program attempts to render the non-existent image, he >> receives positive confirmation that your email address is valid and active. >> Then, of course, he sells your address along with the others that he's >> tested as a list of confirmed addresses to other spammers. >> >> That's one reason that spam control at the isp level is more effective than >> spam control on your computer ... it often prevents these address >> validations. >> >> Bill Holt >> >>> From: "George H. Yankey" <jeffco13 at bellsouth.net> >>> Reply-To: macgroup at erdos.math.louisville.edu >>> Date: Sat, 31 Jul 2004 13:59:53 -0400 >>> To: macgroup at erdos.math.louisville.edu >>> Subject: Re: MacGroup: Fwd: >>> >>> Hen, That is what happens to me also. No sender and no address. >>> George >>> On Saturday, July 31, 2004, at 01:02 PM, Henri Yandell wrote: >>> >>>> >>>> I've received a few of these at work, though oddly not on my noisier >>>> spampot of a personal email. >>>> >>>> They appear to be completely empty to MS Outlook, no subject, no sender >>>> etc. >>>> >>>> Hen >>>> >>>> On Sat, 31 Jul 2004, Mike Watkins wrote: >>>> >>>>> George, >>>>> What Message? This is all I got in your E-mail. >>>>> Mike >>>>> >>>>> >>>>> On Saturday, July 31, 2004, at 08:19 AM, George H. Yankey wrote: >>>>> >>>>>> I keep getting the following message in my E-mail. What does it >>>>>> mean? Why does it show up two or three times a week? >>>>>> >>>>>> George Yankey >>>>>> >>>>>> Begin forwarded message: >>>>>> >>>>>>> Date: Sat Jul 31, 2004 7:15:10 AM US/Eastern >>>>>>> >>>>>> >>>>>> >>>>>> >>>>>> | The next meeting of the Louisville Computer Society will >>>>>> | be July 27. The LCS Web page is <http://www.kymac.org>. >>>>>> | List posting address: <mailto:macgroup at erdos.math.louisville.edu> >>>>>> | List Web page: <http://erdos.math.louisville.edu/macgroup> >>>>>> >>>>> >>>>> >>>>> >>>>> | The next meeting of the Louisville Computer Society will >>>>> | be July 27. The LCS Web page is <http://www.kymac.org>. >>>>> | List posting address: <mailto:macgroup at erdos.math.louisville.edu> >>>>> | List Web page: <http://erdos.math.louisville.edu/macgroup> >>>>> >>>> >>>> >>>> >>>> | The next meeting of the Louisville Computer Society will >>>> | be July 27. The LCS Web page is <http://www.kymac.org>. >>>> | List posting address: <mailto:macgroup at erdos.math.louisville.edu> >>>> | List Web page: <http://erdos.math.louisville.edu/macgroup> >>>> >>> >>> >>> >>> | The next meeting of the Louisville Computer Society will >>> | be July 27. The LCS Web page is <http://www.kymac.org>. >>> | List posting address: <mailto:macgroup at erdos.math.louisville.edu> >>> | List Web page: <http://erdos.math.louisville.edu/macgroup> >>> >> >> >> >> | The next meeting of the Louisville Computer Society will >> | be July 27. The LCS Web page is <http://www.kymac.org>. >> | List posting address: <mailto:macgroup at erdos.math.louisville.edu> >> | List Web page: <http://erdos.math.louisville.edu/macgroup> >> > > > > | The next meeting of the Louisville Computer Society will > | be July 27. The LCS Web page is <http://www.kymac.org>. > | List posting address: <mailto:macgroup at erdos.math.louisville.edu> > | List Web page: <http://erdos.math.louisville.edu/macgroup> > | The next meeting of the Louisville Computer Society will | be July 27. The LCS Web page is <http://www.kymac.org>. | List posting address: <mailto:macgroup at erdos.math.louisville.edu> | List Web page: <http://erdos.math.louisville.edu/macgroup>
