Dear list;
After years of sending messages to this list without a hitch, I just
received a peculiar message purporting to be from <powermail-
[EMAIL PROTECTED]>. It asks me to reply and type in a 'MailSword code'.
I seem to recall this causing irritation to some on the list a few days
ago when it seemed to originate from Marc Perroulaz (Marlyse, I think you
issued the chastisement, and quite rightly so). But this one seems to
have come from CTM themselves which makes me wonder what is going on
Examination of the full headers of the email do mention Perroulaz, but my
knowledge of email headers is such that I don't know what to infer from
this fact. Anyone have any ideas?
I'm attaching the whole message, with headers, at the end of this one,
and I just hope that I'm not letting any security info slip in the
process (see my previous statement re. my sparse understanding of such
things).
Any comments welcome. I'm not replying to the suspicious message at this
point until I know more (ie. whether MailSword is a real security device
used by CTM or whether it's a scam).
Thanks;
Rick
Message follows:
. . . . . . . . . .
------------------ RFC822 Header Follows ------------------
Return-Path: <[EMAIL PROTECTED]>
X-Sieve: cmu-sieve 2.0
Return-Path: <[EMAIL PROTECTED]>
Received: from mxhost-1.vi.net (mxhost-1.vi.net [212.78.66.188])
by pop-1-01.mail.vi.net (Postfix) with ESMTP id 164C680095
for <[EMAIL PROTECTED]>; Sun, 18 Jul 2004 19:47:37 +0100 (BST)
Received: from srv94-254.ip-tech.ch (unknown [195.129.94.254])
by mxhost-1.vi.net (Postfix) with SMTP id 85D571445D9
for <[EMAIL PROTECTED]>; Sun, 18 Jul 2004 20:56:42 +0100 (BST),
Found to be clean
Received: (qmail 6555 invoked by uid 516); 18 Jul 2004 19:56:36 -0000
Received: from [EMAIL PROTECTED] by srv94-254 by uid 411 with
qmail-scanner-1.22
(clamdscan: 0.71. Clear:RC:1(10.10.1.108):.
Processed in 0.048089 secs); 18 Jul 2004 19:56:36 -0000
Received: from unknown (HELO srv2-8.ip-tech.ch) (10.10.1.108)
by 0 with SMTP; 18 Jul 2004 19:56:35 -0000
Received: (qmail 26357 invoked by uid 517); 18 Jul 2004 19:52:22 -0000
Received: from [EMAIL PROTECTED] by srv1-108 by uid 408 with
qmail-scanner-1.22
(clamdscan: 0.70. spamassassin: 2.63. Clear:RC:0(82.146.198.18):SA:
0(0.3/5.0):.
Processed in 0.691472 secs); 18 Jul 2004 19:52:22 -0000
Received: from unknown (HELO out.websud.ch)
([EMAIL PROTECTED]@82.146.198.18)
by srv2-8.ip-tech.ch with SMTP; 18 Jul 2004 19:52:18 -0000
Message-Id: <[EMAIL PROTECTED]>
X-Sender: [EMAIL PROTECTED]
X-Mailer: SWAT SMTP Server 1.2
Date: Sun, 18 Jul 2004 21:56:33 -429496729500
To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
Subject: Re: Receiving PDFs
X-MailSword_Header: 161|1|0|0
X-MailSword_SecureID: 549D0435F8724ED47F83638E04140DB6EA19
X-MailSword_Verify: [EMAIL PROTECTED]
X-MailSword_Local_Message_Id: ###<A672FD27>###
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on srv1-108
X-Spam-Status: No, hits=0.3 required=5.0 tests=NO_REAL_NAME autolearn=no
version=2.63
X-Spam-Level:
Virtual_Internet-From: [EMAIL PROTECTED]
-----------------------------------------------------------
Re: Your email to [EMAIL PROTECTED]
-------------------------------------------------------------
*** Attention ! ***
Pour que le destinataire de votre email ([EMAIL PROTECTED]) soit
belle et bien avertit de celui-ci:
Veuillez confirmer par retour d'email (Bouton "Répondre") en indiquant
sur la première ligne le code ci-dessous.
Votre réponse devra être faite dans les 15 jours, sans quoi votre
correspondant n'aura jamais accès à votre message.
-------------------------------------------------------------
*** Attention! ***
In order to complete delivery of your email to [EMAIL PROTECTED]
please reply on this message by typing the following passcode
on the first line.
Please reply within 15 days to avoid automatic deletion
of your original email. Keep this text in your reply.
-------------------------------------------------------------
MailSword_Code:
0828
------ MailSword 1.61 ------
MailSword_Verify: [EMAIL PROTECTED]
MailSword_Original_Message_Id: 'dB"!$&0!!>IA"!Zh*!!
MailSword_Local_Message_Id: ###<A672FD27>###
------ Original Message
Fri, 16 Jul 2004 22:07:37 +0100
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: Receiving PDFs
............
------ End of Original Message
Delivery of the above message is on hold pending your response.
Simply by typing the correct passcode and by replying on this
notification you'll complete the delivery of your original email.
This step is required to avoid unwanted mass emails.
This automatic response is generated by the MailSword.
MailSword software provides free protection for email users
worldwide.
______________
Protected by MailSword. "Spam Ends Here"
FREE download at: http://www.mailsword.com
