> > > So, all things considered, am I: > > 1. looking at the output from a broken mail worm, or; > 2. dealing with a second- or third-rate spammer who just doesn't > know what the heck he's spewing out, or; > 3. receiving an attempted spam mail through a broken web->mail > gateway, or; > 4. none of the above? > > > One possible addition to the list is a spammer trying to verify (I have gotten many messages from spammers selling "verified" e-mail addresses) that you are a legit address. > arroat_private and inform them of the time the error occurred, > > I went to the arro.ru page, and from the looks I would allow the possibility that this was an attempt to verify it, and more oddly on the front page it has a link with the title "my spam CANCLED" pointing to a (seemingly) broken page. John Washington ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Mon Jan 20 2003 - 23:00:53 PST