Subject: [Spridgets] Fwd: confirm “long string of numbers”

From: Larry Macy via Spridgets <[email-masked]>
Date: Tue, 3 Dec 2019 16:34:58 -0500

--===============3402127856035571106==
Content-Transfer-Encoding: 7bit

--Apple-Mail-3100333F-718C-47F3-BFBC-10E839D79094
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

I got this at 6 am. I didn=E2=80=99t request removal?

Not my IP, I don=E2=80=99t think.=20

Mark, any idea what happened?

Larry

--

Larry B. Macy, Ph.D.

Use two fingers, it sends a better message - Peace

Sent from my Magical iPad

Begin forwarded message:

> From: [email-masked]
> Date: December 3, 2019 at 6:11:07 AM EST
> To: [email-masked]
> Subject: confirm 8ddc.....
> Reply-To: [email-masked]
>=20
> =EF=BB=BFMailing list removal confirmation notice for mailing list Spridge=
ts
>=20
> We have received a request from 166.137.14.66 for the removal of your
> email address, "[email-masked]" from the [email-masked]
> mailing list.  To confirm that you want to be removed from this
> mailing list, simply reply to this message, keeping the Subject:
> header intact.  Or visit this web page:
>=20
>    http://autox.team.net/mailman/confirm/spridgets/8ddc1b71a90619bfd70bbbe=
9acc4a218679efb46
>=20
>=20
> Or include the following line -- and only the following line -- in a
> message to [email-masked]:
>=20
>    confirm 8ddc1b71a90619bfd70bbbe9acc4a218679efb46
>=20
> Note that simply sending a `reply' to this message should work from
> most mail readers, since that usually leaves the Subject: line in the
> right form (additional "Re:" text in the Subject: is okay).
>=20
> If you do not wish to be removed from this list, please simply
> disregard this message.  If you think you are being maliciously
> removed from the list, or have any other questions, send them to
> [email-masked].

--Apple-Mail-3100333F-718C-47F3-BFBC-10E839D79094
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto">I got this at 6 am. I didn=E2=80=99t reques=
t removal?<div><br></div><div>Not my IP, I don=E2=80=99t think.&nbsp;<br><di=
v><br></div><div>Mark, any idea what happened?</div><div><br></div><div>Larr=
y<br><br><div dir=3D"ltr"><div>--</div><div><br></div><div>Larry B. Macy, Ph=
.D.</div><div><span class=3D"Apple-style-span" style=3D"-webkit-tap-highligh=
t-color: rgba(26, 26, 26, 0.296875); -webkit-composition-fill-color: rgba(17=
5, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0=
.230469); "><br></span></div><div><span style=3D"-webkit-tap-highlight-color=
: rgba(26, 26, 26, 0.294118); -webkit-composition-fill-color: rgba(175, 192,=
 227, 0.231373);">Use two fingers, it sends a better message - Peace</span><=
/div><div><br></div>Sent from my Magical iPad</div><div dir=3D"ltr"><br>Begi=
n forwarded message:<br><br></div><blockquote type=3D"cite"><div dir=3D"ltr"=
><b>From:</b> [email-masked]<br><b>Date:</b> December 3, 2=
019 at 6:11:07 AM EST<br><b>To:</b> [email-masked]<br><b>Subject:</b> <b>conf=
irm 8ddc.....</b><br><b>Reply-To:</b> [email-masked]<br><b=
r></div></blockquote><blockquote type=3D"cite"><div dir=3D"ltr">=EF=BB=BF<sp=
an>Mailing list removal confirmation notice for mailing list Spridgets</span=
><br><span></span><br><span>We have received a request from 166.137.14.66 fo=
r the removal of your</span><br><span>email address, "[email-masked]" from th=
e [email-masked]</span><br><span>mailing list. &nbsp;To confirm th=
at you want to be removed from this</span><br><span>mailing list, simply rep=
ly to this message, keeping the Subject:</span><br><span>header intact. &nbs=
p;Or visit this web page:</span><br><span></span><br><span> &nbsp;&nbsp;&nbs=
p;http://autox.team.net/mailman/confirm/spridgets/8ddc1b71a90619bfd70bbbe9ac=
c4a218679efb46</span><br><span></span><br><span></span><br><span>Or include t=
he following line -- and only the following line -- in a</span><br><span>mes=
sage to [email-masked]:</span><br><span></span><br><span> &=
nbsp;&nbsp;&nbsp;confirm 8ddc1b71a90619bfd70bbbe9acc4a218679efb46</span><br>=
<span></span><br><span>Note that simply sending a `reply' to this message sh=
ould work from</span><br><span>most mail readers, since that usually leaves t=
he Subject: line in the</span><br><span>right form (additional "Re:" text in=
 the Subject: is okay).</span><br><span></span><br><span>If you do not wish t=
o be removed from this list, please simply</span><br><span>disregard this me=
ssage. &nbsp;If you think you are being maliciously</span><br><span>removed f=
rom the list, or have any other questions, send them to</span><br><span>spri=
[email-masked].</span><br></div></blockquote></div></div></body>=
</html>=

--Apple-Mail-3100333F-718C-47F3-BFBC-10E839D79094--

--===============3402127856035571106==
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------

[email-masked]

Archive: http://www.team.net/pipermail/spridgets  http://autox.team.net/archive

--===============3402127856035571106==--

---

From: Mark J Bradakis via Spridgets <[email-masked]>
Date: Wed, 4 Dec 2019 02:59:43 -0700

On 12/3/19 2:34 PM, Larry Macy via Spridgets wrote:
> I got this at 6 am. I didn’t request removal?
>
> Not my IP, I don’t think.
>

It happens often.  Basically people don't put the few extra seconds of 
editing effort into their replies.  Those on the real time list get 
messages with a personalized "Unsubscribe/Manage" URL at the very bottom 
of each message.  People reply to messages and do not edit out the 
trailer lines, so these personalized URLs get sent out to everyone on 
the list, and through various mechanisms become widely available to the 
public.  Scumbag hackers who have nothing better to do than annoy folks 
click on these links, but it doesn't accomplish anything as there is a 
further step involved, which is sending an email to the address for 
confirmation.

Annoying but harmless.

mjb.

------------------------

[email-masked]

Donate: http://www.team.net/donate.html
Suggested annual donation: $12.75

Unsubscribe/Manage: http://autox.team.net/mailman/options/spridgets/[email-masked]

---

From: Larry Macy via Spridgets <[email-masked]>
Date: Wed, 4 Dec 2019 08:43:10 -0500

Thanks Mark. 

Figured it was something like that. 

--

Larry B. Macy, Ph.D.

> On Dec 4, 2019, at 4:59 AM, Mark J Bradakis via Spridgets <[email-masked]> wrote:
> 
> It happens often.  Basically people don't put the few extra seconds of editing effort into their replies.  Those on the real time list get messages with a personalized "Unsubscribe/Manage" URL at the very bottom of each message.  People reply to messages and do not edit out the trailer lines, so these personalized URLs get sent out to everyone on the list, and through various mechanisms become widely available to the public.  Scumbag hackers who have nothing better to do than annoy folks click on these links, but it doesn't accomplish anything as there is a further step involved, which is sending an email to the address for confirmation.
> 
> Annoying but harmless.
> 
> mjb.
> 
> 
> ------------------------
> 
> [email-masked]
> 

------------------------

[email-masked]