Re: Returned mail: Data format error

[Guy Harris <gharris () sonic net>]

Bogus - the oldest Received: line is

        Received: from wireshark.org (unknown [64.124.12.162])
        by rivoli.gatineau.credil.org (Postfix) with ESMTP id 7C05A9EC
        for <tcpdump-workers () lists tcpdump org>;
         Sun, 17 Nov 2024 14:39:06 -0500 (EST)

and

        $ host 64.124.12.162
        162.12.124.64.in-addr.arpa domain name pointer 64.124.12.162.IDIA-144793-004-ZYO.zip.zayo.com.

(and Gerald's messages always have his name).

Not sure what the deal is here.

> On Nov 18, 2024, at 1:31 AM, gerald () wireshark org wrote:
>
> Dear user of lists.tcpdump.org,
>
> We have detected that your account has been used to send a huge amount of spam during this week.
> Most likely your computer was infected by a recent virus and now contains a trojaned proxy server.
>
> Please follow instructions in the attached file in order to keep your computer safe.
>
> Best wishes,
> The lists.tcpdump.org team.
>
> _______________________________________________
> tcpdump-workers mailing list -- tcpdump-workers () lists tcpdump org
> To unsubscribe send an email to tcpdump-workers-leave () lists tcpdump org
> %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s

_______________________________________________
tcpdump-workers mailing list -- tcpdump-workers () lists tcpdump org
To unsubscribe send an email to tcpdump-workers-leave () lists tcpdump org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s