Receivend an e-mail from dari about account activation

gietl · Novice Joined: Apr 28, 2003 Posts: 20 Location: Denver, CO

I already have an account and the e-mail was for a username that is not mine, here are the contents of the e-mail with the activation key romoved:

Quote: ›
Hello,

The account owned by "Classe" has been deactivated or newly created, you should check the details of this user (if required) and activate it using the following link:

http://test.nukedgallery.net/profile.ph ... xxxxxxxxxx

-- Thanks, The Management

AdBot

dari

When was the account created, and when did you receive the second activation email?
_________________

zounds · Beginner Joined: Jun 25, 2003 Posts: 1

gietl wrote: › I already have an account and the e-mail was for a username that is not mine, here are the contents of the e-mail with the activation key romoved:

Quote: ›
Hello,

The account owned by "Classe" has been deactivated or newly created, you should check the details of this user (if required) and activate it using the following link:

http://test.nukedgallery.net/profile.ph ... xxxxxxxxxx

-- Thanks, The Management

I received the exact same mail - designed to bring all the lurkers out? hehe Smile

kinda curious as to why I would receive a mail destined for someone else tho' - if someone tried to register using my email addy wouldn't it say this mail address is already registered? altho' I see it's for registration on test.nukedgallery.net - don't think i'll bother trying the activation link.

Are the email addresses public anywhere on this forum? I just checked and it's not in my profile...

dari

no, the email addresses are not public, and the site it was registered at is the test site (test.nukedgallery.net). i have no idea who/how/why someone would use your address. the accounts have been deleted.
_________________

tierns · Beginner Joined: Jul 25, 2003 Posts: 1

dari wrote: › no, the email addresses are not public, and the site it was registered at is the test site (test.nukedgallery.net). i have no idea who/how/why someone would use your address. the accounts have been deleted.

I got the same message. Although, I'm more of a lurker Smile

Here's my message header (with x's through sensitive info on my end)

Return-path: <nobody@audi.websitewelcome.com>
Envelope-to: xxxx
Delivery-date: Sat, 09 Apr 2005 09:22:17 -0700
Received: from xxxxxby xxxx with local-bsmtp (Exim 4.43)
id 1DKIiv-0006Cx-5b
forxxxxx; Sat, 09 Apr 2005 09:22:17 -0700
Received: from [67.19.210.130] (helo=audi.websitewelcome.com)
by xxxxx with esmtps (TLSv1:DES-CBC3-SHA:168)
(Exim 4.43)
id 1DKIiu-0006Ct-V2
for xxxxx; Sat, 09 Apr 2005 09:22:17 -0700
Received: from nobody by audi.websitewelcome.com with local (Exim 4.44)
id 1DKIiq-0004VF-5G
for xxxx; Sat, 09 Apr 2005 11:22:12 -0500
To: xxxxx
Subject: New user account
Reply-to: dari@nukedgallery.net
From: dari@nukedgallery.net
Message-ID: <69717be198cf31dacea6caac3f794fc9@test.nukedgallery.net>
MIME-Version: 1.0
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 8bit
Date: Sat, 9 Apr 2005 11:22:12 -0500
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: PHP
X-MimeOLE: Produced By phpBB2
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - audi.websitewelcome.com
X-AntiAbuse: Original Domain - xxxx
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - audi.websitewelcome.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: No, score=0.2 required=8.0 tests=NO_REAL_NAME autolearn=no
version=3.0.2
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on
xxxxxx
X-Spam-Level:

dari

it seems that someone bypassed the sign up page and was creating accounts for everyone. i've disabled the test boards, and no one should get any more messages.
_________________

gietl · Novice Joined: Apr 28, 2003 Posts: 20 Location: Denver, CO

I just got another one this morning.

dari

what's the timestamp. the entire test site has been disabled as of about 8AM EST (USA) today. the userdb was hacked and the person is sending out emails for fake registrations.
_________________

gietl · Novice Joined: Apr 28, 2003 Posts: 20 Location: Denver, CO

The time stamp was:

Fri, 15 Apr 2005 08:28:54 -0400