It was discovered by a user who passed the info on to staff. I suggest changing your pass as soon as possible.
If you have any issues with this, please email me at shaara_song@(nospam)yahoo.com.
Got the preceeding e-mail in my message box, and so I immediately checked to see if I had any 'recent' posts on the forum that weren't attributed to me. Seemed weird to have a message like this, and then a request to contact someone personally via a yahoo account.
Can anyone confirm or deny the validity of this? Or maybe there is a possibility someone got my password and could use it maliciously?
I received the same. Seems like a really weak phishing attempt, since it actually tells you to change your password and only contact the addy given with problems.
Full e-mail source in the cut (with my own info redacted):
From - Thu Oct 02 00:29:53 2008
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Delivered-To: <redacted>@gmail.com
Received: by 10.65.154.13 with SMTP id g13cs28987qbo;
Wed, 1 Oct 2008 21:27:47 -0700 (PDT)
Received: by 10.90.36.16 with SMTP id j16mr10045273agj.87.1222921667038;
Wed, 01 Oct 2008 21:27:47 -0700 (PDT)
Return-Path: <nobody@cpanel2.guildcafe.com>
Received: from list.publishingconcepts.com (list1.publishingconcepts.com [12.156.3.136])
by mx.google.com with ESMTP id 1si1114537agb.20.2008.10.01.21.27.46;
Wed, 01 Oct 2008 21:27:46 -0700 (PDT)
Received-SPF: neutral (google.com: 12.156.3.136 is neither permitted nor denied by best guess record for domain of [EMAIL="nobody@cpanel2.guildcafe.com"]nobody@cpanel2.guildcafe.com[/EMAIL]) client-ip=12.156.3.136;
Authentication-Results: mx.google.com; spf=neutral (google.com: 12.156.3.136 is neither permitted nor denied by best guess record for domain of [EMAIL="nobody@cpanel2.guildcafe.com"]nobody@cpanel2.guildcafe.com[/EMAIL]) smtp.mail=nobody@cpanel2.guildcafe.com
Received: from smtp02.publishingconcepts.com (10.10.0.50) by list.publishingconcepts.com (LSMTP for Windows NT v1.1b) with SMTP id <1.001A7AEE@list.publishingconcepts.com>; Wed, 1 Oct 2008 23:28:23 -0500
X-Resent-To-Address: <redacted>@gmail.com
X-Resent-From-Address: <redacted>
X-Resent-Message: <B0216092088@smtp02.publishingconcepts.com>
X-Resent-At: Wed, 1 Oct 2008 23:28:23 -0500
Received: from barracuda2.publishingconcepts.com (unverified [10.11.0.52]) by smtp02.publishingconcepts.com
(Rockliffe SMTPRA 5.2.5) with ESMTP id <B0216092087@smtp02.publishingconcepts.com> for <<redacted>>;
Wed, 1 Oct 2008 23:28:23 -0500
X-ASG-Debug-ID: 1222921665-315e016b0000-RTCfrn
X-Barracuda-URL: http://10.11.0.52:80/cgi-bin/mark.cgi
X-Barracuda-Connect: unknown[4.53.50.42]
X-Barracuda-Start-Time: 1222921665
Received: from cpanel2.guildcafe.com (unknown [4.53.50.42])
by barracuda2.publishingconcepts.com (Spam Firewall) with ESMTP id 1ACF4F4D483
for <<redacted>>; Wed, 1 Oct 2008 23:27:45 -0500 (CDT)
Received: from nobody by cpanel2.guildcafe.com with local (Exim 4.69)
(envelope-from <nobody@cpanel2.guildcafe.com>)
id 1KlFmz-00075X-53
for <redacted>; Thu, 02 Oct 2008 00:27:45 -0400
To: <redacted>
X-ASG-Orig-Subj: Passwords
Subject: Passwords
From: "mtgsadmin@gmail.com" <mtgsadmin@gmail.com>
Message-ID: <200810020445.caef76102666@forums.mtgsalvation.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-Mailer: vBulletin Mail via PHP
Date: Thu, 02 Oct 2008 00:27:45 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cpanel2.guildcafe.com
X-AntiAbuse: Original Domain - <redacted>
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - cpanel2.guildcafe.com
X-Barracuda-Virus-Scanned: by PCI Barracuda 2 at publishingconcepts.com
X-Barracuda-Spam-Score: 0.00
X-Barracuda-Spam-Status: No, SCORE=0.00 using per-user scores of TAG_LEVEL=5.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=5.0 tests=
X-Barracuda-Spam-Report: Code version 3.1, rules version 3.1.13824
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------------------------
Your passwords may have been compromised.
It was discovered by a user who passed the info on to staff. I suggest changing your pass as soon as possible.
If you have any issues with this, please email me at [EMAIL="shaara_song@%28nospam%29yahoo.com"]shaara_song@(nospam)yahoo.com[/EMAIL].
btw the title for the announcement "ATTENTION" is a horrible title. it should be like, the date, or words including "email", "passwords" or any combination.
Private Mod Note
():
Rollback Post to RevisionRollBack
Old MTGSalvation’s staff dared to dream so the community could live on. Support the new MTGNexus. Follow me on instagram @TheMTGWord
What do you mean your account "isn't working?" You can't log in? Are you sure you're entering your new password correctly?
And what e-mail are you referring to going to your other account? The blanket "your password may be compromised" email from AoK? The "Help, I forgot my password" email?
And if it went to your gmail account, then - apparently - you used that account for something on this site, obviously. Or you're redirecting mail there from whatever account you did use.
"Hello! I've come to serenade you. I can't play guitar. I can't play this accordion either, but I thought it'd be less obvious."
Dylan Moran, Black Books
apparently the person whose account mtgsadmin at gmail dot com belongs to is one of the admins of this site, I contacted my favorite admin and she (I am sure you know which one that is now) fessed up to being the person who sent that mass email.
Private Mod Note
():
Rollback Post to RevisionRollBack
"As the size of an explosion increases, the number of social situations it is incapable of solving approaches zero." -- Varsuvius, Order of the Stick
This thread will probably make no sense if one were to read it for continuity.
It will serve as a bin for thread/post deletions and the like. Requested deletions
will end up being merged into this thread. Also, multiple threads that are stragglers
will end up in here. Thinking about it... I wonder how this'll evolve really...
* JDski chuckles
This is a grins and giggles section. For to use the merge option more. That's an
option I rarely am able to use and I want to use it more.
Anyway. Thanks in advance for the requests.
Cheers!
Private Mod Note
():
Rollback Post to RevisionRollBack
~ As You Are, I Once Was; As I Am, You Will Be ~
To post a comment, please login or register a new account.
Got the preceeding e-mail in my message box, and so I immediately checked to see if I had any 'recent' posts on the forum that weren't attributed to me. Seemed weird to have a message like this, and then a request to contact someone personally via a yahoo account.
Can anyone confirm or deny the validity of this? Or maybe there is a possibility someone got my password and could use it maliciously?
Full e-mail source in the cut (with my own info redacted):
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Delivered-To: <redacted>@gmail.com
Received: by 10.65.154.13 with SMTP id g13cs28987qbo;
Wed, 1 Oct 2008 21:27:47 -0700 (PDT)
Received: by 10.90.36.16 with SMTP id j16mr10045273agj.87.1222921667038;
Wed, 01 Oct 2008 21:27:47 -0700 (PDT)
Return-Path: <nobody@cpanel2.guildcafe.com>
Received: from list.publishingconcepts.com (list1.publishingconcepts.com [12.156.3.136])
by mx.google.com with ESMTP id 1si1114537agb.20.2008.10.01.21.27.46;
Wed, 01 Oct 2008 21:27:46 -0700 (PDT)
Received-SPF: neutral (google.com: 12.156.3.136 is neither permitted nor denied by best guess record for domain of [EMAIL="nobody@cpanel2.guildcafe.com"]nobody@cpanel2.guildcafe.com[/EMAIL]) client-ip=12.156.3.136;
Authentication-Results: mx.google.com; spf=neutral (google.com: 12.156.3.136 is neither permitted nor denied by best guess record for domain of [EMAIL="nobody@cpanel2.guildcafe.com"]nobody@cpanel2.guildcafe.com[/EMAIL]) smtp.mail=nobody@cpanel2.guildcafe.com
Received: from smtp02.publishingconcepts.com (10.10.0.50) by list.publishingconcepts.com (LSMTP for Windows NT v1.1b) with SMTP id <1.001A7AEE@list.publishingconcepts.com>; Wed, 1 Oct 2008 23:28:23 -0500
X-Resent-To-Address: <redacted>@gmail.com
X-Resent-From-Address: <redacted>
X-Resent-Message: <B0216092088@smtp02.publishingconcepts.com>
X-Resent-At: Wed, 1 Oct 2008 23:28:23 -0500
Received: from barracuda2.publishingconcepts.com (unverified [10.11.0.52]) by smtp02.publishingconcepts.com
(Rockliffe SMTPRA 5.2.5) with ESMTP id <B0216092087@smtp02.publishingconcepts.com> for <<redacted>>;
Wed, 1 Oct 2008 23:28:23 -0500
X-ASG-Debug-ID: 1222921665-315e016b0000-RTCfrn
X-Barracuda-URL: http://10.11.0.52:80/cgi-bin/mark.cgi
X-Barracuda-Connect: unknown[4.53.50.42]
X-Barracuda-Start-Time: 1222921665
Received: from cpanel2.guildcafe.com (unknown [4.53.50.42])
by barracuda2.publishingconcepts.com (Spam Firewall) with ESMTP id 1ACF4F4D483
for <<redacted>>; Wed, 1 Oct 2008 23:27:45 -0500 (CDT)
Received: from nobody by cpanel2.guildcafe.com with local (Exim 4.69)
(envelope-from <nobody@cpanel2.guildcafe.com>)
id 1KlFmz-00075X-53
for <redacted>; Thu, 02 Oct 2008 00:27:45 -0400
To: <redacted>
X-ASG-Orig-Subj: Passwords
Subject: Passwords
From: "mtgsadmin@gmail.com" <mtgsadmin@gmail.com>
Message-ID: <200810020445.caef76102666@forums.mtgsalvation.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-Mailer: vBulletin Mail via PHP
Date: Thu, 02 Oct 2008 00:27:45 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cpanel2.guildcafe.com
X-AntiAbuse: Original Domain - <redacted>
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - cpanel2.guildcafe.com
X-Barracuda-Virus-Scanned: by PCI Barracuda 2 at publishingconcepts.com
X-Barracuda-Spam-Score: 0.00
X-Barracuda-Spam-Status: No, SCORE=0.00 using per-user scores of TAG_LEVEL=5.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=5.0 tests=
X-Barracuda-Spam-Report: Code version 3.1, rules version 3.1.13824
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------------------------
Your passwords may have been compromised.
It was discovered by a user who passed the info on to staff. I suggest changing your pass as soon as possible.
If you have any issues with this, please email me at [EMAIL="shaara_song@%28nospam%29yahoo.com"]shaara_song@(nospam)yahoo.com[/EMAIL].
Its as bogus as a $3 bill though, so its not a big deal.
And I believe that's AoK's email.
http://forums.mtgsalvation.com/showthread.php?p=3229000#post3229000
Trades
Pucatrade with me!
(Signature courtesy of Argetlam of Hakai Studios
Mi blog: http://japoniano.blogspot.com/
mtgsadmin@gmail.com
to me
show details 9:24 PM (2 hours ago)
Reply
Your passwords may have been compromised.
It was discovered by a user who passed the info on to staff. I suggest changing your pass as soon as possible.
If you have any issues with this, please email me at shaara_song@(nospam)yahoo.com.
http://forums.mtgsalvation.com/showthread.php?t=132527
Follow me on instagram @TheMTGWord
http://forums.mtgsalvation.com/showthread.php?t=132527
You. Yooou... Gotta give you a warning, you. Wrong use of mod text.
* JDski chuckles
No, it's not a hoax.
The e-mail is AoK's personal e-mail which we have to use because staff doesn't get @mtgsalvation.com e-mail accounts.
We have a SYM thread for discussing this incident:
http://forums.mtgsalvation.com/showthread.php?t=132527
Please keep conversation about this to that thread so we don't have threads in 8 different subfora.
Thanks,
Binary & the MTGS Staff
And what e-mail are you referring to going to your other account? The blanket "your password may be compromised" email from AoK? The "Help, I forgot my password" email?
And if it went to your gmail account, then - apparently - you used that account for something on this site, obviously. Or you're redirecting mail there from whatever account you did use.
In short - please elucidate.
I just got this email too from mtgsadmin gmail account...
spanglegluppet dot com
"Hello! I've come to serenade you. I can't play guitar. I can't play this accordion either, but I thought it'd be less obvious."
Dylan Moran, Black Books
It will serve as a bin for thread/post deletions and the like. Requested deletions
will end up being merged into this thread. Also, multiple threads that are stragglers
will end up in here. Thinking about it... I wonder how this'll evolve really...
* JDski chuckles
This is a grins and giggles section. For to use the merge option more. That's an
option I rarely am able to use and I want to use it more.
Anyway. Thanks in advance for the requests.
Cheers!