Possible spam from mailing list? ("China Mobile")

[Kurtis]

I just received a very unusual e-mail that included a recent post's subject. The post in question was: "Re: form doesn't validate when trying to upload file". It was sent directly to my email address; by-passing the User Group.

Google roughly translated this email as coming from "China Mobile" and included the domain "139.com". Has anyone else seen this sort of thing? Unfortunately, I am unable to read the language and the Google Translation isn't very clear; but it's definitely displayed using a very clean and fancy template. I'm not sure if it's spam or something else.

Just figured I'd see if anyone else has gotten an email similar to this. Thanks.

[Brad Pitcher]

Yes, I received a similar email about the post "Re: I can't install django on my mac. I'm not sure wh..." which I recently responded to. Not sure what to make of it.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To view this discussion on the web visit https://groups.google.com/d/msg/django-users/-/cs6UrXOcBOkJ.
To post to this group, send email to django...@googlegroups.com.
To unsubscribe from this group, send email to django-users...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/django-users?hl=en.

[Rivsen]

Maybe someone use 139 email, ask group manager check this and contact that one who use 139 email.

2012/9/11 Brad Pitcher <bradp...@gmail.com>

[Nikolas Stevenson-Molnar]

I just got the same email after replying to a message.

_Nik

[Nikolas Stevenson-Molnar]

Looking at Google's translation of the text, I would guess it's informing you that you need to be on that user's whitelist: "You send is not activated 139 mailbox user's mail seven days will be deleted by the system, please to notify Friends timely activation to receive e-mail."

In other words, this user needs to specifically approve people to receive email from. Usually Google is good about filtering out auto-responses and the like, but it seems to be missing this one.

_Nik

[Cal Leeming [Simplicity Media Ltd]]

+1 just received one of these. 

[Kurtis Mullins]

Thanks guys for confirming. I'm glad I'm not the only one! I've just set it as spam, hopefully gmail will catch on.

[Jon Blake]

I've had a coup[le of these, now.

[Rivsen]

I received this e-mail too. It's about someone using 139.com email join the group, and now this e-mail address was closed by 139.

Maybe hes mobile phone lost or arrears.

2012/9/13 Jon Blake <jc.b...@gmail.com>

--

You received this message because you are subscribed to the Google Groups "Django users" group.

To view this discussion on the web visit https://groups.google.com/d/msg/django-users/-/yZnQCJfOEekJ.

[Rivsen]

13672...@139.com , he has canceled his cell phone number, please administrator kick him.

I use my phone call this number and be informed that the number no longer exists.

2012/9/13 Rivsen <rivse...@gmail.com>

[Kurtis Mullins]

I actually just received another one of those emails. The funny part is that it used this exact thread's subject in the message. I'm curious as to whether this 139.com is emailing everybody who sends an email to the list or if it only sends emails to people in who are involved in the same thread(s) as the user responsible.

[Nikolas Stevenson-Molnar]

It seems to me that I get one of these emails for every post I make, about one day later. That includes replies to this very thread. I think they come from the same email address, so they'd be easy to block on an individual level. But my guess is that everyone posting to django-users is receiving these, so it would be good for a group admin to address this at the group level (someone suggested removing that user).

_Nik

[Russell Keith-Magee]

Hi,

Unfortunately, this appears to be a problem with (yet another) service
provider not playing nice with mailing lists. Someone has subscribed
to Django Users, and their mail provider (China Mobile in this case)
has decided to reply to the original author, instead of the "reply to"
address.

This happens from time to time; we occasionally get the same effect
when someone's mailbox fills up. The only way to resolve the issue is
to identify the rogue subscription, and kill it.

However, to compound matters, the "find members" functionality on
Google Groups is fairly limited, and in this case, it probably
wouldn't help anyway - the message is from an automated service that
passes email messages to an SMS number -- 13672725001 looks to me like
a Chinese cell phone number.

If anyone is able to identify the rogue subscription, I'll gladly kill
it; but there's not much we can do otherwise.

Yours,
Russ Magee %-)

[Kurtis Mullins]

Thanks for looking into it, Russ!