DMARC report mailing list subscriber address leaks

Seth list at sysfu.com
Fri Jul 24 19:39:59 PDT 2015


OK, as requested, here's the first report from fastmail.fm

<?xml version="1.0"?>

-<feedback>


-<report_metadata>

<report_id>7758186</report_id>

<org_name>FastMail Pty Ltd</org_name>

<email>dmarc at fastmail.com</email>

<extra_contact_info>https://fastmail.com/</extra_contact_info>


-<date_range>

<begin>1437696000</begin>

<end>1437782399</end>

</date_range>

</report_metadata>


-<policy_published>

<domain>sysfu.com</domain>

<p>none</p>

<sp>none</sp>

<pct>100</pct>

</policy_published>


-<record>


-<row>

<source_ip>209.85.160.181</source_ip>

<count>1</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>resistentialist.com</envelope_to>

<envelope_from>gmail.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>pass</result>

<human_result>pass</human_result>

</dkim>


-<spf>

<domain>gmail.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>209.85.212.173</source_ip>

<count>2</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>jeffhammett.com</envelope_to>

<envelope_from>gmail.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>pass</result>

<human_result>pass</human_result>

</dkim>


-<spf>

<domain>gmail.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>209.85.160.175</source_ip>

<count>2</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>resistentialist.com</envelope_to>

<envelope_from>gmail.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>pass</result>

<human_result>pass</human_result>

</dkim>


-<spf>

<domain>gmail.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>212.227.17.20</source_ip>

<count>1</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>segordon.net</envelope_to>

<envelope_from>gmx.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>pass</result>

<human_result>pass</human_result>

</dkim>


-<spf>

<domain>gmx.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>209.85.212.177</source_ip>

<count>1</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>kvet.ch</envelope_to>

<envelope_from>hellyeah.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>1e100.net</domain>

<selector>20130820</selector>

<result>fail</result>

<human_result>fail (message has been altered)</human_result>

</dkim>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>pass</result>

<human_result>pass</human_result>

</dkim>


-<spf>

<domain>hellyeah.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>209.85.212.181</source_ip>

<count>2</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>fail</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>jeffhammett.com</envelope_to>

<envelope_from>gmail.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>fail</result>

<human_result>fail (message has been altered)</human_result>

</dkim>


-<spf>

<domain>gmail.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>195.140.195.194</source_ip>

<count>3</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>fastmail.fm</envelope_to>

<envelope_from>cpunks.org</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>pass</result>

<human_result>pass</human_result>

</dkim>


-<spf>

<domain>cpunks.org</domain>

<scope>mfrom</scope>

<result>permerror</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>195.140.195.194</source_ip>

<count>1</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>fail</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>fastmail.fm</envelope_to>

<envelope_from>cpunks.org</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>fail</result>

<human_result>fail (message has been altered)</human_result>

</dkim>


-<spf>

<domain>cpunks.org</domain>

<scope>mfrom</scope>

<result>permerror</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>209.85.212.181</source_ip>

<count>1</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>kvet.ch</envelope_to>

<envelope_from>hellyeah.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>1e100.net</domain>

<selector>20130820</selector>

<result>fail</result>

<human_result>fail (message has been altered)</human_result>

</dkim>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>pass</result>

<human_result>pass</human_result>

</dkim>


-<spf>

<domain>hellyeah.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>209.85.212.169</source_ip>

<count>1</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>jeffhammett.com</envelope_to>

<envelope_from>gmail.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>pass</result>

<human_result>pass</human_result>

</dkim>


-<spf>

<domain>gmail.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>209.141.47.85</source_ip>

<count>51</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>afflictions.org</envelope_to>

<envelope_from>cpunks.org</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>pass</result>

<human_result>pass</human_result>

</dkim>


-<spf>

<domain>cpunks.org</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>212.227.15.18</source_ip>

<count>1</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>fail</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>segordon.net</envelope_to>

<envelope_from>gmx.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>fail</result>

<human_result>fail (message has been altered)</human_result>

</dkim>


-<spf>

<domain>gmx.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>209.141.47.85</source_ip>

<count>17</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>fail</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>afflictions.org</envelope_to>

<envelope_from>cpunks.org</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>fail</result>

<human_result>fail (message has been altered)</human_result>

</dkim>


-<spf>

<domain>cpunks.org</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>212.227.15.18</source_ip>

<count>1</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>segordon.net</envelope_to>

<envelope_from>gmx.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>pass</result>

<human_result>pass</human_result>

</dkim>


-<spf>

<domain>gmx.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>212.227.17.21</source_ip>

<count>1</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>segordon.net</envelope_to>

<envelope_from>gmx.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>pass</result>

<human_result>pass</human_result>

</dkim>


-<spf>

<domain>gmx.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>209.85.212.178</source_ip>

<count>1</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>pass</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>kvet.ch</envelope_to>

<envelope_from>hellyeah.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>1e100.net</domain>

<selector>20130820</selector>

<result>fail</result>

<human_result>fail (message has been altered)</human_result>

</dkim>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>pass</result>

<human_result>pass</human_result>

</dkim>


-<spf>

<domain>hellyeah.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>


-<record>


-<row>

<source_ip>209.85.160.176</source_ip>

<count>1</count>


-<policy_evaluated>

<disposition>none</disposition>

<dkim>fail</dkim>

<spf>fail</spf>

</policy_evaluated>

</row>


-<identifiers>

<envelope_to>resistentialist.com</envelope_to>

<envelope_from>gmail.com</envelope_from>

<header_from>sysfu.com</header_from>

</identifiers>


-<auth_results>


-<dkim>

<domain>sysfu.com</domain>

<selector>main</selector>

<result>fail</result>

<human_result>fail (message has been altered)</human_result>

</dkim>


-<spf>

<domain>gmail.com</domain>

<scope>mfrom</scope>

<result>pass</result>

</spf>

</auth_results>

</record>

</feedback>



More information about the cypherpunks mailing list