Yeah, I just thought of that as well. I have SA configured to mangle spam sufficiently to prevent HTML mail, but lately enough spam has been getting through that I might have been nailed by a webbug.
If this is true though, the confirmation emails I got seem strange though. If I got nailed by a webbug the spammer already has my email address (and the IP address), but then there's not much point in sending the confirmation email. Goading me into clicking on an unsubscribe link (which I did not do) just to confirm my email address again seems redundant, and otherwise sending an "I'm going to spam you forever" email seems like going out of their way to rub my nose in it.
BTW, the bad guys involved are Tail Wagging Offers being sent through moosq.com
How does the Sanitizer you recommended kill webbugs which get through SA without being marked as spam?
Steve
Bill Larson wrote:
Easy to do if you don't defang web bugs. My hypotheses is as follows.
Spammer sends you a spam with web bugs. You view the spam and images with tracking code are loaded from the spammers web server. They have then your ip address. Spammer then sends fake opt-in confirmations with your ip address automatically.
