Yes this is a template used by mediawiki from Special:PasswordReset, and exactly this template, plain text is used on production of wikimedia servers. Unless you can't retrieve the header of original message, it's not possible to verify if it's scam or system message. On other hand anyone who knows the email could trigger it. In case that OTRS is using wikimedia SUL account with OTRS email account, anyone filling it in PasswordReset could trigger system to send you this message. There is no protection from this so far.
On Mon, Apr 23, 2012 at 2:30 PM, Thomas Morton morton.thomas@googlemail.com wrote:
On 23 April 2012 13:23, Petr Bena benapetr@gmail.com wrote:
Indeed, unless there are some spam links inside, for example if it was html mail, the reset token could be in fact a spam link leading to another site. (like <a href=http://somespam.com>http://en.wikiped... reset token</a>)
On Mon, Apr 23, 2012 at 2:21 PM, K. Peachey p858snake@gmail.com wrote:
That looks like the standard password reset request email.
I may have gotten to the bottom of it - as a spam email...
The OTRS system renders emails wierdly so the actual links weren't showing. Downloading the HMTL version shows the "cancel this message" text being a link pointed at carewelhealth[dot]com - a site apparently running MediaWiki.
Is the mail system part of MediaWiki? That could be the origin; they're misusing the system to spam people, in a very wierd way.
Tom _______________________________________________ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l