Skip to main content

SPAM to others reaching me !!

More
17 years 4 months ago #19330 by S0lo
I don't know if I'm the only one here with the same problem.

I can uderstand spam mail that comes from a forged e-mail address. But how the he** can spam reach my mail box while it has the "TO" address pointing to a different address than mine :!: :?: :!:

I've been recieving such emails for decades. And the fact that I don't know how is this possible is more annoying than spam it self. Any Ideas ?

Studying CCNP...

Ammar Muqaddas
Forum Moderator
www.firewall.cx
More
17 years 4 months ago #19332 by Smurf
If you examine the E-Mail Headers it may shed some light into it ?

Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
More
17 years 4 months ago #19333 by Smurf
Sorry, that post was a little rushed.

Anyhow, it may be that the spam software is using the BCC to send the mails so you may not even see the recipients that its being sent to.

Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
More
17 years 4 months ago #19335 by S0lo

Sorry, that post was a little rushed.

Anyhow, it may be that the spam software is using the BCC to send the mails so you may not even see the recipients that its being sent to.


mmm, So you mean it could be showing only one recipient and hiding the rest, and I'm part of the rest ?

Here is one of the headers I got:

[code:1]
X-Message-Status: n:0
X-SID-PRA: =?iso-8859-1?B?U2FyYVI=?= <SaraR@datingmadefunonline.com>
X-Message-Info: LsUYwwHHNt1UB32YTPxrWVsgwr/lz+JA9FZQGGEd0Xg=
Received: from datingmadefunonline.com ([12.96.75.178]) by bay0-mc6-f2.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Thu, 30 Nov 2006 14:22:57 -0800
Received: from bigfootinteractive.com ([216.35.62.105]) by bay0-mc11-f17.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Thu, 30 Nov 2006 14:22:56 -0800
Reply-To: circuitcity.WATH054FB11B0F791AC0E336C5F640@email.datingmadefunonline.com
Bounces_to: circuitcity@datingmadefunonline.com
Message-ID: <WATH054FB11B0F791AC0E336C5F640.1683.27054.drmailer6.DumpShot.2@email.datingmadefunonline.com>
X-BFI: WATH054FB11B0F791AC0E336C5F640
Date: Thu, 30 Nov 2006 14:22:56 -0800
From: =?iso-8859-1?B?U2FyYVI=?=<SaraR@datingmadefunonline.com>
Subject: =?iso-8859-1?B?SSBXb3VsZCBMaWtlIFRvIE1lZXQgWW91?=
To: alexanderson10@hotmail.com
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="ABCD-WATH054FB11B0F791AC0E336C5F640-EFGH"
Return-Path: SaraR@datingmadefunonline.com
X-OriginalArrivalTime: 30 Nov 2006 22:22:58.0358 (UTC) FILETIME=[16E9AD60:01C714CE][/code:1]


It clearly shows "alexanderson10@hotmail.com" as the TO address. which is not my address.

Studying CCNP...

Ammar Muqaddas
Forum Moderator
www.firewall.cx
More
17 years 4 months ago #19336 by Smurf
thats the only thing i can think because there is clearly no other recipient address in the header information.

Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
More
17 years 4 months ago #19338 by S0lo
Yup, I think you are right. I tried sending to one of my emails while putting my other email in BCC. result is same effect, with similar headers. I should have thought of that.

Studying CCNP...

Ammar Muqaddas
Forum Moderator
www.firewall.cx
Time to create page: 0.139 seconds