It looks like I am spamming myself!!

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Wed Jun 30, 2010 12:38 am

Every day I get a lot of crap e-mail in my email box. Mostly for Viagra and other erictile problem drugs (which I don't need) Every once in a while one of these spams will say it's from me, going to me. Has my acct been hijacked and now a spambot? It's really weird. This is the header:

Viewing Full Header - View message
Return-Path: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mc3.midcoast.com
X-Spam-Flag: YES
X-Spam-Level: *************************
X-Spam-Status: Yes, score=25.9 required=5.0 tests=DRUGS_ERECTILE,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,RCVD_IN_PSBL,RDNS_NONE,TO_EQ_FM_DIRECT_MX,
T_SURBL_MULTI1,T_URIBL_BLACK_OVERLAP,URIBL_BLACK,URIBL_DBL_SPAM,
URIBL_JP_SURBL,URIBL_SBL,URIBL_WS_SURBL shortcircuit=no autolearn=disabled
version=3.3.1
X-Spam-Report:
* 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
* [217.203.68.142 listed in psbl.surriel.com]
* 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
* [217.203.68.142 listed in bb.barracudacentral.org]
* 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
* [217.203.68.142 listed in zen.spamhaus.org]
* 4.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
* [URIs: pharmgodfry54x.ru]
* 1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
* [URIs: pharmgodfry54x.ru]
* 1.7 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
* [URIs: pharmgodfry54x.ru]
* 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
* [URIs: pharmgodfry54x.ru]
* 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
* above 50%
* [cf: 100]
* 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
* 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
* [cf: 100]
* 0.6 URIBL_SBL Contains an URL listed in the SBL blocklist
* [URIs: pharmgodfry54x.ru]
* 2.2 DRUGS_ERECTILE Refers to an erectile drug
* 0.0 T_URIBL_BLACK_OVERLAP T_URIBL_BLACK_OVERLAP
* 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
* 0.0 T_SURBL_MULTI1 T_SURBL_MULTI1
* 0.0 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from localhost (localhost [127.0.0.1])
by mc3.midcoast.com (Postfix) with ESMTP id 4AC9837CCA1
for <[email protected]>; Tue, 29 Jun 2010 12:09:46 -0400 (EDT)
X-Virus-Scanned: by amavisd-new at midcoast.com
Received: from mc3.midcoast.com ([127.0.0.1])
by localhost (mc3.midcoast.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id m07fxZ6UhRZw for <[email protected]>;
Tue, 29 Jun 2010 12:09:45 -0400 (EDT)
Received: from mx1.midcoast.com (mx1.midcoast.com [69.39.100.26])
by mc3.midcoast.com (Postfix) with ESMTP id B944FF51AC
for <[email protected]>; Tue, 29 Jun 2010 11:17:40 -0400 (EDT)
Received: from [217.203.83.14] (unknown [217.203.68.142])
by mx1.midcoast.com (Postfix) with ESMTP id 1A9A38763F
for <[email protected]>; Tue, 29 Jun 2010 11:17:39 -0400 (EDT)
From: <[email protected]>
To: [email protected]
Date: Tue, 29 Jun 2010 17:17:35 +0200
Subject: PJM-> Hot Sale on Viagra
Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
X-Spam-Prev-Subject: Hot Sale on Viagra

obscured email addys - JC

Posted: Wed Jun 30, 2010 12:43 am

Nah, it's just been spoofed to make it look like it's coming from your own address. Spoofing may help the spam get by some of the spam filters, I'm not certain though.

Another way to get loads of spam is to leave your address in posts. I xxx'd them out for you. Laughing

Posted: Wed Jun 30, 2010 12:47 am

I suggest you edit out your email address ^there, unless you want loads of extra spam hitting your mailbox Wink

This kind of spam is being 'spoofed', they're using the same 'sent from' as the recipients mail addy. Nothing to worry about.

Posted: Wed Jun 30, 2010 1:00 am

It happened to me just a little while ago but I got it all figured out.

Posted: Wed Jun 30, 2010 1:15 am

I get that stuff all the time, especially from gmail. It's just spoofing.

Posted: Wed Jun 30, 2010 1:26 am

Thanks!! I do feel better about that. Even though it is one of my personal e-mails, I've gotten spam on it since day one, so I don't really worry too much. I just didn't like seeing that it was from myself!!

Posted: Wed Jun 30, 2010 1:42 am

^^I freaked out about it when I first got that stuff, but I dug into it and checked around and found out it was nothing to really worry about. Thankfully the stuff I get from myself ends up in the spam folder. Smile

It looks like I am spamming myself!!	View next topic View previous topic