one of my friend is getting email that are not address to him.To field indicate some other users with same domain name.its spam but his question is why he is getting junk messages that are address to others.And how he can stop it.thank
Printable View
one of my friend is getting email that are not address to him.To field indicate some other users with same domain name.its spam but his question is why he is getting junk messages that are address to others.And how he can stop it.thank
There are ways to do this. Using an envelope springs to mind.Quote:
its spam but his question is why he is getting junk messages that are address to others
Get a tool called SamSpade. That'll let you trace the spam to the ISP. Then send an abuse email to that ISP and attach the original headers in there. The ISP will make it stop.Quote:
And how he can stop it.
Uh... virtam, don't answer this. Zetaphor, I'm going to assume that you were intending on helping him rather than potentially socially engineering him for an address. Looking at it I'd almost say you want his address to add to some list. Knowing the actual address isn't necessary. Asking virtam if he could give an example so you can understand it better might be. So was it:Quote:
What is his adress, and what is the address of the person supposed to recieve the mail?
or was it ...Quote:
Privacy of the individual should be respected and only the person who ended up with the spam should reveal their own email address.Quote:
Just a thought..
We have been seeing, at work, emails coming in where the from line says something like:
Spoof basically and it tricks the anti-spam filters, at least mine which is iHateSpam (and is quite good), into thinking it's not spam.Quote:
from: mycompanydomain.com (host.realdomainname.com)
Not sure if this is exactly what you are getting but sounds very similar.
sorry i am late ,still trying to get the headers from my friend.it is like
[email protected] (spam) send to [email protected] but it received my friend's email([email protected]) spam is addressed to others in same domain.Xyz is a valid email address.Still waiting for email headers as soon as i get i will post.thank you guys for your reply.
i got the full header and from that it looks like it(spam) also address to my friend email address .i am posting email headers .I wanted to know what X-RCPT-TO:[email protected]
mean:
From: "Roseann Gomes" <[email protected]> <newmsg.cgi?mbx=Main&[email protected]>
Bottom of Form 1
Received: from 65.207.136.35 [213.22.186.253] by abc.com
(SMTPD32-6.06) id A0AEB93002E; Sun, 11 Apr 2004 20:19:58 -0400
Received: from 83.25.213.236 by 65.207.136.35; Mon, 12 Apr 2004 02:04:33 +0100
Message-ID: <[email protected]> <newmsg.cgi?mbx=Main&[email protected]>
Reply-To: "Roseann Gomes" <[email protected]> <newmsg.cgi?mbx=Main&[email protected]>
To: [email protected]
Subject: Save 70% On Yôur Term LIfe Ins. - Frëe Quôtes
Date: Sun, 11 Apr 2004 18:08:33 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--1401448258204867173"
X-Priority: 3
X-CS-IP: 0.12.202.220
X-RCPT-TO: <[email protected]> <newmsg.cgi?mbx=Main&[email protected]>
X-UIDL: 381727908
Status: U
Sounds like a BCC email to me?
Then the To: address will not match yours.
I get spam emails at home from time to time using this tactic.
Can't quite see the point, as it only makes me more suspicious.
To be fair, my ISP is good at dealing with these and does trace them back using the header information that I provide. Unlike crapppy companies like AOL, I do get what is obviously a personal reply from one of their tech support guys ....
They must be doing something right, as I've never had more than one from the same source :)
Edit: Should have added that if this is spam, the from: address will almost certainly be fake, and you'll need to look it up to get some idea of where it really came from.