next »

[godsell4]

The only ever emails sent to this address are sent directly from my router to the F9 redirect, where is the resolves to my main email address mailbox on my main account.

Did it send the messages to you PN account via relay.plus.net or some other SMTP relay?

SW.

[mikeb]

@Ultra: Thanks for that. As a matter of my own security I don't open such items where they contain HTML elements since that is a known path to validate the recipient's address.

I inspect the contents through OE's Properties->Message source method since that is not active and allows me to see the headers and plain text contents. Thus the sender is not aware that his message is being read. Trouble is I can't see the graphics which is why I asked.

I don't use Outhouse I use good old Agent so the html/attachment viewing is a pretty safe thing.

The address I received the spam on was My_Name@My_PN_Account.plus.com which is my 'main' e-mail address and always has been so it's fairly common knowledge although not generally speaking totally public. It certainly hasn't ever been used on USENET or visibly in very public places other than those mentioned previously. I have never received any spam on my PN account before (*) although my previous F9 account is spammed silly - initially to My_Name@My_F9_Account.force9.net which I used for years but still don't know how it got out as I was also reasonably careful with disclosing it and especially because the spam started ages after I actually stopped using the force9.net form and changed to force9.co.uk form and then subsequently to using the PN account.  More recently, the spam has been to/from Random_Chars@My_F9_account... of course like most other peeps have had.

Mail to the spammed PN address goes into the 'catch all' rather than a separate mbox.  Although I do occasionally use mboxes, generally speaking everything goes into the 'catch all' and I sort it out in Agent when I DL as I've always done since the year dot ! I only have mboxes set up for 1 or 2 other people so that any occasional mail they receive is sort of private. Nothing was received on these mboxes or to  Anything_Else@My_PN_Account.plus.com  I don't use redirects or similar either. In fact, my account is set up virtually the same as it defaulted to when I first opened it donkey's years ago.  Virtually everything comes in and gets DL'd in a single hit and is then sorted locally.

(*) The only thing that I have received in the past is ebay/paypal phishing e-mails occasionally which mysteriously arrive almost immediately after I have just used ebay or paypal.  These are also sent to my 'main' email address as it is used for ebay/paypal of course. Very suspicious to say the least and I always bang in a snot-a-gram suggesting that they perhaps have security issues that need looking into but needless to say I have never received any response from them !

[XPC exiled in NZ]

Probably via... relay.force9.net (I think that is the one I normally use).

Not sure if I can check now, as the poor router died last summer. Will wade back and see if I have any old email headers anywhere.

Mike

[Tam]

I'm 99% certain that the only place one of my mail addresses has ever been is as a re-direct (an old unused and since deleted re-direct!) . its existence was all of about 2 months I'd guess.

[kitz]

The only account that I got it on is username@username.

Forwards and old mailboxes were ok - (they should have now gone to my catchall).
Ive also just checked the email address that I used to signup to PN with, and although that is full of spam - I cant see any that bear a resemblance to these

[petervaughan]

I received some to force9@ and freeonline@myname which I have never seen before as well as to my 'normal' named mailbox.

[James]

Hmmm, I only got the message to two of the mailboxes I have set up.

Both of the two are boxes I've accessed using webmail, all the rest have only ever been accessed using Outlook, or Outlook Distress.

[petervaughan]

Just received 6 more but different spam messages to the 2 mailboxes I detailed earlier which I have never used anywhere. This is not an incident limited to Sunday it appears. 

[chillypenguin]

Once the spammers have got your address then they going to continue to use it.

Chilly

[kinggc]

I have just received a second batch of 3  spam emails with different messages from those received yesterday at about the same time.

kinggc

[bpullen]

Hi guys,

What are the characteristics of the latest emails? I have received a couple and want to know if they are comparable.

Mine were of the following format:-

Code:

-------- Original Message --------
Return-Path: <usredarguing@evokemobile.com>
X-Envelope-To: xxxx@xxxxxxxxx.co.uk, xxxx@xxxxxxxxx.com
X-Spam-Status: No, hits=4.2 required=5.0 tests=BAYES_99: 4.07,FORGED_RCVD_HELO: 0.135,TOTAL_SCORE: 4.205
X-Spam-Level: ****
Received: from evokemobile.com ([74.160.97.68]) by xxxx.xxxxxxxxx.com for xxxx@xxxxxxxxx.co.uk; Mon, 14 May 2007 18:12:33 +0100
Message-ID: <001a01c79629$8cc86f80$002ad3bc@amala84r62mo5t>
From: Margery Holman <usredarguing@evokemobile.com>
To: xxxx@xxxxxxxxx.co.uk
Subject: There are no reported side effects or contraindications to Wondercum usage.
Date: Mon, 14 May 2007 13:12:40 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset="windows-1250"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.3790.2969
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2963

All because I am ejaculating the way I never have.
http://tekls.com

[XPC exiled in NZ]

Only had one today so far to the yahoo address. I guess the others might follow when the spambot gets further through the alphabet!

[Oldjim]

Two more addressed to postmaster account

Envelope-to: postmaster@xxxx.plus.com
Delivery-date: Mon, 14 May 2007 17:30:43 +0000
Received: from c-71-195-123-157.hsd1.ca.comcast.net ([71.195.123.157])
     by fhw-sunmxcore04.plus.net with smtp (PlusNet MXCore v2.00) id 1HneNe-0007Z9-SA
     for postmaster@xxxx.plus.com; Mon, 14 May 2007 17:30:43 +0000
Message-ID: <001801c79613$0fd71f50$0140adfc@ANGIE>
From: Pete Mckinney <bbdistanced@adsladsl.com>
To: postmaster@xxxx.plus.com
Subject: You guys are amazing with your delivery and customer service and your product actually DOES work.
Date: Mon, 14 May 2007 10:31:41 -0700
MIME-Version: 1.0
Content-Type: text/plain;
        charset="windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2969
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
X-PN-VirusFiltered: by PlusNet MXCore (v2.00)

Envelope-to: postmaster@xxxx.plus.com
Delivery-date: Mon, 14 May 2007 17:27:04 +0000
Received: from 201-68-87-235.dsl.telesp.net.br ([201.68.87.235] helo=hellenjapan.com)
     by pih-sunmxcore13.plus.net with smtp (PlusNet MXCore v2.00) id 1HneK4-0001wi-NV
     for postmaster@holtlane.plus.com; Mon, 14 May 2007 17:27:02 +0000
Message-ID: <001b01c79634$1f8abbc0$068dfc84@n16dfd04c9d684>
From: Janis Lucero <ofloneliest@hellenjapan.com>
To: postmaster@xxxxx.plus.com
Subject: We ship Worldwide.
Date: Mon, 14 May 2007 14:28:21 -0300
MIME-Version: 1.0
Content-Type: text/plain;
        charset="windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.181
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.0000
X-PN-VirusFiltered: by PlusNet MXCore (v2.00)

[godsell4]

I have received a couple and want to know if they are comparable.

Yep, the two I have recieved contains a reference to WonderCum as did your example.

SW.

[pjmarsh]

The only one I've received at all came today at 18:22 and was addressed to username@username

Code:

Envelope-to: xxxx@xxxx.plus.com
Delivery-date: Mon, 14 May 2007 17:28:11 +0000
Received: from 87.97.98.143.pool.invitel.hu ([87.97.98.143])
by pih-sunmxcore15.plus.net with smtp (PlusNet MXCore v2.00) id 1HneLB-0005bE-HZ
for xxxx@xxxx.plus.com; Mon, 14 May 2007 17:28:10 +0000
Message-ID: <001b01c7965d$35a74cb0$06f6791c@home85kd6ynjkh>
From: Guadalupe Bauer <ecxponderable@larrymartincpa.com>
To: xxxxx@xxxx.plus.com
Subject: We do not have any branched or stores located anywhere.
Date: Mon, 14 May 2007 19:22:27 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.181
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.2963
X-PN-VirusFiltered: by PlusNet MXCore (v2.00)



Now, after taking Wondercum for 1 month, WE both are very happy and satisfied with our sexual life.
http://tekls.com

Phil