x404.co.uk
http://www.x404.co.uk/forum/

My Hotmail account's being spoofed.
http://www.x404.co.uk/forum/viewtopic.php?f=4&t=14555
Page 1 of 1

Author:  ProfessorF [ Thu Aug 25, 2011 10:40 am ]
Post subject:  My Hotmail account's being spoofed.

Over the last week, I've been getting a lot of 'MAILER_DAEMON' type emails arriving in my inbox.
The most recent one looks like this:

Quote:
Hi. This is the qmail-send program at bounce.versatel.nl.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
---------------------------------------------------------------------
Het volgende bericht dat u stuurde aan deze gebruiker is niet aangekomen.

De meest voorkomende redenen zijn:
- het verkeerd intypen van het e-mailadres of het e-mailadres bestaat niet.
- de mailbox van de ontvangende gebruiker is vol waardoor er geen e-mail meer wordt geaccepteerd.
- het e-mailbericht stond in de wachtrij en kon in de afgelopen 2 dagen niet worden afgeleverd.

--------------------------------------------------------------------
The following email that you sent to this user has not been received.

The most occuring reasons are:
- wrongly typed e-mailaddress or the e-mailaddress doesn't exist.
- the e-mailbox of the receiving user is full and therefore the e-mail won't be accepted.
- the e-mailmessage was in queue and couldn't be delivered in the past 2 days.

---------------------------------------------------------------------

<robertvanderheide@home.nl>:
212.54.34.8 does not like recipient.
Remote host said: 550 Unrouteable address
Giving up on 212.54.34.8.

--- Below this line is a copy of the message.

Return-Path: <alexcsmall@hotmail.com>
Received: (qmail 22473 invoked by uid 0); 25 Aug 2011 02:53:01 -0000
Received: from qmail12.zonnet.nl ([10.170.1.74])
(envelope-sender <alexcsmall@hotmail.com>)
by 10.170.1.40 (qmail-ldap-1.03) with SMTP
for < >; 25 Aug 2011 02:53:01 -0000
Received: (qmail 7197 invoked by uid 32042); 25 Aug 2011 02:53:00 -0000
Delivered-To: heide485@versatel.nl
Received: (qmail 7194 invoked by uid 0); 25 Aug 2011 02:53:00 -0000
Received: from unknown ([10.170.1.121])
(envelope-sender <>)
by qmail12.zonnet.nl (qmail-ldap-1.03) with QMQP
for < >; 25 Aug 2011 02:53:00 -0000
Delivered-To: CLUSTERHOST mail6.versatel.nl heide485@versatel.nl
Received: (qmail 14928 invoked by uid 0); 25 Aug 2011 02:53:00 -0000
Received: from 94-76-225-87.static.as29550.net (HELO server.spiralsearch.com) ([94.76.225.87])
(envelope-sender <alexcsmall@hotmail.com>)
by mail6.versatel.nl (qmail-ldap-1.03) with SMTP
for < >; 25 Aug 2011 02:53:00 -0000
Received: from smtp.antanta.com (smtp.antanta.com [212.158.173.38])
by server.spiralsearch.com (Postfix) with ESMTP id HR105ER9;
Wed, 29 Jun 2011 19:17:27 +0400
Received: from Progress by smtp.antanta.com (MDaemon PRO v10.1.1)
with ESMTP id md50018388674.msg;
Wed, 29 Jun 2011 19:17:27 +0400
X-Spam-Processed: smtp.antanta.com, Wed, 29 Jun 2011 19:17:27 +0400
(not processed: spam filter heuristic analysis disabled)
From: Homeless Burst <ryb@breckenridge.k12.mn.us>
To: fogram@soc.surrey.ac.uk
Subject: If you don’t want your wife to find a lover, take care of your own .::s.e.x.::.ual performance!459
Date: Wed, 24 Aug 2011 22:53:00 -0400
Message-ID: <24D4F18C3B19477BAB88209C8087E268@wmcenter.ru>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4862

<br>
I'll bet you my bottom dollar that erectile dysfunction will step away at once!
<br>
http://mdbf4kids.org/modules/TinyMCE/ti ... mdbf4.html
<br>
Tel/Fax: 00-1-418-1425023


After I received the first one, I thought 'Hullo, this is a rum do and no mistake' and changed my password.
Yet still they come.

And no, I'm not hawking dodgy erectile medicine via spam.
Any ideas?

Author:  Amnesia10 [ Thu Aug 25, 2011 11:01 am ]
Post subject:  Re: My Hotmail account's being spoofed.

I suggest you send out the penile dysfunction cream otherwise Trading Standards will be after you? :D

Other than that have you contacted Hotmail about it? Maybe they can help?

Author:  jonbwfc [ Thu Aug 25, 2011 11:14 am ]
Post subject:  Re: My Hotmail account's being spoofed.

It's 'back scatter'. There's no saying that the messages have been sent form your account. It's very possible that they've been sent from somewhere entirely different but with your email address in the 'from' or 'reply to' fields, so if the receiver's server has an issue with the email it gets bounced back to you rather than the person who actually sent it.

Jon

Author:  big_D [ Fri Aug 26, 2011 3:54 am ]
Post subject:  Re: My Hotmail account's being spoofed.

jonbwfc wrote:
It's 'back scatter'. There's no saying that the messages have been sent form your account. It's very possible that they've been sent from somewhere entirely different but with your email address in the 'from' or 'reply to' fields, so if the receiver's server has an issue with the email it gets bounced back to you rather than the person who actually sent it.

Jon

+1

Spammers often use random addresses, to which they have no access, in the sender and reply to fields.

I haven't seen it for a while, but my Hotmail account used to get dozens of them, back around 2001 - 2003.

Author:  ianfsb [ Fri Aug 26, 2011 12:05 pm ]
Post subject:  Re: My Hotmail account's being spoofed.

ProfessorF wrote:

"After I received the first one, I thought 'Hullo, this is a rum do and no mistake' and changed my password."

Gosh, you were REALLY upset then!


"And no, I'm not hawking dodgy erectile medicine via spam."

You're out of stock already?


"Any ideas?"

Re-order from that lovely chap in Nigeria?



G'day Alex!
:D

Author:  davrosG5 [ Sat Sep 03, 2011 2:13 pm ]
Post subject:  Re: My Hotmail account's being spoofed.

big_D wrote:
jonbwfc wrote:
It's 'back scatter'. There's no saying that the messages have been sent form your account. It's very possible that they've been sent from somewhere entirely different but with your email address in the 'from' or 'reply to' fields, so if the receiver's server has an issue with the email it gets bounced back to you rather than the person who actually sent it.

Jon

+1

Spammers often use random addresses, to which they have no access, in the sender and reply to fields.

I haven't seen it for a while, but my Hotmail account used to get dozens of them, back around 2001 - 2003.


Same here. I saw this a few years ago. Infuriating yes but probably not something to be concerned about.
If they'd managed to access your account it's unlikely you'd have been able to change the password because they'd have done so already to lock you out.

Page 1 of 1 All times are UTC
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/