PDA

View Full Version : Email experts: need help with possible spoof spam



samjh
October 23rd, 2009, 12:43 AM
I got this very weird email today. I'm not 100% sure what it is, but it seems as though someone failed in sending spam to an address at neda.net spoofing as me. Could someone who has good knowledge about emails tell me what this is?

And if it turns out to be spam from a spoofer pretending to be me, what can I do about it?

(My email address has been replaced by ME@MYEMAILADDRESS.)


Hi. This is the qmail-send program at mx3.neda.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<dialog@neda.net>:
User and password not set, continuing without authentication.
217.66.196.12 does not like recipient.
Remote host said: 452 <dialog@neda.net> Mailbox size limit exceeded
Giving up on 217.66.196.12.
I'm not going to try again; this message has been in the queue too long.

--- Below this line is a copy of the message.

Return-Path: <ME@MYEMAILADDRESS>
Received: (qmail 32212 invoked by uid 89); 22 Oct 2009 09:19:28 -0000
Received: by simscan 1.3.1 ppid: 32101, pid: 32151, t: 0.8800s
scanners: attach: 1.3.1 clamav: 0.94/m: spam: 3.2.5
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mx3.neda.net
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.4 required=4.0 tests=BAYES_99,DATE_IN_FUTURE_12_24,
RDNS_NONE,SUBJECT_NEEDS_ENCODING,SUBJ_ILLEGAL_CHAR S autolearn=no version=3.2.5
X-Spam-Report:
* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 1.6 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters
* 2.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
* 0.0 SUBJECT_NEEDS_ENCODING SUBJECT_NEEDS_ENCODING
* 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
Received: from unknown (HELO mx.neda.net) (80.71.114.27)
by mx3.neda.net with SMTP; 22 Oct 2009 09:19:27 -0000
Received: (qmail 975 invoked from network); 22 Oct 2009 09:13:25 -0000
Received: from unknown (HELO localhost) (202.29.129.150)
by mx.neda.net with SMTP; 22 Oct 2009 09:13:25 -0000
Date: Thu, 22 Oct 2009 16:05:40 -0600
From: <ME@MYEMAILADDRESS>
Reply-To: <ME@MYEMAILADDRESS>
X-Priority: 3
Message-ID: <01ca52f6.1df22c97@localhost>
To: <dialog@neda.net>
Subject: ***SPAM*** Вот это, – сказал он.
MIME-Version: 1.0
Content-Type: text/plain; charset=windows-1251
Content-Transfer-Encoding: 8bit
X-Spam-Prev-Subject: Вот это, – сказал он.

Кто про свои дела кричит всем без умолку.


Контролер любых телефонов
http://www.guerrero-tuning.com/ba/by/


В первом часу жюльен с лестницей на плечах вошел в верьер.
Маркиз незаметно сделал знак собеседнику жюльена, поощряя его понажать сильней.

cariboo
October 23rd, 2009, 01:34 AM
It happens all the time, about 2 years ago I finally had to drop an email address I've had since 1995, because of so much spam with my spoofed email address.