For the last 2 weeks, I have being seeing a lot of returned(undeliverable) email for a spam with title 珍贵的中国人呀! in my mailbox, but it is not me sending the email. Following is a sample:

Return-path: <>
Envelope-to: **my real email censored**
Delivery-date: Sun, 02 Oct 2005 01:14:23 -0700
Received: from s001.sfo.collab.net ([64.125.133.201] helo=jxta-DOT-org)
	by localhost.localdomain with smtp (Exim 4.50)
	id 1ELyzH-0002CM-I6
	for henryjen-AT-ztune-DOT-net; Sun, 02 Oct 2005 01:14:23 -0700
Received: (qmail 27832 invoked by uid 5000); 2 Oct 2005 08:14:14 -0000
Delivered-To: httpd-slowhog-AT-www.jxta-DOT-org
Received: (qmail 27827 invoked from network); 2 Oct 2005 08:14:13 -0000
Received: from asmx1.sfo.collab.net (64.125.133.81)
  by s001.sfo.collab.net with SMTP; 2 Oct 2005 08:14:13 -0000
Received: from mail.foodqs-DOT-com ([202.96.125.80])
	by asmx1.sfo.collab.net (8.12.8/8.12.8) with ESMTP id j928E6vg003207
	for ; Sun, 2 Oct 2005 01:14:10 -0700
Date:     Sun,  2 Oct 2005 16:12:08 -0500
Message-Id: <10510021612.AA67948034-AT-mail.foodqs-DOT-com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
From: "Postmaster" 
Sender: 
To: 
Subject:  Undeliverable Mail
X-Mailer: 
X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on goldfish
X-Spam-Level: 
X-Spam-Status: No, score=0.4 required=5.0 tests=BAYES_00,DATE_IN_FUTURE_12_24 
	autolearn=no version=3.0.3

User mailbox exceeds allowed size: 168-AT-mail.foodqs-DOT-com
User mailbox exceeds allowed size: csm-AT-mail.foodqs-DOT-com


Original message follows.

Received: from mail.hhujba.com [210.123.37.77] by mail.foodqs-DOT-com
  (SMTPD32-8.02) id AD262E701A6; Sun, 02 Oct 2005 16:12:06 -0500
Received: (qmail 18110 invoked from network); 02 Oct 2005 17:11:18 -0000
Reply-To: <slowhog-AT-jxta.org>
Message-ID: <20051002171118.BE4CD1594013-AT-nhujba>
From: xiufede-AT-gmail-DOT-com
To: 168-AT-foodqs-DOT-com,csm-AT-foodqs.com,lxf@foodqs.com
Subject: =?gb2312?B?1eS587XE1tC5+sjLo6GjoQ==?=
Date: Sun, 02 Oct 2005 17:11:18 +0900
MIME-Version: 1.0
Content-Type: multipart/alternative;
    boundary="----=_NextPart_001_0018_01C39816.2C871AA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106

This is a multi-part message in MIME format.

------=_NextPart_001_0018_01C39816.2C871AA0
Content-Type: text/plain;
    charset="gb2312"
Content-Transfer-Encoding: base64

[message truncated]

As you can see, the reply-to header is assigned to the email I registered for the JXTA project. I believe the "From:" is also spoofed. If you get a spam like that, I am sorry but it was not me.

Comments:

Post a Comment:
  • HTML Syntax: NOT allowed

This blog copyright 2009 by slowhog