Self service

Post Reply
belchingmatt
Posts: 2893
Joined: Tue Jan 31, 2006 12:00 am
Location: Spartaaa
Self service

Post by belchingmatt »

Ok, I have been receiving spam from my gmail account to my gmail account. The subject is also rising incrementally from day to day, eg October 73% off one day and October 74% off the next.



Now I know JJ mentioned recently that you can make an email appear to come from anybody, so is that what has happened here? As otherwise the only possibility is that someone has hacked my account.




--------------------


<div class='signature'> I'm not addicted to porn, I'm addicted to masturbation. Porn is just an enabler.



<img src='http://i3.photobucket.com/albums/y81/ma ... Threat.gif' border='0' alt='user posted image'>

There are plenty more fish in the sea, get your tackle out and see what bites.



Divers go deeper and stay down for longer.
JJW009
Site Admin
Posts: 6538
Joined: Thu Jul 14, 2005 12:00 am
Location: Midlands
Contact:
Self service

Post by JJW009 »

either that or you have malware on your machine. Run the usual checks, but also:



click "show original" off the drop-list next to the reply option



you'll now see the email header. I will look a bit like this snipit from one of my spams:


Received: from smtp.titaninternet.co.uk (EHLO smtp.titaninternet.co.uk) (217.77.176.18)

by iris1.directnic.com (iris/0.185) with ESMTP

for <[email protected]> (rule 908753); 2 Nov 2007 17:19:42 +0000

Return-Path: [email protected]

Received: from DISKDEPOT.titaninternet.co.uk ([85.232.39.109])

&nbsp; &nbsp; &nbsp; by smtp.titaninternet.co.uk (Merak 7.5.2) with ASMTP id GNL39351

&nbsp; &nbsp; &nbsp; for <[email protected]>; Fri, 02 Nov 2007 17:19:32 -0000

Subject: Remember, remember... Disk Depot could save you pounds!

Sender: "Disk Depot" <[email protected]>

From: "Disk Depot" <[email protected]>

Received-SPF: none (smtp.titaninternet.co.uk: domain of [email protected] does not designate permitted sender hosts)

Date: Fri, 2 Nov 2007 17:19:34 GMT

To: "[email protected]" <[email protected]>

Reply-To: [email protected]

X-Priority: 3

Content-Transfer-Encoding: 8bit

MIME-Version: 1.0

X-Mailer: JMail 4.5 by Dimac

Content-Type: multipart/alternative; boundary="----xxxxxx"



------xxxxxx


What you're looking for is the last IP address before the start of the message. In this case, it is "DISKDEPOT.titaninternet.co.uk ([85.232.39.109])" and this is where the email started.



Look up the IP address on DNSstuff. If it's your IP address, then you have a problem! If it's somewhere in Russia, then theres nothing you can do.




--------------------


<div class='signature'> <img src='http://myanimelist.net/signature/JJW009.png' border='0' alt='user posted image'> ??? <img src='http://imagegen.last.fm/LastfmMyspace/oartists/5/JJW009.gif' border='0' alt='user posted image'>
belchingmatt
Posts: 2893
Joined: Tue Jan 31, 2006 12:00 am
Location: Spartaaa
Self service

Post by belchingmatt »

It originates from Amsterdam. <!--emo&:rolleyes:--><img src='http://i2.ifrm.com/html/emoticons/rolleyes.gif' border='0' style='vertical-align:middle' alt='rolleyes.gif' /><!--endemo-->




--------------------


<div class='signature'> I'm not addicted to porn, I'm addicted to masturbation. Porn is just an enabler.



<img src='http://i3.photobucket.com/albums/y81/ma ... Threat.gif' border='0' alt='user posted image'>

There are plenty more fish in the sea, get your tackle out and see what bites.



Divers go deeper and stay down for longer.
CirrusMinor
Posts: 24
Joined: Tue Jul 26, 2005 12:00 am
Self service

Post by CirrusMinor »

Yep, rather than make up stupid names as the From field the cheap-skates are using the To field. I usually have a laugh at the made up names - seeing my own would be boring <!--emo&B)--><img src='http://i2.ifrm.com/html/emoticons/cool.gif' border='0' style='vertical-align:middle' alt='cool.gif' /><!--endemo-->




--------------------


<div class='signature'> The use of money is all the advantage there is to having money. (Ben Franklin)
belchingmatt
Posts: 2893
Joined: Tue Jan 31, 2006 12:00 am
Location: Spartaaa
Self service

Post by belchingmatt »

Some of the subject titles for these messages are hilarious.



Beat her womb with your new big rod.








--------------------


<div class='signature'> I'm not addicted to porn, I'm addicted to masturbation. Porn is just an enabler.



<img src='http://i3.photobucket.com/albums/y81/ma ... Threat.gif' border='0' alt='user posted image'>

There are plenty more fish in the sea, get your tackle out and see what bites.



Divers go deeper and stay down for longer.

Post Reply