On Sat, Jan 28, 2012 at 11:11 AM, Nicholas Thompson < [email protected]> wrote:
> Thanks, Sarbajit, > > I should have figured that out for myself. What would one do, in such > circumstances? > > I am still curious about those damned ordinary housewives. > > Peter are you there? > > Nick > Here's an article on the problem: e-mail-hijacked-and-sending-spam-to-address-book-friends http://goo.gl/6Qnl6 As I recall, comcast, earthlink, aol and other large ISPs are easy targets. Looking at the headers, it looks like hostgo was suspicious that the email might be bogus. -- Owen Delivered-To: [email protected] Received: by 10.146.138.5 with SMTP id l5csp76315yad; Sat, 28 Jan 2012 08:50:40 -0800 (PST) Received: by 10.224.209.133 with SMTP id gg5mr14079440qab.40.1327769440010; Sat, 28 Jan 2012 08:50:40 -0800 (PST) Return-Path: <[email protected]> Received: from spring.joyent.us (spring.joyent.us. [8.17.170.107]) by mx.google.com with ESMTP id g4si9573400qap.70.2012.01.28.08.50.39; Sat, 28 Jan 2012 08:50:39 -0800 (PST) Received-SPF: neutral (google.com: 8.17.170.107 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=8.17.170.107; Authentication-Results: mx.google.com; spf=neutral (google.com: 8.17.170.107 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected] Received: from milan.hostgo.com (milan.hostgo.com [72.52.99.130]) by spring.joyent.us (Postfix) with ESMTPS id 20B7B569F2; Sat, 28 Jan 2012 16:50:39 +0000 (GMT) Received: from localhost ([127.0.0.1] helo=milan.hostgo.com) by milan.hostgo.com with esmtp (Exim 4.69) (envelope-from <[email protected]>) id 1RrBTK-0008SN-AJ; Sat, 28 Jan 2012 11:49:50 -0500 Received: from qmta11.emeryville.ca.mail.comcast.net ([76.96.27.211]) by milan.hostgo.com with esmtp (Exim 4.69) (envelope-from <[email protected]>) id 1RrBTB-0008Rf-9x for [email protected]; Sat, 28 Jan 2012 11:49:46 -0500 Received: from omta20.emeryville.ca.mail.comcast.net ([76.96.30.87]) by qmta11.emeryville.ca.mail.comcast.net with comcast id T4AN1i0021smiN4AB4pfC3; Sat, 28 Jan 2012 16:49:39 +0000 Received: from sz0006.ev.mail.comcast.net ([76.96.26.52]) by omta20.emeryville.ca.mail.comcast.net with comcast id T4pf1i00g17Sxjg8g4pf1X; Sat, 28 Jan 2012 16:49:39 +0000 Date: Sat, 28 Jan 2012 16:49:39 +0000 (UTC) From: [email protected] To: [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected] Message-ID: <1302656047.218773.1327769379489.javamail.r...@sz0006a.emeryville.ca.mail.comcast.net> MIME-Version: 1.0 X-Originating-IP: [187.177.104.197] X-Mailer: Zimbra 6.0.13_GA_2944 (zclient/6.0.13_GA_2944) X-Spam-Status: No, score=-3.1 X-Spam-Score: -30 X-Spam-Bar: --- X-Ham-Report: Spam detection software, running on the system "milan.hostgo.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: How is it going? http://www.maricom.pl/mmoe.php?oluxidname=83 Sat, 28 Jan 2012 17:49:39 "I wish you would go away." (c) BERTRAM waehlerischesten [...] Content analysis details: (-3.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [76.96.27.211 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (plissaman[at]comcast.net) -0.0 SPF_PASS SPF: sender matches SPF record -1.2 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Flag: NO Subject: [FRIAM] kathy.saunders X-BeenThere: [email protected] X-Mailman-Version: 2.1.14-1 Precedence: list Reply-To: The Friday Morning Applied Complexity Coffee Group <[email protected]> List-Id: The Friday Morning Applied Complexity Coffee Group <friam_redfish.com.redfish.com> List-Unsubscribe: <http://redfish.com/mailman/options/friam_redfish.com>, <mailto:[email protected]?subject=unsubscribe> List-Archive: <http://redfish.com/pipermail/friam_redfish.com> List-Post: <mailto:[email protected]> List-Help: <mailto:[email protected]?subject=help> List-Subscribe: <http://redfish.com/mailman/listinfo/friam_redfish.com>, <mailto:[email protected]?subject=subscribe> Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: [email protected] Sender: [email protected] X-ACL-Warn: { X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - milan.hostgo.com X-AntiAbuse: Original Domain - backspaces.net X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - redfish.com X-Source: X-Source-Args: X-Source-Dir:
============================================================ FRIAM Applied Complexity Group listserv Meets Fridays 9a-11:30 at cafe at St. John's College lectures, archives, unsubscribe, maps at http://www.friam.org
