cancel
Showing results for 
Search instead for 
Did you mean: 

How username@username.plus.com spam gets through when blackh

Stuart22
Grafter
Posts: 37
Registered: 10-10-2007

How username@username.plus.com spam gets through when blackh

There seems to be a different "envelope to" field from the "mail to" field. So the mail appears to be sent to username@username.plus.com and is handled as such once received by the email client (eg rules) but is actually retrieved from the mailbox for firstname@username.plus.com (account username+firstname) due to the "envelope to" field.

See headers

Envelope-to: firstname@username.plus.com
Delivery-date: Thu, 31 May 2007 00:47:32 +0000
Received: by pih-sunmxcore18.plus.net with spam-scanned (PlusNet MXCore v2.00) id 1HtYp8-0000Ud-40
for firstname@username.plus.com; Thu, 31 May 2007 00:47:31 +0000
X-Daemon-Classification: INNOCENT
Received: from [60.51.15.34] (helo=tm.net.my)
by pih-sunmxcore18.plus.net with esmtp (PlusNet MXCore v2.00) id 1HtYp1-00006U-Tc ; Thu, 31 May 2007 00:47:25 +0000
Received: from [60.51.15.34] by mail.wieskerstrauch.com; Sun, 6 May 2007 00:36:52 -0800
Message-ID: <01c78f76$a3ef9990$220f333c@gm>
From: "Ty Woodruff" <gm@wieskerstrauch.com>
To: <username@username.plus.com>
Subject: Rick
Date: Sun, 6 May 2007 00:36:52 -0800
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2527
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
X-PN-VirusFiltered: by PlusNet MXCore (v4.00)
X-DSPAM-Result: Innocent
X-DSPAM-Processed: Thu May 31 00:47:31 2007
X-DSPAM-Confidence: 0.5635
X-DSPAM-Improbability: 1 in 130 chance of being spam
X-DSPAM-Probability: 0.0372
X-DSPAM-Factors: 27,
8859+2">, 0.99531,
2">+<META, 0.99520,
level+of, 0.00496,
level+of, 0.00496,
X-MimeOLE*V6.00.2900.2527, 0.99320,
X-MimeOLE*MimeOLE+V6.00.2900.2527, 0.99320,
and+slow, 0.00795,
and+slow, 0.00795,
Date*Sun+6, 0.01000,
Date*52+0800, 0.99000,
Date*6+May, 0.01000,
higher+level, 0.01000,
higher+level, 0.01000,
the+Great, 0.01000,
the+Great, 0.01000,
Date*2007, 0.99000,
size=2>+<IMG, 0.01000,
2527", 0.99000,
buds, 0.01000,
buds, 0.01000,
After+the, 0.01000,
After+the, 0.01000,
deliberate, 0.01000,
deliberate, 0.01000,
Received*Sun+6, 0.01000,
2900+2527", 0.99000,
place+of, 0.99000
X-Antivirus: AVG for E-mail 7.5.472 [269.8.3/824]
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="=======AVGMAIL-465E1BE30085======="
1 REPLY
Community Veteran
Posts: 14,469
Registered: 30-07-2007

How username@username.plus.com spam gets through when blackh

The firstname@ was in the BCC when it was sent.