dslreports logo
 
    All Forums Hot Topics Gallery
spc
uniqs
84

Styvas
Who are we? Forge FC!
Premium Member
join:2004-09-15
Hamilton, ON

Styvas to nwrickert

Premium Member

to nwrickert

Re: From where do you think this spam is being sent?

Thanks for the reply. I'll try to figure out how to do the code box thing and re-post. I was reticent to post the whole header set as I don't know what info in there is personally identifying and what's not (in terms of my wife's account info). What looks like gibberish to me could be an enormous privacy breach if I post it publicly.
dsilvers
join:2009-05-17
Canyon Lake, TX

dsilvers

Member

Short of your wife's email address there will not be much of interest. Redact that if it bothers you.

Styvas
Who are we? Forge FC!
Premium Member
join:2004-09-15
Hamilton, ON

Styvas

Premium Member

I hope I've done this correctly. If someone notices something that I shouldn't have posted publicly, please let me know immediately via PM and I'll edit the post to remove it.

Anywhere that you see REMOVED, I've deleted a reference to my wife's full name and/or email address (the very first one, however, is the recipient of the spam message -- her friend).

I do notice that I overlooked a telling IP further down (looks to be in New Jersey), but someone might have a reasonable explanation for that as well.

Return-Path: <REMOVED>
Received: from nm29.bullet.mail.bf1.yahoo.com (nm29.bullet.mail.bf1.yahoo.com [98.139.212.188])
by mail.ac.brocku.ca (8.14.4/8.14.3) with ESMTP id r2T4pWMu030142
for <REMOVED>; Fri, 29 Mar 2013 00:51:32 -0400
Received: from [98.139.215.142] by nm29.bullet.mail.bf1.yahoo.com with NNFMP; 29 Mar 2013 04:38:46 -0000
Received: from [98.139.212.249] by tm13.bullet.mail.bf1.yahoo.com with NNFMP; 29 Mar 2013 04:38:46 -0000
Received: from [127.0.0.1] by omp1058.mail.bf1.yahoo.com with NNFMP; 29 Mar 2013 04:38:46 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 373554.90337.bm@omp1058.mail.bf1.yahoo.com
Received: (qmail 23396 invoked by uid 60001); 29 Mar 2013 04:38:46 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.ca; s=s1024; t=1364531926; bh=+VSHxta/IArOCJaag11iYVn0UdV3xFhUCy3aho7lsKQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TdHKnYVlhsVmfkySVpaQaA8c1IwqSwp5gRvLUGT4tTAKw4sDx2H8/XNGX9fHmEBQSvnwwqnlXCpC2AYkjSApdzCoOdHRsXzjio4WsDi7rUPJnYO8GZU/jY60WwWUd/WQ3lRPTh2RMeyzqsFt6rkagTj0PpFZCCk9g30nXSsoodQ=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.ca;
  h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
  b=xM3BTgbdkpdDt8e7cZk7gDuuJnQyIhKVW/sZ4MGek+bAa+E86sP8Y/cFYBJeQeSMrdHHiA1RnVIAAGJIEuQeBK+X5UDuflLsguF03I39D+ikDxQpHqajRQlxGdJ8KS4nQRBHmRxRUhpDMG0Iz48V9S61kAjLWhh80qmTIsqwvFs=;
X-YMail-OSG: sjer_6MVM1m.t8TX58kTSUCawXcYwK2nxoGyvIrbv4VVdLW
 gyC_rDtMXQfY90NvqIlL5LXwpi4IqeZtbvsU0SlUVbI4ePULik_WnPurmrPm
 GdXR5mE8U13FwcG2V7pqoLA1QaEw2CMiOceYchdjqJb7BxpYOSH5Kx5zePb4
 3XT6LLOQO7qW1ePLdZJTVV2_C2IsXKYAdVTZQkFbECwN2QnKg5ZoH37vtecW
 s4C0oUSFmbmYufo5jTct1uiuwj0USAJsUa3LPOjYUt6LzxEJaYWmvFYzg7zm
 Vwr8bOn1nrr5YIZ0YSYs2ABW8mattpIvhRyf3MO.Ob9hKOjBb2WMOKIGpMJM
 p9eBGzKWf0T4EgaCS9o1JnpUP0kCJl.Cb6xMkpjBRR03FrYDMGCfYJlLqUKC
 JKHLfG8EJqNIq.duhyKVtAQrXy5L8NbsFNzDcvclaWvTc37djsn_WBIE3YaZ
 cyFMZZH_aNSHR_29qlrOtOW1pWbaYoL7ZX4wR5oaU0G_fWx.MJDJsEaj5QLT
 D5aArOh.HTetHyN4qcPinq9p0_snMur__kS02M0MCRYmwRsnxglzf4uBZ28q
 pZfWyQ6pFc8Gh46Rzjw--
Received: from [174.239.97.160] by web162505.mail.bf1.yahoo.com via HTTP; Thu, 28 Mar 2013 21:38:45 PDT
X-Rocket-MIMEInfo: 002.001,Cmh0dHA6Ly93d3cuZmVzZXdvcmtzLmNvbS9iZmx4amp0cy9kdXhmLmNqbnlsP3VtYyAgCgoKIAoKCgogCj MvMjkvMjAxMyA1OjM4OjQ0IEFNCgoKCiAKCiAKICAgICAgCgogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIAoKCgoKCgoKCgoKICAgICAgICAKCgozLzI5LzIwMTMgNTozODo0NCBBTSAgIC AgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgATABAQEB
X-Mailer: YahooMailWebService/0.8.139.530
Message-ID: <1364531925.23034.YahooMailNeo@web162505.mail.bf1.yahoo.com>
Date: Thu, 28 Mar 2013 21:38:45 -0700 (PDT)
From: <REMOVED>
Reply-To: <REMOVED>
Subject: ::::
To: dw08tj <dw08tj@badger.ac.brocku.ca>, afortin <REMOVED recipient address>,
        jm09kv <jm09kv@badger.ac.brocku.ca>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1024699347-1585945310-1364531925=:23034"
X-Spam-Score: -1.486  ;
BAYES_00,FREEMAIL_FROM,FSL_FREEMAIL_1,FSL_FREEMAIL_2,HTML_MESSAGE,
T_DKIM_INVALID
X-Spam-Settings: key=afortin;subject_tag=*****SPAM*****;spam_action=mark;required_score=5
X-Exclamation: Surgite!  Push on!
X-SMTP-From: <REMOVED> nm29.bullet.mail.bf1.yahoo.com [98.139.212.188] (nm29.bullet.mail.bf1.yahoo.com)
X-Spam-Scanned-By: mail.ac.brocku.ca
X-Virus-Scanned-By: mail.ac.brocku.ca, using ClamAV
X-Filter-Time: 2 seconds
X-Scanned-By: MIMEDefang 2.72 on 139.57.65.81
 
--1024699347-1585945310-1364531925=:23034
Content-Type: text/plain; charset=us-ascii