Till now, we used to get spam and virus through the email address in the Profile and About page. Now it looks like spammers are sending mails as if they come from the addresses in the profile.
I usually delete them but checked the headers of one as it carried the hotmail address of bourny :
----
X-Spam-Status:
Yes, score=6.3 required=5.0 tests=BAYES_99, FORGED_HOTMAIL_RCVD2,MISSING_MIMEOLE,NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL autolearn=no version=3.0.0
X-Spam-Report:
* 0.0 NO_REAL_NAME From: does not include a real name * 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' * 1.9 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 0.9969] * 0.1 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP * [80.218.244.158 listed in combined.njabl.org] * 2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address * [80.218.244.158 listed in dnsbl.sorbs.net] * 1.1 PRIORITY_NO_NAME Message has priority, but no X-Mailer/User-Agent * 0.0 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
X-Spam-Flag:
YES
X-Spam-Checker-Version:
SpamAssassin 3.0.0 (2004-09-13) on cpanel.easywebbuilders.com
X-Spam-Level:
******
Message-Id:
----
Return-path:
Envelope-to:
tintin@banglacricket.com
Delivery-date:
Fri, 08 Oct 2004 04:24:40 -0500
Received:
from banglacr by cpanel.easywebbuilders.com with local-bsmtp (Exim 4.42) id 1CFqzN-0007KM-5g for tintin@banglacricket.com; Fri, 08 Oct 2004 04:24:40 -0500
Received:
from [80.218.244.158] (helo=banglacricket.com) by cpanel.easywebbuilders.com with esmtp (Exim 4.42) id 1CFqzM-0007KI-5x for tintin@banglacricket.com; Fri, 08 Oct 2004 04:24:37 -0500
----
What is happening here ? Is cpanel.easywebbuilders.com masquerading as bournie or something else ?