[semi-OT] SPAM email headers don't mention my email address?

Jerry Feldman gaf at blu.org
Sun Nov 6 07:41:49 EST 2011


Uses bcc instead of cc or to.

On 11/05/2011 12:19 PM, Michael ODonnell wrote:
> I'm getting much less SPAM in the last year or so (yay!)
> and I gather that's at least partly due to the shutdown of some
> botnets.  And I hate to say anything positive about ComCast but
> I think another factor is that their filters are pretty good.
>
> SPAM volume is now low enough that it's remarkable when one gets
> through, so when one arrived this morning I had a look at the
> headers and it reminded me of a question I've had for some time:
>
>    How does a message like this get delivered to me even
>    though the headers (at least those present in the
>    message as delivered) never mention my email address?
>
> Last time I started to look into this (over a year ago) I think
> I got as far as concluding that the trick somehow involved
> the Blind-CC mechanism but then I got distracted by another
> matter and didn't pursue it.  Headers shown below, FWIW...
>
>
>  ### BEGIN SPAM HEADER ###
>
>
>  Delivery-Date: Sat Nov  5 11:39:36 2011
>  Return-Path: brittnyleonardo3655 at yahoo.com
>  Received: from mail.g.comcast.net [76.96.58.11]
>          by e521 with POP3 (fetchmail-6.3.21)
>          for <mod at localhost> (single-drop); Sat, 05 Nov 2011 11:39:36 -0400 (EDT)
>  Received: from imta26.emeryville.ca.mail.comcast.net (LHLO
>   imta26.emeryville.ca.mail.comcast.net) (76.96.30.79) by
>   sz0013.wc.mail.comcast.net with LMTP; Sat, 5 Nov 2011 15:39:08 +0000 (UTC)
>  Received: from nm7.bullet.mail.sp2.yahoo.com ([98.139.91.77])
>          by imta26.emeryville.ca.mail.comcast.net with comcast
>          id tTez1h00k1g8YXW0STezhX; Sat, 05 Nov 2011 15:38:59 +0000
>  X-CAA-SPAM: F00000
>  X-Authority-Analysis: v=2.0 cv=UarTuduN c=1 sm=1
>   a=WrUgakHed+VHdk3FP2kkYg==:17 a=VCTXmKFSj3YA:10 a=f8_S3n9t2uQA:10
>   a=H7Y_atK7Me4A:10 a=oJL9TIRMo0YA:10 a=pGLkceISAAAA:8 a=d5TIXxZOcTKd8YHvlXoA:9
>   a=yJ_A2M10WgLnzVu7Dy0A:7 a=wPNLvfGTeEIA:10 a=3ZprHQtiFTkA:10
>   a=MSl-tDqOz04A:10 a=TouV6AKij8TjZf_4:21 a=rTzPMkiFUQVI_asP:21
>   a=hwKpi8rf1Y5EqC0roIQA:7 a=9daKMJ2I1S0dwtf8Y3hdTg==:117
>  Received: from [98.139.91.70] by nm7.bullet.mail.sp2.yahoo.com with NNFMP; 05 Nov 2011 15:39:06 -0000
>  Received: from [98.139.91.5] by tm10.bullet.mail.sp2.yahoo.com with NNFMP; 05 Nov 2011 15:39:06 -0000
>  Received: from [127.0.0.1] by omp1005.mail.sp2.yahoo.com with NNFMP; 05 Nov 2011 15:39:06 -0000
>  X-Yahoo-Newman-Property: ymail-3
>  X-Yahoo-Newman-Id: 330244.25735.bm at omp1005.mail.sp2.yahoo.com
>  Received: (qmail 29188 invoked by uid 60001); 5 Nov 2011 15:39:05 -0000
>  DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1320507545; bh=djPEoozqfRJKQbYHAd1etW1lhDCPWfD2jWmr1jlw4Rc=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=YAEutoO7YBhOjTh5HSo+bIm6ldM0/dw8GgoVSyI/VgYs87HFxDM9CCfh0p9DBXq3Yizq5jrHRtRQojLAqMfSv8KHijTIBnjTjcmc6Yc78LeZko5rKDu7lYsQeTlLsMd19TFzokOMrjY3P9tI1j7FckRRhVgugTyMmM71zchhATs=
>  DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
>    s=s1024; d=yahoo.com;
>    h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
>    b=dL39anKC5jcG7ZNKcTM/x6c8xN0ylWnakX2WCLfVB5y3Kd3mkCZDmtSwdRb2SI7gqadbo5FnCxvFTFXFo76rrBeaVH91EmJ8RjPCXdW5cjBk78zzXwtmfrNRqk5PdOKFNZxJiNhPXjbEBPLm+nZRVwHAaBsIx1hzz/VttzuRmUs=;
>  X-YMail-OSG: bFbjLbcVM1lU92viLeIGHB8MjhPuQjk_J23PN8wcsE1uVkW
>   WLGrBSs353_n8jEocwZDm7I09r6gQ6ePFG9.4ZypoMkYoD6T2lczAR5jqRsd
>   yzFUGG45AKBuN9f8odZXPPqamfz9.ngjencm.7BYynPMxWl_C3jdzIHTKDpe
>   Wjl8JIrL_D61z5z8cJc9Tjb9EDoksZRhSfFggh6uITrAQywSc_5CYl1_IFYP
>   G2YkDWFGn.ZfO2oaQdNBOKTaeV5weeN9io7CXP670Ja3sfFiT.HA_ERHj_dr
>   2UBjmXua8LTxZeQu0j6f.mgisG8QCI7fPb1R2_FwNeBw49IArLqfFTBtKG.O
>   goFk5AX.Rom1yeZ_CgnmROQGKfa.ipLkO5J143WpxRlYWkyvhw3aYyGlfDSR
>   Q3Hl5W7CQxqqLxiunoM.IlEU3QSAYDvi_h4W4QGRfGCBcz3du.uZsWgeYqPb
>   PUuqXMw78uJAo2nZVqHeiRgE6kYZKB4gYWw--
>  Received: from [118.160.227.201] by web114503.mail.gq1.yahoo.com via HTTP; Sat, 05 Nov 2011 08:39:05 PDT
>  X-Mailer: YahooMailWebService/0.8.114.317681
>  Message-ID: <1320507545.27826.YahooMailNeo at web114503.mail.gq1.yahoo.com>
>  Date: Sat, 5 Nov 2011 08:39:05 -0700 (PDT)
>  From: Brittny Leonardo <brittnyleonardo3655 at yahoo.com>
>  Reply-To: Brittny Leonardo <brittnyleonardo3655 at yahoo.com>
>  Subject: Solidworks 2011 SP / AUTOCAD / PTC PRO ENGINEER / MASTERCAM  / CATIA
>  To: "BrittnyLeonardo3655 at yahoo.com" <BrittnyLeonardo3655 at yahoo.com>
>  MIME-Version: 1.0
>  Content-Type: multipart/alternative; boundary="1319625832-2004875909-1320507545=:27826"
>
>  --1319625832-2004875909-1320507545=:27826
>  Content-Type: text/plain; charset=iso-8859-1
>  Content-Transfer-Encoding: quoted-printable
>
>  Hello,=0A=A0=0A=A0 =0A=A0 It has come to my attention that you might have a=
>  n interest in purchasing =0Athe operating system=0AWindows 7 Ultimate versi=
>  on & OFFICE 2010 =0A.=0A=A0=0A=A0 I am selling Windows 7 Ultimate DVD --- t=
>  he FULL Ultimate version. =0AThis is not the retail version from the store =
>  shelf, but it is the one that =0AMicrosoft gives out at=0AIT Professional C=
>          .


-- 
Jerry Feldman <gaf at blu.org>
Boston Linux and Unix
PGP key id:3BC1EB90 
PGP Key fingerprint: 49E2 C52A FC5A A31F 8D66  C0AF 7CEA 30FC 3BC1 EB90



More information about the gnhlug-discuss mailing list