Winamp & Shoutcast Forums - Spam that's not spam?

Winamp & Shoutcast Forums (http://forums.winamp.com/index.php)

- General Discussions (http://forums.winamp.com/forumdisplay.php?f=1)

- - Spam that's not spam? (http://forums.winamp.com/showthread.php?t=212224)

Spam that's not spam?

Ok, I got this message. It looks like spam, but WTF? No link, no hidden message, no nothing. Here's the whole thing, including headers:

code:
X-Message-Status: n

X-SID-PRA: Dat Alvi <CatherineBlackley@user-0c90prd.cable.mindspring.com>

X-SID-Result: TempError

X-Message-Info: 6sSXyD95QpXRZ+yO9O9I01eT2MlQKVWXme/MfWRkXEo=

Received: from mc4-f18.hotmail.com ([65.54.190.154]) by imc3-s24.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);

	 Sat, 2 Apr 2005 17:25:30 -0800

Received: from user-0c90prd.cable.mindspring.com ([24.144.103.109]) by mc4-f18.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);

	 Sat, 2 Apr 2005 17:25:29 -0800

Date: Sun, 03 Apr 2005 01:11:51 +0000

From: Dat Alvi <CatherineBlackley@user-0c90prd.cable.mindspring.com>

To: ********@hotmail.com

Subject: =?iso-8859-1?B?LQ==?=

MIME-Version: 1.0

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 7bit

Return-Path: CatherineBlackley@user-0c90prd.cable.mindspring.com

Message-ID: <MC4-F18SBWYf5UPHvAo00026fc9@mc4-f18.hotmail.com>

X-OriginalArrivalTime: 03 Apr 2005 01:25:30.0296 (UTC) FILETIME=[06088B80:01C537EC]



Bobbi Aversa

Well, looks like sonone is trying to run a SMTP server off their cable modem. Maybe misconfigured it, was was testing it or something like that.

I agree. The DNS is a home user hostname, and it was using Microsoft's SMTP stuff it looks like.

I think it's a fair bet that the Windows username that was being used was "CatherineBlackley" as well :)

I never get to see that sort of stuff. dnsbl.net.au and sbl-xbl.spamhaus.org blocked them all.

Actually most of these are hijacked smtp servers that someone will use to send 'test' messages. If no rejection message comes back they know the address is still receiving mail and can be sold.

Or maybe they tried a test to use the

To: ********@hotmail.com

Maybe there will come a spam later from this adress. Unless that was editied on purpose.

Weird never seen anything like that before.

Quote:

Originally posted by PulseDriver
To: ********@hotmail.com

Maybe there will come a spam later from this adress. Unless that was editied on purpose.

Yeah, that's edited.

Quote:

Originally posted by MegaRock
Actually most of these are hijacked smtp servers that someone will use to send 'test' messages. If no rejection message comes back they know the address is still receiving mail and can be sold.

That makes sense. Hotmail really should've blocked this email.