Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Piggyback Email


  • Please log in to reply
1 reply to this topic

#1 gnulab

gnulab

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:57 PM

Posted 28 July 2017 - 09:36 AM

Hi Members,

 

I've been receiving emails with such headers. Could someone enlighten me if someone has been using my domain to send spam emails?

Delivered-To: oog@g-techdive.com
Received: by 10.80.145.234 with SMTP id h39csp1121695eda;
        Tue, 4 Jul 2017 08:54:41 -0700 (PDT)
X-Received: by 10.202.80.85 with SMTP id e82mr25591031oib.0.1499183681474;
        Tue, 04 Jul 2017 08:54:41 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1499183681; cv=none;
        d=google.com; s=arc-20160816;
        b=UuK0q6/f2wjmFEm24pA1zvvwrf6mf5z6FpRXxZ1oUpE+lgXMj81HQPBpjr5aRXcBnK
         yydaODsjPBv/6VDuo8fw5XecIKajIbtmJQaiwpxE+oSP4C34NnkR3Xkk19hudy7HaL/v
         DL0HKO5InxUqhf9DcLbWmW73zt8luejpZacGAD2PCdKpdDJYHq5togcjTTKefag9uCIq
         i0LRc1hKUC7ZdqOleELEL2dr4jQ4nnAPwQEz9DLElIc7dUHnoqS6HByRDHEp9/NUMMNp
         WpTYW7RRy5/M65seIZn3l/Qx/kQGgLSQSz0Ubmdo+KsnpaLgAN8oZAw2LjiqS9bqqHSt
         N54g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=date:message-id:in-reply-to:references:subject:auto-submitted:to
         :from:dkim-signature:arc-authentication-results;
        bh=/hnGUJotrPC2z+lykomD9UM27DMx2F5HwyG1CUSKiwc=;
        b=qvWqnr7HCxouvvzznbDAZ+X0Q9e0FlFAnUYwGRWe0I1hN5WIQqsUZQLqWZiv4typEn
         MfIWPpN/TE2vhLePH1ykbzEupDjoQgLcQY7PAPQ0iA9ZxxRJHPGLYhkEdBLJ0wIdhcfz
         cFyFa3dFrDhDmnoeAEmOEwiReKtJ9QUhiWPkslKooQPJTpcuZSJmUbodrt0XCjDVfQJL
         uv3ZOluNfH2b14YF8np+17SyL4MyCVAJBj+UDB5SzUYdRKQDIC0Bz8NBAfLpUFVVZR3b
         IpAUgTHv92JLDzI5hAOwIrjfApKNJemJpidMxBNn2VY5a2a+OwkARMdBrv6cL/kjx/RB
         qW6A==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@googlemail.com header.b=OSts4IwT;
       spf=pass (google.com: best guess record for domain of postmaster@mail-oi0-x243.google.com designates 2607:f8b0:4003:c06::243 as permitted sender) smtp.helo=mail-oi0-x243.google.com;
       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=googlemail.com
Return-Path: <>
Received: from mail-oi0-x243.google.com (mail-oi0-x243.google.com. [2607:f8b0:4003:c06::243])
        by mx.google.com with ESMTPS id f80si4424158oic.182.2017.07.04.08.54.41
        for <oog@g-techdive.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 04 Jul 2017 08:54:41 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of postmaster@mail-oi0-x243.google.com designates 2607:f8b0:4003:c06::243 as permitted sender) client-ip=2607:f8b0:4003:c06::243;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@googlemail.com header.b=OSts4IwT;
       spf=pass (google.com: best guess record for domain of postmaster@mail-oi0-x243.google.com designates 2607:f8b0:4003:c06::243 as permitted sender) smtp.helo=mail-oi0-x243.google.com;
       dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=googlemail.com
Received: by mail-oi0-x243.google.com with SMTP id f134so16561262oig.0
        for <oog@g-techdive.com>; Tue, 04 Jul 2017 08:54:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=googlemail.com; s=20161025;
        h=from:to:auto-submitted:subject:references:in-reply-to:message-id
         :date;
        bh=/hnGUJotrPC2z+lykomD9UM27DMx2F5HwyG1CUSKiwc=;
        b=OSts4IwTXDHyjzs+qA1L+S4uUPrDRjkqXC/mSxRFg4FkdCcVuylhDkYvkzah6svYGP
         /SAK0lyfThhSOrr2AUt9/KDssZK2vcPoZNE8CJjdQI099+5oT+Kqopt+tX3sc05OpRs3
         eVBJOclxFyAXfcah3bAuEYLw2+XqBFmnYJ9RSe8n9rjZ9LHeV1bahRc3KmrAF6oyVVB3
         35Aatzsd87AHuOEFMUP0Fu5LifPVzM663eLKlnJNrbCJnNOzAAszVHC79IRdeW2lsKmP
         3DDyFuOxuHzJoDAGz1PIJo7O3RrTPZjfvJi36RREVvu/2btt45k2+Y2CcTd4xlOnHFH/
         GYTg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:from:to:auto-submitted:subject:references
         :in-reply-to:message-id:date;
        bh=/hnGUJotrPC2z+lykomD9UM27DMx2F5HwyG1CUSKiwc=;
        b=DcimsncjV3g+LE4S1tYSiPL1qhCF+64T9qdmgorwd38FCtPJhpQ//GAS432Mcg56kz
         K9bcvP61plInpy+zSyxO/wy3/zsURVKKQicH7NCAFQB56np5IgdCRBJOuwrv+Lnhmr9Z
         kpfHIhtZ6uMi9sJFagrBpABLTtmt+E4CbDHplOfvh3eC1tAheObdSiD7h0GlOuhvklCE
         XG+3LeSouw2UqIzmr0rcE1n9YPaPoaOm7xb7XwR9EGXtSudoaPN+4hGV3REtPzAhwIsh
         dDZzJdoLnhwNxJeFmg9uZzHxi6tDMnpBfDQy2Vrzm2GLpa7cav80k1JSrJhJ0niDWeh5
         JLjw==
X-Gm-Message-State: AIVw113RV/hlxTbxCgkmprXgQ8VHg5o0jIut2dK2SwHfIamNjZe8R0Da cj64M1f+BSCsoelnafKiKAWX16wM1WRd0SazoOtEHQ==
X-Received: by 10.202.58.136 with SMTP id h130mr13323767oia.159.1499183680941;
        Tue, 04 Jul 2017 08:54:40 -0700 (PDT)
Content-Type: multipart/report; boundary="001a113ce05ac16ab905537fe68b"; report-type=delivery-status
Return-Path: <>
Received: by 10.202.58.136 with SMTP id h130mr14245647oia.159; Tue, 04 Jul 2017 08:54:40 -0700 (PDT)
From: Mail Delivery Subsystem <mailer-daemon@googlemail.com>
To: oog@g-techdive.com
Auto-Submitted: auto-replied
Subject: Delivery Status Notification (Failure)
References: <00aadf129010$13e04e74$900de76d$@g-techdive.com>
In-Reply-To: <00aadf129010$13e04e74$900de76d$@g-techdive.com>
X-Failed-Recipients: wang@sunrider.com
Message-ID: <595bba40.883aca0a.8ff9c.e1d2.GMRIR@mx.google.com>
Date: Tue, 04 Jul 2017 08:54:40 -0700 (PDT)

Thanks a bunch

Henry


Edited by hamluis, 28 July 2017 - 10:58 AM.
Moved from Web Browsing/Email to Gen Security - Hamluis.


BC AdBot (Login to Remove)

 


#2 Oliverch

Oliverch

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:02:57 PM

Posted 01 August 2017 - 03:41 AM

That can happen when you dpn't think about security online. Try this https://www.bestvpnrating.com/guide where you'll find something thatn can help you out. It has many articles and I'm sure it will give you good information






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users