I've been getting some like that recently. They have "from" addresses in my domains, but when I run the headers through spamcop, it shows somewhere else... a clear forgery. Looks like they're address harvesting and forging "intra-domain" spam...
On Saturday, June 22, 2002, at 04:42 , [EMAIL PROTECTED] wrote: > This is an interesting twist... > > My wife just got a spam from one of my spamtrap addresses. > > How is this possible? The name in the FROM was definitely a spamtrap; > the Reply-To address was from some other system entirely. > > Shouldn't SIMS have picked that one up? Are the %*&*^ spammers > learning new tricks? > > -- Bill Christensen > [EMAIL PROTECTED] > > Green Homes For Sale/Lease: http://www.greenbuilder.com/realestate/ > Green Building Pro Directory: http://directory.greenbuilder.com/ > Sustainable Bldg Calendar: http://www.greenbuilder.com/calendar/ > Sustainable Bldg Bookstore: http://www.greenbuilder.com/bookstore > International Strawbale Registry: http://sbregistry.greenbuilder.com > > ############################################################# > This message is sent to you because you are subscribed to > the mailing list <[EMAIL PROTECTED]>. > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> > To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> > Send administrative queries to <[EMAIL PROTECTED]> > > Aron S. Spencer Irvine, CA, 92612 ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
