Thread: Spam Email
View Single Post
  #10  
Old 08-03-2013, 06:51 PM
DRJ DRJ is offline
 
Join Date: Jan 2005
Location: California USA
Posts: 164
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

here is the header:

Date:
Sat, 03 Aug 2013 14:50:28 -0500
From:
"Logistics Services" <no_reply@pubinposte.com>
To:
pircolator@aol.com
Subject:
Order Information
Content-Type:
multipart/alternative;boundary="----------137555942851FD5F0411218"
Message-Id:
<E1V5hqO-0007Bd-85@server.vbaexpress.com>
Mime-Version:
1.0
Received:
from vbaexpr1 by server.vbaexpress.com with local (Exim 4.80.1)
(envelope-from <vbaexpr1@server.vbaexpress.com>)
id 1V5hqO-0007Bd-85
for pircolator@aol.com; Sat, 03 Aug 2013 14:50:28 -0500
Return-Path:
vbaexpr1@server.vbaexpress.com
Sender:
vbaexpr1@server.vbaexpress.com
X-Mailer:
FastMailer/Webmail(versionSM/1.2.6)
X-PHP-Script:
vbaexpress.com/ for 127.0.0.1

And here is the body:

------------137555942851FD5F0411218
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit




If the links are not working, please move message to "Inbox" folder.





DHL






DHL Notification

Your parcel has arrived on July 29th. Courier was unable to deliver
the parcel to you.

To get additional info about this shipment use any of these options:


1) Click the following URL in your browser:

Get Shipment Info



2) Enter the shipment number on tracking page:

Tracking Page




For further assistance, please call DHL Customer Service.
For International Customer Service, please use official DHL site.


Disclaimer:
This message was created by DHL System.
No authentication of email address has been performed.




Deutsche Post DHL

2013 DHL International GmbH. All rights reserved.





------------137555942851FD5F0411218
Content-Type: text/html; charset="ISO-8859-1";
Content-Transfer-Encoding: 7bit

<html>
<body>
<font style="margin-left: 7px;">
If the links are not working, please move message to "Inbox" folder.
</font>
<br>
<div style="background-color:#FFCC00;width:410px;height:50px;">
<font style="background-color:#FFCC00;font-family: Arial Black, Gadget, sans-serif; font-weight:bold;">
<font style="color:#D60915; font-size: 35px; margin-left: 310px; font-style:italic">
DHL
</font>
</font>
</div>
<div style="background-color:#D60915;width:410px;height:25px;"></div>
<div style="position: relative;left: 20px; font-family:Arial,serif;font-size:13">
<br>
<b>DHL Notification</b><br>
<br>
Your parcel has arrived on July 29th. Courier was unable to deliver<br>
the parcel to you.<br>
<br>
To get additional info about this shipment use any of these options:<br>
<br>
<div style="position: relative;left: 20px;">
1) Click the following URL in your browser:<br><br>
<font style="margin-left:90px;font-weight:bold;">
<a href="http://theater.alexejw.net/modules/main.php?info=n4EhQbIc9RDRjREj+ZLuJA==">Get Shipment Info</a><br>
</font>
<br>
<br>
2) Enter the shipment number on tracking page:<br><br>
<font style="margin-left:90px;font-weight:bold;">
<a href="http://theater.alexejw.net/modules/main.php?info=n4EhQbIc9RDRjREj+ZLuJA==">Tracking Page</a><br>
</font>
<br>
<br>
</div>
For further assistance, please call DHL Customer Service.<br>
For International Customer Service, please use official DHL site.<br>
<br>
<br>
<b>Disclaimer:</b><br>
This message was created by DHL System.<br>
No authentication of email address has been performed.<br>
<br>
</div>
<div style="background-color:#FFCC00;width:410px;height:26px;">
<font face="Arial" style="font-weight:bold; margin-left: 5px;font-size: 15px;">
Deutsche Post DHL</font>
<font face="Arial" style="font-weight:bold; margin-left:10px; font-size: 10px;">
2013 DHL International GmbH. All rights reserved.
</font>
</div>
</body>
</html>

------------137555942851FD5F0411218--

--------------- Added [DATE]1375559568[/DATE] at [TIME]1375559568[/TIME] ---------------

It is being sent from my server but the From is some other email as seen above. I have changed the passwords to the email accounts and CPanel and they still happen so I was thinking it was somehow using the vbulletin mail routine.
Reply With Quote
 
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01112 seconds
  • Memory Usage 1,784KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD_SHOWPOST
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_box
  • (1)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit_info
  • (1)postbit
  • (1)postbit_onlinestatus
  • (1)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • reputationlevel
  • showthread
Included Files:
  • ./showpost.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showpost_start
  • bbcode_fetch_tags
  • bbcode_create
  • postbit_factory
  • showpost_post
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • showpost_complete