You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Chris <cp...@earthlink.net> on 2006/11/10 01:50:04 UTC
Phishing reports to spoof@millersmiles.co.uk bouncing
Does anyone besides myself report phishing to them? Off and on for the past
four or five months reports to them bounce back, some with odd reasons,
such as the below:
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
d1nonlyjesus-ms@yahoo.com
(ultimately generated from spoof@millersmiles.co.uk)
SMTP error from remote mail server after end of data:
host mx1.mail.yahoo.com [67.28.113.73]: 554 Message not allowed - UP
Email not accepted for policy reasons. Please visit
http://help.yahoo.com/help/us/mail/defer/defer-04.html[120]
This one has me pretty confused. How does this person at yahoo.com get
involved with a message I sent to the spoof@ address? Does anyone possibly
have a POC for them?
Thanks
Chris
--
Chris
Re: Phishing reports to spoof@millersmiles.co.uk bouncing
Posted by Chris <cp...@earthlink.net>.
On Thursday 09 November 2006 7:51 pm, John D. Hardin wrote:
> On Thu, 9 Nov 2006, Chris wrote:
> > Does anyone besides myself report phishing to them? Off and on for
> > the past four or five months reports to them bounce back, some
> > with odd reasons, such as the below:
>
> > This one has me pretty confused. How does this person at yahoo.com get
> > involved with a message I sent to the spoof@ address? Does anyone
> > possibly have a POC for them?
>
> postmaster@ (e.g. <po...@millersmiles.co.uk>) is where you
> contact for mail system problems, which this is. One of their
> important public aliases is forwarded to an address that bounces.
>
> --
Thanks John, I 'thought' I'd tried that right off the bat, maybe not. I'll
give a try and forwarding the bounce to them and see what happens.
Chris
--
Chris
Re: Phishing reports to spoof@millersmiles.co.uk bouncing
Posted by "John D. Hardin" <jh...@impsec.org>.
On Thu, 9 Nov 2006, Chris wrote:
> Does anyone besides myself report phishing to them? Off and on for
> the past four or five months reports to them bounce back, some
> with odd reasons, such as the below:
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
>
> � d1nonlyjesus-ms@yahoo.com
> � � (ultimately generated from spoof@millersmiles.co.uk)
> � � SMTP error from remote mail server after end of data:
> � � host mx1.mail.yahoo.com [67.28.113.73]: 554 Message not allowed - UP
> Email not accepted for policy reasons. �Please visit
> http://help.yahoo.com/help/us/mail/defer/defer-04.html[120]
>
> This one has me pretty confused. How does this person at yahoo.com get
> involved with a message I sent to the spoof@ address? Does anyone possibly
> have a POC for them?
postmaster@ (e.g. <po...@millersmiles.co.uk>) is where you
contact for mail system problems, which this is. One of their
important public aliases is forwarded to an address that bounces.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
The fetters imposed on liberty at home have ever been forged out
of the weapons provided for defense against real, pretended, or
imaginary dangers from abroad. -- James Madison, 1799
-----------------------------------------------------------------------
2 days until Veterans Day