Junk e-mail from myself (personal account)

[Joanne]

So I keep getting junk e-mail which appears to be from my e-mail address. I've reset my password recently in a bid to stop it, but it hasn't stopped.

 

What's the deal? How are they spoofing it?

[Joanne]

This is the e-mail header with my address removed and replaced with

 

x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J

Authentication-Results: hotmail.com; spf=pass (sender IP is 213.202.208.191; identity alignment result is fail and alignment mode is relaxed) [email protected]; dkim=none (identity alignment result is pass and alignment mode is relaxed) header.d=hotmail.com; x-hmca=none header.id=@hotmail.com

X-SID-PRA: @hotmail.com

X-AUTH-Result: NONE

X-SID-Result: NONE

X-Message-Status: n:n

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02

X-Message-Info: 35i+9DcV76wBa6T/DP/xKRpPev+9quO5INXfIgcgh6ZaUU5dALDqjvY4WVsUvjQ3xQ95cpA4xrhtRLkmYIYqv7kh813Me8m1tGBye/8UK4yNgBPHtFD34eWu+QiSZOSqDsbEKrSePS74J0JWwZgapXNq1My3jUsDSO6t6yxKruKkw3QevRCiVt/0HfyUy6jlUFZMmR4ZRKOyiD5jXklb8vM9r/fpPw67Jh05ieMgGrKtRWQfPnY/Yg==

Received: from mediaweb.carefulsupervision.com ([213.202.208.191]) by BAY004-MC3F35.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143);

Wed, 25 Nov 2015 16:05:36 -0800

Received: from localhost (127.0.0.1) by mediaweb.carefulsupervision.com id ha84ma16lt04 for <@hotmail.com>;[date] (envelope-from <>)

Subject:=?utf-8?Q?=E2=9C=94=20?=You've won . Please confirm receipt

From:Congratulations! <@hotmail.com>

Reply-to: <@mediaweb.carefulsupervision.com>

To:

Date: [date]

Content-Type: text/html; charset=us-ascii;

Return-Path: <>

Message-ID:

X-OriginalArrivalTime: 26 Nov 2015 00:05:36.0733 (UTC) FILETIME=[2D56A0D0:01D127DE]

 

Re: 24hrs to claim this

 

http://beautifulautumn.net/336bce755armvur864/336e39.PNG

 

http://beautifulautumn.net/336bce755armvur864/43a10c.PNG

 

http://beautifulautumn.net/336bce755armvur864/496a5b.jpg

[LeMarchand]

Are you on Virgin? I used to get that occasionally.

 

Edit: 2nd post not there when I replied!

Edited November 26, 2015 by LeMarchand

[Domino]

looks to be spoofed from mediaweb.carefulsupervision.com

 

Try blocking the domain or reporting as spam?

 

As for the how, MS have much less support calls for allowing spam then mail that isn't received due to tight SPF/domain blocking...

Edited November 26, 2015 by Domino

[Duranis]

Its actually surprisingly easy to spoof an email address if you just set up an SMTP server. In theory SPF and DMARC should catch them. In practice SPF records are pretty much impossible to keep up to date, most big email providers and governments don't have public DMARC records and most email providers would rather still send you the email even if the SPF record doesn't match.

[Joanne]

Well it all goes to my junk e-mail, but I'm on a rampage to stop it!! I get all sorts of weird and wonderful e-mails and I do wonder how they get my address. I'm almost certain price comparison websites are partly to blame because I get stuff addressed to my husband to my e-mail. I normally stick my address in because I'm sorting out the insurance. I'll try blocking that domain and see what happens.