User Name
Password
AppleNova Forums » General Discussion »

Apple Spamming .Mac Users?????


Register Members List Calendar Search FAQ Posting Guidelines
Apple Spamming .Mac Users?????
Thread Tools
Paul
Veteran Member
 
Join Date: May 2004
Location: New York City
 
2004-05-28, 12:57

http://forums.appleinsider.com/showt...threadid=42499
the subject is "Get .Mac free for 60 days."
and it was from "News@InsideApple.Apple.com"

after re-reading the message I got it IS coming from Apple...

is anyone else getting this?

edit:
Quote:
AppleInsider (http://forums.appleinsider.com/index.php)
- General Discussion (http://forums.appleinsider.com/forum...php?forumid=11)
-- Apple spmming my .mac (http://forums.appleinsider.com/showt...threadid=42499)

Posted by johnrp on 05-28-2004 04:27 AM:

Apple spmming my .mac


"Get .Mac free for 60 days."

Why do Apple keep sending me these mils to my .mac account?
Are they stupid?
I have been a full member since day one, c-mon Apple sort it out.
Part of the ever increasing spam I am getting in the mailbox.

And it's not just a bulk mail to all .mac email surely they can tell if a .mac account is registered (they sure can when it's time to renew)

ohh well.


j.
www.pixelrevolution.com/cow/

Posted by Paul on 05-28-2004 05:08 AM:




that was a spoofed email... if you look carefully at the headers it was from Apple@Insider (something or other, I don't have it in front of me) is AI.com selling our email addresses?!?!?!

did you use your .mac addy to sign up with this server?

forward the mail (with FULL header information) to abuse@mac.com
"Ladies, if you're a feminist and want respect, it's women you have to fight, not men."
-Splinemodel
Every 10 seconds, somewhere on this earth, there is a woman giving birth to a child. She must be found and stopped...

Posted by johnrp on 05-28-2004 05:23 AM:




Paul

It was not spoofed it is a legit Apple mail.

j.
www.pixelrevolution.com/cow/

Posted by Paul on 05-28-2004 05:37 AM:




well I just recently got a VERY similar email that WAS spoofed... and I don't think apple would send out spam like this... especially considering that they can't deliver what the email is offering...

I'll post back here after I get a better look at the headers... but I'm 99% sure that Apple.com and mac.com WERE NOT in the "from" address....

but who knows... I could be seeing things...
"Ladies, if you're a feminist and want respect, it's women you have to fight, not men."
-Splinemodel
Every 10 seconds, somewhere on this earth, there is a woman giving birth to a child. She must be found and stopped...

Posted by johnrp on 05-28-2004 06:14 AM:




Paul

here is some of the header info from my mail.

Return-Path: <News@InsideApple.Apple.com>
Received: from mac.com (smtpin05-en2 [10.13.10.150]) by ms11.mac.com (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0HYE0022NL1SVC@ms11.mac.com> for removed@mac.com; Thu, 27 May 2004 19:46:40 -0700 (PDT)
Received: from chatbox-smtp-out5.apple.com (chatbox-smtp-out5.apple.com [17.254.6.14]) by mac.com (Xserve/smtpin05/MantshX 4.0) with ESMTP id i4S2kd7Q009392for <removed@mac.com>; Thu, 27 May 2004 19:46:39 -0700 (PDT)
Received: from granada.apple.com (localhost [127.0.0.1]) by chatbox-smtp-out5.apple.com (8.12.9/8.12.2) with SMTP id i4S2mIqe027026for <removed@mac.com>; Fri, 28 May 2004 02:48:34 +0000 (GMT)
Message-Id: <200405280248.i4S2mIqe027026@chatbox-smtp-out5.apple.com>
Mime-Version: 1.0
X-Mailer: MIME::Lite 3.01 (F2.71; B2.12; Q2.03)
Content-Type: multipart/alternative; charset=ISO-8859-1; boundary="_----------=_108571251422145986"
Content-Transfer-Encoding: 7bit
X-Broadcast-Id: 1975
X-Sent-To: removed@mac.com">removed@mac.com, d67753b60b3490264ef7fe5282e8f660
Original-Recipient: rfc822;removed@mac.com

Looks legit to me

j.
www.pixelrevolution.com/cow/

Posted by Paul on 05-28-2004 01:40 PM:





maybe you are right.... that 17.x.x.x IP is apple's...
who knew that there was a group at apple called "Return-Path: <News@InsideApple.Apple.com>"

anyway I guess I read it too fast because I didn't see that apple.com at the end...

I guess that 1% I was unsure about pulled through...

but still... this is NOT cool...

has anyone else gotten spam from apple?
"Ladies, if you're a feminist and want respect, it's women you have to fight, not men."
-Splinemodel
Every 10 seconds, somewhere on this earth, there is a woman giving birth to a child. She must be found and stopped...

Posted by Giaguara on 05-28-2004 02:05 PM:




I've had a lot of emails from ... This is an old old screenshot, I got 8200 + emails from Apple.com. The email in the picture was from Apple as well, even though a personal one. (which multiplicated to a few thousand copies, and the other mltiplicated were from Apple too)

<Giaguara's mail.app picture>

Mail kept downloading the same 4 or 5 messages again and again. I think I've figured out why the problem reproduced, so I could make mail do it again (or prevent it from happening).

Insideapple.apple.com? That's new, I have the show full headers by default, and I don't think I've noticed that one.

1215/234215 (top .51875%)
People really have got to stop thinking there is only one operating system, one economic system, one religion, and one business model. -EvilTwinSkippy (/.)

Last edited by Paul : 2004-05-28 at 13:19. Reason: thread content as per brad's request
  quote
Brad
Selfish Heathen
 
Join Date: May 2004
Location: Zone of Pain
 
2004-05-28, 12:59

Would you mind posting anything you posted at the dotcom here? Some of us are blocked from visiting that site.

Have you checked the return path of the e-mails to be absolutely certain they're from Apple?

The quality of this board depends on the quality of the posts. The only way to guarantee thoughtful, informative discussion is to write thoughtful, informative posts. AppleNova is not a real-time chat forum. You have time to compose messages and edit them before and after posting.
  quote
Paul
Veteran Member
 
Join Date: May 2004
Location: New York City
 
2004-05-28, 13:20

I can forward a copy of the email to you if you like (with full header information of course)
  quote
murbot
Hoonigan
 
Join Date: May 2004
Location: Canada
 
2004-05-28, 14:28

Maybe his preferences got messed up? Or Apple made a mistake?

I think I said (during a computer setup) that I'd accept offers and things from them. I get email from Apple every once in a while, about upcoming offers, etc. They come flagged already, and I just have them going into an Apple folder, in case I want to go back and see what they were offering once upon a time.

I don't want to say "big deal", but I won't say I'm not thinking it.
  quote
Paul
Veteran Member
 
Join Date: May 2004
Location: New York City
 
2004-05-28, 15:01

Quote:
Originally Posted by murbot
Maybe his preferences got messed up? Or Apple made a mistake?

I think I said (during a computer setup) that I'd accept offers and things from them. I get email from Apple every once in a while, about upcoming offers, etc. They come flagged already, and I just have them going into an Apple folder, in case I want to go back and see what they were offering once upon a time.

I don't want to say "big deal", but I won't say I'm not thinking it.
its really not THAT big of a deal... (I have the same apple folder... but this message wasn't moved by my filters...)

but the problem I am having with this is the subject of the message... I have been a paid .mac member for the life of the service so getting spam from apple that they know isn't relevant to me is somewhat annoying...

and here is an update on the thread for brad et. al.

Quote:
Posted by Kenneth on 05-28-2004 02:46 PM:




How about this kind of SPAM?


code:

From: MAILER-DAEMON@mac.com
Subject: Returned mail: see transcript for details
Date: May 28, 2004 10:31:46 AM PDT
To: xxxxxxxxxx@mac.com

The original message was received at Fri, 28 May 2004 10:31:09 -0700 (PDT)
from cm218-254-62-62.hkcable.com.hk [218.254.62.62]

----- The following addresses had permanent fatal errors -----
<kenngott@mac.com>
(reason: 550 5.1.1 unknown or illegal alias: kenngott@mac.com)
(expanded from: <kenngott@mac.com> )
<kennpreb@mac.com>
(reason: 550 5.1.1 unknown or illegal alias: kennpreb@mac.com)
(expanded from: <kennpreb@mac.com> )
<kenny_hutchings@mac.com>
(reason: 550 5.1.1 unknown or illegal alias: kenny_hutchings@mac.com)
(expanded from: <kenny_hutchings@mac.com> )
<kennyb@mac.com>
(reason: 550 5.1.1 unknown or illegal alias: kennyb@mac.com)
(expanded from: <kennyb@mac.com> )
<kennychan@mac.com>
(reason: 550 5.1.1 unknown or illegal alias: kennychan@mac.com)
(expanded from: <kennychan@mac.com> )
<kenoo@mac.com>
(reason: 550 5.1.1 unknown or illegal alias: kenoo@mac.com)
(expanded from: <kenoo@mac.com> )

----- Transcript of session follows -----
... while talking to smtp-bounce.mac.com.:
DATA
<<< 550 5.1.1 unknown or illegal alias: kenoo@mac.com
550 5.1.1 <kenoo@mac.com>... User unknown
<<< 550 5.1.1 unknown or illegal alias: kennychan@mac.com
550 5.1.1 <kennychan@mac.com>... User unknown
<<< 550 5.1.1 unknown or illegal alias: kennyb@mac.com
550 5.1.1 <kennyb@mac.com>... User unknown
<<< 550 5.1.1 unknown or illegal alias: kenny_hutchings@mac.com
550 5.1.1 <kenny_hutchings@mac.com>... User unknown
<<< 550 5.1.1 unknown or illegal alias: kennpreb@mac.com
550 5.1.1 <kennpreb@mac.com>... User unknown
<<< 550 5.1.1 unknown or illegal alias: kenngott@mac.com
550 5.1.1 <kenngott@mac.com>... User unknown
<<< 554 5.5.0 No recipients have been specified.
Reporting-MTA: dns; mac.com
Received-From-MTA: DNS; cm218-254-62-62.hkcable.com.hk
Arrival-Date: Fri, 28 May 2004 10:31:09 -0700 (PDT)

Final-Recipient: RFC822; kenngott@mac.com
Action: failed
Status: 5.1.1
Remote-MTA: DNS; smtp-bounce.mac.com
Diagnostic-Code: SMTP; 550 5.1.1 unknown or illegal alias: kenngott@mac.com
Last-Attempt-Date: Fri, 28 May 2004 10:31:46 -0700 (PDT)

Final-Recipient: RFC822; kennpreb@mac.com
Action: failed
Status: 5.1.1
Remote-MTA: DNS; smtp-bounce.mac.com
Diagnostic-Code: SMTP; 550 5.1.1 unknown or illegal alias: kennpreb@mac.com
Last-Attempt-Date: Fri, 28 May 2004 10:31:46 -0700 (PDT)

Final-Recipient: RFC822; kenny_hutchings@mac.com
Action: failed
Status: 5.1.1
Remote-MTA: DNS; smtp-bounce.mac.com
Diagnostic-Code: SMTP; 550 5.1.1 unknown or illegal alias: kenny_hutchings@mac.com
Last-Attempt-Date: Fri, 28 May 2004 10:31:46 -0700 (PDT)

Final-Recipient: RFC822; kennyb@mac.com
Action: failed
Status: 5.1.1
Remote-MTA: DNS; smtp-bounce.mac.com
Diagnostic-Code: SMTP; 550 5.1.1 unknown or illegal alias: kennyb@mac.com
Last-Attempt-Date: Fri, 28 May 2004 10:31:46 -0700 (PDT)

Final-Recipient: RFC822; kennychan@mac.com
Action: failed
Status: 5.1.1
Remote-MTA: DNS; smtp-bounce.mac.com
Diagnostic-Code: SMTP; 550 5.1.1 unknown or illegal alias: kennychan@mac.com
Last-Attempt-Date: Fri, 28 May 2004 10:31:46 -0700 (PDT)

Final-Recipient: RFC822; kenoo@mac.com
Action: failed
Status: 5.1.1
Remote-MTA: DNS; smtp-bounce.mac.com
Diagnostic-Code: SMTP; 550 5.1.1 unknown or illegal alias: kenoo@mac.com
Last-Attempt-Date: Fri, 28 May 2004 10:31:46 -0700 (PDT)

From: "Gale Tovar" <xxxxxxxxxxxx@mac.com>
Date: May 28, 2004 10:43:39 AM PDT
To: "Kennxxxxx" <xxxxxxxxxx@mac.com>
Subject: HI Kennxxxxxx soft pork chop ruffians behind 31
Reply-To: "Gale Tovar" <xxxxxxxxxx@mac.com>
From: "Gale Tovar" <kenxxxxxx@mac.com>
Date: Fri, 28 May 2004 21:43:39 +0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--=_I41BR1kuQb6"

----=_I41BR1kuQb6
Content-Type: text/html;
charset="iso-9033-3"
Content-Transfer-Encoding: 7Bit

Kennxxxxxx,

Loads of cool soft at incredibly low prices<br>
<b>Windows XP Professional + Office XP Professional </b>for as low as $80<br>
<a href="http://xhvqa.compie.net/index.php?s=3971">Order here</a><br>
The stock is limited <br>
The offer is valid till May, 30<br><br>
Hurry!<br>

----=_I41BR1kuQb6--
--i4SHVkfb006903.1085765506/mac.com--




I received a lot of these nowadays.. I have no idea.. what's wrong on besides selling me Windows app. sorry for the long post.
Last Generation of Dual PowerMac G4 user.
Fan of Hilary Duff and Michelle Branch.


Posted by BuonRotto on 05-28-2004 03:03 PM:




Your address is being spoofed, and it looks like it's being bounced back to you when youare not in fact the real sender.
I don't quite know the details of it. I've goteen a couple of those recently too.

As for the .Mac e-mail, I don't know. I got it too. Some screw up or else there might be something in it about referring a friend? I got it too today.

You can opt out of e-mail lists from Apple if you want. Look here and check your personal info settings on the .Mac Account page (can't link to your directly since it requires sign-in).
Keep reading for the next postÉ

1215/234215 (top .51875%)
People really have got to stop thinking there is only one operating system, one economic system, one religion, and one business model. -EvilTwinSkippy (/.)
  quote
Towel
New Member
 
Join Date: May 2004
 
2004-05-30, 18:02

Quote:
Received: from granada.apple.com (localhost [127.0.0.1]) by chatbox-smtp-out5.apple.com (8.12.9/8.12.2) with SMTP id i4S2mIqe027026for <removed@mac.com>; Fri, 28 May 2004 02:48:34 +0000 (GMT)
This is the deepest reference from the header you posted. I believe that the localhost address is a spoof indicator. "granada.apple.com" sounds a little sketchy anyway, and I think the fact that it doesn't resolve to a real IP address suggests that it's forged. Someone managed to get this spam into .mac's outgoing mail server, though, so from that point on it's a "legit" email. But I'd bet it's not actually from Apple.

IIRC, anyway. Between my university's and Mail's spam filters it's been a while since I've had to worry about tracing spam.
  quote
Posting Rules Navigation
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Post Reply

Forum Jump
Thread Tools

« Previous Thread | Next Thread »

All times are GMT -5. The time now is 15:39.


Powered by vBulletin®
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004 - 2024, AppleNova