This email came through to one of our helpdesk accounts:
Received: from newabe.citeglobe.com ([209.44.124.120]) by mail.xxx.au with MailMarshal (v6,5,4,7535)
id <B4f2f385e0000>; Mon, 06 Feb 2012 13:18:06 +1100
Date: Sun, 5 Feb 2012 20:53:49 +0000 (UTC)
From: Cerys Macdonald via LinkedIn <member[at]linkedin.com>
Reply-To: Cerys Macdonald <billroberts[at]newmail.spamcop.net>
To: helpdeskxxx.au <helpdeskxxx[at]xxx.au>
Message-ID: <1392939564.36279827.1588003540399.JavaMail.app[at]ela9-bed53.prod>
Subject: Cerys Macdonald sent you a message via LinkedIn
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
Our helpdesk software generated a "Thanks for your enquiry" message back to billroberts[at]newmail.spamcop.net and we appear on SCBL and can't send mail to key clients. ??!
The forged linkdIn message is pharmacy spam, and I understand the general issue of auto-responders - but what *spammer* sets a reply-to address to spamcop.net?
- mailguy99
