[PLUG-TALK] What do email senders want to accomplish with this?

Rich Shepard rshepard at appl-ecosys.com
Sun Jan 4 13:45:51 UTC 2026


On Sat, 3 Jan 2026, Ted Mittelstaedt wrote:

> Their target is  "hojohomingrits at nike.com"
> They forge Hojo's name on the spam as sender
> They use a baloney recipient address on your domain
> You bounce the message to Hojo
> Basic simple reflector spam.

Ted,

I understand your example. But, I don't see that pattern except for the last
one:
> 1   6eaa6ad-c333-ec4a-c735-8da9f669f18 at appl-ecosys.com
> 1   91b92b7d-6e29-cfd1-313e-32ed05abcb2 at appl-ecosys.com
> 1   fe17119c-34cf-87ef-e5bf-2e31e83f8c at appl-ecosys.com
> 1   hashiguchiboldizsar at appl-ecosys.com

I don't allow relays because there's nowhere I would want to forward a
message. And the log doesn't show me the sender's name.

Thanks,

Rich



More information about the PLUG-talk mailing list