The Flipside Forum

Maytag's Playhouse => Free Talk => Topic started by: Daikun on March 11, 2014, 08:59:07 pm

Title: Brion's Email hacked?
Post by: Daikun on March 11, 2014, 08:59:07 pm
This random Email popped up in my Gmail account today, and when I moused over the screen name, Brion's name popped up.

(http://i.imgur.com/gzOxkAt.jpg)
Title: Re: Brion's Email hacked?
Post by: Daikun on March 13, 2014, 09:41:13 pm
I just got another one.
Title: Re: Brion's Email hacked?
Post by: Emp_Dragon on March 14, 2014, 07:50:46 am
That doesn't look like the Brion I recall...
Title: Re: Brion's Email hacked?
Post by: Stargoat on March 14, 2014, 11:25:21 am
He's not nearly drunk enough to be Brion, who I assume is so awesome that he is never sober.
Title: Re: Brion's Email hacked?
Post by: akashayi on March 14, 2014, 05:26:25 pm
I sure hope nothing came from Brion :(

What does the header information say if you select show original in gmail?
Title: Re: Brion's Email hacked?
Post by: Daikun on March 15, 2014, 12:55:11 pm
I sure hope nothing came from Brion :(

What does the header information say if you select show original in gmail?

First message:

Quote
Delivered-To: REDACTED
Received: by 10.58.202.35 with SMTP id kf3csp162697vec;
        Tue, 11 Mar 2014 18:46:12 -0700 (PDT)
X-Received: by 10.66.164.70 with SMTP id yo6mr1552871pab.85.1394588771660;
        Tue, 11 Mar 2014 18:46:11 -0700 (PDT)
Return-Path: <www@keenspot.com>
Received: from keenspot.com ([2001:470:1:3a::13])
        by mx.google.com with ESMTP id j4si667801pad.341.2014.03.11.18.46.11
        for REDACTED
        Tue, 11 Mar 2014 18:46:11 -0700 (PDT)
Received-SPF: pass (google.com: domain of www@keenspot.com designates 2001:470:1:3a::13 as permitted sender) client-ip=2001:470:1:3a::13;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of www@keenspot.com designates 2001:470:1:3a::13 as permitted sender) smtp.mail=www@keenspot.com;
       dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from keenspot.com (keenspot.com [127.0.0.1])
   by keenspot.com (8.14.5/8.14.5) with ESMTP id s2C1k5Or054169
   for REDACTED; Tue, 11 Mar 2014 18:46:10 -0700 (PDT)
   (envelope-from www@keenspot.com)
Received: (from www@localhost)
   by keenspot.com (8.14.5/8.14.5/Submit) id s2C1k51f054168;
   Tue, 11 Mar 2014 18:46:05 -0700 (PDT)
   (envelope-from www)
Message-Id: <201403120146.s2C1k51f054168@keenspot.com>
To: REDACTED
Subject: xurStgeEVbwxEfXw
X-PHP-Script: flipside.keenspot.com/forum/index.php for unknown, 93.182.159.63
From: "ofwlmz@gvoyvy.com" <brionfoulke@gmail.com>
Reply-To: <ofwlmz@gvoyvy.com>
Date: Wed, 12 Mar 2014 01:46:05 -0000
X-Mailer: SMF
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="SMF-c513f3f6f789fb6bd90aca586d61460e"
Content-Transfer-Encoding: 7bit

Pero2i  <a href="http://wnynveaqaylp.com/">wnynveaqaylp</a>, aazgygutgtzr (http://aazgygutgtzr.com/), [link=http://nubnabjradur.com/]nubnabjradur[/link], http://llczaojpdfwm.com/
--SMF-c513f3f6f789fb6bd90aca586d61460e
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Pero2i  <a href="http://wnynveaqaylp.com/">wnynveaqaylp</a>, aazgygutgtzr (http://aazgygutgtzr.com/), [link=http://nubnabjradur.com/]nubnabjradur[/link], http://llczaojpdfwm.com/
--SMF-c513f3f6f789fb6bd90aca586d61460e--

Second message:

Quote
Delivered-To: REDACTED
Received: by 10.58.202.35 with SMTP id kf3csp162697vec;
        Tue, 11 Mar 2014 18:46:12 -0700 (PDT)
X-Received: by 10.66.164.70 with SMTP id yo6mr1552871pab.85.1394588771660;
        Tue, 11 Mar 2014 18:46:11 -0700 (PDT)
Return-Path: <www@keenspot.com>
Received: from keenspot.com ([2001:470:1:3a::13])
        by mx.google.com with ESMTP id j4si667801pad.341.2014.03.11.18.46.11
        for REDACTED;
        Tue, 11 Mar 2014 18:46:11 -0700 (PDT)
Received-SPF: pass (google.com: domain of www@keenspot.com designates 2001:470:1:3a::13 as permitted sender) client-ip=2001:470:1:3a::13;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of www@keenspot.com designates 2001:470:1:3a::13 as permitted sender) smtp.mail=www@keenspot.com;
       dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from keenspot.com (keenspot.com [127.0.0.1])
   by keenspot.com (8.14.5/8.14.5) with ESMTP id s2C1k5Or054169
   for REDACTED; Tue, 11 Mar 2014 18:46:10 -0700 (PDT)
   (envelope-from www@keenspot.com)
Received: (from www@localhost)
   by keenspot.com (8.14.5/8.14.5/Submit) id s2C1k51f054168;
   Tue, 11 Mar 2014 18:46:05 -0700 (PDT)
   (envelope-from www)
Message-Id: <201403120146.s2C1k51f054168@keenspot.com>
To: REDACTED
Subject: xurStgeEVbwxEfXw
X-PHP-Script: flipside.keenspot.com/forum/index.php for unknown, 93.182.159.63
From: "ofwlmz@gvoyvy.com" <brionfoulke@gmail.com>
Reply-To: <ofwlmz@gvoyvy.com>
Date: Wed, 12 Mar 2014 01:46:05 -0000
X-Mailer: SMF
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="SMF-c513f3f6f789fb6bd90aca586d61460e"
Content-Transfer-Encoding: 7bit

Pero2i  <a href="http://wnynveaqaylp.com/">wnynveaqaylp</a>, aazgygutgtzr (http://aazgygutgtzr.com/), [link=http://nubnabjradur.com/]nubnabjradur[/link], http://llczaojpdfwm.com/
--SMF-c513f3f6f789fb6bd90aca586d61460e
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Pero2i  <a href="http://wnynveaqaylp.com/">wnynveaqaylp</a>, aazgygutgtzr (http://aazgygutgtzr.com/), [link=http://nubnabjradur.com/]nubnabjradur[/link], http://llczaojpdfwm.com/
--SMF-c513f3f6f789fb6bd90aca586d61460e--
Title: Re: Brion's Email hacked?
Post by: Stargoat on March 17, 2014, 09:28:51 am
That's really nothing to do with Brion, except for the fact that his email is the reply address.  Any computer in the world could have sent that email.  Pretty much any device that has emailed you and Brion could be the infected PC.