outlook question (i think)

Topic

New Reply

i use MS outlook (part of office 365) to manage my gmail account.  i get quite a bit of email addressed to some resemblance of my name xxxxx @ AOL.com.  how in the heck is that getting to my gmail address?  is there any way to ‘see’ any normally hidden information in the email headers?

thanks

john

John W Zerkel

Reply | Quote

Replies

You can view the full internet header at File, Properties after opening the message (not in the preview pane):

View internet message headers in Outlook

But are you sure you never set up an AOL address to be forwarded to gmail?

1 user thanked author for this post.

jwhiz56

Reply | Quote

if i had forwarded an old AOL email address it wouldn’t have been john@aol.com.  below is the properties of one of the emails. does it give any information that i could use to stop this from coming to me?

 

thanks

john

 

 

 

Delivered-To: xxxxxxxxxx@gmail.com
Received: by 2002:a02:cf19:0:0:0:0:0 with SMTP id q25csp3866357jar;
Mon, 21 Sep 2020 09:55:48 -0700 (PDT)
X-Google-Smtp-Source: ABdhPJwCHB8pAa6pvB7gGQCmaVMCDuhUuSC35py5e+OIT6TLKPVzOMtHtal0DFAwqyvKIK1wZ5Ss
X-Received: by 2002:a25:ba11:: with SMTP id t17mr1005086ybg.107.1600707347936;
Mon, 21 Sep 2020 09:55:47 -0700 (PDT)
Return-Path: <messages.YaMiyuth@set-style.quasiinfo.com>
Received: from set-style.quasiinfo.com (set-style.quasiinfo.com. [192.111.149.22])
by mx.google.com with ESMTP id n184si6463832ybc.457.2020.09.21.09.55.47
for <xxxxx@gmail.com>;
Mon, 21 Sep 2020 09:55:47 -0700 (PDT)
Received-SPF: pass (google.com: domain of messages.yamiyuth@set-style.quasiinfo.com designates 192.111.149.22 as permitted sender) client-ip=192.111.149.22;
Authentication-Results: mx.google.com;
dkim=neutral (body hash did not verify) header.i=@sendgrid.net header.s=smtpapi header.b=reOq3kaS;
arc=fail (body hash mismatch);
spf=pass (google.com: domain of messages.yamiyuth@set-style.quasiinfo.com designates 192.111.149.22 as permitted sender) smtp.mailfrom=messages.YaMiyuth@set-style.quasiinfo.com
ARC-Seal: i=1; a=rsa-sha256; t=1600688126; cv=none;
d=google.com; s=arc-20160816;
b=Pby474IJ8+PJMnvXOrVxlLiKL0TNGnD9oxS1ULI4EOEkxtfzAP5tg7k/1EBlUzt2k/
Zewo1yncyTTwDwWYoKghr6R7dexY8uLsj1GRSrlsUOMoNl4D+pf2xD+gBlk3jj4qmGZa
+HQ5HmFPvJmnM/vmxS1SaD8zEKC5ZbBY3uImoWFz1Z5Z1eNti1+XNID7kFEcwwLTMd6Z
C3i1MBZ3NVYgkUF0o31SnnCEFAfJBkjiuyUwsSn2x5O0mdCeXkz5Oy344BG8kmJJba3y
8qy1+HchJ9Qq2loMKL1BACZdQ+l1gAGd5RbV+JTrL/cXfJeaSA+8eTQsMZ6wtS2Lms6W
KO9g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=date:message-id:subject:from:dkim-signature;
bh=lR4M4Ro2+6UIxxZk6jASw4y4cQv2JdPLvh7eMWrFVjc=;
b=T4atUEhMz4GYoiganFbcMFsfRNJ0GvOACjDUQfzA8nHLXlO/KFTaYiI8KrXpdMzjja
PhiSzm/XP7fRdLMQE7FHuFepWe83N9zooMkWXyIb8hVdT92HfxjNJCQWJ4/oNx3tLIc/
W/FDa5Q1DJyAzuzZyeBCX8n1klh0OEBrbLcmZp8FssJjHWd+ySfHkaUqUtDl4ef3iEej
f3UvKcj7HEVXAJE6S+33yV4P6q+eThfRfBZdBLr1nqMF1Nt0RZXYVTAxcDQff1qBpqyb
if2oM0BLS6ksChgisrTBoTj1g+nDrOD5tSNJArSdORxIwFXsnX2vZAUWaKuI8tSdxWZz
t3ZQ==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@sendgrid.net header.s=smtpapi header.b=reOq3kaS;
spf=pass (google.com: domain of bounces+18275296-365c-ems3.test3=gmail.com@sendgrid.net designates 198.37.146.154 as permitted sender) smtp.mailfrom=”bounces+18275296-365c-ems3.test3=gmail.com@sendgrid.net”
Received: from o1.office.mobisystems.com (o1.office.mobisystems.com. )
by mx.google.com with ESMTPS id s10si8156788edy.400.2020.09.21.04.35.25
for <ems3.test3@gmail.com>
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Mon, 21 Sep 2020 04:35:26 -0700 (PDT)
Received-SPF: pass (google.com: domain of bounces+18275296-365c-ems3.test3=gmail.com@sendgrid.net designates 198.37.146.154 as permitted sender) client-ip=198.37.146.154;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.net;
h=content-type:from:subject:x-feedback-id;
s=smtpapi; bh=lR4M4Ro2+6UIxxZk6jASw4y4cQv2JdPLvh7eMWrFVjc=;
b=reOq3kaSPDP1Qk+Zsj40Fv37nQhGY/Yfqc2xGCH1Hos/fF7S42yDCxjw5QeToZqcj/FN
T4k/chgUCMJ2gVauVu80bFx+hE+mG0XWxNm/X5jle1JTnB3a7+UYLyyYmC6KIU7R7q6zsX
8jZKvxlV4oVtoJhGHwfEsRCJHQV7QnUsg=
Sender: John-U0IuYQ1EuYk@mia.edu.uk
To: <John@aol.com>
Content-Type: multipart/mixed; boundary=”Nextpart_1Q27t8t3358663611121245ygwA”
From: ADT Premier Provider <exyuys-1Q27t8t-noReply@coralmode.com>
MIME-Version: 2.0
In-Reply-To: <CADT5qSj0REQQpwKiW6P5cL27kFYMN9CKU0IuYQ1EuYkm46NH1Cu5OuqVwXww@vfy.$100 Rewards Card from Protect Your Home & ADT Home Monitoring>
Date: Mon, 21 Sep 2020 16:39:12 UTC
List-Unsubscribe: <mailto:leave-fcf01672756502122d502d29-fe2b167477630175701770-fe881U0IuYQ1EuYk5777c63007e7d-fe9712747463067c76-ff65117171@bparzl.exndV.LmGJ.com>
CC:<John@aol.com>
Message-ID: <ZF3lf1bGTw-Ct-Y9ADdPU0IuYQ1EuYkHg-192.111.149.22@ismtpd0003p1iad1.sendgrid.net>
List-ID: <6417211.xt.local>
Subject: Your_ADT_Monitoring offer has arrived
References: <Nextpart_U0IuYQ1EuYk1059241813893083pmEM@>
X-Feedback-ID: 18275296:SG
X-SG-EID:
=?us-ascii?Q?kItFTL=2F8qrTpFSsfxubjCGck8EUBNxeAMLjpKCPqIahuSFTaUGeV=2FrxW8K5S5k?=
=?us-ascii?Q?dVsVf+qepbO2FFX1zI2yOJJlRJY9Jc4hLWdmoKd?=
=?us-ascii?Q?xZ1pcnffqfCADKY0fyGcTIVZir3V6yYkAk0s2sx?=
=?us-ascii?Q?tdCWvCK=2FRq65CQKMm1BYVeSwZ4O+dvM8BHGfAmI?=
=?us-ascii?Q?4xWPHgj2kW5RlM6Ayd=2FJdOLkqhZAH81XcuUmozA?=
=?us-ascii?Q?hKiApsixYCNc8caSxI7Ektv3TtlhBltVH0Izjbj?=
=?us-ascii?Q?XxC31NjW+=2F6xh5vzAwMSEN3R+PicY614q5HHzp3?=
=?us-ascii?Q?kf4=3D?=

John W Zerkel

Reply | Quote

That looks like a standard spam email and there is nothing you can do to stop them – once the sending device is blacklisted the spammer uses another compromised system.

cheers, Paul

1 user thanked author for this post.

jwhiz56

Reply | Quote