[sdiy] WARNING: Potential Adressgrabbing at dropmix.xs4all.nl

[Florian Anwander]

Hi Mason


> sites. What do the headers say about the origin of the email? I would
> think any daemon-generated messages would have origin of localhost.
Thats what should hae come to my mind as first...:

Received: from localhost ([127.0.0.1]:59655 helo=cloud.dnsprotect.com) 
by cloud.dnsprotect.com

With this domainname as first received-from line there is no further 
question:  This is Adressgrabbing!!!

Thanks for the hint!

Florian