We do know that on at least the following occasions spam was sent out using
a (forged) e-mail address on our domain scholder.nl.
We only give the first day of the occasion:
23 Jan 2007: Various sender names using the address
"casscholdergop".
The headers show "mail.scholder.nl" as sending server, though the correct
IP-address for the server is shown, this is not the correct name for the
server.
24 May 2007: It seems that today a spamming campaign has started
using various addresses.
Until now we have seen "Baldorjy", "Gatti", "poep", "Daniela230" and
"Garrick749".
I guess this list might be a lot longer by the end of the day.
Yep, here we go: "SARAOovb", "Uvaydov", "SYBRANT.Mann", "Parexbl",
"Hongrieve", "ferhatwoolard",
"leylandBlaszkowski", "olson" and 28/05: "Tope549".
27 June 2007: Various sender names using the address
"sogscholderhur".
This is most likely from the same spammer as 23 Jan 2007.
16 July 2007: Another spamming campaign using various addresses.
Was this the same spammer as 24 May?
17 Nov 2007: Another spamming campaign using various addresses.
Until now: "mavy-rebeck", "londoffvwzr", "zoepeden".
Well, by now it seems to have become a recurring event.........
18 Jan 2008: Various sender names using the address
"gibscholdersuw".
This is most likely from the same spammer as 23 Jan 2007.
3 April 2008: Various variations on "..angelaangela.jacqueline".
A similar campaign started 16 April 2008.
22 April 2008: Various names using the the address
"duhscholdernog".
See also 23 Jan 2007, 27 June 2007 and 18 Jan 2008.
29 Aug 2008: Various names using the the address
"hifscholderkow".
See also 23 Jan 2007, 27 June 2007, 18 Jan 2008 and 22 April 2008.
Please find an example of the faked headers here.
3 Feb 2010: And already earlier, but not recorded here. Seems I had
not updated this page for a long time.
Also because the known addresses used for, and to spam go straight away into
the bit bucket.
But, if you did get spam from whatever name with the address "pe1biv-2" it's
a load of spam, but not send by us.
This address was exclusively used as forward address for a mail alias I used,
where not only the alias itself was spammed
so much that I decided to
dump it, unfortunately also the forward address was harvested....!
Luckily I had already decided to use unique addresses for this..