Heads up in case anyone else gets these:

Emails claiming to be from Bill Buckels, and containing a URL to MS OneDrive
to download a file are probably not legitimate. I've gotten three of these
in past few weeks.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Heads up in case anyone else gets these:

Emails claiming to be from Bill Buckels, and containing a URL to MS OneDrive to download a file are probably not legitimate. I've gotten three of these
in past few weeks.

I have always been baffled by this. your email address is like a phone number. If my call display shows my neighbors number but I get a telemarketer from India on the line, this shouldn't be possible.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

I am Rob wrote:

Heads up in case anyone else gets these:

Emails claiming to be from Bill Buckels, and containing a URL to MS
OneDrive
to download a file are probably not legitimate. I've gotten three of
these
in past few weeks.

I have always been baffled by this. your email address is like a phone number. If my call display shows my neighbors number but I get a telemarketer from India on the line, this shouldn't be possible.

Here's the header of one, should there be any interest.... you'll note that
the name matches, but the email address does not seem to correspond. Someone
is taking old csa2 posts and making it look like a direct email reply from someone in the newsgroup.



Return-Path: <[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: by sarah.macgui.net (Postfix, from userid 111)
id BB001E1487; Wed, 23 Mar 2022 15:53:33 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 sarah.macgui.net BB001E1487 Authentication-Results: sarah.macgui.net;
dkim=pass (1024-bit key; unprotected) header.d=deliciouswebsites.co.uk
header.i=[email protected] header.b="NbulbzV9";
dkim-atps=neutral
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on sarah.macgui.net X-Spam-Level:
X-Spam-Status: No, score=0.6 required=3.7 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,
SPF_HELO_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no
version=3.4.2
Received: from deliciouswebsites.co.uk (deliciouswebsites.co.uk [93.170.123.99])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits)
server-digest SHA256)
(No client certificate requested)
by sarah.macgui.net (Postfix) with ESMTPS id 302F5E0E7C
for <[email protected]>; Wed, 23 Mar 2022 15:53:32 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=mail; d=deliciouswebsites.co.uk;
h=MIME-Version:Date:Content-Type:Content-Transfer-Encoding:From:To:Subject:
Message-ID; i=[email protected];
bh=zbZbppZ5sn3Fe+igU0iO9OUlUepfZiovBS7v1g/sgEM=;
b=NbulbzV9uYiBQqpq70Y8s13uJ1sXu/8X5D2Pdpry1SjtK2xvbsVyHbtpnFp4buuisbplsu6QqXn9
6PZ3UzIITcdNqxWXgZ2CCQXutqmJKefU0Ai37a1EfeqlEm+JGHmLzVwcqxBM4WyRpsUtl0V/qX8n
Do31n1xyRjcA8PgWOL8=
MIME-Version: 1.0
Date: Wed, 23 Mar 2022 07:52:44 -0800
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
From: "Bill Buckels" <[email protected]>
To: "D Finnigan" <[email protected]>
Subject: Re: Please Remove re: Apple II Joystick USB Adapter for AppleWin Message-ID: <[email protected]>

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Right. But doesn't the name that is attached to an email address come from your address book?

A persons real name is not part of the FROM: address. That should get converted from within the email application you are using. Wouldn't this mean that your computer is the one infected?

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Sometimes the name on an email address comes from your address book but not always. I’ve had a number of emails that have names but they aren’t in my address book.

For phone numbers, there’s devices out there that can make a phone call look like it’s coming from any number. Often scammers use random numbers. Last year I had a couple of Revenue Canada scam calls, one showed it as coming from a grocery store, the
other a restaurant. Took one of the calls on the hands device in my car. It was so bad that the 7 year old girl with me could tell it wasn’t real.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

[email protected] wrote:

Sometimes the name on an email address comes from your address book but
not
always. I’ve had a number of emails that have names but they aren’t in my address book.

It's like writing on a paper envelope. You can write any return address you want. And with varying levels of additional effort, you can mail it from any post office. The From line in an email header can contain any name, any address. Here's another From line from another one of the scam emails. It's
a totally different email address:

From: "Bill Buckels" <[email protected]>

Blame it on the Russians. :-/ That domain resolves to a Russian ISP.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Wednesday, March 23, 2022 at 8:15:44 PM UTC-5, D Finnigan wrote:

Blah, Blah, Blah

It must have been a slow day in the Apple II Community to use my name as an OT post lol :)

I am writing to advise you that my new email is now bill @clipshop.ca

My old email(s) (bbuckels @mymts.net) (bbuckels @mts.net) (bbuckels @escape.ca) will cease to exist shortly.

Please update all records to now use bill @clipshop.ca

Thank you.

All the Best,

William James (Bill) Buckels

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)