DP Servers compromised?

As discussed in a previous thread many people got the emails titled "A proposal to join co-op ad tyle network with lots of benefits. I'm worried.

Firstly I'm worried because they have been sent FROM the dp servers, see below.

Secondly I'm worried because they have been sent to specific email address' that I only use for digitalpoint. I have received two separate emails to separate email address' that I only use for dp :/

Is the server compromised, is digitalpoint selling email data? Any thoughts?

I have masked some personal things out with XXXX.

 

All the FROM stuff in the headers can be spoofed AFAIK. The unique email address would be the scary part of this.

 

Sure I can send emails from but the headers cannot have ip addresses that ping to microsoft servers?! This has come from a dp server (blink).

I'm by no means an expert, but it doesn't look spoofed to me...

 

Doesn't look spoofed to me either.

What concerns me is this:

That IP is definitely a Digital Point IP:

I would contact DP immediately and forward the e-mail w/ full headers to them. Looks like they may well have a Big Problem.

Bailey

 

I have sent a pm to "digitalpoint" with a link to this thread...

 

Shame, I don't think he reads his pms, from his blog he doesn't read email. And this post is buried in the forums after a mod read it

 

Wow this is interesting. Next thing to consider is was it sent with DP's consent?

 

I'd doubt that, they are (arguably) advertising a competing service.

 

I'm no expert either but do think everything in the headers can be spoofed. Even the IP. So if they look up DP's IPs, put that in the header, you check header and ping IP and see it's DP isn't proof beyond doubt.

Would be interesting to see what the Shawnster has to say about this though. It just seems a bit of a silly thing to do really, hack into DP just to send all Co-op users an email. Also, once they hacked into the server, that doesn't mean they have MySQL access to fetch the email address from the DB too. And the 'server' is actuall 'a bunch of servers' so it all seems pretty damn hard to do.

Anyway, what do I know...

 

Hey I'm only putting 2+2 together...

But I'm a paranoid guy. I use unique email addresses for everything i sign up to.

This guy emailed two unique addresses that i use for dp, trust me I use it for NOTHING else. (Only the co-op, not the forums, the keyword tracker - nothing).

So either Shawn has sold the addresses, which I don't beleive (but anything is possible) or something untoward is going on.

That coupled with the header info (which, afaik cannot be spoofed).....He's either been compromised or something else is far from right.

 

Can you tell me what was in the mail ?

 

I think we need some comment from Shawn on this........

 

Sure, here it is.

 

Here's another thread relating to this email:
http://forums.digitalpoint.com/showthread.php?t=182273
in it digitalpoint says it's not an official email.

 

From what I remember in a previous thread to hack the DP server you literally need to cut off shawn's hand as the access is authorised by his fingerprint,

 

Im sorry but how exactly do you think he would fingerprint authorize login on the internet?... If its possible that wouldnt be very secure at all...

 

Its not possible right now to know how they got your email, but they are spamming and that we know for sure... DP should complaint to their host..

 

Open relay perhaps?

 

Is Shawn back from SES yet?

 

v strange, all headers can be spoofed, but gettin unique email addresses cannot ( obviously ) so something is certainly going on......

Edit : post 333 ...