I just received a spam email from "UPS". I didn't have any UPS delivery due. I looked at the original and saw it had been addressed to a section of zoho addresses. Here's the original:
Delivered-To: bubbygator@zoho.com
Received-SPF: Pass (zoho.com: domain of mayorsmma67@cellbear.in designates 35.87.24.146 as permitted sender ) client-ip: 35.87.24.146
Return-Path: <mayorsmma67@cellbear.in>
Received: from cellbear.in (205.210.170.49 [205.210.170.49]) by mx.zohomail.com
with SMTP id 1410982459649365.04709503571314; Wed, 17 Sep 2014 12:34:19 -0700 (PDT)
Received: from [35.87.24.146] (account iridescentg05@cellbear.in HELO mrurv.uveqznerafeqfud.org)
by (CommuniGate Pro SMTP 5.2.3)
with ESMTPA id 407837508 for brucedebcarson@zoho.com; Wed, 17 Sep 2014 14:34:22 -0500
Date: Wed, 17 Sep 2014 14:34:22 -0500
From: UPS <ups.com>
X-Mailer: The Bat! (v3.80.03) Home
X-Priority: 3 (Normal)
Message-ID: <0213447057.2XQ9LPPO740381@evnoqvoqwfmou.jamhi.su>
To: <brucedebcarson@zoho.com>,
<brunosara48@zoho.com>,
<bryonblackwell@zoho.com>,
<bsegal@zoho.com>,
<bstamp@zoho.com>,
<btamarkin@zoho.com>,
<bubbygator@zoho.com>,
<buckland@zoho.com>,
<buff89@zoho.com>
Subject: Ship Notification
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------3ECF8404B05EE7"
X-Zoho-Virus-Status: 1
X-ZohoMail-Owner: <0213447057.2XQ9LPPO740381@evnoqvoqwfmou.jamhi.su>+zmo_0_<mayorsmma67@cellbear.in>
X-ZohoMail-Sender: 35.87.24.146
X-ZohoMail: ZRCVF-BYFANCY_1 LP_SUB_0 SS_1 SFPCP SFPP BLSUR UW246246 UB246 LBC SF_705F_EXT SGR1_1_26084_30
...... sending to you so corrective/preventative action can be done.
.... bubbygator