Blocked addresses going to catchall mailbox

[bro]

I have a few spam-trap addresses that have 'discard all incoming mail' checked in hsphere. Lately I'm seeing mail sent to them ending up in my catch-all mailbox instead.
If I send a mail to them myself to test it, I don't see them again; they get discarded as they should. But every day I get mail addressed to them by spammers being forwarded on to the catch-all...

I've deleted a couple of the mailboxes and recreated them, but it still happens.

Anyone else seen this?

Here's a sample header:
From - Mon Jul 10 11:42:33 2006
X-Account-Key: account2
X-UIDL: 1152546048.11395.mail3.m****h*re.biz,S=5684
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <janettesaunders@hairdr*sser.net>
Delivered-To: [email protected]
Received: (qmail 11358 invoked by uid 399); 10 Jul 2006 15:40:47 -0000
X-Spam-Checker-Version: SpamAssassin 3.1.3 (2006-06-01) on localhost
X-Spam-Level: **
X-Spam-Status: No, score=3.0 required=4.0 tests=INVESTMENT_ADVICE
autolearn=disabled version=3.1.3
X-Virus-Scan: Scanned by clamdmail 0.15 (no viruses);
Mon, 10 Jul 2006 11:40:48 -0400
Received: from host30.20.54.194.generacja.pl (HELO CYBUCH-XBKNFT5S.ay9qouo.com) (194.54.20.30)
by mail3.m****h*re.biz with SMTP; 10 Jul 2006 15:40:47 -0000
Received-SPF: none (mail3.m****h*re.biz: domain at hairdresser.net does not designate permitted sender hosts)
identity=mailfrom; client-ip=194.54.20.30;
envelope-from=<janettesaunders@hairdr*sser.net>;
Message-ID: <25709106895399.A0FED05878@86DM7U>
From: "Janette Saunders" <JanetteSaunders@in*me.com>
To: <[email protected]> <----******this mailbox should 'discard all incoming mail'******
Subject: big up-grade on marcket, Urgent email
Date: Mon, 10 Jul 2006 17:40:32 +0200
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: Xf6T0quJNOKpolEcrEBfqw0aGSt5uDnO4QnD
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit

I know what it means to strive for financial independence. A.. blah blah f****g blah....
//

 

[com-du-it.com]

I'm getting the same thing but the "Discard All..." is not working properly.

So... I've just check the "Discarded" email against the SPAM I've received and they are different!

Initially I also thought that the so-called-discared messages where ending up in my Catch All but now I'm begining to suspect that spammers are using BCC to cover-up the email addresses they are using. In other words, the To: is a blocked address and ends up discarded but BCC: is un unblocked address and ends up in the Catch All.

Maybe? Maybe not?

 

[bro]

Where can you check the discarded mail?
You could be right about the BCC field. I sent a couple of tests with my normal email address in the BCC field, and the headers come out the same way. That would mean they've matched up my real address with at least 3 blocked addresses.
That's depressing...

 

[com-du-it.com]

All my known addresses that get spammed are aliases for an email account that is set to discard all incoming email but isn't for some strange reason so I just went into that account and took a look.

It sure is depressing - by using the BCC field I can't determine what email address is being used and stop it. It's a pity because it had been very effective before.

What kills me even more is that to get around the spam filters these emails are so obviously spam to the human eye that the chances of them being seen my me (let alone acted on) are about as remote as a vase of pansies turning into a candy stripped walrus!!!