Email sent to client was delivered to me

[GoWilkes]

Here's a weird one... I have a hosting client, and they've been a client for 10+ years.

Today, I received an email from a Yahoo address (Ymail) that has the client's name, but my email!

Client Name <[email protected]_domain.com>

It's a real email for them, not spam. The X-headers show:

X-Mailer: WebService/1.1.19615 YahooMailIosMobile
Content-Length: 903
X-Spam-Status: No, score=0.6
X-Spam-Score: 6
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "server_name.my_domain.com", has NOT identified this incoming email as spam.

I've never corresponded with the email sender, so I can't imagine that they somehow accidentally have my email in their contacts under the client's name. And what a weird coincidence it would be if they did!

Any other suggestions on how this could have happened, though? I haven't made any major changes on the server in the last several months, other than automated updates.

 

[cPRex]

Hey hey! Are we sure they actually sent the message and it wasn't just some auto-generated spoof? If they are using your server for email, you should be able to see the message getting sent in the logs.

 

[GoWilkes]

The email definitely reads legit, it addresses people by name and uses localized slang. But it originated from Ymail, so I'm not sure how to track it backwards.

 

[cPRex]

The only thing that might be helpful is checking the full headers to see if there was an original IP address that isn't Yahoo. If the only thing odd is the "to" address, it still sounds like some type of spoof to me.