Strange Emails from Facebook Apps.

Big Dan

EQ Forum Moderator
For the past week or so I've been getting emails for horoscopes, quiz, and dating apps which I've never added. It's 2 or 3 per day so no big deal to delete but it's still annoying. I don't want to hit report spam as I want vaild app mail to get through.

The emails are coming from the @facebookappmail.com domain which seems to be legit. The mails contains an unsubscribe link which does in fact go to Facebook, when I click the link it takes me to my apps page and tells me emails have been disabled from X app, yet the app isn't even listed on my list of installed apps.

Here's the full source of the message:

Code:
Delivered-To: <my gmail>
Received: by 10.14.127.199 with SMTP id d47cs132031eei;
        Tue, 9 Nov 2010 05:07:48 -0800 (PST)
Received: by 10.100.226.5 with SMTP id y5mr3682984ang.263.1289308066818;
        Tue, 09 Nov 2010 05:07:46 -0800 (PST)
Return-Path: <apps+o40s_tsc@facebookappmail.com>
Received: from server19.namecheaphosting.com (server19.namecheaphosting.com [205.251.134.253])
        by mx.google.com with ESMTP id c18si13607145ana.154.2010.11.09.05.07.46;
        Tue, 09 Nov 2010 05:07:46 -0800 (PST)
Received-SPF: fail (google.com: domain of apps+o40s_tsc@facebookappmail.com does not designate 205.251.134.253 as permitted sender) client-ip=205.251.134.253;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of apps+o40s_tsc@facebookappmail.com does not designate 205.251.134.253 as permitted sender) smtp.mail=apps+o40s_tsc@facebookappmail.com
Received: from outmail011.snc4.facebook.com ([66.220.144.143] helo=mx-out.facebook.com)
	by server19.namecheaphosting.com with esmtp (Exim 4.69)
	(envelope-from <apps+o40s_tsc@facebookappmail.com>)
	id 1PFnvN-00050B-Cq
	for dan@bigdan.us; Tue, 09 Nov 2010 08:07:45 -0500
Received: from [10.36.28.108] ([10.36.28.108:36638])
	by mta013.snc4.facebook.com (envelope-from <apps+o40s_tsc@facebookappmail.com>)
	(ecelerity 2.2.2.45 r(34222M)) with ECSTREAM
	id CC/F0-00811-F9749DC4; Tue, 09 Nov 2010 05:07:43 -0800
X-Facebook: from zuckmail ([MTI3LjAuMC4x]) 
	by api.facebook.com with HTTP (ZuckMail);
Date: Tue, 9 Nov 2010 05:07:43 -0800
To: Daniel Hutter <dan@bigdan.us>
From: "How Much You Know Your Friends?" <apps+o40s_tsc@facebookappmail.com>
Reply-to: Facebook <apps+o40s_tsc@facebookappmail.com>
Subject: Exciting Questions About Your Friends:-
Message-ID: <4d223350589863c4673859b5716e7e33@api.facebook.com>
X-Priority: 3
X-Mailer: ZuckMail [version 1.00]
X-Facebook-Notify: platform_email; from_app=125717634120849; mailid=34344cdG2446aa78G0G27
Errors-To: apps+o40s_tsc@facebookappmail.com
X-FACEBOOK-PRIORITY: 0
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="b1_4d223350589863c4673859b5716e7e33"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server19.namecheaphosting.com
X-AntiAbuse: Original Domain - bigdan.us
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - facebookappmail.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 


--b1_4d223350589863c4673859b5716e7e33
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

This message contains a rich-text HTML portion. Consult your mail client's =
documentation for information on how to view it.


--b1_4d223350589863c4673859b5716e7e33
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<html><div class=3D"app_content app_content_125717634120849" =
id=3D"app_content_125717634120849"><div fb_protected=3D"true" =
class=3D"fb_protected_wrapper"><table align=3D"center">
<tbody>
<tr>
<td class=3D"style2" rowspan=3D"2" valign=3D"top"><a target=3D"_blank" =
href=3D"http://apps.facebook.com/abt_frnds/"><img title=3D"Diwali =
Greetings" alt=3D"Diwali Greetings" src=3D"http://www.guidemytour.com/apps=
tore/apps/appiconimages/0aa90e4f-1f4e-4b00-ab66-08a787e1ae5aQuestion-about=
-your-friend%21.jpg" width=3D"200" border=3D"0" height=3D"368" /></a> =
</td>
<td><a target=3D"_blank" style=3D"font-weight: bold;" =
id=3D"app125717634120849_ctl00_ContentPlaceHolder1_dListItems_ctl00_hlLink=
" class=3D"toplink1" href=3D"http://apps.facebook.com/abt_frnds/" =
fbcontext=3D"6ea98dcdd5b9"><font size=3D"6">Question about your =
friend!</font></a></td></tr><tr><td><span =
id=3D"app125717634120849_ctl00_ContentPlaceHolder1_Label5" =
fbcontext=3D"6ea98dcdd5b9"><font size=3D"4">The Most Interesting =
Application On Facebook ...<br /></font><br /><b><font size=3D"6"><a =
target=3D"_blank" href=3D"http://apps.facebook.com/abt_frnds/"><font =
color=3D"#ff0000">Answer =
Now.</font></a></font></b></span></td></tr></tbody></table>
<img src=3D"http://socialconnexion.in/campaign/pixel.aspx?cam_id=3D29911" =
/></div></div><br/><br/>---<br/>This email was sent by How Much You Know =
Your Friends? You can <a href=3D"http://www.facebook.com/editaccount.php?n=
otifications&amp;block=3D125717634120849&amp;h=3Db65ed59&amp;t=3D128930806=
3&amp;l=3Db&amp;k=3D1">disable emails here</a>.<br/></html>



--b1_4d223350589863c4673859b5716e7e33--

I'll probably have to contact Facebook support but I'm not holding my breath on getting any results. The only thing I've see slightly out of sorts is a tracking pixel from socialconnexion.in but that's par for the course with promo emails.
 
Last edited:

Big Dan

EQ Forum Moderator
I checked out the help pages didn't find much helpful. I couldn't find away to actually email support. I hate when companies do that. I know they have a huge quantity of email to deal with but that's a disservice to your members. I was actually just going to copy/paste what I posted here.

I'm hesitant to go find the application and report it as they're obviously shady. Who knows what crap is on their page.

Great idea on the filter! I'll check if the address is consistent and do that..Surprised I didn't think of that. :)
 

EQ Admin

EQ Forum Admin
Staff member
Actually, I think this might be a better key for a filter: from_app=125717634120849
 

EQ Admin

EQ Forum Admin
Staff member
I believe searching for that ID gives away the name.

Does "Death Time Calculator" match your app list / did you allow them access to your Facebook?

Search for 125717634120849 in the Facebook search to see the results.
 

Big Dan

EQ Forum Moderator
I believe searching for that ID gives away the name.

Does "Death Time Calculator" match your app list / did you allow them access to your Facebook?

Search for 125717634120849 in the Facebook search to see the results.

Yes I did but I never enabled email permissions. Them sending me horoscope, dating, and other crap has to be in violation of FB's app email policies.
 
Top