emails from where?

[tloosle]

I am getting 1000's of returned emails but can't find out why.  here is the returned email:

 

Return-path: <[email protected]>
Received: from booster by cp1.s1i.net with local (Exim 4.87)
    (envelope-from <[email protected]>)
    id 1asFWh-0006Lw-A9
    for [email protected]; Mon, 18 Apr 2016 14:12:07 -0600
To:  <[email protected]>
Subject: [TheBooster.com] A friend sent you a link to    PP- All about  Postcards
X-PHP-Script: www.thebooster.com/modules/sendtoafriend/sendtoafriend_ajax.php for 103.29.22.114
From: TheBooster.com <[email protected]>
Reply-To: [email protected]
Date: Mon, 18 Apr 2016 14:12:07 -0600
X-LibVersion: 3.3.2
MIME-Version: 1.0
Content-Type: multipart/related;
 boundary="_=_swift-71687593257153f9748aaa3.86807513_=_"
Content-Transfer-Encoding: 7bit
Message-ID: <[email protected]>

This is a message in multipart MIME format.  Your mail client should not
be displaying this. Consider upgrading your mail client to view this
message correctly.
--_=_swift-71687593257153f9748aaa3.86807513_=_
Content-Type: multipart/alternative;
 boundary="_=_swift-178195047957153f9748b302.95945378_=_"
Content-Transfer-Encoding: 7bit


--_=_swift-178195047957153f9748b302.95945378_=_
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit

[https://thebooster.com/index.php]

Hi www.eu88.co PT老虎游戏开户送5元 存50送58 存5送6.6,


A friend has sent you a link to a product that (s)he thinks may
interest you.

Click here to view this item:    PP- All about Postcards
[http://www.thebooster.com/index.php?id_product=6931&controller=product]

TheBooster.com [https://thebooster.com/index.php] powered by
PrestaShop [http://www.prestashop.com/]


--_=_swift-178195047957153f9748b302.95945378_=_
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit
 

I deleted the refer to a friend module and still getting these.  Anyone else seen this and know where they are coming from?

 

thanks T

 

 

I

[shokinro]

the email seems sent a from affiliate or similar module,  have you ever installed this kind of module?

[simon_says]

Do you instal any spcieal addons?

[tloosle]

No.  I thought it was a refer a friend, but thats been deleted as well

[tloosle]

bump

[musicmaster]

Somewhere else on the forum i saw a report about "send to a friend" being abused by a spammer. You may have a similar problem.

[tloosle]

thats what I thought, but that module has been removed.