leathersmt Posted July 7, 2004 Share Posted July 7, 2004 We just got an email from someone claiming to be us. I can copy the headers and what I found to see if anyone can verify if what I found is right. Please advise. Return-Path: <leathersbymt[at]leathersbymaryterry.com> Received: from ovenbird.mail.pas.earthlink.net ([207.217.120.247]) by timothy.mail.atl.earthlink.net (EarthLink SMTP Server) with ESMTP id 1bI1yn4jV3Nl3pw0 for <leathersbymt[at]mindspring.com>; Tue, 6 Jul 2004 21:48:55 -0400 (EDT) Received: from egret-120.pocket ([10.4.120.211] helo=egret) by ovenbird.mail.pas.earthlink.net with smtp (Exim 3.36 #1) id 1Bi1YN-0005OJ-00 for leathersbymt[at]mindspring.com; Tue, 06 Jul 2004 18:48:55 -0700 X-MindSpring-Loop: leathersbymt[at]leathersbymaryterry.com Received: from omt ([67.122.111.124]) by egret (EarthLink Mail Service) with SMTP id 1bI1ym34x3NZFmj0 for <leathersbymt[at]leathersbymaryterry.com>; Tue, 6 Jul 2004 18:48:54 -0700 (PDT) Message-ID: <051301c463c4$3a4eb46a$d005ea19[at]omt> CC: <leathersbymt[at]leathersbymaryterry.com> Subject: Save thousands on your mortgage! Date: Tue, 6 Jul 2004 18:48:14 -0700 X-Mailer: SMTP Content-Type: text/html; charset="ISO-8859-1" MIME-Version: 1.0 X-Priority: 1 From: <leathersbymt[at]leathersbymaryterry.com> X-ELNK-AV: 0 67.122.111.124 NAME: PBI-NET-10 NUMBER: 67.112.0.0 - 67.123.255.255 CITY: SAN RAMON STATE: CALIFORNIA COUNTRY: US LAT: 37.79 LONG: -122.40 LAT_LONG_GRAN: City LAST_UPDATED: 16-Oct-2001 NIC: ARIN LOOKUP_TYPE: Block Allocation RATING: DOMAIN_GUESS: STATUS: OK ___________________________________________________________ route: 67.122.96.0/19 descr: San Francisco, CA SBC Internet Services origin: AS7132 mnt-by: MAINT-AS7132 changed: *********[at]sbc.com 20030317 source: RADB _________________________________________________________________________ Pac Bell Internet Services PBI-NET-10 (NET-67-112-0-0-1) 67.112.0.0 - 67.127.255.255 rback7.sntc01 SBC067122108000021030 (NET-67-122-108-0-1) 67.122.108.0 - 67.122.111.255 ____________________________________________________________________ Country: Unknown Looking up !NET-67-112-0-0-1 at whois.arin.net. NOTE: More information appears to be available at PIA2-ORG-ARIN. Using cached answer (or, you can get fresh results). Hiding E-mail address (you can get results with the E-mail address). OrgName: Pac Bell Internet Services OrgID: PACB Address: 208 Bush St. #5000 City: San Ramon StateProv: CA PostalCode: 94104 Country: US NetRange: 67.112.0.0 - 67.127.255.255 CIDR: 67.112.0.0/12 NetName: PBI-NET-10 NetHandle: NET-67-112-0-0-1 Parent: NET-67-0-0-0-0 NetType: Direct Allocation NameServer: NS1.PBI.NET NameServer: NS2.PBI.NET Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate: 2001-10-16 Updated: 2003-03-07 TechHandle: PIA2-ORG-ARIN TechName: IPAdmin-PBI TechPhone: +1-877-722-3755 TechEmail: ************[at]sbis.sbc.com OrgAbuseHandle: APB2-ARIN OrgAbuseName: Abuse - Pacific Bell OrgAbusePhone: +1-877-722-3755 OrgAbuseEmail: ******[at]pacbell.net OrgNOCHandle: SPBI-ARIN OrgNOCName: Support - Pacific Bell Internet OrgNOCPhone: +1-877-722-3755 OrgNOCEmail: ********[at]pacbell.net OrgTechHandle: PIA2-ORG-ARIN OrgTechName: IPAdmin-PBI OrgTechPhone: +1-877-722-3755 OrgTechEmail: ************[at]sbis.sbc.com # ARIN WHOIS database, last updated 2004-06-15 19:10 # Enter ? for additional hints on searching ARIN's WHOIS database. [if E-mail address(es) were hidden on this page, you can click here to get the results with the E-mail address. Link to comment Share on other sites More sharing options...
agsteele Posted July 7, 2004 Share Posted July 7, 2004 Sadly you are the victim of a very common spam technique where your Email address is inserted in the from line - presumably to try and make the Email more plausible to you, the recipient. Another possible issue is that your Email address has been randomly selected as the from address for a bunch of Email spam. This is quite common, exceedingly annoying but with little possibility of getting the practice stopped. Many folk who hang around here have had a similar experience. It generally goes away as quickly as it arrives and causes little or only momentary hassle. Only if it causes you more than a small amount of hassle would it be worthwhile taking legal action (IMO) Andrew Link to comment Share on other sites More sharing options...
moonbroth Posted July 7, 2004 Share Posted July 7, 2004 Sadly you are the victim of a very common spam technique where your Email address is inserted in the from line - presumably to try and make the Email more plausible to you, the recipient. If that makes no sense whatsoever to you, remember Rule #3. Sorry, there's not much you can do about this (other than report the email as usual through SpamCop, making sure you don't complain to your own, completely innocent ISP). The random "bounced spam" messages I get from ISPs (where spam is forged from my address to third parties) are far more annoying - it's got so bad that I have to ignore every bounce message these days, and have no way of knowing if one of my own emails isn't getting through. Another example of what spammers have ruined. Still, I would urge you to be philosophical about this. You will still have the use of your email address when the spammers are all hiding or in jail... Link to comment Share on other sites More sharing options...
leathersmt Posted July 8, 2004 Author Share Posted July 8, 2004 Andrew, Moonbroth, Thank you both for your comments and suggestions. I like the #3 rule too. Have a good time everyone and I look forward to being able to help around here myself. Greg Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.