Email Spoofing January 3, 2007
Great. Just great. In addition to the slow down, the New Year has greeted me with tons of email non-delivery notifications. Someone is spoofing my asianenergyadvisors.com email domain. I can only imagine how many are NOT bouncing.
If any of you have any idea what I can do, please let me know.
Here’s the relevant part of one of the returned message headers, as a sample, showing the spoofing - I stripped out the top part of the header dealing with the return message directed to me.
This is an automatically generated Delivery Status Notification.
Delivery to the following recipients failed.
rfiorentino@retailbrokers.com
--9B095B5ADSN=_01C6EAF041A3BA1C0009BCC4EQUITYSRV.Retail
Content-Type: message/delivery-status
Reporting-MTA: dns;EQUITYSRV.RetailBrokers.COM
Received-From-MTA: dns;equitysrv.retailbrokers.com
Arrival-Date: Tue, 2 Jan 2007 08:37:10 -0500
Final-Recipient: rfc822;rfiorentino@retailbrokers.com
Action: failed
Status: 5.1.1
--9B095B5ADSN=_01C6EAF041A3BA1C0009BCC4EQUITYSRV.Retail
Content-Type: message/rfc822
Received: from equitysrv.retailbrokers.com ([192.168.100.20]) by EQUITYSRV.RetailBrokers.COM with Microsoft SMTPSVC(5.0.2195.6713);
Tue, 2 Jan 2007 08:37:10 -0500
Received: from dynamic-acs-24-239-112-43.zoominternet.net ([24.239.112.43])
by equitysrv.retailbrokers.com (SASSMTP 3.1.0.5) with SMTP id M2007010208370906435
for ; Tue, 02 Jan 2007 08:37:09 -0500
Received: from adfwf ([99.118.65.219])
by dynamic-acs-24-239-112-43.zoominternet.net (8.13.2/8.13.2) with SMTP id l02E1ivJ004353;
Tue, 2 Jan 2007 09:01:44 -0500
Message-ID: <459A64BD.8000208@asianenergyadvisors.com>
Date: Tue, 2 Jan 2007 08:57:17 -0500
From: Lucy Glass
User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
MIME-Version: 1.0
To: rfiorentino@retailbrokers.com
Subject: sitter
Content-Type: multipart/related;
boundary=”————090800060305010003010406″
Return-Path: miml@asianenergyadvisors.com
X-OriginalArrivalTime: 02 Jan 2007 13:37:10.0187 (UTC) FILETIME=[1A5E8FB0:01C72E73]

Add New Comment
Thanks. Your comment is awaiting approval by a moderator.
Do you already have an account? Log in and claim this comment.
Add New Comment