Blogging from Malaybalay City, Philippines

Email Spoofing January 3, 2007

Great. Just great. In addition to the slow down, the New Year has greeted me with tons of email non-delivery notifications. Someone is spoofing my asianenergyadvisors.com email domain. I can only imagine how many are NOT bouncing.

If any of you have any idea what I can do, please let me know.

Here’s the relevant part of one of the returned message headers, as a sample, showing the spoofing - I stripped out the top part of the header dealing with the return message directed to me.



This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed.

rfiorentino@retailbrokers.com

--9B095B5ADSN=_01C6EAF041A3BA1C0009BCC4EQUITYSRV.Retail
Content-Type: message/delivery-status

Reporting-MTA: dns;EQUITYSRV.RetailBrokers.COM
Received-From-MTA: dns;equitysrv.retailbrokers.com
Arrival-Date: Tue, 2 Jan 2007 08:37:10 -0500

Final-Recipient: rfc822;rfiorentino@retailbrokers.com
Action: failed
Status: 5.1.1

--9B095B5ADSN=_01C6EAF041A3BA1C0009BCC4EQUITYSRV.Retail
Content-Type: message/rfc822

Received: from equitysrv.retailbrokers.com ([192.168.100.20]) by EQUITYSRV.RetailBrokers.COM with Microsoft SMTPSVC(5.0.2195.6713);
Tue, 2 Jan 2007 08:37:10 -0500
Received: from dynamic-acs-24-239-112-43.zoominternet.net ([24.239.112.43])
by equitysrv.retailbrokers.com (SASSMTP 3.1.0.5) with SMTP id M2007010208370906435
for ; Tue, 02 Jan 2007 08:37:09 -0500
Received: from adfwf ([99.118.65.219])
by dynamic-acs-24-239-112-43.zoominternet.net (8.13.2/8.13.2) with SMTP id l02E1ivJ004353;
Tue, 2 Jan 2007 09:01:44 -0500
Message-ID: <459A64BD.8000208@asianenergyadvisors.com>
Date: Tue, 2 Jan 2007 08:57:17 -0500
From: Lucy Glass
User-Agent: Thunderbird 1.5.0.9 (Windows/20061207)
MIME-Version: 1.0
To: rfiorentino@retailbrokers.com
Subject: sitter
Content-Type: multipart/related;
boundary=”————090800060305010003010406″
Return-Path: miml@asianenergyadvisors.com
X-OriginalArrivalTime: 02 Jan 2007 13:37:10.0187 (UTC) FILETIME=[1A5E8FB0:01C72E73]

Tags
Conversation
Related Tags
Comments
Trackback

 
close Reblog this comment
blog comments powered by Disqus
Mamutong is powered by Wordpress 2.7
All content is licensed under a Creative Commons License.