Archive for July 7th, 2004

imposter email

July 7th, 2004

Filed under: at 11:21pm

it might have happened before but this is the first time someone had told me about it. i know spam companies are using real email addresses that don’t belong to them to send spams. someone got an email from my old email address with the following message:

subject: hi
message: Try this, or nothing!
attachment: document05.zip


X-Rocket-Spam: 217.44.14.205
X-YahooFilteredBulk: 217.44.14.205
X-Rocket-Track: 10: 20 ; IPCR=n-w0,n100,g0 ; IP=217.44.14.205 ;
SERVER=216.155.197.128
X-Originating-IP: [217.44.14.205]
Return-Path:
Received: from 217.44.14.205 (EHLO yahoo.com) (217.44.14.205)
by mta106.mail.re2.yahoo.com with SMTP; Wed, 07 Jul 2004 03:56:46 -0700
From:
To:
Subject: hi
Date: Wed, 7 Jul 2004 11:56:59 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=”—-=_NextPart_000_0016—-=_NextPart_000_0016″
X-Priority: 3
X-MSMail-Priority: Normal

Try this, or nothing!

name=”document05.zip”

the real sender’s ip is 217.44.14.205 which traces to
BRITISH TELECOMMUNICATIONS PLC (BTCENTRALPLUS-DOM)
81 NEWGATE STREET
LONDON, GREATER LONDON EC1A 7AJ
GB

it seems yahoo knows it’s a spam too in the header. but the person who got the email, her email client apparently didn’t block it. with so many places now you can send emails online with email addresses that don’t belong to you; impostering a person can never be easier. didn’t many companies have troubles with imposters sending out emails to their clients to ask for their passwords?! a lot of sites now warn their members that they will never ask for their passwords by email.

the lesson is, don’t ever trust a email sent to you until you verify the sender’s ip!

10 comments