I have been getting hundreds of e-mails per day (to my hotmail address) from a spoofed address (which seems to be close, but not exactly like, my Yahoo e-mail address). Although the subject changes, the content is always the same (something about debt relief).
They have an opt-out link, but it leads to a page which doesn’t exist.
I downloaded ‘Sam Spade’, but that program can’t figure it out either.
I can’t find a help address on either Hotmail or Yahoo and Outlook Express doesn’t have enough filter properties to get rid of this crap.
FYI, the message headers are like this:
From user@yahoo.com Tue, 02 Apr 2002 05:59:55 -0800
Received: from [216.190.250.3] by hotmail.com (3.2) with ESMTP id MHotMailBE7303CB00BF40043157D8BEFA0319A019; Tue, 02 Apr 2002 05:58:40 -0800
Subject: for your convenience
Date: Tue, 02 Apr 2002 06:54:02 -0700
MIME-Version: 1.0
X-Encoding: MIME
Content-Type: multipart/alternative;
boundary="----=_NextPart_0116402426284271073823767"
Message-Id: <3cl42ss4k21u44thi.4wvccvl6ku5@msn.com>
From: rt_funhces::urban1<rt_funhces::urban1@yahoo.com>
To: rt_funhces::urban1@hotmail.com
Can anyone suggest somewhere I can send this crap to to get these people shut down? I’m really getting tired of deleting the shit.
b) Create filter saving anything genuinely sent by you to yourself to your inbox, if you wish (optional).
c) Create filter matching the string “debt relief” in the body and the From header to any string containing “urban1”, result = Transfer to Trash
Or just send anything containing the string “debt relief” in either the subject OR any header OR the body to the trash, because who would ever send you anything you really wanted to read that contained a string like that?
Ok, the line you want to look at is the Received: header.
Received: from [216.190.250.3] by hotmail.com (3.2) with ESMTP
So, this message came through an email server with the IP address 216.190.250.3
Take this to the Sam Spade website and type it in the line for Do Stuff. You get this result:
Electric Lightwave Inc (NETBLK-ELI-NETBLK99) ELI-NETBLK99
216.190.0.0 - 216.190.255.255
SAS International (NETBLK-ELI-D8BEFA00-2506-692) ELI-D8BEFA00-2506-692
216.190.250.0 - 216.190.250.255
So, Electric Lightwave owns the IP block and SAS International owns the part of it that includes that email server. Click the NETBLK-ELI-D8BEFA00-2506-692 link for information about SAS International. It shows a contact address of support@sasdirect.net. This isn’t an abuse address so go to abuse.net to look up their registered one. It looks like abuse@sasdirect.net is where you should forward the complete spam, including the headers.
If you don’t get a response from them and you keep getting spammed, send a copy to Electric Lightwave at abuse@eli.net