I have been getting hundreds of e-mails per day (to my hotmail address) from a spoofed address (which seems to be close, but not exactly like, my Yahoo e-mail address). Although the subject changes, the content is always the same (something about debt relief).
They have an opt-out link, but it leads to a page which doesn’t exist.
I downloaded ‘Sam Spade’, but that program can’t figure it out either.
I can’t find a help address on either Hotmail or Yahoo and Outlook Express doesn’t have enough filter properties to get rid of this crap.
FYI, the message headers are like this:
From email@example.com Tue, 02 Apr 2002 05:59:55 -0800
Received: from [18.104.22.168] by hotmail.com (3.2) with ESMTP id MHotMailBE7303CB00BF40043157D8BEFA0319A019; Tue, 02 Apr 2002 05:58:40 -0800
Subject: for your convenience
Date: Tue, 02 Apr 2002 06:54:02 -0700
Can anyone suggest somewhere I can send this crap to to get these people shut down? I’m really getting tired of deleting the shit.
a) Download Eudora and ditch Outhouse.
b) Create filter saving anything genuinely sent by you to yourself to your inbox, if you wish (optional).
c) Create filter matching the string “debt relief” in the body and the From header to any string containing “urban1”, result = Transfer to Trash
Or just send anything containing the string “debt relief” in either the subject OR any header OR the body to the trash, because who would ever send you anything you really wanted to read that contained a string like that?
Ok, the line you want to look at is the Received: header.
Received: from [22.214.171.124] by hotmail.com (3.2) with ESMTP
So, this message came through an email server with the IP address 126.96.36.199
Take this to the Sam Spade website and type it in the line for Do Stuff. You get this result:
Electric Lightwave Inc (NETBLK-ELI-NETBLK99) ELI-NETBLK99
188.8.131.52 - 184.108.40.206
SAS International (NETBLK-ELI-D8BEFA00-2506-692) ELI-D8BEFA00-2506-692
220.127.116.11 - 18.104.22.168
So, Electric Lightwave owns the IP block and SAS International owns the part of it that includes that email server. Click the NETBLK-ELI-D8BEFA00-2506-692 link for information about SAS International. It shows a contact address of firstname.lastname@example.org. This isn’t an abuse address so go to abuse.net to look up their registered one. It looks like email@example.com is where you should forward the complete spam, including the headers.
If you don’t get a response from them and you keep getting spammed, send a copy to Electric Lightwave at firstname.lastname@example.org