|
About Email Spoofing
Many affected owners of email domain being spoofed
are complaining of having their account being suspended for spamming and
receiving "tons" of harassing hate mails marked as coming from them--which
they have never sent and only found-out when they start receiving
angry replies or returned undelivered bounce email.
The victims of these new from of harassment in
which fake or boogie messages was sent-out posing as the original owner of the
email address by spoofing, are usually done by dissatisfied or fired employees, competitors,
pranksters, junk mailers or provocateurs.
According to the FBI, spoofing is generally not
illegal because no hacking is required, unless it involves a direct threat of
violence or death and by using such tactic, know as email
spoofing--they exploit the simplicity of
Internet
SMTP
(simple mail transport protocol
RFC 821).
Email can be spoofed by tweaking the settings
on standard email client like; Eudora, Outlook Express, etc. There are also
many website that offers an automated process for creating and sending
spoofed email by inserting someone else
email address into the
Mail FROM:
or
REPLY TO:
fields--which also contains information about the "origin" of the
message--but
most people don't know how to decipher it or simply assume that the
spoofed message is
genuine.
See:
101 Email spam tracking and meaning of message header?
102 DejaNews the most powerful dedicated spam-tracker's tool
103 The spam tracker tools: Whois, nslookup, traceroute, dig
104 Spam tracking, a spammer unmasked and
he is going to jail
Normally, tracking or finding the culprits is
not that difficult,
See:
Deciphering Fake Email because every single Internet email message headers
contains the following information: (1,2,3,4,5)
1. An origin (the machine that sent it)
2. Relay (the machine relaying it to another machine)
3. Final destination (the machine that receive it)
4.
IP address
5. Domain name
By using tools like
nslookup a DNS whois tool that perform forward and reverse DNS queries for the current
domain address (to get an IP address of a hostname and hostname of the IP address).
See: My email was hijacked / spoofed and
got
blacklisted?
<<back to>>
eMail Broadcast
FAQ
To top of page | 
Any
feed-back or suggestions? Please
