Question:
I received a mail the following internet headers can any body find its origin?
jasu
2006-09-23 04:46:55 UTC
Return-Path:
Received: from rediffmail.com (webmail87.rediffmail.com [59.160.240.212] (may be forged))
by r14582.cqhost.net (8.10.2-SOL3/8.10.2) with SMTP id k8M8sxw26413
for ; Fri, 22 Sep 2006 04:55:00 -0400
Received: (qmail 9046 invoked by uid 510); 22 Sep 2006 08:52:05 -0000
Date: 22 Sep 2006 08:52:05 -0000
Message-ID: <20060922085205.9045.qmail@webmail87.rediffmail.com>
Received: from unknown (61.246.60.200) by rediffmail.com via HTTP; 22 sep 2006 08:52:05 -0000
MIME-Version: 1.0
From: "wellwisher bglor"
Reply-To: "wellwisher bglor"
To: corporate@cerachemindia.com
Cc: jaswanth@cerachemindia.com
Subject: kind attn cera chem india
Content-type: multipart/alternative;
boundary="Next_1158915125---0-59.160.240.212-9039"
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on kestrel.cqhost.net
X-Spam-Status: No, hits=0.8 required=5.0 tests=HTML_MESSAGE,
MSGID_FROM_MTA_HEADER autolearn=no version=2.63
X-UIDL: G9I!!p;N!!(e)#!%l2"!
Three answers:
Owlwings
2006-09-23 05:00:26 UTC
It looks as though the IP it was sent FROM was 61.246.60.200 which is one of a block which is registered as follows:



Registration Service Provided By: Incyber

Contact: chugh@rajiv.in



Domain name: touchtelindia.net



REGISTRANT Contact:

Bharti Tele- Ventures limited

Rajinder Sharma (rsharma@bharti.com)

+91.118666130

Fax: +91.118666140

H-5/12, Qutab Ambience

Mehruli

New Delhi, 110030

IN



ADMINISTRATIVE Contact:

Bharti Tele- Ventures limited

Rajinder Sharma (rsharma@bharti.com)

+91.118666130

Fax: +91.118666140

H-5/12, Qutab Ambience

Mehruli

New Delhi, 110030

IN



Status: Locked



Name Servers:

aaadel.mantraonline.com

dnsdel.mantraonline.com



Creation date: 28 Oct 2002 10:35:02

Expiration date: 28 Oct 2010 10:35:02



But that is likely to be only the ISP for the machine that the message was sent from. It could well lead to an Internet cafe, for example. Note that it says that 'rediffmail' received the message FROM that IP address.



Checking the source of spam and reporting it is, frankly, never worth the effort unless it is in some way personally damaging and you stand a chance of recovering damages legally.
2006-09-23 05:38:44 UTC
It is very likely this is Spam. Will be hard to trace the real source.



SPAM Defense:



This not a "lecture", you have to do your part to be safe on

the Internet! Educate yourself. "There is nothing like learning

how to fish. You feed yourself for a lifetime!"



Download Spam Assassin, the Zip version for Windows

http://spamassassin.apache.org/downloads.cgi?update=200504281430



http://www.spamcop.net/



If you use Outlook/Outlook Express:



http://www.outlook-tips.net/archives/2003/20030825.htm



Create a Rule that sends all incoming messages to the Deleted Items

folder. Then modify the rule to allow only known email addresses

to go to your Inbox folder. Configure Outlook/Outlook Express to

Delete all in the Deleted Items folder upon exit.



If you use Thunderbird which has lots of builtin stuff to help

protect you - http://www.mozilla.com/thunderbird/



Also use this extension - https://addons.mozilla.org/thunderbird/2650/



If you use Yahoo Mail:



Log into your mail account.

Go into My Account then edit your mail Options

Turn on SpamGuard and set other choices at you desire.



Use http://www.dnsstuff.com to find known Spammers!

See the Spam Database lookup feature.



Have fun but be safe!
2006-09-23 04:52:17 UTC
looks like BIG time spam to me


This content was originally posted on Y! Answers, a Q&A website that shut down in 2021.
Loading...