India Broadband Forum


Email scam or can Emails be mis-delivered ?

This is a discussion on Email scam or can Emails be mis-delivered ? within the Computer Security forums, part of the Computer technology category; I jus got a mail which was probably meant for somebody else ! I would like to know how this ...

Go Back   India Broadband Forum > Computers > Computer technology > Computer Security

India Broadband Forum


                      

Reply

 

LinkBack Thread Tools Display Modes
Old 08-12-09, 01:51 PM   #1
newprouser
Guest
 
Posts: n/a
Angry Email scam or can Emails be mis-delivered ?

I jus got a mail which was probably meant for somebody else ! I would like to know how this is possible ???

though it contains marketing stuff i'm unable to understand how in the hell it reached me ?

email_scam.JPG
  Reply With Quote
Old 08-12-09, 01:56 PM   #2
Senior Member & Mod
 
Join Date: Jan 2009
Location: Delhi
Posts: 3,303
Blog Entries: 3
Rep Power: 8
mickey is a glorious beacon of lightmickey is a glorious beacon of lightmickey is a glorious beacon of lightmickey is a glorious beacon of lightmickey is a glorious beacon of light
Default

Quote:
Originally Posted by newprouser View Post
I jus got a mail which was probably meant for somebody else ! I would like to know how this is possible ???

though it contains marketing stuff i'm unable to understand how in the hell it reached me ?

Attachment 5260
i am also getting such wierd stuffs...

the email id is mail2sc@gmail while mine is mail2sc@del1.. i dont know what the hell is this... better is to stay away from such sites... and not to sign up with them.
mickey is offline   Reply With Quote
Old 08-12-09, 02:09 PM   #3
newprouser
Guest
 
Posts: n/a
Default

well if you post email id like you did above, i won't wonder why

p.s. remove those ids for your own good
  Reply With Quote
Old 08-12-09, 02:13 PM   #4
Senior Member & Mod
 
Join Date: Jan 2009
Location: Delhi
Posts: 3,303
Blog Entries: 3
Rep Power: 8
mickey is a glorious beacon of lightmickey is a glorious beacon of lightmickey is a glorious beacon of lightmickey is a glorious beacon of lightmickey is a glorious beacon of light
Default

first one is not mine, and second one is not complete.. its a long domain...
mickey is offline   Reply With Quote
Old 08-12-09, 02:37 PM   #5
newprouser
Guest
 
Posts: n/a
Default



clever mickey
  Reply With Quote
Old 08-12-09, 03:48 PM   #6
Platinum Member
 
panchabhut's Avatar
 
Join Date: Jan 2009
Location: New Delhi
Posts: 2,215
Rep Power: 9
panchabhut is a name known to allpanchabhut is a name known to allpanchabhut is a name known to allpanchabhut is a name known to allpanchabhut is a name known to allpanchabhut is a name known to all
Default

who is shruti batra78
panchabhut is offline   Reply With Quote
Old 08-12-09, 04:37 PM   #7
Senior Member & Mod
 
Join Date: Jan 2009
Location: Delhi
Posts: 3,303
Blog Entries: 3
Rep Power: 8
mickey is a glorious beacon of lightmickey is a glorious beacon of lightmickey is a glorious beacon of lightmickey is a glorious beacon of lightmickey is a glorious beacon of light
Default

interestingly i got daemon bounce back when i mailed the cited mail ids..
mickey is offline   Reply With Quote
Old 08-12-09, 05:16 PM   #8
newprouser
Guest
 
Posts: n/a
Default

Quote:
Originally Posted by panchabhut View Post
who is shruti batra78
all ids mentioned there are unknown to me !
  Reply With Quote
Old 08-12-09, 05:25 PM   #9
Senior Member & Mod
 
Join Date: Jan 2009
Location: Delhi
Posts: 3,303
Blog Entries: 3
Rep Power: 8
mickey is a glorious beacon of lightmickey is a glorious beacon of lightmickey is a glorious beacon of lightmickey is a glorious beacon of lightmickey is a glorious beacon of light
Default

batado np...
is she your new gf???
mickey is offline   Reply With Quote
Old 08-13-09, 01:13 AM   #10
Jedi knight
 
Luke Skywalker's Avatar
 
Join Date: Jul 2009
Location: IBF
Age: 21
Posts: 1,818
Rep Power: 5
Luke Skywalker is a jewel in the roughLuke Skywalker is a jewel in the roughLuke Skywalker is a jewel in the roughLuke Skywalker is a jewel in the rough
Default

Sender Domain address is this 208.109.199.53 which is hold by GoDaddy.com which is a domain registring site.

whois info:-

Quote:
OrgName: GoDaddy.com, Inc.
OrgID: GODAD
Address: 14455 N Hayden Road
Address: Suite 226
City: Scottsdale
StateProv: AZ
PostalCode: 85260
Country: US

NetRange: 208.109.0.0 - 208.109.255.255
CIDR: 208.109.0.0/16
NetName: GO-DADDY-SOFTWARE-INC
NetHandle: NET-208-109-0-0-1
Parent: NET-208-0-0-0-0
NetType: Direct Allocation
NameServer: CNS1.SECURESERVER.NET
NameServer: CNS2.SECURESERVER.NET
NameServer: CNS3.SECURESERVER.NET
Comment:
RegDate: 2006-04-12
Updated: 2007-06-14

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-480-624-2505
OrgAbuseEmail: abuse@godaddy.com

OrgNOCHandle: NOC124-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-480-505-8809
OrgNOCEmail: noc@godaddy.com

OrgTechHandle: NOC124-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-480-505-8809
OrgTechEmail: noc@godaddy.com

# ARIN WHOIS database, last updated 2009-08-11 20:00
# Enter ? for additional hints on searching ARIN's WHOIS database.
Did anyone notice that sender & receiver are same. I think email was sent from this domain but by some other domain as it has its SMTP port open which I found out after scanning. If you want to take any action contact them. Also by the way , what was the site they were advertising. Give me its name.
Luke Skywalker is offline   Reply With Quote
Old 08-13-09, 01:25 AM   #11
newprouser
Guest
 
Posts: n/a
Default

Quote:
Originally Posted by Luke Skywalker View Post
Also by the way , what was the site they were advertising. Give me its name.
Mobile SMS, send SMS to any mobile in India, SMS, SMS, text messaging, SMS chat, Mobile SMS, SMS to any network: Smsfi
  Reply With Quote
Old 08-13-09, 01:40 AM   #12
Jedi knight
 
Luke Skywalker's Avatar
 
Join Date: Jul 2009
Location: IBF
Age: 21
Posts: 1,818
Rep Power: 5
Luke Skywalker is a jewel in the roughLuke Skywalker is a jewel in the roughLuke Skywalker is a jewel in the roughLuke Skywalker is a jewel in the rough
Default

Whois info of this site:

Quote:
OrgName: Liquid Web, Inc.
OrgID: LQWB
Address: 4210 Creyts Rd.
City: Lansing
StateProv: MI
PostalCode: 48917
Country: US

ReferralServer: rwhois://rwhois.liquidweb.com:4321/

NetRange: 67.225.128.0 - 67.225.255.255
CIDR: 67.225.128.0/17
OriginAS: AS32244
NetName: LIQUIDWEB-8
NetHandle: NET-67-225-128-0-1
Parent: NET-67-0-0-0-0
NetType: Direct Allocation
NameServer: NS.LIQUIDWEB.COM
NameServer: NS1.LIQUIDWEB.COM
Comment:
RegDate: 2007-11-26
Updated: 2008-01-23

OrgAbuseHandle: ABUSE551-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-800-580-4985
OrgAbuseEmail: abuse@liquidweb.com

OrgTechHandle: IPADM47-ARIN
OrgTechName: IP Administrator
OrgTechPhone: +1-800-580-4985
OrgTechEmail: ipadmin@liquidweb.com

# ARIN WHOIS database, last updated 2009-08-11 20:00
# Enter ? for additional hints on searching ARIN's WHOIS database.


Found a referral to rwhois.liquidweb.com:4321.

%rwhois V-1.5:003eff:00 rwhois.liquidweb.com (by Network Solutions, Inc. V-1.5.7.4)
network:Class-Name:network
network:ID:NETBLK-SMSFICOM.67.225.186.189/32
network:Auth-Area:67.225.128.0/17
network:Network-Name:SMSFICOM-67.225.186.189
network:IP-Network:67.225.186.189/32
network:IP-Network-Block:67.225.186.189-67.225.186.189
network:Organization;I:SMSFICOM
network:Org-Name:smsfi.com
network:Street-Address:6-D, Racquet Court Rd, Civil Lines, Delhi - 110054
network:Cityelhi
network:Stateelhi
network:Postal-Code:110054
network:Country-Code:India
network:Tech ;I:vaibjain@gmail.com
network:Abuse:abuse@sourcedns.com
network:Created:20090812
network:Updated:20090812
network:Updated-By:admin@sourcedns.com

network:Class-Name:network
network:ID:NETBLK-SOURCEDNS.67.225.128.0/17
network:Auth-Area:67.225.128.0/17
network:Network-Name:SOURCEDNS-67.225.128.0
network:IP-Network:67.225.128.0/17
network:IP-Network-Block:67.225.128.0 - 67.225.255.255
network:Organization;I:SOURCEDNS
network:Org-Name:SourceDNS
network:Street-Address:4210 Creyts Rd.
network:City:Lansing
network:State:MI
network:Postal-Code:48917
network:Country-Code:US
network:Tech-Contact;I:admin@sourcedns.com
network:Created:20071126
network:Updated:20071126
network:Updated-By:admin@sourcedns.com
network:Abuse:abuse@sourcedns.com

%ok
This site is registered indirectly to GoDaddy.com

Email was sent from the 208.109.199.53. Most probably by forging it as Shruti. Contact the vaibjain@gmail.com . If he don't take anyaction then network:Abuse. But network abuse is last resort.

Email was not mis delivered. It is a new art of spamming.

Last edited by Luke Skywalker; 08-13-09 at 01:40 AM. Reason: Automerged Doublepost
Luke Skywalker is offline   Reply With Quote
Old 08-13-09, 01:43 AM   #13
newprouser
Guest
 
Posts: n/a
Default

well first i'd like to see if any more mails come.
i got two random mails actually.

there was only one company who knew this ID and i wondering if they sold it or did sth like that.

Thanks for the detective work

Last edited by newprouser; 08-13-09 at 01:43 AM. Reason: Automerged Doublepost
  Reply With Quote
Old 08-13-09, 01:44 AM   #14
Jedi knight
 
Luke Skywalker's Avatar
 
Join Date: Jul 2009
Location: IBF
Age: 21
Posts: 1,818
Rep Power: 5
Luke Skywalker is a jewel in the roughLuke Skywalker is a jewel in the roughLuke Skywalker is a jewel in the roughLuke Skywalker is a jewel in the rough
Default

I didn't knew about this type of spamming before. Only theoritically I knew not practically.
Luke Skywalker is offline   Reply With Quote
Old 08-13-09, 01:49 AM   #15
newprouser
Guest
 
Posts: n/a
Default

Its only a guess. btw the nigerian scammers are getting intelligent too. they get the numbers from local directory/companies and send messages. Inspite of subscribing to DNC,i get messages !
  Reply With Quote
Old 08-13-09, 02:10 AM   #16
Platinum Member
 
Join Date: Sep 2008
Posts: 3,140
Rep Power: 10
Punch Farce is a name known to allPunch Farce is a name known to allPunch Farce is a name known to allPunch Farce is a name known to allPunch Farce is a name known to allPunch Farce is a name known to all
Default

Quote:
Originally Posted by newprouser View Post
I jus got a mail which was probably meant for somebody else ! I would like to know how this is possible ???

though it contains marketing stuff i'm unable to understand how in the hell it reached me ?
Are you serious you are wondering how this is possible?
I thought you would figure this out. This happens all the time
in marketing junk mails and normal mails too.

I put my own email in the to: list and the rest of the
recipients in the Bcc: list.

PB
Punch Farce is offline   Reply With Quote
Old 08-13-09, 02:29 AM   #17
newprouser
Guest
 
Posts: n/a
Default

Quote:
Originally Posted by Punch Bala View Post
Are you serious you are wondering how this is possible?
I thought you would figure this out. This happens all the time
in marketing junk mails and normal mails too.

I put my own email in the to: list and the rest of the
recipients in the Bcc: list.

PB
elementary, my dear Watson, and I missed !
  Reply With Quote
Reply

Tags
email, emails, misdelivered, scam

Thread Tools
Display Modes

Posting Rules
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads

Thread Thread Starter Forum Replies Last Post
Sending encrypted emails in Linux cool_techie_tvm Linux 1 03-23-09 02:20 AM
Online Scam Websites Jbessy Online Jobs 9 11-03-08 02:49 PM
BSNL - 1350UL Plan Scam?? Manjothi BSNL broadband 3 05-04-08 02:53 PM
Your emails find you automatically. No dial up and no waiting. username Airtel Broadband 1 11-27-06 02:29 AM


All times are GMT +5.5. The time now is 06:03 AM.


India Broadband Forum