Re. Spam in my name

[domainicanicanica]

It appears that someone is sending out mass amounts of email using 2 of my domain names as the return address.

Of course, I have nothing to do with this.

The spam emails point to at least 4 sites:
www.notyesterdaysnews.com
www.filesharetoday.com
www.annualnewsletters.com
www.riverrockmembers.com

These sites offer apparently illegal downloads of movies and music.

The owner of these 4 sites cannot be identified as he/she has apparently falsified their Whois data.

The domain names are registered with Bulkregister.com. They have informed me they cannot do anything to stop the spam, as they are not the hosting company. However, I have informed Bulkregister.com that the Whois information is wrong. So far, they have not responded.

The hosting company, EASY-DNS-HOSTING.COM, has also apparently falsified their Whois data. The registrar of EASY-DNS-HOSTING.COM is Network Solutions. We have also informed them of the misleading Whois information, but have yet to hear back from them. I've also informed ICANN.

In the meantime the spam keeps flowing, I'm getting about 3,000 "returned" emails per day, and there seems to be no end in sight. Also, my legitimate emails that I send out (using my domain name) are being blocked and returned to me.

Any help or suggestions would be much appreciated.

Thanks.

 

[jojoyohan]

You can make the return email a blackhole so all the mail gets deleted. Other than that I think you should find out whos sending the spam. Good luck.

 

[cyphix]

Well that sucks!! Sorry to hear that! :-(

You could try setting up an autoresponder on the affected domains if you don't use them yourself for emails just in-case some angry people send u back emails telling them that you didn't send the spam blah blah blah.. OR.. you could have your host remove the affected domains off the mailservers.

Just some ideas!

 

[Vivvy]

The worst of course is that your legitimate email is starting to be blocked when you send stuff out .. that happened to me last year when one of my domains was spoofed. Unfortunately I have no good news. I ended up buying a new domain to create an email address that wasn't being blocked to use for my primary email. Just for the sake of because i'm keeping 2 generic domains parked in case this happens again.

Vivvy

 

[pelican]

i think you can configure the mailserver such that people cannot spoof using your domain.

 

[diverge]

i think you can configure the mailserver such that people cannot spoof using your domain.

This is true. You can set up Sender ID or SPF for your domains, which will cause any intended recipient mailservers using Sender ID or SPF technology to block the messages. Note that this will do nothing to mail destined for mail servers that are not yet using this technology.

eNom supports SPF directly via their online DNS configuration.

 

[Vivvy]

Email spoofing makes an email look like it came from one mail server when it actually comes from another instead. I don't know how you'd stop it at your own mail server from going out...because it's not originating from your mail server. Spoofed email can be blocked at the receivers end, or the returns from spoofed mail can be black-holed (as jojoyhan said above) when they return to the spoofed server. But the person who's sending the spoofed mail doesn't need any connection to your mail server to spoof your email address.

I've seen lots of websites give advice on how to track down a spoofer and quite frankly I think you'd have better luck tracking down the lost city of Atlantis. Spammers aren't known for their honesty, and tracking back spoofed mail can be a real lesson in futility. Once you know who is doing it they will most likely slip away to another identity with another server in a country that doesn't have any spam laws.

Spammers suck ... that's the quote of the day.

Vivvy

 

[banjir.com]

how do they do it? i get replies that said i have sent viruses, viagra etc and that it has been blocked!

but how is it possible to sent an email with someone else add?...they must be a way of tracking the original email source??

 

[Vivvy]

Here's a good FAQ on how to track an email's source:

http://www.mailsbroadcast.com/email.bolts&nuts/deciphering.fake.email.htm

Vivvy

 

[OgieOgalthorpe]

The hosting company, EASY-DNS-HOSTING.COM, has also apparently falsified their Whois data. The registrar of EASY-DNS-HOSTING.COM is Network Solutions. We have also informed them of the misleading Whois information, but have yet to hear back from them. I've also informed ICAAN.

It looks like the site is down...hopefully permanently. If you are still getting spammed by them, you could report them to their webhost which at this point seems to be Brazil Telecom.