I have sent some stuff to [email protected], but it is not a typical situation. The hacker sent to my friend's contact list a request to wire $. The return address was changed to hellerwalker53 at gmail dot com. The hacker also changed my friend's reply-to field to that same address. So for some time (maybe even now) that email address was functional. Since that email is a .gmail address I want google to shut it down. Maybe my message to them will work; maybe not.
I may try to send something to the address to see if it bounces. If not, is there some service which will fill his inbox? On Wed, Aug 22, 2018 at 3:27 PM, Rich Shepard <[email protected]> wrote: > On Wed, 22 Aug 2018, Denis Heidtmann wrote: > > I have been trying to find way to report that address to google without >> success. Is there any hope of getting the information to Google so that >> the address is shut down? It is the address that the hacker used to >> receive $ from unthinking recipients of the original spam. >> > > Denis, > > Have her turn on headers and export the entire message as a text file. > This preserves the sending IP address. Then have her forward the text file > to you as an attachment. > > When you receive the message check the header for the top-most IP address > -- not sender address name -- and run it through 'whois ...'. It will > almost > certain be an IP address starting with 209. (most of those I get start that > way), and it's the first one after the received-from SPF header. The usual > google spam reporting address is [email protected]. > > Open a blank message to that address and import the text file. Start your > message asking them to take appropriate actions to prevent further UCE from > that sender. Then separate this header from the forwarded text with a line: > > ------ Forwarded message ------ > > Or, have her forward the message directly to [email protected] > after confirming (using whois) that it indeed is from a google server. > > If I've not confused you let me know and I'll try harder. :-) > > HTH, > > Rich > > > _______________________________________________ > PLUG mailing list > [email protected] > http://lists.pdxlinux.org/mailman/listinfo/plug > _______________________________________________ PLUG mailing list [email protected] http://lists.pdxlinux.org/mailman/listinfo/plug
