Ok, below are the message headers for spam I received the other day (
here's how to extract this data):
Return-path: <info@jvharch.co.za>
Envelope-to: <private>
Delivery-date: Mon, 06 Aug 2012 10:49:22 +0200
Received: from prewall10.smp.mweb.co.za ([196.28.77.220])
by mailstore-19.smp.mweb.co.za with esmtp (Exim 4.69)
(envelope-from <info@jvharch.co.za>)
id 1SyJ06-0006Dg-AT
for <private>; Mon, 06 Aug 2012 10:49:22 +0200
Received: from viruswall06.smp.mweb.co.za ([196.28.77.26] helo=postwall11.smp.mweb.co.za)
by prewall10.smp.mweb.co.za with esmtp (Exim 4.77 (FreeBSD))
(envelope-from <info@jvharch.co.za>)
id 1SyJ06-000FNu-7l
for <private>; Mon, 06 Aug 2012 10:49:22 +0200
Received: from postwall11.smp.mweb.co.za (postwall11.smp.mweb.co.za [196.28.76.31])
by viruswall06.smp.mweb.co.za (esets_smtp); Mon, 06 Aug 2012 10:49:27 +0200
Received: from cern.serve-hosting.net ([207.45.188.210])
by postwall11.smp.mweb.co.za with esmtp (Exim 4.77)
id 1SyJ00-0009Yt-3y
for <private>; Mon, 06 Aug 2012 10:49:22 +0200
Received: from cadallco by cern.serve-hosting.net with local (Exim 4.77)
(envelope-from <info@jvharch.co.za>)
id 1SyIzx-0004wJ-RC
for <private>; Mon, 06 Aug 2012 10:49:13 +0200
To: <private>
Subject: Building Plans, Estimation, Building Consultancy / All Areas
Date: Mon, 6 Aug 2012 10:49:13 +0200
From: JVH Architecture <info@jvharch.co.za>
Message-ID: <9085214f0bb012bdc55d8cca088a0efd@jvharch.co.za>
X-Priority: 3
X-Mailer: PHPMailer [version 1.73]
X-Mailer: phplist v2.10.18
X-MessageID: 11
X-ListMember: <private>
Errors-To:
info@jvharch.co.za
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_9085214f0bb012bdc55d8cca088a0efd"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cern.serve-hosting.net
X-AntiAbuse: Original Domain - mweb.co.za
X-AntiAbuse: Originator/Caller UID/GID - [1318 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - jvharch.co.za
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/cadallco/public_html/jvharch.co.za/list/admin/index.php
X-Source-Dir: cad4all.co.za:/public_html/jvharch.co.za/list/admin
X-Spam-Status: No score=6.5 tests=BAYES_50=0.8,DCC_CHECK=6,HTML_IMAGE_RATIO_02 =0.437,HTML_MESSAGE=0.001,RCVD_IN_DNSWL_LOW=-0.7
X-Postwall-Hash: e6167832992c8e7a8b8c18d81809771f
X-EsetId: 8741AF2306EB0231DD04F0
You see all the "Received" sections? Those are the various mail servers it went along before it got to my Mweb Inbox, so what I did is email:
abuse@mweb.co.za
abuse@serve-hosting.net
abuse@cern.serve-hosting.net
with the above mentioned template, and I found out that someone called :
"graeme@smartdata.tv
Graeme Faber"
is selling my email address. I didn't bother following up with Graeme directly, as list resellers are generally the biggest ###holes you'll ever meet (think "hahahaaahaha #### u buddy i am within the law lol try come at me wit ur lawyers ill smoke them u ####ing guy hahaha ####" kind of responses)
However, now I simply find out who hosts "smartdata.tv" and take it up with them

Bookmarks