Some spammers launch e-mail campaigns that look like messages sent
by worksafetech.com
We, as well as other respected names, are the victims of spammers
who are forging/faking/spoofing our email addresses. It is totally
beyond our control, and we regret very much that we cannot stop it
We have nothing to do with such spam, which is a misrepresentation
of our good name.
We do not send, and have never sent, spam email of any sort.
In fact, we strongly oppose the act of "spamming" or sending
unsolicited commercial email (UCE).
If you have received such spam email we are sorry, but emphasize that
it was nothing to do with us and was beyond our control.
"E-mail Spoofing" is the latest nasty trend in spam, it
is the practice used by many spammers to falsify the header information
in their e-mail advertisements. By changing the header information
someone can make the email appear to come from whoever they choose.
Hackers are now routinely stealing the e-mail or Web site identities
of many people on the Web, and using them to send millions of pieces
of junk advertising or offending e-mails.
The average person on the Internet doesn't yet understand what's happening
here, and many legitimate companies are obviously being victimized.
If you ever receive such spam-mails that look like messages sent by
worksafetech.com, please do this:
1. Report spoofed worksafetech.com
e-mails to us here
• Send the original spoofed e-mail as an attachment. (See the
"send" menu of your e-mail program)
Sending the e-mail as an attachment is the best way to preserve the
"header information," which makes it easier for us to trace
the true origin of the forgery.
• OR
If you cannot send the forged e-mail as an attachment, forward the
e-mail, and include as much of the header information as you are able
to maintain.
The headers we need are well labeled and look something like this:
X-Sender: someone@domain.com
X-Sender-IP: [10.1.2.3]
X-Date: Tue, 18 Apr 2003 20:12:06 +0000 (UTC)
X-Recipient: you@domain.com
X-OUID: 1
To find the header information, configure your e-mail program to show
All Headers (this varies from program to program).
For Internet Explorer you can do this:
- right-click the unopened e-mail in your inbox,
- and then click "Options" to open the window
that includes "Internet Headers."
To track the actual sender of a particular message, we need this "extended
headers" information.
If you simply forward an e-mail message to someone, these headers
will be lost, so whenever you are reporting spam be sure to cut-and-paste
the message header from the spam message and send it in the body copy
of your e-mail message.
• Please understand that we will not be able to respond to all
of the e-mail reports we receive.
2. Report spam to your ISP
• Report spoofed e-mails to your ISP and notify them that someone
has stolen our e-mail identify.
Be sure to cut-and-paste the message header from the spam message
and send it in the body copy of your e-mail message, as described
above (1).
3. Never respond to requests for personal information that may be
contained in the forged e-mail.
4. Please don't do anything which might result in worksafetech.com
being wrongly blacklisted as a spammer.
Thank you for your help and understanding,
WorkSafe Technologies
CERT Coordination Center - Spoofed/Forged Email
http://www.cert.org/tech_tips/email_spoofing.html
This document provides a general overview of email spoofing and the
problems that can result from it. It includes information that will
help you respond to such activity.
SmallBusinessComputing.com
Spoofing: Identity Crisis
http://www.smallbusinesscomputing.com/emarketing/article.php/1142751
Real-Life Spoofs / Making a Federal Case out of Spoof / Fighting
Spoof
Reading Email Headers:
StopSpam.org
http://www.stopspam.org/email/headers.html
All About Email Headers. This document is intended to provide a comprehensive
introduction to the behavior of email headers. It is primarily intended
to help victims of unsolicited email ("email spam") attempting
to determine the real source of the (generally forged) email that
plagues them; it should also help in attempts to understand any other
forged email.
Figuring out fake E-Mail:
Deciphering fake email or posting? http://www.mailsbroadcast.com/email.bolts&nuts/deciphering.fake.email.htm
The information provided here, describes how to find out where a fake
post or e-mail originated from, decipher which machine it came from
and who (generally or specifically) you should contact.
UXN
Tracing Spam / Spam Complaints Assistant:
http://combat.uxn.com/tracing.html
A one page easy explanation of how to read the "Received:"
lines in the email header to trace the spam and who to complain to.
With integrated IP Address Lookup.