Page 1 of 1

Important !

Posted: Thu Mar 25, 2004 11:30 am
by Jesper
if you get an email from me (Jesper) @nitrolic.com or any other address@nitrolic.com it is most likely not from me!

I always digitally sign emails i send so if you get an email from me and it is not signed, just delete it, and do NOT run the attached *.pif file. Its a worm...

I found out cause the kids that inpersonates me sent an email to me... hahah suckers :D

They look kinda like this one that I got:

Code: Select all

Dear user of Nitrolic.com e-mail server gateway,

Your e-mail account will be disabled because of improper using in next
three days, if you are still wishing to use it, please, resign your
account information.

For further details see the attach.

Cheers,
    The Nitrolic.com team                 http://www.nitrolic.com
I find it kinda funny that my own email server would mail me with that wouldnt you say so?

anyways some further information:

This particular Email:
  • Return Path:
  • From: [80.42.63.108] (helo=andy.org)
A reverse DNS lookup resolves the sender to: dsl-80-42-63-108.access.uk.tiscali.com

Where a mail from me would look like this:
  • Return Path: Jesper
  • From: da14.8-95.com ([216.180.233.160])(helo=nitrolic.com)
A reverse DNS lookup resolves the sender to: da14.8-95.com

A forward DNS lookup on nitrolic.com resolves to 216.180.233.160

In other words, delete mail from me if its not digitally signed.

I have allready gotten several complains about viruses sent by me (and others using my mailserver).

Important !

Posted: Thu Mar 25, 2004 6:26 pm
by Jesper
Just an addon, I just got 4 emails saying that my email address is used too, so be very sure that emails from me is digitally signed.

any problems or questions, contact me, you know how to find me :)

Important !

Posted: Thu Mar 25, 2004 9:25 pm
by Celebros
This isnt just a specific person targetting you mate. You will see this everywhere. It is a worm, virus or trojan that does it. I know of several email accounts giving out an identical email.

Important !

Posted: Fri Mar 26, 2004 5:59 am
by Jesper
I know its not just me, but i know for sure that they arent sent from here,,, there is no worms for linux + i dont use address book ;)

Important !

Posted: Fri Mar 26, 2004 9:17 am
by Old Yellowstain
Your address is just being spoofed. Your address was picked up from someone elses address book on another PC that was infected.

Nothing you can do about it.

Important !

Posted: Fri Mar 26, 2004 9:41 am
by Jesper
naaw... this isnt a regular email spoof....

my mail server doesnt have any noreply@ user

the emails are signed with: The Nitrolic team -- http://www.nitrolic.com...