Friday, October 29, 2004

Someone is spoofing Presto Vivace, Inc


Someone is spoofing the Presto Vivace, Inc. corporate email. I just received the following notice-

From postmaster@hestia.liberation.fr Fri Oct 29 13:13:03 2004
Received: from lsh133.siteprotect.com ([66.113.130.226])
by worldnet.att.net (mtiwmxc11) with ESMTP
id <2004102917102801100ah5rce>; Fri, 29 Oct 2004 17:10:28 +0000
X-Originating-IP: [66.113.130.226]
Received: from hestia.liberation.fr (hahes.liberation.fr [195.25.245.51])
by lsh133.siteprotect.com (8.11.6/8.11.6) with ESMTP id i9THARQ06270
for ; Fri, 29 Oct 2004 12:10:27 -0500
Received: from localhost (iscan@localhost)
by hestia.liberation.fr (8.11.6+Sun/8.11.6) with SMTP id i9TH97h29175
for ; Fri, 29 Oct 2004 19:09:07 +0200 (MET DST)
From: postmaster@hestia.liberation.fr
Message-Id: <200410291709.i9TH97h29175@hestia.liberation.fr>
X-Authentication-Warning: hestia.liberation.fr: iscan owned process doing -bs
To:
Subject: Spam mail warning notification! (Attachment Removal)
Date: Fri, 29 Oct 2004 19:09:01 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_1099069741_B78506032.R82506026"

This is a multi-part message in MIME format.

------=_NextPart_000_1099069741_B78506032.R82506026
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

**************** eManager Notification *****************

The following mail was blocked since it contains sensitive content.

Source mailbox:
Destination mailbox(es): allouche@liberation.fr
Policy: Attachment Removal
Attachment file name: message.scr - audio/x-wav
Action: Replaced with text

eManager has removed a sensitive attachment file in the email.

******************* End of message *********************

------=_NextPart_000_1099069741_B78506032.R82506026
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

From: marshall@prestovivace.biz
To: allouche@liberation.fr
Subject: Mail Delivery (failure allouche@liberation.fr)
Date: Fri, 29 Oct 2004 13:10:22 -0400
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_001B_01C0CA80.6B015D10"
X-Priority: 3
X-MSMail-Priority: Normal

------=_NextPart_000_1099069741_B78506032.R82506026--

_________________________________________

What, if anything, can be done?

No comments: