(2012-06-04, 08:29 AM)Tim B. Wrote: [ -> ]There is at least one lowlife going around impersonating them. I strongly suspect that email is forged so you shouldn't be too concerned.
Check the email headers and see if it actually came from gmail.
Unfortunately gmail doesn't allow to view email headers.
(2012-06-04, 08:30 AM)Muhammad99Izzat Wrote: [ -> ]their IP same like me?it because you ban my IP.
UGNazi have hack IP to?
[
attachment=26451]
Whether its you or anyone else, the email I received tells that the mentioned usernames were created by your brother. I've matched the IPs of you and your brother and they're same.
Sadly, its time for you to leave.
hey we use same computer
his username like that?????? weird...........?????????????
(2012-06-04, 08:32 AM)Yaldaram Wrote: [ -> ]Unfortunately gmail doesn't allow to view email headers.
Click the little down arrow in the top right hand corner of the message and click show original.
Right, I thought its only show in yahoo.. Here is the email header of this self-claimed UGNazi group;
UGnazi Wrote:Delivered-To: [email protected] <--- Removed my email
Received: by xxxx.115.134 with SMTP id i6csp48176bkq;
Sun, 3 Jun 2012 22:12:02 -0700 (PDT)
Received: by 10.236.197.71 with SMTP id s47mr5645693yhn.114.1338786722195;
Sun, 03 Jun 2012 22:12:02 -0700 (PDT)
Return-Path: <[email protected]>
Received: from galaxy.host-care.com ([64.37.52.33])
by mx.google.com with ESMTPS id v18si447226ani.124.2012.06.03.22.12.01
(version=TLSv1/SSLv3 cipher=OTHER);
Sun, 03 Jun 2012 22:12:02 -0700 (PDT)
Received-SPF: neutral (google.com: 64.37.52.33 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=64.37.52.33;
Authentication-Results: mx.google.com; spf=neutral (google.com: 64.37.52.33 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from yaldaram by galaxy.host-care.com with local (Exim 4.77)
(envelope-from <[email protected]>)
id 1SbPaB-0004Jv-UA
for [email protected]; Mon, 04 Jun 2012 01:11:59 -0400
To: [email protected] <--- Removed my email
Subject: [Yaldaram Contact Form] wait until hack
From: UGNazi <[email protected]>
Reply-To: [email protected]
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: MyBB
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Message-Id: <[email protected]>
Date: Mon, 04 Jun 2012 01:11:59 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - galaxy.host-care.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [2408 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - galaxy.host-care.com
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/yaldaram/public_html/misc.php
X-Source-Dir: yaldaram.com:/public_html
hey Yaldaram wait us until our group hack your site haha...
this hack request by MW3 user of your board.
MW3: Yaldaram have give a tips to prevent from your hack ugnazi
UGNazi: we will see who is boss
hey yaldaram i see a user in the chat page have use your site name
Username:
yaldaram_hackers
Ah, so it came from your contact form, not a direct email. That makes it a bit more difficult to track down. You'd have to check your Apache access logs to find their IP. Seeing as it came through your contact form though I'd say it is certainly fake.
If you do track down an IP, PM it to me and I'll check it against a few that we have.
Lol he use my IP to fake us
we see first what will be in your forum first
