1. Save the e-mail in all its entirety. Make sure ALL headers are saved. 2. perform header traceback as far as possible ensuring that the e-mail address is not spoofed. If it is traceback to proper ISP. 3. Once this is performed take it to the users local/county PD and have them subpoena the ISP for the user records. 4. If you provide me with a geographic location of the user I will help you find a contact there.
Sonja Robinson, CISA Network Security Analyst HIP Health Plans Office: 212-806-4125 Pager: 8884238615 -----Original Message----- From: steve baker [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 27, 2003 12:39 PM To: Subject: Distressing, possibly life threatening emails from free accounts (yahoo, hotmail One of our users has received questionable and possibly life threatening emails from a yahoo account that was created recently. They have approached us to find out as much as we can pertaining to the person sending it. Of course, we are not YAHOO so we cannot determine anything about the mail other than the content. How can we find out who sent this? _________________________________________________________________ STOP MORE SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail --------------------------------------------------------------------------- ---------------------------------------------------------------------------- ********************************************************************** This message is a PRIVILEGED AND CONFIDENTIAL communication, and is intended only for the individual(s) named herein or others specifically authorized to receive the communication. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender of the error immediately, do not read or use the communication in any manner, destroy all copies, and delete it from your system if the communication was sent via email. ********************************************************************** --------------------------------------------------------------------------- ----------------------------------------------------------------------------
