PDA

View Full Version : E-Mail Threats


modestjesse
01-09-2008, 05:21 PM
For the past few months I've been receiving disturbing emails regarding an ex. Her and I are still friends but not involved. The emails allude to this person stalking her as well as watching me. Last night I received another one where they state they are going to reveal themselves to her and if I say anything they would F'ing kill her.

Now honestly I'm not too worried, just upset with the whole thing, but I know I've seen the car outside my house and maybe I should worry for her. They have left notes on her car and found where she lived even though she just moved and no one, not even I, knew where she moved to.

I contacted the police last night and showed them the email where the person threatened to kill her. But the police said there was nothing they could do because the threat wasn't directed at me. The officer did reply to the email though basically saying that the person needs to stop and if they continue to harrass me they will find out who they are.

Now I did look at the email header and found the originating IP for the email. I checked several other emails this person sent me and they are all the same. I did a DNS lookup to find the DNS of this IP and was able to find it. My question is, is there anything I can do to get a better feel for where this computer is located? Determine if it's a business or home?

Any ideas on how to handle it? Appreciate any help.

crumbles
01-09-2008, 05:24 PM
Post the email internet headers.

modestjesse
01-09-2008, 05:26 PM
X-Message-Delivery: Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Status: p:0
X-SID-PRA: .. ?? <fairyforreal@hotmail.com>
X-SID-Result: Pass
X-Message-Info: JGTYoYF78jF6/Z0ha6+63fsP6PBNsVnWZmu+UqTbVfJ1T8Z+xnGdd+E5VSiTRML wwI0dkL3azeYpl9TRm1MoN228L+MXmsvs
Received: from bay0-omc3-s21.bay0.hotmail.com ([65.54.246.221]) by bay0-imc1-s36.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Tue, 8 Jan 2008 21:50:25 -0800
Received: from BAY124-W5 ([207.46.11.168]) by bay0-omc3-s21.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 8 Jan 2008 21:50:12 -0800
Message-ID: <BAY124-W505A7314B0776B5E8034BCB490@phx.gbl>
Return-Path: fairyforreal@hotmail.com
Content-Type: multipart/alternative;
boundary="_5d332b5e-1f5a-44e9-9aba-418a7b95fd7e_"
X-Originating-IP: [70.89.147.117]

crumbles
01-09-2008, 05:48 PM
Assuming that none of that info was spoofed by him... this is pretty much all you can get from that information:

PC IP address at the time of email sent: 70.89.147.117
It's a Comcast IP address. You can email them at:

abuse@comcast.net
1.856.317.7272

1800 Bishops Gate Blvd.
Mount Laurel, NJ 08054-4628

Domain Contact Info:
ccs_domreg-master@cable.comcast.com
888.262.7300

Start with that. Tell them the person of said IP address threatened their life, and you will forward the e-mail to them if needed.

In addition... You could respond to their email and try to get them to click on a link so you can obtain more info about their PC...

You could say: Just so you know, I have reported you here (http://www.yourwebsite.com) and you should be hearing from the authorities soon.

Their curiosity will get the better of them, and you just link it to some script you can write to capture whatever about their PC.

kowgod
01-09-2008, 05:48 PM
DNS Report (http://www.dnsstuff.com/tools/ipall.ch?ip=70.89.147.117), for whatever it's worth.

alaskalonewolf
01-11-2008, 08:10 PM
DNS Report (http://www.dnsstuff.com/tools/ipall.ch?ip=70.89.147.117), for whatever it's worth.

...man that sucks. On a lighter note, however, I tend to look at the word "fear" as an acronym. (e.g. F.E.A.R.) Lemme' explain, it's a [F]alse [E]pectation [A]ssumed [R]eal. A lot of times people get bitter, lose it, and act out. The warning should be noted. They are acting out. Make sure of the author, validate the source. (I've had people hijack my email a time or two on a prank, this is after all, the Information Age, and we are dealing with a demographic mixture of X-Y and XYY chromosomes out there...) It brings to mind another source, Nathaniel Hawthorne - “Words — so innocent and powerless as they are, as standing in a dictionary, how potent for good and evil they become in the hands of one who knows how to combine them.”


In the end I would definitely follow-up though. Idle threats are one thing. But, I totally sympathize with your situation. Some people have a real tough time dealing with, what they perceive as, loss. If you do find a physical address associated with the email, I always like to send the printout U.S. Postal, after using a big black marker to write the word "Stop" across the page, or pages. Be subtle. Approach determines response.

skyz
01-12-2008, 01:10 PM
Lemme' explain, it's a [F]alse [E]pectation [A]ssumed [R]eal.

i like that i hope you don't mind if i 'borrow' it :)

Be subtle. Approach determines response.

you can report it to your local fbi office as to them internet harrassment is a crime and the very least that will happen is the perpetrator will be entered into the fbi records

is that subtle enough ?

cyber crime reporting (http://www.usdoj.gov/criminal/cybercrime/reporting.htm)