We apologize for not getting to you sooner. Since you didn't respond back to this ticket we were unaware that you had forwarded any messages. Upon reviewing the bounceback messages it looks like your domain is being spoofed. The reason I believe that is because the IP address that is identified as the sending address (90.164.227.87) is not part of our network at HostRocket. This means that the mail is actually originating from a different hosting provider, and your domain is being falsified as the true sender. This is a technique SPAMmers use in order to try to get past various blacklists and domain restrictions. Generally speaking, the best way to prevent this from occurring is to add an SPF record, but unfortunately this will offer nothing more than a false sense of security in this case. Since the sending server is clearly compromised, there is no way that it is going to check the SPF records to verify the legitimacy of the e-mail that is being sent. With that being said I would suggest the following course of action. You should run a WHOIS lookup on the IP in question, and submit a complaint to the abuse department of the offending network. Once they receive that, they will be able to investigate their server and resolve the issue. Ultimately since the sender is not on our network there is little we can do to resolve the issue. Please note that these headers are only falsified, and the domain spoofers do not actually have any access to your e-mail accounts, e-mails, or passwords in any way shape or form. If there's anything else that we can do, please let us know. Elliot M. HostRocket Support
Please help us keep Internet safer and cleaner by leaving a descriptive comment about 90.164.227.87 IP address
- Hacked Gmail accounts
- WordPress Hacking Attempts
- SSH Hacking Attempts
- Why Can't I See The Exact Address?
DNSBL* - is a list of IP addresses published through the Internet Domain Name Service (DNS) either as a zone file that can be used by DNS server software, or as a live DNS zone that can be queried in real-time. DNSBLs are most often used to publish the addresses of computers or networks linked to spamming; most mail server software can be configured to reject or flag messages which have been sent from a site listed on one or more such lists.
WHOIS** - is a query/response protocol that is widely used for querying databases in order to determine the registrant or assignee of Internet resources, such as a domain name, an IP address block, or an autonomous system number. WHOIS lookups were traditionally performed with a command line interface application, and network administrators predominantly still use this method, but many simplified web-based tools exist. WHOIS services are typically communicated using the Transmission Control Protocol (TCP). Servers listen to requests on the well-known port number 43.
** Approximate Geographic Location - This is NOT the exact geographical location of the person/organization with the given IP address. However, this should still give you a good idea about the area/region where this person/orgranization is located.