Wonder if anyone can help? One of our senior people has recently started nasty receiving email from a rocketmail address, but the address is unknown to him.
He suspects that the email is being sent by a former colleague with a grudge to bear, but has no proof.
Question - without involving LE, how possible is it to establish the true identity of the rogue sender?
I suspect that this is not going to be feasible but am perfectly willing to stand corrected.
Thanks in anticipation.
Do you get the full SMTP header? That may contain some info.
Counter "attacks" are often possible. Messages sent with "web bugs", "Web beacons" or similar can not just identify the IP, but even find the exact time of access, frequency of viewing, etc.
Depending on your jurisdiction there are other things that can be done . . .
Check the headers to make sure that the sender information is not being forged.
Rocketmail is owned by Yahoo!, a US corporation. According to US law, Internet mail services are immune from civil subpoena regarding the contents of individual mail boxes but you may be able to compel them to disclose the identity of the owner.
At the very least, I am sure that they have an acceptable use policy and you can probably report them to abuse@rocketmail.com if that is any consolation.
Thanks guys, more discussion required at this end but I may come back to you. One of the challenges is that this was reported to me by our head of legal in UK so Chinese Whispers may come into operation ……….