The Television Transcript Project : How Eleven of my Transcripts Got Banned : C&D email

Examining Email Headers

Note: If you get a "C&D" via email, make sure it is really coming from the stated source. It is my understanding that Received lines cannot be forged (also a useful thing to know with the recent spate of email viruses sending bogus emails). I verified that the domains mentioned (bolded) in the received lines were Universal's, and my then-ISP (dimensional.com). unistudios.com took me to Universal's page with Universal's real URL and no other URL in between in the browser history. At least, that's how I remember it. I felt satisfied that the email was genuine.
In retrospect, a better way to check unknown domains in the received lines is to do a "whois" (internic.net) to see who owns the unknown domains versus who owns the known valid domain (universalstudios.com in this case). Another point might be to whois all of the IP addresses, now that I think of it (see internic.net or arin.net).

Email Headers from the Universal Studios C&D:

Return-Path: <[email address deleted]@unistudios.com>
Received: from usushntex50.unistudios.com (outmail.unistudios.com [192.251.67.110])
         by supernova.dimensional.com (8.11.2/8.11.2) with ESMTP id [id deleted]
         for <suzannem@dimensional.com>; Thu, 31 May 2001 11:27:46 -0600 (MDT)
Received: from usintex11lax.unistudios.com (usintex11lax.udh.unistudios.com [167.167.130.41]) by usushntex50.unistudios.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21)
         id [id deleted]; Thu, 31 May 2001 10:27:16 -0700
Received: by usintex11lax.udh.unistudios.com with Internet Mail Service (5.5.2650.21)
         id <[id deleted]>; Thu, 31 May 2001 10:27:42 -0700
Message-ID: <[id deleted]@usintex12lax.unistudios.com>
From: "[lawyer's name deleted]" <[email address deleted]@unistudios.com>
To: "'suzannem@oldemail.com'" <suzannem@oldemail.com>
Cc: "'copyright@yahoo-inc.com'" <copyright@yahoo-inc.com>
Subject: Infringement of Universal Properties
Date: Thu, 31 May 2001 10:27:33 -0700
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
Content-Type: text/plain;
         charset="iso-8859-1"
Status: