no, it's not a coincidence because if you look at the historical WHOIS details for for just last month we see they are: But isn't it a coincidence that all three companies are based in the same building? Registrant Abernathy Rd is a big office building in Atlanta, and the office address could well be a virtual office in any case. Registrant Street: 1200 Abernathy Rd, 17th Floor Registrant Email: is is just a coincidence that the WHOIS details for are very similar: Registrant Organization: LeadByInnovation in other words the message is not spoofed and whoever owns these domains is responsible for the mail. What these headers tell us is that the emails originated from 64.21.70.64 and 64.21.19.104 (Net Access Corporation, US), and that those servers are genuine mail relays for the domains and. Received-SPF: pass (: domain of designates 64.21.70.64 as permitted sender) client-ip=64.21.70.64 helo= Received: from īy (Merak 8.9.1) with ASMTP id OOO71531 Received-SPF: pass (: domain of designates 64.21.19.104 as permitted sender) client-ip=64.21.19.104 helo= Received: from (port=59519 helo= )īy (Merak 8.9.1) with ASMTP id ORL87326Ĭontent-Transfer-Encoding: quoted-printable So let's look at the mail headers of the two messages: I've seen this process of scraping my web site and guessing email addresses before by a business called CIO Summits which is part of a spammy business called BizSummits run by a gentleman called Michael Price. So, in each case a name has been harvested from my web site and an email address guessed ( and in order to send the spam. And Victor Echo? Well, that's not a person at all but is mentioned on this page about the NATO Phonetic Alphabet. Tony Blair? Well, he's an ex-Prime Minister of Britain, and he just happens to be mentioned on my website here. So what it is it?Ī close look at to "To" field is interesting. The email contains no link and no attachment. This will be the only notification to and just disregard if sent to the incorrect person. Subject: Early closing due to poor weather. Message 2įrom: Michael Miller Victor Echo 28 March 2014 11:12 This will be the only notification to and just disregard if sent to the incorrect individual. Subject: Early closing due to bad conditions.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |