VHFcontesting
[Top] [All Lists]

[VHFcontesting] Re: Why we ... YADA YADA YADA

To: <vhfcontesting@contesting.com>
Subject: [VHFcontesting] Re: Why we ... YADA YADA YADA
From: windev@inetmarket.com (Gerry Hull)
Date: Mon Jul 28 15:20:59 2003
Hey Guys,

Welcome to the internet.   It IS a spoof.   Take a look at the 
headers and notice the underlined sections:

>Received: from contesting.com [216.1.128.73] by nt030203-107137 with ESMTP
>  (SMTPD32-8.00) id A33DA910020; Mon, 28 Jul 2003 10:54:05 -0700
>Received: from dayton.akorn.net (localhost [127.0.0.1])
>        by contesting.com (8.12.9/8.12.9) with ESMTP id h6SHsCn5016804;
>        Mon, 28 Jul 2003 13:54:16 -0400
>Received: from spf13.us4.outblaze.com (205-158-62-67.outblaze.com
>        [205.158.62.67])
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
And just who is Outblaze.com?  A whois search results:

Organization:
Outblaze Limited
Unit 106-1108 Cyberport 2
100 Cyberport Road
Hong Kong, 
HK
Phone: 852 2534 1222
Fax..: 852 2534 9020
Email: domain-org@outblaze.com

So, Kip is routing his email via a company in Hong Kong?  I don't think so.

>        by contesting.com (8.12.9/8.12.9) with ESMTP id h6SHrxn4016564
>        for <vhfcontesting@contesting.com>; Mon, 28 Jul 2003 13:53:59 -0400
>Received: from 205-158-62-68.outblaze.com (205-158-62-68.outblaze.com
>        [205.158.62.68])
>        by spf13.us4.outblaze.com (Postfix) with QMQP id 82EC41800770
>        for <vhfcontesting@contesting.com>;
>        Mon, 28 Jul 2003 17:53:58 +0000 (GMT)
>Received: (qmail 88944 invoked from network); 28 Jul 2003 17:53:54 -0000
>Received: from unknown (HELO ws1-12.us4.outblaze.com) (205.158.62.81)
>  by 205-158-62-153.outblaze.com with SMTP; 28 Jul 2003 17:53:54 -0000
>Received: (qmail 94651 invoked by uid 1001); 28 Jul 2003 17:53:52 -0000
>Message-ID: <20030728175352.94650.qmail@mail.com>
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Next, we see that the mail originated on another free email service,  mail.com.

Using an anonymous mail account routed via hong kong is a typical footprint for
an email spammer.

No problem, except the address used in the email is an address on usa.com.  The
mail should have come from an account on a usa.com server.

I get mail from Kip... the address given is not the one shown in the mail.

So, fellow vhf contest members, the list has been spammed by someone who
keeps knocking W2SZ because it's easy to pick on the group at the top.

If they would spend their energy working on gear and preparing for the next
test rather than playing with Unix and mail scripts, they might be better off.

Now, back to radio...  Look for W2SZ/1 on all the bands this August and
September -- we will be looking for you!

73,

Gerry Hull, W1VE/VE1RM/VY2CDX
Hull Computer Consulting
Custom Solutions for Broadcast Automation
POB C, Greenfield, NH 03047
And a proud member of the W2SZ/1 team since 1983
Come by and visit our web site at http://www.mgef.org


<Prev in Thread] Current Thread [Next in Thread>