RFI
[Top] [All Lists]

Re: [RFI] (no subject) More info on this spam

To: Rfi@contesting.com
Subject: Re: [RFI] (no subject) More info on this spam
From: "Gary Smith" <Gary@ka1j.com>
Reply-to: Gary@ka1j.com
Date: Tue, 04 Mar 2014 08:56:59 -0500
List-post: <rfi@contesting.com">mailto:rfi@contesting.com>
I'd sent this earlier but it never made it to the list. Trying 
again...


Depends how much you want to trust your antivirus & firewall to not 
go to a web page designed with an exploit to get through your 
browser; if you choose to let your browser do the walking, you might 
well get that unwanted bundle of joy. But at the best, typing an IP 
into your browser doesn't tell you anything about where the site is 
located and the web page you see may well be a fake one set up to 
look like another site to trick the wn-wary, you just don't know. 

There are several helpful sites that allow you to either enter the IP 

number or the URL address and they will give you the actual location 
the IP address is located at. Using one of the WHOIS search engines 
spares you the unexpected joy of an exploit. This is a good one that 
is handy and gives you most of what you might want to know. 

http://www.ipligence.com/geolocation

You have to look through your X-header data in your email to find the 

IP numbers imprinted along the path it took to get to you. It's 
usually in the form of [188.125.69.59] but sometimes it's an email 
like the Egyptian based scammer address which in the X-header 
information read: 
X-Rocket-Received: from zogasyz (nd6h@197.195.153.194 with plain
        [188.125.69.59])

nd6h was not the sender of this but the nd6h@197.195.153.194 is a 
digital form of the IP address the spammer used just like saying 
RFI@69.36.242.135 instead of topband@contesting.com - You can't email 

with that suffix but the internet software understands it that way.

Gary
KA1J


> : 188.125.69.59...
> 
> You can put those numbers into your browser, just like a www. address and 
> see where they go.
> 
> A couple of them go to Yahoo.
> 
> Kurt 
> 
> _______________________________________________
> RFI mailing list
> RFI@contesting.com
> http://lists.contesting.com/mailman/listinfo/rfi
> 





---
This email is free from viruses and malware because avast! Antivirus protection 
is active.
http://www.avast.com

_______________________________________________
RFI mailing list
RFI@contesting.com
http://lists.contesting.com/mailman/listinfo/rfi

<Prev in Thread] Current Thread [Next in Thread>