RFI
[Top] [All Lists]

Re: [RFI] (no subject) More info on this spam

To: rfi@contesting.com
Subject: Re: [RFI] (no subject) More info on this spam
From: Gary Smith <wa6fgi@yahoo.com>
Date: Tue, 04 Mar 2014 10:04:34 -0800
List-post: <rfi@contesting.com">mailto:rfi@contesting.com>
Thanks for tips.

From the (yech) left coast,

the other Gary Smith...wa6fgi



On 3/4/2014 12:20 AM, Gary Smith wrote:
Depends how much you want to trust your antivirus & firewall to not
go to a web page designed with an exploit to get through your
browser; if you choose to let your browser do the walking, you might
well get that unwanted bundle of joy. But at the best, typing an IP
into your browser doesn't tell you anything about where the site is
located and the web page you see may well be a fake one set up to
look like another site to trick the wn-wary, you just don't know.

There are several helpful sites that allow you to either enter the IP
number or the URL address and they will give you the actual location
the IP address is located at. Using one of the WHOIS search engines
spares you the unexpected joy of an exploit. This is a good one that
is handy and gives you most of what you might want to know.

http://www.ipligence.com/geolocation

You have to look through your X-header data in your email to find the
IP numbers imprinted along the path it took to get to you. It's
usually in the form of [188.125.69.59] but sometimes it's an email
like the Egyptian based scammer address which in the X-header
information read:
X-Rocket-Received: from zogasyz (nd6h@197.195.153.194 with plain
        [188.125.69.59])

nd6h was not the sender of this but the nd6h@197.195.153.194 is a
digital form of the IP address the spammer used just like saying
RFI@69.36.242.135 instead of topband@contesting.com - You can't email
with that suffix but the internet software understands it that way.

Gary
KA1J


: 188.125.69.59...

You can put those numbers into your browser, just like a www. address and
see where they go.

A couple of them go to Yahoo.

Kurt

_______________________________________________
RFI mailing list
RFI@contesting.com
http://lists.contesting.com/mailman/listinfo/rfi




---
This email is free from viruses and malware because avast! Antivirus protection 
is active.
http://www.avast.com

_______________________________________________
RFI mailing list
RFI@contesting.com
http://lists.contesting.com/mailman/listinfo/rfi

_______________________________________________
RFI mailing list
RFI@contesting.com
http://lists.contesting.com/mailman/listinfo/rfi

<Prev in Thread] Current Thread [Next in Thread>