[RFI] (no subject) More info on this spam

Gary Smith Gary at ka1j.com
Tue Mar 4 03:20:30 EST 2014


Depends how much you want to trust your antivirus & firewall to not 
go to a web page designed with an exploit to get through your 
browser; if you choose to let your browser do the walking, you might 
well get that unwanted bundle of joy. But at the best, typing an IP 
into your browser doesn't tell you anything about where the site is 
located and the web page you see may well be a fake one set up to 
look like another site to trick the wn-wary, you just don't know. 

There are several helpful sites that allow you to either enter the IP 
number or the URL address and they will give you the actual location 
the IP address is located at. Using one of the WHOIS search engines 
spares you the unexpected joy of an exploit. This is a good one that 
is handy and gives you most of what you might want to know. 

http://www.ipligence.com/geolocation

You have to look through your X-header data in your email to find the 
IP numbers imprinted along the path it took to get to you. It's 
usually in the form of [188.125.69.59] but sometimes it's an email 
like the Egyptian based scammer address which in the X-header 
information read: 
X-Rocket-Received: from zogasyz (nd6h at 197.195.153.194 with plain
	[188.125.69.59])

nd6h was not the sender of this but the nd6h at 197.195.153.194 is a 
digital form of the IP address the spammer used just like saying 
RFI at 69.36.242.135 instead of topband at contesting.com - You can't email 
with that suffix but the internet software understands it that way.

Gary
KA1J


> : 188.125.69.59...
> 
> You can put those numbers into your browser, just like a www. address and 
> see where they go.
> 
> A couple of them go to Yahoo.
> 
> Kurt 
> 
> _______________________________________________
> RFI mailing list
> RFI at contesting.com
> http://lists.contesting.com/mailman/listinfo/rfi
> 




---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com



More information about the RFI mailing list