[RFI] (no subject) More info on this spam

Gary Smith wa6fgi at yahoo.com
Tue Mar 4 13:04:34 EST 2014


Thanks for tips.

 From the (yech) left coast,

the other Gary Smith...wa6fgi



On 3/4/2014 12:20 AM, Gary Smith wrote:
> Depends how much you want to trust your antivirus & firewall to not
> go to a web page designed with an exploit to get through your
> browser; if you choose to let your browser do the walking, you might
> well get that unwanted bundle of joy. But at the best, typing an IP
> into your browser doesn't tell you anything about where the site is
> located and the web page you see may well be a fake one set up to
> look like another site to trick the wn-wary, you just don't know.
>
> There are several helpful sites that allow you to either enter the IP
> number or the URL address and they will give you the actual location
> the IP address is located at. Using one of the WHOIS search engines
> spares you the unexpected joy of an exploit. This is a good one that
> is handy and gives you most of what you might want to know.
>
> http://www.ipligence.com/geolocation
>
> You have to look through your X-header data in your email to find the
> IP numbers imprinted along the path it took to get to you. It's
> usually in the form of [188.125.69.59] but sometimes it's an email
> like the Egyptian based scammer address which in the X-header
> information read:
> X-Rocket-Received: from zogasyz (nd6h at 197.195.153.194 with plain
> 	[188.125.69.59])
>
> nd6h was not the sender of this but the nd6h at 197.195.153.194 is a
> digital form of the IP address the spammer used just like saying
> RFI at 69.36.242.135 instead of topband at contesting.com - You can't email
> with that suffix but the internet software understands it that way.
>
> Gary
> KA1J
>
>
>> : 188.125.69.59...
>>
>> You can put those numbers into your browser, just like a www. address and
>> see where they go.
>>
>> A couple of them go to Yahoo.
>>
>> Kurt
>>
>> _______________________________________________
>> RFI mailing list
>> RFI at contesting.com
>> http://lists.contesting.com/mailman/listinfo/rfi
>>
>
>
>
> ---
> This email is free from viruses and malware because avast! Antivirus protection is active.
> http://www.avast.com
>
> _______________________________________________
> RFI mailing list
> RFI at contesting.com
> http://lists.contesting.com/mailman/listinfo/rfi



More information about the RFI mailing list