From Pine View Farm

I Get Mail Spam 0

This one was from

no rep Iy @ amazo n.co m

Following that was this string:

auto.confirm-[nonsense sequence of letters and numbers]@webmails-service.com/

It claimed that my account with a retail establishment was on hold because reasons.

I logged into said account, going to it directly on a whole nother computer. The account was not on hold.

Note the spaces in the sender address and the “I” instead of an “l” in “no rep Iy.”

An inspection of the headers showed that the message was sent from a NAT address and therefore, for all practical purpose, untraceable. I used whois and dig to track down webmails-service.com and the results were most interesting. Needless to say, they had nothing to do with said retail establishment.

You might want to give that a whirl, just to find out how dig and whois work. They are useful tools.

This has got to be one of the clumsiest phishing attempts I’ve ever seen.

Share

Comments are closed.

From Pine View Farm
Privacy Policy

This website does not track you.

It contains no private information. It does not drop persistent cookies, does not collect data other than incoming ip addresses and page views (the internet is a public place), and certainly does not collect and sell your information to others.

Some sites that I link to may try to track you, but that's between you and them, not you and me.

I do collect statistics, but I use a simple stand-alone Wordpress plugin, not third-party services such as Google Analitics over which I have no control.

Finally, this is website is a hobby. It's a hobby in which I am deeply invested, about which I care deeply, and which has enabled me to learn a lot about computers and computing, but it is still ultimately an avocation, not a vocation; it is certainly not a money-making enterprise (unless you click the "Donate" button--go ahead, you can be the first!).

I appreciate your visiting this site, and I desire not to violate your trust.