Hi Michael,
On 1/19/22 7:23 PM, Michael Peddemors via mailop wrote:
Ten minutes of free time got me trolling my spam folder, and saw this
interesting spam message.. and found the headers really interesting.
Might explain a small uptick in spam from Linode servers..
"THIS IS A TEST EMAIL ONLY.
This email was sent by the author for the sole purpose of testing a
draft message. If you believe you have received the message in error,
please contact the author by replying to this message. Constant
Contact takes reports of abuse very seriously. If you wish to report
abuse, please forward this message to [email protected]."
Huh? Oh yes, many of the headers showed that they look like a constant
contact, but not familiar with them using Linode servers..
And the headers make it seem that it was generated via a legitimate
constant contact server at one time (208.75.123.250)
But the trace headers look more like it was generated from gmail, and
accepted directly by the Linode server, so is this some kind of relay
bot, where they generate the content using Constant Contacts test system?
Needless to say it is a UPS phishing attempt, but this one is new on
me.. Not sure if the attempt was to try and actually deliver the
phishing, or simply discredit Constant Contact..
Comments welcome, even though this should probably be simply 'nothing
to see here, move along'..
Received: from 45-79-16-32.ip.linodeusercontent.com (HELO
in.constantcontact.com) (45.79.16.32)
by fe3.cityemail.com with SMTP
This Linode customer was cancelled as fraud earlier today.
Mark
--
Mark G Thomas <[email protected]>, KC3DRE
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
