[US] PTR = smtp-us-gov-east-1b.appiancloud.com
FROM:<donotre...@nationalregistry-fmcsa.appiancloud.com>
Some engineer woke up one morning, and decided .. 'Hey, let's just fire
up a new domain and use that..'
http://appiancloud.com = 404
Nothing in the whois, and the IP gives no indication of the owner, it's
on AWS..
So, these obviously important emails are being sent by some anonymous
party, (well Appian is known but..) in a way that resembles every other
phishing actor on the internet.
Not to hard to put up another AWS IP, with a Godaddy registered domain,
with privacy enabled, to send out almost the exact email, but maybe with
a missing 'p' in the domain name...
*Sigh*
Oh, I know I have been quite of late, the situation in Ukraine does make
me loose sleep and focus.. will get back to bi-weekly state of affairs
again soon..
Oh, and SendGrid is doing it again/still, how is the biggest companies
aren't spending a couple of dollars to address threats from their networks?
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop