Nice to hear, but only posted here because it will probably affect other
hosters as well, and I am sure Constant Content would like to know this
as well..
But curious, how are these fraudsters getting around the port 25
blocking by default?
-- Michael --
(You can reply off list if you want to keep the noise down)
On 2022-01-19 5:57 p.m., Mark G Thomas via mailop wrote:
Hi Michael,
On 1/19/22 7:23 PM, Michael Peddemors via mailop wrote:
Ten minutes of free time got me trolling my spam folder, and saw this
interesting spam message.. and found the headers really interesting.
Might explain a small uptick in spam from Linode servers..
"THIS IS A TEST EMAIL ONLY.
This email was sent by the author for the sole purpose of testing a
draft message. If you believe you have received the message in error,
please contact the author by replying to this message. Constant
Contact takes reports of abuse very seriously. If you wish to report
abuse, please forward this message to ab...@constantcontact.com."
Huh? Oh yes, many of the headers showed that they look like a constant
contact, but not familiar with them using Linode servers..
And the headers make it seem that it was generated via a legitimate
constant contact server at one time (208.75.123.250)
But the trace headers look more like it was generated from gmail, and
accepted directly by the Linode server, so is this some kind of relay
bot, where they generate the content using Constant Contacts test system?
Needless to say it is a UPS phishing attempt, but this one is new on
me.. Not sure if the attempt was to try and actually deliver the
phishing, or simply discredit Constant Contact..
Comments welcome, even though this should probably be simply 'nothing
to see here, move along'..
Received: from 45-79-16-32.ip.linodeusercontent.com (HELO
in.constantcontact.com) (45.79.16.32)
by fe3.cityemail.com with SMTP
This Linode customer was cancelled as fraud earlier today.
Mark
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
