North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Some odd harvesting going on?

  • From: Marshall Eubanks
  • Date: Tue Oct 07 16:29:18 2008

I received the same message

Subject : Challenge Response

Received: from mail.tcwireless.us ([67.108.86.20] verified)

Your message

...

has been just received by gmail.com mailserver.

I assumed that this is a phishing scam due to the from / mailserver mismatch, which I think this confirms.

Regards
Marshall

On Oct 7, 2008, at 4:16 PM, Howard C. Berkowitz wrote:

I just received the following:



Your message



From: "Howard C. Berkowitz" <[email protected]>

To: <[email protected]>

Subject: RE: Fwd: cnn.com - Homeland Security seeks cyber
counterattacksystem(Einstein 3.0)

Date: 10/7/2008



has been just received by nanog.org mailserver.



To prove that your message was sent by a human and not a computer, please
visit the URL below and type in the alphanumeric text you will see in the
image. You will be asked to do this only once for this recipient.




http://mail.tcwireless.us/challenge/?folder=2008100714452628877295



Your message will be automatically deleted in a few days if you do not
confirm this request.



=====================================================

DO NOT REPLY TO THIS MESSAGE. NO ONE WILL RECEIVE IT.

=====================================================



I don't have an appropriately air-gapped browser to visit that link, which
rather screams "scam phish". Anyone know anythig about it?