Re: [PLUG] email address phishing scam

[Michael Lazin via plug <plug@lists.phillylinux.org>]

You can check it in greater detail using mxtoolbox.com.  I find it useful because it gives information such as whether it passes SPF or Dmarc and it will give you clarity on the sending IP.  I find Linux email headers easier to read than say, the headers from Office 365.

Thank you,

Michael Lazin

.. τὸ γὰρ αὐτὸ νοεῖν ἐστίν τε καὶ εἶναι.

On Thu, Feb 29, 2024 at 12:44 PM Rev. LeRoy Cressy via plug <plug@lists.phillylinux.org> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

There seems to be a email address phishing scam going on with emails with the
subject line "Catch up"

I just received one from a supplier that I buy stuff from.
I looked at the headers and saw this:

X-Received: by 2002:a05:651c:218:b0:2d2:42ff:483c with SMTP id
 y24-20020a05651c021800b002d242ff483cmr6994858ljn.33.1709069935206; Tue, 27
 Feb 2024 13:38:55 -0800 (PST)

This seems to be a non entity as reported by the host command.
host -av 2002:a05:6402:148e:b0:566:4567:a119
Trying
"9.1.1.a.7.6.5.4.6.6.5.0.0.b.0.0.e.8.4.1.2.0.4.6.5.0.a.0.2.0.0.2.ip6.arpa"
Host 9.1.1.a.7.6.5.4.6.6.5.0.0.b.0.0.e.8.4.1.2.0.4.6.5.0.a.0.2.0.0.2.ip6.arpa
not found: 3(NXDOMAIN)
Received 163 bytes from 192.168.1.1#53 in 0 ms

This old man is not familiar with IP 6 format that much but this seems
extremely suspect!
- --
 Rev. LeRoy D. Cressy
 mailto:rev.cressy@prontonmail.com

  /\_/\
 ( o.o )
  > ^ <

Cell Phone: 267-668-9686

GnuPG Fingerprint:
D234 65D6 2822 211B F82F  A6CA B332 4CC8 ACBF D200

Jesus saith unto him, I am the way, the truth, and the life:
no man cometh unto the Father, but by me. (John 14:6)

You can find me on the following:

Telegram:
    (My Main Channel)
        https://t.me/RevLeRoy
    (Send Me A Message)
        https://t.me/LeRoy_Cressy
    (My Videos)
        https://t.me/rev_cressy_videos

Video Channels:
    ugetube.com:
        https://ugetube.com/@the-rev
    bitchute.com:
        https://www.bitchute.com/channel/the-rev/
    brighteon.com:
        https://www.brighteon.com/channels/therev
    rumble.com:
        https://rumble.com/user/lrcressy
    odysee.com:
        https://odysee.com/@the-rev


-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQS0AKJCtCv8k5X07DIuVTWo1KllbwUCZeDCQwAKCRAuVTWo1Kll
b3ntAP442U4jazRQIM34VOeDYWt47IBQXVvNDj4ol+bKq6asHgEAv1Wrbp4k1f8I
Au8goPCcdqRcBY1HNE2gXOUI3JUUDwc=
=U0GN
-----END PGP SIGNATURE-----

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug