Mailing List Archive: Has anyone heard of these people?

Has anyone heard of these people?

lwilton at earthlink

Mar 17, 2021, 7:35 PM

Post #1 of 7 (733 views)

I just got what appears to be a legit email from my ISP.

It has a tracker tag pointing to 102.122.207.net.

Note that is a site name and not a dotquad.

Somehow this doesn't make me real comfortable with the possible veracity of
the email.

Has anyone come across 102.122.2O7.net before?

Loren

Re: Has anyone heard of these people? [ In reply to ]

sausers-20150205 at billmail

Mar 17, 2021, 8:17 PM

Post #2 of 7 (733 views)

On 17 Mar 2021, at 22:35, Loren Wilton wrote:

> Has anyone come across 102.122.2O7.net before?

Ever heard of Adobe?

They do web-bugs in addition to graphics software.

--
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire

Re: Has anyone heard of these people? [ In reply to ]

Mar 17, 2021, 8:26 PM

Post #3 of 7 (733 views)

On 2021-03-18 04:17, Bill Cole wrote:
> On 17 Mar 2021, at 22:35, Loren Wilton wrote:
>
>> Has anyone come across 102.122.2O7.net before?
>
> Ever heard of Adobe?
>
> They do web-bugs in addition to graphics software.

+1

chrome://settings/content/siteDetails?site=http%3A%2F%2F102.122.2o7.net

Re: Has anyone heard of these people? [ In reply to ]

jdow at earthlink

Mar 17, 2021, 8:39 PM

Post #4 of 7 (733 views)

On 20210317 20:26:32, Benny Pedersen wrote:
> On 2021-03-18 04:17, Bill Cole wrote:
>> On 17 Mar 2021, at 22:35, Loren Wilton wrote:
>>
>>> Has anyone come across 102.122.2O7.net before?
>>
>> Ever heard of Adobe?
>>
>> They do web-bugs in addition to graphics software.
>
> +1
>
> chrome://settings/content/siteDetails?site=http%3A%2F%2F102.122.2o7.net

Interesting, they have heavily protected that address for typo-squat attacks.
2(oO0)7.net all are registered to the same people.

{^_^}

Re: Has anyone heard of these people? [ In reply to ]

sausers-20150205 at billmail

Mar 17, 2021, 8:47 PM

Post #5 of 7 (733 views)

On 17 Mar 2021, at 23:39, jdow wrote:

> 2(oO0)7.net all are registered to the same people.

Note that this is just 2 domains registrations: 2o7.net and 2O7.net are
the same thing.

--
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire

Re: Has anyone heard of these people? [ In reply to ]

Mar 17, 2021, 10:55 PM

Post #6 of 7 (733 views)

On 2021-03-18 04:47, Bill Cole wrote:
> On 17 Mar 2021, at 23:39, jdow wrote:
>
>> 2(oO0)7.net all are registered to the same people.
>
> Note that this is just 2 domains registrations: 2o7.net and 2O7.net
> are the same thing.

spamassassin see it as X-Spam-Uri-Domains-Ham: 7.net

hmm

Re: Has anyone heard of these people? [ In reply to ]

jdow at earthlink

Mar 17, 2021, 11:33 PM

Post #7 of 7 (733 views)

On 20210317 22:55:26, Benny Pedersen wrote:
> On 2021-03-18 04:47, Bill Cole wrote:
>> On 17 Mar 2021, at 23:39, jdow wrote:
>>
>>> 2(oO0)7.net all are registered to the same people.
>>
>> Note that this is just 2 domains registrations: 2o7.net and 2O7.net
>> are the same thing.
>
> spamassassin see it as X-Spam-Uri-Domains-Ham: 7.net
>
> hmm

TO be fair in the original email it was a 0 so it's 207.net. If SA sees THAT as
7.net you found a bug. Collect your trophy at the usually designated location.

{^_-}