re: Phishing for a Tax Refund

jesper — Mon, 05 May 2008 06:07:25 GMT

Simon, do you mean how they can send the e-mail message without getting their mail server black listed? More than likely they are using a botnet to send this stuff. The message I got originated in an address that is part of a huge netblock allocated to Polish Telecom. I have not done any more digging than that, but I'd be willing to get it is just a bot host that was made to send e-mail. That particular address is currently black listed by only three of the mail server black lists: www.dnsright.com/MXBlacklist.aspx.

BTW, it is now 23:07 PDT, and IE still is not detecting this site as a phishing site.

re: Phishing for a Tax Refund

Simon Anderson — Mon, 05 May 2008 05:56:54 GMT

Hi Jesper,

I like it how they dont send any spam originating from there IP address. I guess when there are so many zombies out there they dont need to.

www.dnsright.com/MXBlacklist.aspx

Love reading your blog.

Cheers

Simon