E-mails from
[email protected]...
It appears that some folks are receiving bogus e-mails from
[email protected] saying that their ihcubcadet.com e-mail address has been suspended and that the attachment has instructions on how to reactivate.
Of course, said attachment has a virus in it.
First, we do not have an
[email protected] address.
[email protected] is all we use.
Second, scrutiny of the headers reveals that the originator is NOT ihcubcadet.com:
<font face="courier new">Return-Path: <
[email protected]>
Received: from mail.ihcubcadet.com (mail.ihcubcadet.com [66.62.123.70])
by rhl01.mcmeen.net (8.12.10/8.12.10) with ESMTP id j9ECkOk5010104
for <
[email protected]>; Fri, 14 Oct 2005 07:46:25 -0500
Received: from SMTP32-FWD by mail.ihcubcadet.com
(SMTP32) id AA8900164000068C8; Fri, 14 Oct 2005 06:46:17
Received: from ihcubcadet.com [
<font color="ff0000">68.77.85.3</font>] by mail.ihcubcadet.com with ESMTP
(SMTPD-8.21) id A8900FFC; Fri, 14 Oct 2005 06:46:08 -0600
From:
[email protected]</font>
The IP address in red belongs to natgi.com - their contact information, if it can be believed, shows that they're in Panama.