Re: [91attendees] Phishing on my IETF email address

Franck Martin <fmartin@linkedin.com> Sun, 09 November 2014 09:37 UTC

Return-Path: <prvs=3835e497e=fmartin@linkedin.com>
X-Original-To: 91attendees@ietfa.amsl.com
Delivered-To: 91attendees@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37BBC1A1A66 for <91attendees@ietfa.amsl.com>; Sun, 9 Nov 2014 01:37:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.562
X-Spam-Level:
X-Spam-Status: No, score=-4.562 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.594, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wgxh-x4zLFiB for <91attendees@ietfa.amsl.com>; Sun, 9 Nov 2014 01:37:14 -0800 (PST)
Received: from esv4-mav05.corp.linkedin.com (esv4-mav05.corp.linkedin.com [69.28.149.81]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A529C1A1A65 for <91attendees@ietf.org>; Sun, 9 Nov 2014 01:37:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linkedin.com; i=@linkedin.com; q=dns/txt; s=proddkim1024; t=1415525834; x=1447061834; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=YMuOL+dk2X2CUmfmoAd9W2huGny3TZpfx45UjnyyXU0=; b=34weH9OVOU6lTaxPQjaLETHhMUs+g3ZNqlA6Gm3NpBc2l7QWIdF+HNZD ZlxSzKyKK3lbnVdCgJaBxb60kDmMoDyaA6fLo5zXPjPzOYFrcAXn/Ss7V OCAfwHTjrvQ51OXtxaZHyk8irzMBYaQdUD57CqJXFllbltRzWCkf+gkgq U=;
X-IronPort-AV: E=Sophos;i="5.07,345,1413270000"; d="asc'?scan'208";a="158687911"
Received: from ESV4-MB03.linkedin.biz ([fe80::1caa:1422:7ef8:5ceb]) by esv4-cas01.linkedin.biz ([172.18.46.140]) with mapi id 14.03.0195.001; Sun, 9 Nov 2014 01:37:14 -0800
From: Franck Martin <fmartin@linkedin.com>
To: Stephane Bortzmeyer <bortzmeyer+ietf@nic.fr>
Thread-Topic: [91attendees] Phishing on my IETF email address
Thread-Index: AQHP+7KyqcZpcJyuJ0qg9DFDEBa9GZxYkCiA
Date: Sun, 9 Nov 2014 09:37:13 +0000
Message-ID: <F458609F-9B04-4CEC-8533-56AC92AC589D@linkedin.com>
References: <20141109001732.GA24556@laperouse.bortzmeyer.org>
In-Reply-To: <20141109001732.GA24556@laperouse.bortzmeyer.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [172.18.46.252]
Content-Type: multipart/signed; boundary="Apple-Mail=_D66A5EEE-9E8C-4337-94C7-BFD16D63A90F"; protocol="application/pgp-signature"; micalg=pgp-sha512
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/91attendees/u8nuMkr6sMsT9V6Lmqn-zYjTLHo
Cc: "91attendees@ietf.org" <91attendees@ietf.org>
Subject: Re: [91attendees] Phishing on my IETF email address
X-BeenThere: 91attendees@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Mailing list of IETF 91 attendees that have opted in on this list." <91attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/91attendees>, <mailto:91attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/91attendees/>
List-Post: <mailto:91attendees@ietf.org>
List-Help: <mailto:91attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/91attendees>, <mailto:91attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 09 Nov 2014 09:37:16 -0000

On Nov 8, 2014, at 4:17 PM, Stephane Bortzmeyer <bortzmeyer+ietf@nic.fr> wrote:

> Funny, this address is used only for IETF matters and does not attract
> a lot of spam/phishing. This phishing is better than most (spelling, credibility...):
> 
> Date: Sun, 09 Nov 2014 00:06:47 +0000 (UTC)
> From: lTunes ID <app31419315@heroku.com>
> To: bortzmeyer+ietf@nic.fr
> Subject: Verify New....

Seems heorku.com should be aware they have a phishing problem…

https://dmarcian.com/dmarc-inspector/heroku.com