Re: [93attendees] Fwd: 93rd IETF July 19-24, 2015, Prague, Czech Republic - Final VAT Invoice nX 00000896

"Bless, Roland (TM)" <> Wed, 05 August 2015 10:47 UTC

Return-Path: <>
Received: from localhost ( []) by (Postfix) with ESMTP id F21A81B2F2B for <>; Wed, 5 Aug 2015 03:47:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -5.85
X-Spam-Status: No, score=-5.85 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, GB_I_LETTER=-2, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id nAHfbYgEBfAE for <>; Wed, 5 Aug 2015 03:47:08 -0700 (PDT)
Received: from ( []) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 1C00D1B2F2A for <>; Wed, 5 Aug 2015 03:47:08 -0700 (PDT)
Received: from ([] by with esmtp port 25 iface id 1ZMwDy-0005u9-O9; Wed, 05 Aug 2015 12:47:06 +0200
Received: from [IPv6:::1] (ip6-localhost [IPv6:::1]) by (Postfix) with ESMTPS id 9BD9AB01363; Wed, 5 Aug 2015 12:47:06 +0200 (CEST)
Message-ID: <>
Date: Wed, 05 Aug 2015 12:47:06 +0200
From: "Bless, Roland (TM)" <>
Organization: Institute of Telematics, Karlsruhe Institute of Technology
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.8.0
MIME-Version: 1.0
To: "Andrew G. Malis" <>, Elwyn Davies <>
References: <1584175734917@OXYGENE> <> <> <>
In-Reply-To: <>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 8bit
X-ATIS-Timestamp: 1438771626.
Archived-At: <>
Subject: Re: [93attendees] Fwd: 93rd IETF July 19-24, 2015, Prague, Czech Republic - Final VAT Invoice nX 00000896
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Mailing list of IETF 93 attendees that have opted in on this list. " <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Wed, 05 Aug 2015 10:47:10 -0000

Hi Andrew,

Am 05.08.2015 um 12:24 schrieb Andrew G. Malis:
> We were told at the time we registered that these letters would be
> forthcoming. In some instances (better known to accountants than me)
> they can be used by your company to recover the VAT you paid for your
> meeting registration.

Yes, I actually read that, but didn't remember the fact and the
company's name more than four weeks ago. Since the text in the E-Mail
is very generic, everyone could have sent this mail by just browsing
the IETF participant list and harvesting mail addresses. I was merely
suggesting that the VMC company may include more specific text that
looks less suspicious, e.g., putting the right registration number
and a hint that they are authorized by the IETF secretariat/AMC.
Also a simple hint like: "As already announced in your earlier
purchase confirmation receipt ..." could have been helpful.
Sorry, but many successful infections these days are exactly crafted
like in this VMC mail with an attached malware PDF...