[nsp-sec] 答复: ACK for Google scam (AS 4134)

[William Allen Simpson]

王华 wrote:
> The sender may be spoofed.
> 
The sender is not your issue, it's the reply-to (also embedded in the message).


> -----邮件原件-----
> 发件人: William Allen Simpson [mailto:william.allen.simpson at gmail.com] 
> 发送时间: 2010年3月4日 12:35
> 收件人: 王华
> 抄送: 'NSP-Sec'
> 主题: Re: [nsp-sec] ACK for Google scam (AS 4134)
> 
> 王华 wrote:
>> ----------- nsp-security Confidential --------
>>
>> Hi,
>> Ack for 4134. Thanks a lot. But I do not know find 122.225.105.9 in the
>> spam. Could you send me more info?
>>
> dig w.cn
> 
> ;; ANSWER SECTION:
> w.cn.			3600	IN	A	122.225.105.9
> 
> ...
> 
> 
>> -----邮件原件-----
>> 发件人: nsp-security-bounces at puck.nether.net
>> [mailto:nsp-security-bounces at puck.nether.net] 代表 William Allen Simpson
>> 发送时间: 2010年3月3日 19:24
>> 收件人: NSP-Sec
>> 主题: [nsp-sec] Google scam (AS 4134)
>>
>> ----------- nsp-security Confidential --------
>>
>> Wow, Google is so generous!  Imagine my surprise that they operate
>> from an address in China....
>>
>> AS      | IP               | AS Name
>> 4134    | 122.225.105.9    | CHINANET-BACKBONE No.31,Jin-rong Street
>>
>> ===
>>

...

>> Date: Wed, 3 Mar 2010 4:19:22 +0200
>> From: Mrs Becky Johnny <google_team at w.cn>
>> To: google_team at w.cn
>> Subject: CONGRATULATIONS
>> Organization: GOOGLE_TEAM
>> Reply-To: google_team at w.cn
>> Message-ID: <69e05bc4a21b4aa26f75442ec7755734 at powerconnect.co.zw>

...

>> Name: Mrs. Becky Johnny
>> Position:(Chief Promo Organizer)
>> Email: google_team at w.cn
>>