SIGforum
Phising email put their ip address in the text

This topic can be found at:
https://sigforum.com/eve/forums/a/tpc/f/320601935/m/7540073574

October 08, 2020, 10:39 AM
Shaql
Phising email put their ip address in the text
like an idiot:

I am Agent Frederick Janssen,an INTERPOL Special Agent and this is to inform you that I was sent to secure the release of your fund which has now been credited into an ATM Card by the issuing bank. This decision was taken to assist you secure your fund safely and prevent you from dealing with internet scammers who may claim to be in possesion of your money.
The bank has now handed over your package to Topchrono Cour176.9.199.184ier and you have to send them details now for the delivery;

Anyone with the chops, feel free to mess with him.





Hedley Lamarr: Wait, wait, wait. I'm unarmed.
Bart: Alright, we'll settle this like men, with our fists.
Hedley Lamarr: Sorry, I just remembered . . . I am armed.
October 08, 2020, 10:47 AM
HRK

October 08, 2020, 11:44 AM
parabellum
quote:
176.9.199.184
Looks like a proxy server in Berlin, Germany.

Hetzner Online GmbH

Hostname: static.184.199.9.176.clients.your-server.de
October 09, 2020, 07:39 AM
henryaz
 
They probably had the IP address on the clipboard, and accidentally hit Paste at the wrong time.



When in doubt, mumble