When I open my email and see a subject line:
“Subject: you’re out of excuses” ,
I am a bit taken aback. Not one of my customers, associates, vendors or my friends have ever sent an email with that subject line. My Mother may have yelled that a few times when I was in my teens but she does not use a computer so I was fairly certain it was not from her. The sender was “Kevin”. I have 2 customers and one vendor with that name.
BUT No – this was another WTFWTT SEO or get rich quick scheme… or a phishing exercise.
Bottom line – if you are considering doing business with www.kevinssocialmediatips.com I would think very hard about why?
Hey,
I’m tired of your excuses.
The #1 reason why you haven’t succeeded
online may be because you’ve never had
an opportunity like this:=> http://kevinsaysgo.com/click/infusion
Watch this video that was just posted and
discover EXACTLY how you can earn
commissions online…With NO Website
With NO Email List
With NO Special Skills
With NO Upfront CashThat means YOU can do this!
So there are NO MORE EXCUSES and
now it’s time to TAKE ACTION.=> http://kevinsaysgo.com/click/infusion
Talk Soon,
KevinIf you wish to cancel your subscription, simply click once on the link below.
Click here to unsubscribe
The unsubscribe was a link to:
http://www.kevinssocialmediatips.com/cgi-bin/arp3/****REDACTED LINK TO PERL SCRIPT****
From arplus@kevinssocialmediatips.com Sun Oct 14 06:00:33 2012
Return-Path:
X-Spam-Relay-Countries: XX
X-Spam-ASN: AS33182 198.136.48.0/20
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on **** my mail server redacted ****
X-Spam-COV-Untrusted-Relays: [ ip=198.136.48.250
rdns=198-136-48-250.static.dimenoc.com helo=server.downloadplrproducts.com
by=d100.companyv.net ident= envfrom= intl=0 id=q9ED0SGP009724 auth= msa=0 ]
X-Spam-Status: No, score=3.5 required=6.0 tests=BAYES_50,HTML_IMAGE_ONLY_16,
HTML_MESSAGE,MIME_HTML_ONLY shortcircuit=no autolearn=no version=3.2.5
X-Spam-Level: SSS
X-Spam-COV-SubTests: __CD,__CT,__CTE,__CTYPE_HTML,__DOS_HAS_ANY_URI,__DOS_LINK,
__DOS_RCVD_SUN,__DOS_RELAYED_EXT,__DOS_SINGLE_EXT_RELAY,__HAS_ANY_URI,
__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HAS_X_MAILER,__HTML_IMG_ONLY,
__HTML_LENGTH_1024_1536,__LAST_UNTRUSTED_RELAY_NO_AUTH,__MIME_HTML,
__MIME_VERSION,__MISSING_REF,__MSGID_OK_HOST,__MSOE_MID_WRONG_CASE,__NAKED_TO,
__NONEMPTY_BODY,__RDNS_DYNAMIC_IPADDR,__RDNS_STATIC,__SANE_MSGID,
__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TOCC_EXISTS,__TVD_BODY
X-Spam-RBL-Report: [198.136.48.250]
[0 kevinssocialmediatips.com.]
X-Spam-COV-Tests: BAYES_50=0.5,HTML_IMAGE_ONLY_16=1.526,HTML_MESSAGE=0.5,
MIME_HTML_ONLY=1
Received: from server.downloadplrproducts.com (198-136-48-250.static.dimenoc.com [198.136.48.250] (may be forged))
by **** my mail server redacted **** (8.13.8/8.13.8) with ESMTP id q9ED0SGP009724
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for ; Sun, 14 Oct 2012 06:00:33 -0700
Received: from kevinsso by server.downloadplrproducts.com with local (Exim 4.80)
(envelope-from )
id 1TNNnv-0000wq-IS
for **** my email address redacted ****; Sun, 14 Oct 2012 09:00:27 -0400
Content-Disposition: inline
Content-Transfer-Encoding: binary
Content-Type: text/html
MIME-Version: 1.0
X-Mailer: MIME::Lite 2.117 (F2.74; T1.16; B3.13; Q3.13)
Date: Sun, 14 Oct 2012 13:00:27 UT
From: "Kevin"
Reply-To: kevinfahey.net@gmail.com
To: **** my email address redacted ****
Subject: you're out of excuses
X-Return: 195427_616858_92226_342637
Message-Id:
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.downloadplrproducts.com
X-AntiAbuse: Original Domain - companyv.com
X-AntiAbuse: Originator/Caller UID/GID - [596 594] / [47 12]
X-AntiAbuse: Sender Address Domain - kevinssocialmediatips.com
X-Scanned-By: MIMEDefang 2.67 on 207.151.82.60
Status: R
So who is Kevin Fahey
Looks like someone with a load of fake information:
Domain Name: KEVINSSOCIALMEDIATIPS.COM
Registrant:
None
Kevin Fahey ()
dgerh
shhbr
za,54645
US
Tel. +1.5200001234
Creation Date: 11-Jan-2011
Expiration Date: 11-Jan-2013
Domain servers in listed order:
ns1.kevinfaheyhosting.com
ns2.kevinfaheyhosting.com
Administrative Contact:
None
Kevin Fahey ()
dgerh
shhbr
za,54645
US
Tel. +1.5200001234
Technical Contact:
None
Kevin Fahey ()
dgerh
shhbr
za,54645
US
Tel. +1.5200001234
Billing Contact:
None
Kevin Fahey ()
dgerh
shhbr
za,54645
US
Tel. +1.5200001234
Status:LOCKED
And they are hosted with HostDime.
It does make me wonder how a large hosting company will allow bogus whois information to pass muster.
whois 198.136.48.250
[Querying whois.arin.net]
[Redirected to rwhois.dimenoc.com:4321]
[Querying rwhois.dimenoc.com]
[rwhois.dimenoc.com]
%rwhois V-1.5:0000a0:00 rwhois.dimenoc.com (by HostDime.com, Inc. v0.1)
network:id:DIMENOC-220244
network:ip-network:198.136.48.248/29
network:network-name:DIMENOC-220244
network:org-name:Ernest Quick
network:street-address:440 West Kennedy Blvd Suite #1
network:city:Orlando
network:state:FL
network:postal-code:32810
network:country-code:US
network:tech-contact:abuse@dimenoc.com
network:updated:2012-10-14 18:32:13
network:updated-by:network@dimenoc.com