OT: Bad web site

[Fairlight]

On Thu, Jan 26, 2017 at 11:55:44AM -0500, Richard Kreiss thus spoke:
> > 
> > Was the email actually -from- Adobe?  Did you check the Received: headers
> to
> > verify no phishing is going on?
> 
> I checked the header but still wasn't sure - all support ever said was test
> you current login and password.  It worked and he said ignore the email.
> 
> The issue I had was that it came to my corporate email address and I may
> have used this sometime ago and have forgotten the login ID and password.
> So, it is possible that this came from Adobe but never got a clear snaswer.

When in doubt, display the -full- headers of the email, and look at the
Received: headers.  Those are in order from latest to earliest.  You want
to look at the bottom-most one(s) and see if it originated inside a
legitimate Adobe network.  If there are only IP#s, you can use IP Whois at
dnstools.com to find out who currently owns the netblock.

Usually it's pretty clear-cut whether something is legit or phishing, when
you look at those headers.

I have seen mail which purports to be from Microsoft, but originated in
some God-forsaken country.  Happens all the time.  PayPal is one of the
most frequently faked senders, and phishers do an excellent job of using
their assets to impersonate them, but there's no escaping Received:
tracing.

mark->
-- 
Audio panton, cogito singularis.