For anyone with a BT business phone package a heads up on a spam mail we got today advising us of improvements to the service and usual click thorugh links to guide you through it.

 

The email to be fair was very realistic with all of the banners and correct companies house number at the bottom etc. the give away is they don`t know your name of course, which if they were BT they would.

 

 

Quick trace revealed some bouncing around with an unlikely Austrailan source! any techies care to enlighten the less pc literate what any of the following means other than them trying to cover there tracks.

 

 

Jeff TT

 

Received: from HESA03UKER.HE.LOCAL ([10.87.8.23]) by HEMV2AUKER.he.local with Microsoft SMTPSVC(6.0.3790.4675); Thu, 5 Jul 2012 14:03:23 +0100

 

Received: from co1outboundpool.messaging.microsoft.com ([216.32.180.185]) by HESA03UKER.HE.LOCAL with Microsoft SMTPSVC(6.0.3790.4675); Thu, 5 Jul 2012 14:03:23 +0100

 

Received: from mail98-co1-R.bigfish.com (10.243.78.248) by CO1EHSOBE015.bigfish.com (10.243.66.78) with Microsoft SMTP Server id 14.1.225.23; Thu, 5 Jul 2012 13:01:11 +0000

 

Received: from mail98-co1 (localhost [127.0.0.1]) by mail98-co1-R.bigfish.com (Postfix) with ESMTP id E2604840235 for ; Thu, 5 Jul 2012 13:01:10 +0000 (UTC)

 

 

 

 

Received: from mail98-co1 (localhost.localdomain [127.0.0.1]) by mail98-co1 (MessageSwitch) id 134149326926314_17990; Thu, 5 Jul 2012 13:01:09 +0000 (UTC)

 

Received: from CO1EHSMHS024.bigfish.com (unknown [10.243.78.237]) by mail98-co1.bigfish.com (Postfix) with ESMTP id 02DD180044 for ; Thu, 5 Jul 2012 13:01:09 +0000 (UTC)

 

Received: from AMSPRD0702HT001.eurprd07.prod.outlook.com (157.55.225.13) by CO1EHSMHS024.bigfish.com (10.243.66.34) with Microsoft SMTP Server (TLS) id 14.1.225.23; Thu, 5 Jul 2012 13:01:08 +0000

 

Received: from mail137-va3-R.bigfish.com (216.32.180.116) by AMSPRD0702HT001.eurprd07.prod.outlook.com (10.16.42.184) with Microsoft SMTP Server (TLS) id 14.15.86.1; Thu, 5 Jul 2012 13:02:21 +0000

 

Received: from mail137-va3 (localhost [127.0.0.1]) by mail137-va3-R.bigfish.com (Postfix) with ESMTP id DE9114C00CE for ; Thu, 5 Jul 2012 13:00:15 +0000 (UTC)

 

Received: from mail137-va3 (localhost.localdomain [127.0.0.1]) by mail137-va3 (MessageSwitch) id 1341493213632227_19531; Thu, 5 Jul 2012 13:00:13 +0000 (UTC)

 

Received: from VA3EHSMHS025.bigfish.com (unknown [10.7.14.239]) by mail137-va3.bigfish.com (Postfix) with ESMTP id 8D7713E0061 for ; Thu, 5 Jul 2012 13:00:13 +0000 (UTC)

 

Received: from mx1.bt.trclient.com (202.43.5.28) by VA3EHSMHS025.bigfish.com (10.7.99.35) with Microsoft SMTP Server id 14.1.225.23; Thu, 5 Jul 2012 13:00:13 +0000

 

 

 

Received: by mx1.bt.trclient.com id hum85i0i00s8 for ; Thu, 5 Jul 2012 23:01:02 +1000 (envelope-from )

 

 

Source:

 

The source host name is "mx1.bt.trclient.com" and the source IP address is 202.43.5.28.

 

 

 

Geo-Location Information

Country Australia

State/Region

City

Latitude -27

Longitude 133

IP adress info is probably someone company who knows nothing of what is happening I guess.

 

Jeff

 

 

APNIC - Query the APNIC Whois Database

To assist you with debugging problems, this whois query was received from IP Address

 

Your web client may be behind a web proxy.

 

% APNIC found the following authoritative answer from: whois.apnic.net

 

% [whois.apnic.net node-4]

% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

 

inetnum: 202.43.4.0 - 202.43.7.255

netname: TRACTION-AU

descr: Traction Digital Pty Ltd

descr: NSW, Australia

country: AU

admin-c: LR329-AP

tech-c: LR329-AP

status: ALLOCATED PORTABLE

mnt-by: APNIC-HM

mnt-lower: MAINT-AU-TRACTION

remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+

remarks: This object can only be updated by APNIC hostmasters.

remarks: To update this object, please contact APNIC

remarks: hostmasters and include your organisation's account

remarks: name in the subject line.

remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+

changed: hm-changed@apnic.net 20110727

source: APNIC

 

person: Lee Russell

address: Level 4, 68-72 Wentworth Ave

address: Surry HIlls NSW 2010

country: AU

phone: +61 2 9024 2600

fax-no: +61 2 9211 6566

e-mail: lee.russell@tractionplatform.com

nic-hdl: LR329-AP

notify: lee.russell@tractionplatform.com

abuse-mailbox: abuse@tractionplatform.com

mnt-by: MAINT-NEW

changed: lee.russell@tractionplatform.com 20110722

source: APNIC

Edited July 6, 201213 yr by JeffTT

The internet is just full of scams:mad2:

Hi Jeff

 

This doesnt really mean all that much - its pretty much just a load of techy garble for where the email has come from, and where its going to.

 

You've already got pretty much all the relevant stuff - that its from Australia, its pretending to be BT, its obviously fake, and the fact that you've got the name of a guy. I wouldn't be so sure that this "Lee" person in your post won't have anything to do with it though.

 

Cheers

 

Alex

After googling tractionplatform (the host of Lee's email address), it comes back with this:

 

http://traction-digital.com/Home

 

They appear to be an Australian based (with an office in London) direct marketing firm. Looks like the sort of company that would get hold of peoples details from third parties or other companies and then send them "special offers" or other stuff that "may interest them". Sounds like someone in the company could have misused customers data - or more likely, the company could have been hacked or had some network viruses or something, resulting in the spam that gets sent.

The best you can do Jeff is forward the email on to BT's phishing/spam email address if you've not already done so. What they do with it however is anyone's guess!