Last edited Sat Apr 17, 2021, 08:05 PM - Edit history (1)
.
That is strictly a text viewer. It will have a pile of stuff in it, but once you figure out the pattern, you'll be able to grab them in a few seconds.
Embedded in there will be something like this:
Authentication-Results: spf=softfail (sender IP is 212.64.220.150)
smtp.mailfrom=inbox.foxnews.com; hotmail.com; dkim=none (message not signed)
header.d=none;hotmail.com; dmarc=none action=none
header.from=ballaratfitness.com;compauth=fail reason=001
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
inbox.foxnews.com discourages use of 212.64.220.150 as permitted sender)
DOS Window:
PS C:WINDOWSsystem32> nslookup 212.64.220.150
Server: 83a680f2afb6
Address: 10.0.0.243
Name: roles.reposefully.com
Address: 212.64.220.150
PS C:WINDOWSsystem32> nslookup reposefully.com
Server: 83a680f2afb6
Address: 10.0.0.243
Non-authoritative answer:
Name: reposefully.com
Address: 212.64.220.146
WHOIS Lookup: https://www.whois.com/whois
https://www.whois.com/whois/reposefully.com
Now this one has the typical GMAIL email account and is using NameCheap as a Registrar. There is a reporting ability at all Registrars. But it is best to wait and compile a bunch of them that are from the same person and then they will nuke the guy's account.
The address looks to be a web developer's address: 5660 Strand Court,,# A8,Naples,FL,34110
If they are missing Registration contact information: https://www.icann.org/compliance/complaint
Rat out each domain name that isn't properly filled out.
.
= new reply since forum marked as read