<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Thanks for the alert John.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Chuck<o:p></o:p></p><p class=MsoNormal><a name="_MailEndCompose"><o:p> </o:p></a></p><span style='mso-bookmark:_MailEndCompose'></span><p class=MsoNormal><b>From:</b> gnso-rds-pdp-wg-bounces@icann.org [mailto:gnso-rds-pdp-wg-bounces@icann.org] <b>On Behalf Of </b>John Horton<br><b>Sent:</b> Tuesday, October 31, 2017 2:39 PM<br><b>To:</b> RDS PDP WG <gnso-rds-pdp-wg@icann.org><br><b>Subject:</b> [gnso-rds-pdp-wg] [OFF TOPIC] Spoofed email alert<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#444444'>Hi all,<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#444444'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#444444'>This is off topic for this group, but it actually looks like a number of recipients of spoofed emails are in this group anyway, so I thought I'd drop folks a quick FYI note. <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#444444'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#444444'>As you all likely know, we have an abuse-reporting process and relationships with many banks, registrars, registries, social media platforms, etc., primarily focused on illicit healthcare websites. Most of our notifications are not via email, although sometimes we reach out this way. An individual has, over the last week or two, been vigorously spoofing our abuse email in order, it appears, to try to take down some of their competitors (a sort of black hat SEO strategy). We're homing in on the spoofer (we're pretty close to confirming who it is), but in the meantime, if you've received what appears to be an inexplicable abuse notification from LegitScript...rest assured it's not us. <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#444444'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#444444'>If you have received one, I'd be most grateful for the mail headers. :) Thanks, apologies for the off topic email, and now back to our regularly scheduled food fight. <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#444444'><o:p> </o:p></span></p></div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#073763'>John Horton<br>President and CEO, LegitScript</span><o:p></o:p></p><div><p class=MsoNormal><span style='border:solid windowtext 1.0pt;padding:0in'><img width=96 height=36 style='width:1.0in;height:.375in' id="_x0000_i1025" src="cid:image001.jpg@01D35292.621E4490" alt="Image removed by sender."></span><o:p></o:p></p><div><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Helvetica",sans-serif'><o:p> </o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><b><span style='font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#444444'>Follow</span></b><b><span style='font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#0B5394'> </span></b><b><span style='font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black'>Legit</span></b><b><span style='font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#0B5394'>Script</span></b><span style='font-size:9.0pt;font-family:"Helvetica",sans-serif'>: <a href="http://www.linkedin.com/company/legitscript-com" target="_blank"><span style='color:#CC0000'>LinkedIn</span></a> | <a href="https://www.facebook.com/LegitScript" target="_blank"><span style='color:#6AA84F'>Facebook</span></a> | <a href="https://twitter.com/legitscript" target="_blank"><span style='color:#674EA7'>Twitter</span></a> | <u><span style='color:#FF9900'><a href="http://blog.legitscript.com/" target="_blank"><span style='color:#1155CC'>Blog</span></a></span></u> |<span style='color:#FF9900'> <a href="http://go.legitscript.com/Subscription-Management.html" target="_blank"><span style='color:#FF9900'>Newsletter</span></a></span><o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Helvetica",sans-serif'><o:p> </o:p></span></p><p style='margin:0in;margin-bottom:.0001pt'><span style='font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#FF9900;border:solid windowtext 1.0pt;padding:0in'><img border=0 width=46 height=96 style='width:.4791in;height:1.0in' id="_x0000_i1026" src="cid:image002.jpg@01D35292.621E4490" alt="Image removed by sender."><img border=0 width=47 height=96 style='width:.493in;height:1.0in' id="_x0000_i1027" src="cid:image003.jpg@01D35292.621E4490" alt="Image removed by sender."></span><span style='font-size:9.0pt;font-family:"Helvetica",sans-serif'><o:p></o:p></span></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></body></html>