Just now I was sitting watching the output of tcpdump on one of my servers and lo and behold what flashed up:
A quick host on 66.113.102.253 shows it to be: firewall.internetidentity.com
From their website:
hrmm .. really? No other company has figured out how to scan the internet for something on port 80? Amazing ..
I sent them a nice little [R] packet back.
Code:
11:00:32.465638 IP 66.113.102.253.46924 > x.x.x.x.80: Flags [S]
11:00:32.465666 IP x.x.x.x.80 > 66.113.102.253.46924: Flags [R.]
From their website:
What makes us different? Internet Identity consistently delivers the fastest takedowns of phishing sites -- for two reasons. Our systems and processes are designed specifically to find and takedown phishing sites, and our personnel are 100% dedicated to fighting phishing. No other company has such a laser focus on fighting phishing.
hrmm .. really? No other company has figured out how to scan the internet for something on port 80? Amazing ..
I sent them a nice little [R] packet back.