A simple test, I looked up who owns the domain for Carlos Soto. The data looks like this: Note the “Technical Contact” address especially.
Quinones, Paula (ANWQONYOOD)
Paulus Potterstraat 38
Amsterdam, Noord-Holland 1021
Domain Name: CARLOSSOTO.COM
Domain Network Sweden AB (UOJFSWOJRO) firstname.lastname@example.org
Stockholm s-103 68
Record created on 11-Dec-2003.
My “informant” and my suspicions were right – it’s got to be a “spoof within a spoof”! I should have known for sure as soon as I saw it. (Remember Mercedes’ ”Lucky Star’‘?) More later . . .