[SURBL-Discuss] Re: 419 for school???

David B Funk dbfunk at engineering.uiowa.edu
Fri Oct 1 20:57:08 CEST 2004


On Fri, 1 Oct 2004, Chris Santerre wrote:

> I don't get his one at all!!! WTH???
>
> I'm CC'ing to SURBL because look at the MX for this domain!
>
> uniprepacademy.com	 dns_mx:
> neti-outblaze-com.mr.outblaze.com
> neti-outblaze-com-bk.mr.outblaze.com
>
> I know it didn't come form that domain, but the advertised part of this
> email points to that domain. I'm guessing this is just an email to try to
> harvest addresses from people who reply?
>
> ____________________________________________________________
>
> Received: from hotmail.com (bay19-f20.bay19.hotmail.com [64.4.53.70])
> 	by moglobal.com (8.12.5/8.12.5) with ESMTP id i91FRj7K002969
> 	for <csanterre at MERCHANTSOVERSEAS.COM>; Fri, 1 Oct 2004 11:27:49
> -0400
> Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
> 	 Fri, 1 Oct 2004 07:50:06 -0700
> Received: from 216.139.176.61 by by19fd.bay19.hotmail.msn.com with HTTP;
> 	Fri, 01 Oct 2004 14:49:01 GMT
> X-Originating-IP: [216.139.176.61]
> X-Originating-Email: [estherekii17 at hotmail.com]
> X-Sender: estherekii17 at hotmail.com
> Reply-To: esthereki17 at indiatimes.com
> From: "Esther Eki" <estherekii17 at hotmail.com>
> Bcc:
> Subject: Greeting to you
> Date: Fri, 01 Oct 2004 09:49:01 -0500
> Mime-Version: 1.0
> Content-Type: text/plain; format=flowed
> Message-ID: <BAY19-F20hqiTPuUMMA00032335 at hotmail.com>
[snip..]

Look at the 'Reply-To:'. This scammer is probably depending upon their
victims to just hit the "Reply" button.

I'd say toss this one at Hotmail except they've been underwhemingly
responsive when I tried it in the past.


-- 
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{


More information about the Discuss mailing list