On Fri, 1 Oct 2004, Chris Santerre wrote:
> I don't get his one at all!!! WTH???
>
> I'm CC'ing to SURBL because look at the MX for this domain!
>
> uniprepacademy.com dns_mx:
> neti-outblaze-com.mr.outblaze.com
> neti-outblaze-com-bk.mr.outblaze.com
>
> I know it didn't come form that domain, but the advertised part of this
> email points to that domain. I'm guessing this is just an email to try to
> harvest addresses from people who reply?
>
> ____________________________________________________________
>
> Received: from hotmail.com (bay19-f20.bay19.hotmail.com [64.4.53.70])
> by moglobal.com (8.12.5/8.12.5) with ESMTP id i91FRj7K002969
> for <[EMAIL PROTECTED]>; Fri, 1 Oct 2004 11:27:49
> -0400
> Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
> Fri, 1 Oct 2004 07:50:06 -0700
> Received: from 216.139.176.61 by by19fd.bay19.hotmail.msn.com with HTTP;
> Fri, 01 Oct 2004 14:49:01 GMT
> X-Originating-IP: [216.139.176.61]
> X-Originating-Email: [EMAIL PROTECTED]
> X-Sender: [EMAIL PROTECTED]
> Reply-To: [EMAIL PROTECTED]
> From: "Esther Eki" <[EMAIL PROTECTED]>
> Bcc:
> Subject: Greeting to you
> Date: Fri, 01 Oct 2004 09:49:01 -0500
> Mime-Version: 1.0
> Content-Type: text/plain; format=flowed
> Message-ID: <[EMAIL PROTECTED]>
[snip..]
Look at the 'Reply-To:'. This scammer is probably depending upon their
victims to just hit the "Reply" button.
I'd say toss this one at Hotmail except they've been underwhemingly
responsive when I tried it in the past.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
