is this MSFT?

H

Henry Kolesnik

or phising? I've been bitten too many times to click on the page. I've
copied the message source and would appreciate someone telling me how to
tell if it's really MSFT or a scam?
tnx
Hank

X-Apparently-To: (e-mail address removed) via 216.252.101.68; Fri, 23 Feb
2007 16:55:49 -0800
X-Originating-IP: [207.46.248.43]
Authentication-Results: mta169.sbc.mail.mud.yahoo.com
from=newsletters.microsoft.com; domainkeys=neutral (no sig)
Received: from 207.46.248.43 (EHLO nlpi007.sbcis.sbc.com)
(207.115.36.36)
by mta169.sbc.mail.mud.yahoo.com with SMTP; Fri, 23 Feb 2007
16:55:49 -0800
X-Originating-IP: [207.46.248.43]
Received: from delivery2.pens.microsoft.com
(delivery2.pens.microsoft.com [207.46.248.43])
by nlpi007.sbcis.sbc.com (8.13.8 inb/8.13.8) with ESMTP id
l1O0t616030604
for <[email protected]>; Fri, 23 Feb 2007 18:55:09 -0600
Received: from TK2MSFTDDSQ16 ([10.40.249.23]) by
delivery2.pens.microsoft.com with Microsoft SMTPSVC(6.0.3790.1830);
Fri, 23 Feb 2007 16:55:46 -0800
Thread-Topic: Microsoft Download Notifications: February 23, 2007
thread-index: AcdXroSP/fIGfS6vR4+hgc6Kcy/ydQ==
Reply-To: "Microsoft"
<[email protected]>
From: "Microsoft" <[email protected]>
Sender: "Microsoft"
<[email protected]>
To: <[email protected]>
Subject: Microsoft Download Notifications: February 23, 2007
Date: Fri, 23 Feb 2007 16:55:46 -0800
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
X-OriginalArrivalTime: 24 Feb 2007 00:55:46.0370 (UTC)
FILETIME=[84960A20:01C757AE]

<html xmlns:res2="http://www.w3.org/1999/XSL/Transform-Result2"
xmlns:user="http://www.microsoft.com/MSCOM/Service/Pens/2.0/Functions">
<head>

<META http-equiv="Content-Type" content="
text/html; charset=iso-8859-1">
<style type="text/css">

a {color : #0033CC;}
a:link {color: #0033CC;}
a:visited.local {color: #0033CC;}
a:visited {color : #800080;}
a:active {color: #800080;}
a:hover {color : #FF6600;}
a:visited.inline {color: #0033cc;}
a:hover.inline {color: #FF6600;}

.footer a:link {color: #FFFFFF;}
.footer a:visited {color: #FFFFFF;}
.footer a:active {color: #FFFFFF;}
.footer a:hover {color: #FFFFFF;}
 
C

ChrisRM

Probably:

But most certainly your spam volumes will go up now you have posted you
email id on this newsgroup!!!!
 
P

PA Bear

Looks identical to the headers of the message I received.

Did you subscribe to MS Download Notifications?
https://profile.microsoft.com/RegsysProfileCenter/SubCntDefault.aspx
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)

Henry said:
or phising? I've been bitten too many times to click on the page. I've
copied the message source and would appreciate someone telling me how to
tell if it's really MSFT or a scam?
Click to expand...
<snip>
 
H

Henry Kolesnik

Damn , there's no way to win.
ChrisRM said:
Probably:

But most certainly your spam volumes will go up now you have posted
you email id on this newsgroup!!!!



Henry Kolesnik said:
or phising? I've been bitten too many times to click on the page.
I've copied the message source and would appreciate someone telling
me how to tell if it's really MSFT or a scam?
tnx
Hank

X-Apparently-To: (e-mail address removed) via 216.252.101.68; Fri, 23
Feb 2007 16:55:49 -0800
X-Originating-IP: [207.46.248.43]
Authentication-Results: mta169.sbc.mail.mud.yahoo.com
from=newsletters.microsoft.com; domainkeys=neutral (no sig)
Received: from 207.46.248.43 (EHLO nlpi007.sbcis.sbc.com)
(207.115.36.36)
by mta169.sbc.mail.mud.yahoo.com with SMTP; Fri, 23 Feb 2007
16:55:49 -0800
X-Originating-IP: [207.46.248.43]
Received: from delivery2.pens.microsoft.com
(delivery2.pens.microsoft.com [207.46.248.43])
by nlpi007.sbcis.sbc.com (8.13.8 inb/8.13.8) with ESMTP id
l1O0t616030604
for <[email protected]>; Fri, 23 Feb 2007 18:55:09 -0600
Received: from TK2MSFTDDSQ16 ([10.40.249.23]) by
delivery2.pens.microsoft.com with Microsoft SMTPSVC(6.0.3790.1830);
Fri, 23 Feb 2007 16:55:46 -0800
Thread-Topic: Microsoft Download Notifications: February 23, 2007
thread-index: AcdXroSP/fIGfS6vR4+hgc6Kcy/ydQ==
Reply-To: "Microsoft"
<[email protected]>
From: "Microsoft" <[email protected]>
Sender: "Microsoft"
<[email protected]>
To: <[email protected]>
Subject: Microsoft Download Notifications: February 23, 2007
Date: Fri, 23 Feb 2007 16:55:46 -0800
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
X-OriginalArrivalTime: 24 Feb 2007 00:55:46.0370 (UTC)
FILETIME=[84960A20:01C757AE]

<html xmlns:res2="http://www.w3.org/1999/XSL/Transform-Result2"
xmlns:user="http://www.microsoft.com/MSCOM/Service/Pens/2.0/Functions">
<head>

<META http-equiv="Content-Type" content="
text/html; charset=iso-8859-1">
<style type="text/css">

a {color : #0033CC;}
a:link {color: #0033CC;}
a:visited.local {color: #0033CC;}
a:visited {color : #800080;}
a:active {color: #800080;}
a:hover {color : #FF6600;}
a:visited.inline {color: #0033cc;}
a:hover.inline {color: #FF6600;}

.footer a:link {color: #FFFFFF;}
.footer a:visited {color: #FFFFFF;}
.footer a:active {color: #FFFFFF;}
.footer a:hover {color: #FFFFFF;}
Click to expand...
Click to expand...
 
B

Brian A.

That isn't from MS, they wouldn't send email from: Microsoft CDO for Windows 2000
They also wouldn't be stupid enough to use a url from one ISP and an IP from another
(EHLO nlpi007.sbcis.sbc.com) 207.115.36.36 <---- This is a Prodigy IP. Hmmm, now
where have I seen that before and reported to them as well.
This url mta169.sbc.mail.mud.yahoo.com is connected with sites the smart ones
stay away from.
This url delivery2.pens.microsoft.com is connected with sites the smart ones stay
away from.

Your test failed and it won't be long.

--

Brian A. Sesko { MS MVP_Shell/User }
Conflicts start where information lacks.
http://basconotw.mvps.org/

Suggested posting do's/don'ts: http://www.dts-l.org/goodpost.htm
How to ask a question: http://support.microsoft.com/kb/555375


Henry Kolesnik said:
or phising? I've been bitten too many times to click on the page. I've copied the
message source and would appreciate someone telling me how to tell if it's really
MSFT or a scam?
tnx
Hank

X-Apparently-To: (e-mail address removed) via 216.252.101.68; Fri, 23 Feb 2007
16:55:49 -0800
X-Originating-IP: [207.46.248.43]
Authentication-Results: mta169.sbc.mail.mud.yahoo.com
from=newsletters.microsoft.com; domainkeys=neutral (no sig)
Received: from 207.46.248.43 (EHLO nlpi007.sbcis.sbc.com) (207.115.36.36)
by mta169.sbc.mail.mud.yahoo.com with SMTP; Fri, 23 Feb 2007 16:55:49 -0800
X-Originating-IP: [207.46.248.43]
Received: from delivery2.pens.microsoft.com (delivery2.pens.microsoft.com
[207.46.248.43])
by nlpi007.sbcis.sbc.com (8.13.8 inb/8.13.8) with ESMTP id l1O0t616030604
for <[email protected]>; Fri, 23 Feb 2007 18:55:09 -0600
Received: from TK2MSFTDDSQ16 ([10.40.249.23]) by delivery2.pens.microsoft.com with
Microsoft SMTPSVC(6.0.3790.1830);
Fri, 23 Feb 2007 16:55:46 -0800
Thread-Topic: Microsoft Download Notifications: February 23, 2007
thread-index: AcdXroSP/fIGfS6vR4+hgc6Kcy/ydQ==
Reply-To: "Microsoft" <[email protected]>
From: "Microsoft" <[email protected]>
Sender: "Microsoft" <[email protected]>
To: <[email protected]>
Subject: Microsoft Download Notifications: February 23, 2007
Date: Fri, 23 Feb 2007 16:55:46 -0800
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
X-OriginalArrivalTime: 24 Feb 2007 00:55:46.0370 (UTC) FILETIME=[84960A20:01C757AE]

<html xmlns:res2="http://www.w3.org/1999/XSL/Transform-Result2"
xmlns:user="http://www.microsoft.com/MSCOM/Service/Pens/2.0/Functions">
<head>

<META http-equiv="Content-Type" content="
text/html; charset=iso-8859-1">
<style type="text/css">

a {color : #0033CC;}
a:link {color: #0033CC;}
a:visited.local {color: #0033CC;}
a:visited {color : #800080;}
a:active {color: #800080;}
a:hover {color : #FF6600;}
a:visited.inline {color: #0033cc;}
a:hover.inline {color: #FF6600;}

.footer a:link {color: #FFFFFF;}
.footer a:visited {color: #FFFFFF;}
.footer a:active {color: #FFFFFF;}
.footer a:hover {color: #FFFFFF;}
Click to expand...
 
P

PA Bear

@Brian: Subscribe to MS Downloads Notifications
(https://profile.microsoft.com/RegsysProfileCenter/SubCntDefault.aspx) and
check the headers of the first message you receive.

The IPs you cite are referencing the server(s) that received the message
(i.e., Henry's ISP).
--
~PA Bear
That isn't from MS, they wouldn't send email from: Microsoft CDO for
Windows 2000 They also wouldn't be stupid enough to use a url from one ISP
and an IP from another (EHLO nlpi007.sbcis.sbc.com) 207.115.36.36 <----
This is a Prodigy IP. Hmmm, now where have I seen that before and
reported
to them as well. This url mta169.sbc.mail.mud.yahoo.com is connected
with sites the
smart ones stay away from.
This url delivery2.pens.microsoft.com is connected with sites the
smart
ones stay away from.

Your test failed and it won't be long.


Henry Kolesnik said:
or phising? I've been bitten too many times to click on the page. I've
copied the message source and would appreciate someone telling me how to
tell if it's really MSFT or a scam?
tnx
Hank

X-Apparently-To: (e-mail address removed) via 216.252.101.68; Fri, 23 Feb
2007 16:55:49 -0800
X-Originating-IP: [207.46.248.43]
Authentication-Results: mta169.sbc.mail.mud.yahoo.com
from=newsletters.microsoft.com; domainkeys=neutral (no sig)
Received: from 207.46.248.43 (EHLO nlpi007.sbcis.sbc.com)
(207.115.36.36)
by mta169.sbc.mail.mud.yahoo.com with SMTP; Fri, 23 Feb 2007 16:55:49
-0800 X-Originating-IP: [207.46.248.43]
Received: from delivery2.pens.microsoft.com (delivery2.pens.microsoft.com
[207.46.248.43])
by nlpi007.sbcis.sbc.com (8.13.8 inb/8.13.8) with ESMTP id l1O0t616030604
for <[email protected]>; Fri, 23 Feb 2007 18:55:09 -0600
Received: from TK2MSFTDDSQ16 ([10.40.249.23]) by
delivery2.pens.microsoft.com with Microsoft SMTPSVC(6.0.3790.1830);
Fri, 23 Feb 2007 16:55:46 -0800
Thread-Topic: Microsoft Download Notifications: February 23, 2007
thread-index: AcdXroSP/fIGfS6vR4+hgc6Kcy/ydQ==
Reply-To: "Microsoft"
<[email protected]> From:
"Microsoft" <[email protected]> Sender: "Microsoft"
<[email protected]> To:
<[email protected]> Subject: Microsoft Download Notifications:
February 23, 2007
Date: Fri, 23 Feb 2007 16:55:46 -0800
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
X-OriginalArrivalTime: 24 Feb 2007 00:55:46.0370 (UTC)
FILETIME=[84960A20:01C757AE] <html
xmlns:res2="http://www.w3.org/1999/XSL/Transform-Result2"
xmlns:user="http://www.microsoft.com/MSCOM/Service/Pens/2.0/Functions">
<head>

<META http-equiv="Content-Type" content="
text/html; charset=iso-8859-1">
<style type="text/css">

a {color : #0033CC;}
a:link {color: #0033CC;}
a:visited.local {color: #0033CC;}
a:visited {color : #800080;}
a:active {color: #800080;}
a:hover {color : #FF6600;}
a:visited.inline {color: #0033cc;}
a:hover.inline {color: #FF6600;}

.footer a:link {color: #FFFFFF;}
.footer a:visited {color: #FFFFFF;}
.footer a:active {color: #FFFFFF;}
.footer a:hover {color: #FFFFFF;}
Click to expand...
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Inviting attendees to meetings.... 2
Message Body Rule Not Working 2
Block Delivery & Read Receipts 4
Outlook XP: Autogenerates a "not read" on receipts 2
Explorer.exe is crashing on Windows Vista Business N with SP1 4
Game doesn't work after MS update 8
Help. this is getting annoying 9
WTD: Nvidia Videocard for 4x AGP Slot 0

Top