I would like to know whether this is a genuine mail or a scam please, if
anyone knows.
Secondly and more annoyingly I cannot import any of my mail into either my
mailwasher or my incredimail even though its sitting in my mailbox on msn.
Even though mw is trying to import the mail and is logging in sucessfully to
msn. Incredimail is also logging in ok but cant retrieve the mail.
What is going on with the msn mail system? Is something down? Will it soon
be restored? Thanks in advance. Mc
Hello, Mummycool1:
On Tue, 8 Feb 2005 06:33:02 -0800: you wrote...
M> I have a two part question.
M> Firstly I am getting this mail, which although it doesnt appear in my
M> msn mailbox is stuck in my mailwasher pro and will not go even after
M> deletion.
M> ----- Original Message -----
M> From: Hotmail Staff
M> Sent: Thursday, January 20, 2005 17:50 PM
M> To: ********@msn.com
M> Subject: Please visit hotmail.com
M>
M> Dear *******
M> To help protect our users from automatically generated junk e-mail (or
M> spam), MSN Hotmail periodically asks for identity verification.
M> Please go to http://www.hotmail.msn.com and follow the instructions. It
M> takes only a few minutes and you can then return to using your Hotmail
M> account.
M> Thank you for helping us to help reduce your junk e-mail.
M> Sincerely,
M> MSN Hotmail Staff
M> Please do not reply to this e-mail as this is an unmonitored alias.
M>
M> I would like to know whether this is a genuine mail or a scam please, if
M> anyone knows.
M>
M> Secondly and more annoyingly I cannot import any of my mail into either
M> my mailwasher or my incredimail even though its sitting in my mailbox on
M> msn. Even though mw is trying to import the mail and is logging in
M> sucessfully to msn. Incredimail is also logging in ok but cant retrieve
M> the mail. What is going on with the msn mail system? Is something down?
M> Will it soon be restored? Thanks in advance. Mc
M>
Regards, Paul R. Sadowski [MVP].
Anytime you suspect a given link is not valid, copy/paste it into an IE
Addressbar instead of clicking on it.
It would appear that many MSN/Hotmail users are having problems logging in
via Passport since sometime Saturday. Until things clear up, access your
mail at www.hotmail.com.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security
To match the picture, look at the characters (numbers and letters) inside
the picture, and then type them in the box below the picture. The letters
are not case sensitive (that is, A is the same as a). Do not type spaces
between the characters.
If you can't read one or more of the letters or numbers, click the Refresh
button in your browser. A new picture will appear. If you can't see the
picture well enough to read the characters, you can click I can't see this
picture to hear an audio file. A window will appear with instructions for
using the audio file.
We ask you to match the picture to confirm that you are a person, rather
than an automated program. This is can help keep programs from fraudulent
account creation or misusing an account, and help keep people from sending
spam.
--
mae
"Mummycool1" <Mummy...@discussions.microsoft.com> wrote in message
news:561C4B3C-94BB-4C96...@microsoft.com...
"Paul R. Sadowski [MVP]" <sado...@mvps.org> wrote in message
news:uqw4Z0eD...@tk2msftngp13.phx.gbl...
PB> In the original email, if you hover over the link you posted, does
PB> 'http://www.hotmail.msn.com' appear in the status bar at the bottom of
PB> the Internet Explorer window? 'http://www.hotmail.msn.com' is itself a
PB> valid link to sign-in to Hotmail.
The real underlying link is to www.explore-msn.com
Which is, of course, legit and resolves to http://www.msn.com/.
Have you also received this message, Paul?
--
~Robear Dyer (PA Bear)
MS MVP-Windows (Shell, IE/OE) & Security
m> I thought this is part of the verification process.
m> At least a lot of reports of such in the msn groups.
My copy is clearly a phishing scam using a number of techniques to avoid
junk mail filters. If I'd saved it I would post a few lines here but I
didn't. It's also self-evident from the text of the email. hotmail.msn.com
is just hotmail.com. You are logged into hotmail already to read your mail.
They are trying to lure you to another site to collect your credit card
information. They use a familiar sounding and official sounding link text
like hotmail.msn.com to try to gain your confidence. The underlying link is
to an outside uncontrolled site not run my Microsoft or MSN. This is very
simple to do in HTML and is something you need to be on guard about.
http://www.microsoft.com/athome/security/email/phishing.mspx
C:\Users\Sadowski [(firecat) 14:14, Tue 02/08/2005] host hotmail.msn.com
hotmail.msn.com has address 64.4.33.7
hotmail.msn.com has address 64.4.32.7
C:\Users\Sadowski [(firecat) 14:14, Tue 02/08/2005] host hotmail.com
hotmail.com has address 64.4.33.7
hotmail.com has address 64.4.32.7
hotmail.com mail is handled (pri=5) by mx2.hotmail.com
hotmail.com mail is handled (pri=5) by mx3.hotmail.com
hotmail.com mail is handled (pri=5) by mx4.hotmail.com
hotmail.com mail is handled (pri=5) by mx1.hotmail.com
PB> Paul R. Sadowski [MVP] wrote:
??>>> In the original email, if you hover over the link you posted, does
??>>> 'http://www.hotmail.msn.com' appear in the status bar at the bottom
??>>> of the Internet Explorer window? 'http://www.hotmail.msn.com' is
??>>> itself a valid link to sign-in to Hotmail.
??>>
??>> The real underlying link is to www.explore-msn.com
PB>
PB> Which is, of course, legit and resolves to http://www.msn.com/.
N, it's not legit, if it pretends to be a Microsoft site.
PB> Have you also received this message, Paul?
I no longer have a copy. You have to look deeper.
C:\Users\Sadowsi [(firecat) 14:20, Tue 02/08/2005] host www.explore-msn.com
www.explore-msn.com is a nickname for premium3.geo.yahoo.akadns.net
premium3.geo.yahoo.akadns.net has address 68.142.234.39
premium3.geo.yahoo.akadns.net has address 68.142.234.40
premium3.geo.yahoo.akadns.net has address 68.142.234.76
premium3.geo.yahoo.akadns.net has address 68.142.234.77
premium3.geo.yahoo.akadns.net has address 68.142.234.35
premium3.geo.yahoo.akadns.net has address 68.142.234.36
premium3.geo.yahoo.akadns.net has address 68.142.234.37
premium3.geo.yahoo.akadns.net has address 68.142.234.38
C:\Users\Sadowski [(firecat) 14:18, Tue 02/08/2005] wget www.explore-msn.com
--14:20:30-- http://www.explore-msn.com/
=> `index.html.8'
Resolving www.explore-msn.com... 68.142.234.77, 68.142.234.35,
68.142.234.36, ..
.
Connecting to www.explore-msn.com[68.142.234.77]:80... connected.
HTTP request sent, awaiting response...
1 HTTP/1.1 200 OK
2 Date: Tue, 08 Feb 2005 19:20:52 GMT
3 Connection: close
4 Content-Type: text/html
[ <=> ] 518 --.--K/s
14:20:41 (505.86 KB/s) - `index.html.8' saved [518]
C:\Users\Sadowski [(firecat) 14:18, Tue 02/08/2005] cat index.html.8
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>MSN.COM Refreshing...</title>
<meta http-equiv="Refresh" content="0; URL=http://www.msn.com">
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_openBrWindow(theURL,winName,features) { //v2.0
window.open(theURL,winName,features);
}
//-->
</script>
</head>
<body>
<img src="http://www.explore-msn.com/images/1.gif" width="1" height="1"
onload="
MM_openBrWindow('indexxx.php?','','width=700,height=680')">
</body>
</html>
And finally:
Domain Name.......... explore-msn.com
Creation Date........ 2005-02-03
Registration Date.... 2005-02-03
Expiry Date.......... 2006-02-03
Organisation Name.... Margaret Roden
Organisation Address. 11919 Chessington Drive
Organisation Address.
Organisation Address. Houston
Organisation Address. 77031
Organisation Address. TX
Organisation Address. UNITED STATES
Admin Name........... Margaret Roden
Admin Address........ 11919 Chessington Drive
Admin Address........
Admin Address........ Houston
Admin Address........ 77031
Admin Address........ TX
Admin Address........ UNITED STATES
Admin Email.......... margaret...@yahoo.com
Admin Phone.......... +1.2814950575
Admin Fax............
Tech Name............ YahooDomains TechContact
Tech Address......... 701 First Ave.
Tech Address.........
Tech Address......... Sunnyvale
Tech Address......... 94089
Tech Address......... CA
Tech Address......... UNITED STATES
Tech Email........... domai...@YAHOO-INC.COM
Tech Phone........... +1.6198813096
Tech Fax............. +1.6198813010
Name Server.......... yns1.yahoo.com
Name Server.......... yns2.yahoo.com
Always be suspicious. :)
The popup asks for your username and password and submits to
www.explore-msn.com/billinfo.php which asks for CC SS etc etc. I don't think
Microsoft has started using PHP and Yahoo for DNS and hosting :)
Yes, *if* it pretends to be a MS site. www.msn.com is legit.
>
>> Have you also received this message, Paul?
>
> I no longer have a copy. You have to look deeper.
<snip>
Agreed, which is why I asked 'mommycool1' (?) my question.
"stsong" <sts...@discussions.microsoft.com> wrote in message
news:38E076F0-6B04-42FB...@microsoft.com...
| I am perfectly fine with verifying my identity, but how many times do I
have
| to do that? I already have to verify twice since Saturday. A friend of
mine
| had already done with for several times. Now who is sending out spam?
|
| "mae" wrote:
|
| > These are the directions you should see to verify after getting that
| > message:
| > ----snip
| | > We ask you to match the picture to confirm that you are a person,
rather
| > than an automated program. This is can help keep programs from
fraudulent
| > account creation or misusing an account, and help keep people from
sending
| > spam.
| >
| > --
| > mae
| >
| > "Mummycool1" <Mummy...@discussions.microsoft.com> wrote in message
| > news:561C4B3C-94BB-4C96...@microsoft.com...
| > | I have a two part question.
| > | Firstly I am getting this mail, which although it doesnt appear in my
msn
| > | mailbox is stuck in my mailwasher pro and will not go even after
deletion.
| > | ----- Original Message -----
| > | From: Hotmail Staff
| > | Sent: Thursday, January 20, 2005 17:50 PM
| > | To: ********@msn.com
| > | Subject: Please visit hotmail.com
| > --snip----
I am familiar with the phishing methods. Sounds like you got one of the
usual.
And hotmail.msn.com may not be valid as you say, but that is where Passport
redirects me and what shows in the address bar at Hotmail and is registered
to Microsoft Corporation. If I put that in my address bar- goes there. What
do you show in address bar.?
--
mae
"Paul R. Sadowski [MVP]" <sado...@mvps.org> wrote in message
news:%23eFbpKh...@TK2MSFTNGP14.phx.gbl...
This will explain if you dare to go there:
http://groups.msn.com/CommunityFeedback/general.msnw?action=get_message&mview=0&ID_Message=776199
--
mae
"PA Bear" <PABe...@gmail.com> wrote in message
news:O%23s7vIhD...@TK2MSFTNGP15.phx.gbl...
The other side of the tracks.
--
mae
"PA Bear" <PABe...@gmail.com> wrote in message
news:%235Sltoh...@TK2MSFTNGP10.phx.gbl...
mae wrote:
> What he is talking about is similar to this one. That site was reported:
> Their response:
> "We try to investigate all reports of e-mail messages and Web sites that
> imitate Microsoft and to trace any companies that are soliciting our
> customers in a fraudulent manner. We have escalated a complaint to the Web
> site hosting the Web page in this e-mail. If you receive any further
> e-mails similar to this, please forward all documentation to
> "Ab...@msn.com," and be sure to include the full e-mail header so that we
> can further evaluate the offending message. "
>
> This will explain if you dare to go there:
> http://groups.msn.com/CommunityFeedback/general.msnw?action=get_message&mview=0&ID_Message=776199
>
m> And hotmail.msn.com may not be valid as you say, but that is where
I never said anything like that. I said hotmail.msn.com and hotmail.com are
synonymous.
m> What she describes looks like these:
m>
http://groups.msn.com/communityfeedback/general.msnw?action=get_message&mview=0&ID_Message=776350
m> -----------------------
m>
http://groups.msn.com/CommunityFeedback/general.msnw?action=get_message&mview=1&ID_Message=776796
Well, if it's only going to the WebDav users then it would make more sense -
in effect it forces you to do a Passport based login for verification. I
don't use WebDav and mine was of suspicious origin and intent so perhaps
someone is using this as a template in their deceitful scheme.
I had the same thing happen to me, but I managed to fix it using the
following steps:
Close Outlook Express.
Open Browser.
Login to Hotmail.
Select "Options" in the top right hand corner.
Select "Mail" from the left hand menu to get "Mail Options".
Select "Junk E-mail Protection".
Select "Junk E-Mail Filter".
When it says "Choose your Junk E-Mail Filter Level:", select Low and
select OK.
This seemed to fix my Inbox and other folders in Outlook Express the
next time I opened it.
Hope this helps.
"Paul R. Sadowski [MVP]" <sado...@mvps.org> wrote in message
news:%23qE9xo0...@TK2MSFTNGP12.phx.gbl...
*********************************************************
I understand that you are still being continuously redirected to complete an
HIP validation process, when trying to access your Hotmail account. I do
realize the difficulties you are facing due to this.
Tinna, I apologize for any inconvenience this issue may have caused you.
Our Technical Support Staff is aware of this situation and is currently
working on a fix to the issue.
**********************************************************
"stsong" <sts...@discussions.microsoft.com> wrote in message
news:6F93292C-44BE-4A90...@microsoft.com...
I've received email from hotmail support, they basically said that it's not
uncommon to have to validate multiple times. No, they never said anything
about fixing in another word, this is by design as Microsoft likes to put it.