Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Msn mail

1 view
Skip to first unread message

Mummycool1

unread,
Feb 8, 2005, 9:33:02 AM2/8/05
to
I have a two part question.
Firstly I am getting this mail, which although it doesnt appear in my msn
mailbox is stuck in my mailwasher pro and will not go even after deletion.
----- Original Message -----
From: Hotmail Staff
Sent: Thursday, January 20, 2005 17:50 PM
To: ********@msn.com
Subject: Please visit hotmail.com

Dear *******
To help protect our users from automatically generated junk e-mail (or
spam), MSN Hotmail periodically asks for identity verification.
Please go to http://www.hotmail.msn.com and follow the instructions. It
takes only a few minutes and you can then return to using your Hotmail
account.
Thank you for helping us to help reduce your junk e-mail.
Sincerely,
MSN Hotmail Staff
Please do not reply to this e-mail as this is an unmonitored alias.

I would like to know whether this is a genuine mail or a scam please, if
anyone knows.

Secondly and more annoyingly I cannot import any of my mail into either my
mailwasher or my incredimail even though its sitting in my mailbox on msn.
Even though mw is trying to import the mail and is logging in sucessfully to
msn. Incredimail is also logging in ok but cant retrieve the mail.
What is going on with the msn mail system? Is something down? Will it soon
be restored? Thanks in advance. Mc


Paul R. Sadowski [MVP]

unread,
Feb 8, 2005, 9:47:10 AM2/8/05
to
Part 1 is a scam. I'm afraid I can't help with part 2 since i don't use
those programs.

Hello, Mummycool1:
On Tue, 8 Feb 2005 06:33:02 -0800: you wrote...

M> I have a two part question.
M> Firstly I am getting this mail, which although it doesnt appear in my
M> msn mailbox is stuck in my mailwasher pro and will not go even after
M> deletion.
M> ----- Original Message -----
M> From: Hotmail Staff
M> Sent: Thursday, January 20, 2005 17:50 PM
M> To: ********@msn.com
M> Subject: Please visit hotmail.com
M>
M> Dear *******
M> To help protect our users from automatically generated junk e-mail (or
M> spam), MSN Hotmail periodically asks for identity verification.
M> Please go to http://www.hotmail.msn.com and follow the instructions. It
M> takes only a few minutes and you can then return to using your Hotmail
M> account.
M> Thank you for helping us to help reduce your junk e-mail.
M> Sincerely,
M> MSN Hotmail Staff
M> Please do not reply to this e-mail as this is an unmonitored alias.
M>
M> I would like to know whether this is a genuine mail or a scam please, if
M> anyone knows.
M>
M> Secondly and more annoyingly I cannot import any of my mail into either
M> my mailwasher or my incredimail even though its sitting in my mailbox on
M> msn. Even though mw is trying to import the mail and is logging in
M> sucessfully to msn. Incredimail is also logging in ok but cant retrieve
M> the mail. What is going on with the msn mail system? Is something down?
M> Will it soon be restored? Thanks in advance. Mc
M>

Regards, Paul R. Sadowski [MVP].


PA Bear

unread,
Feb 8, 2005, 10:13:30 AM2/8/05
to
In the original email, if you hover over the link you posted, does
'http://www.hotmail.msn.com' appear in the status bar at the bottom of the
Internet Explorer window? 'http://www.hotmail.msn.com' is itself a valid
link to sign-in to Hotmail.

Anytime you suspect a given link is not valid, copy/paste it into an IE
Addressbar instead of clicking on it.

It would appear that many MSN/Hotmail users are having problems logging in
via Passport since sometime Saturday. Until things clear up, access your
mail at www.hotmail.com.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security

mae

unread,
Feb 8, 2005, 1:08:50 PM2/8/05
to
These are the directions you should see to verify after getting that
message:

To match the picture, look at the characters (numbers and letters) inside
the picture, and then type them in the box below the picture. The letters
are not case sensitive (that is, A is the same as a). Do not type spaces
between the characters.
If you can't read one or more of the letters or numbers, click the Refresh
button in your browser. A new picture will appear. If you can't see the
picture well enough to read the characters, you can click I can't see this
picture to hear an audio file. A window will appear with instructions for
using the audio file.
We ask you to match the picture to confirm that you are a person, rather
than an automated program. This is can help keep programs from fraudulent
account creation or misusing an account, and help keep people from sending
spam.

--
mae

"Mummycool1" <Mummy...@discussions.microsoft.com> wrote in message
news:561C4B3C-94BB-4C96...@microsoft.com...

mae

unread,
Feb 8, 2005, 1:15:33 PM2/8/05
to
I thought this is part of the verification process.
At least a lot of reports of such in the msn groups.
--
mae

"Paul R. Sadowski [MVP]" <sado...@mvps.org> wrote in message
news:uqw4Z0eD...@tk2msftngp13.phx.gbl...

Paul R. Sadowski [MVP]

unread,
Feb 8, 2005, 1:18:55 PM2/8/05
to
Hello, PA:
On Tue, 8 Feb 2005 10:13:30 -0500: you wrote...

PB> In the original email, if you hover over the link you posted, does
PB> 'http://www.hotmail.msn.com' appear in the status bar at the bottom of
PB> the Internet Explorer window? 'http://www.hotmail.msn.com' is itself a
PB> valid link to sign-in to Hotmail.


The real underlying link is to www.explore-msn.com

PA Bear

unread,
Feb 8, 2005, 2:12:30 PM2/8/05
to
Paul R. Sadowski [MVP] wrote:
>> In the original email, if you hover over the link you posted, does
>> 'http://www.hotmail.msn.com' appear in the status bar at the bottom of
>> the Internet Explorer window? 'http://www.hotmail.msn.com' is itself a
>> valid link to sign-in to Hotmail.
>
> The real underlying link is to www.explore-msn.com

Which is, of course, legit and resolves to http://www.msn.com/.

Have you also received this message, Paul?


--
~Robear Dyer (PA Bear)

MS MVP-Windows (Shell, IE/OE) & Security

Paul R. Sadowski [MVP]

unread,
Feb 8, 2005, 2:16:01 PM2/8/05
to
Hello, mae:
On Tue, 8 Feb 2005 12:15:33 -0600: you wrote...

m> I thought this is part of the verification process.
m> At least a lot of reports of such in the msn groups.

My copy is clearly a phishing scam using a number of techniques to avoid
junk mail filters. If I'd saved it I would post a few lines here but I
didn't. It's also self-evident from the text of the email. hotmail.msn.com
is just hotmail.com. You are logged into hotmail already to read your mail.
They are trying to lure you to another site to collect your credit card
information. They use a familiar sounding and official sounding link text
like hotmail.msn.com to try to gain your confidence. The underlying link is
to an outside uncontrolled site not run my Microsoft or MSN. This is very
simple to do in HTML and is something you need to be on guard about.

http://www.microsoft.com/athome/security/email/phishing.mspx

C:\Users\Sadowski [(firecat) 14:14, Tue 02/08/2005] host hotmail.msn.com
hotmail.msn.com has address 64.4.33.7
hotmail.msn.com has address 64.4.32.7

C:\Users\Sadowski [(firecat) 14:14, Tue 02/08/2005] host hotmail.com
hotmail.com has address 64.4.33.7
hotmail.com has address 64.4.32.7
hotmail.com mail is handled (pri=5) by mx2.hotmail.com
hotmail.com mail is handled (pri=5) by mx3.hotmail.com
hotmail.com mail is handled (pri=5) by mx4.hotmail.com
hotmail.com mail is handled (pri=5) by mx1.hotmail.com

Paul R. Sadowski [MVP]

unread,
Feb 8, 2005, 2:35:45 PM2/8/05
to
Hello, PA:
On Tue, 8 Feb 2005 14:12:30 -0500: you wrote...

PB> Paul R. Sadowski [MVP] wrote:
??>>> In the original email, if you hover over the link you posted, does
??>>> 'http://www.hotmail.msn.com' appear in the status bar at the bottom
??>>> of the Internet Explorer window? 'http://www.hotmail.msn.com' is
??>>> itself a valid link to sign-in to Hotmail.
??>>
??>> The real underlying link is to www.explore-msn.com
PB>
PB> Which is, of course, legit and resolves to http://www.msn.com/.

N, it's not legit, if it pretends to be a Microsoft site.

PB> Have you also received this message, Paul?

I no longer have a copy. You have to look deeper.

C:\Users\Sadowsi [(firecat) 14:20, Tue 02/08/2005] host www.explore-msn.com
www.explore-msn.com is a nickname for premium3.geo.yahoo.akadns.net
premium3.geo.yahoo.akadns.net has address 68.142.234.39
premium3.geo.yahoo.akadns.net has address 68.142.234.40
premium3.geo.yahoo.akadns.net has address 68.142.234.76
premium3.geo.yahoo.akadns.net has address 68.142.234.77
premium3.geo.yahoo.akadns.net has address 68.142.234.35
premium3.geo.yahoo.akadns.net has address 68.142.234.36
premium3.geo.yahoo.akadns.net has address 68.142.234.37
premium3.geo.yahoo.akadns.net has address 68.142.234.38

C:\Users\Sadowski [(firecat) 14:18, Tue 02/08/2005] wget www.explore-msn.com
--14:20:30-- http://www.explore-msn.com/
=> `index.html.8'
Resolving www.explore-msn.com... 68.142.234.77, 68.142.234.35,
68.142.234.36, ..
.
Connecting to www.explore-msn.com[68.142.234.77]:80... connected.
HTTP request sent, awaiting response...
1 HTTP/1.1 200 OK
2 Date: Tue, 08 Feb 2005 19:20:52 GMT
3 Connection: close
4 Content-Type: text/html

[ <=> ] 518 --.--K/s

14:20:41 (505.86 KB/s) - `index.html.8' saved [518]

C:\Users\Sadowski [(firecat) 14:18, Tue 02/08/2005] cat index.html.8
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>MSN.COM Refreshing...</title>
<meta http-equiv="Refresh" content="0; URL=http://www.msn.com">
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_openBrWindow(theURL,winName,features) { //v2.0
window.open(theURL,winName,features);
}
//-->
</script>
</head>

<body>
<img src="http://www.explore-msn.com/images/1.gif" width="1" height="1"
onload="
MM_openBrWindow('indexxx.php?','','width=700,height=680')">
</body>
</html>


And finally:
Domain Name.......... explore-msn.com
Creation Date........ 2005-02-03
Registration Date.... 2005-02-03
Expiry Date.......... 2006-02-03
Organisation Name.... Margaret Roden
Organisation Address. 11919 Chessington Drive
Organisation Address.
Organisation Address. Houston
Organisation Address. 77031
Organisation Address. TX
Organisation Address. UNITED STATES

Admin Name........... Margaret Roden
Admin Address........ 11919 Chessington Drive
Admin Address........
Admin Address........ Houston
Admin Address........ 77031
Admin Address........ TX
Admin Address........ UNITED STATES
Admin Email.......... margaret...@yahoo.com
Admin Phone.......... +1.2814950575
Admin Fax............

Tech Name............ YahooDomains TechContact
Tech Address......... 701 First Ave.
Tech Address.........
Tech Address......... Sunnyvale
Tech Address......... 94089
Tech Address......... CA
Tech Address......... UNITED STATES
Tech Email........... domai...@YAHOO-INC.COM
Tech Phone........... +1.6198813096
Tech Fax............. +1.6198813010
Name Server.......... yns1.yahoo.com
Name Server.......... yns2.yahoo.com

Always be suspicious. :)
The popup asks for your username and password and submits to
www.explore-msn.com/billinfo.php which asks for CC SS etc etc. I don't think
Microsoft has started using PHP and Yahoo for DNS and hosting :)

PA Bear

unread,
Feb 8, 2005, 3:09:42 PM2/8/05
to
Paul R. Sadowski [MVP] wrote:
>>>> In the original email, if you hover over the link you posted, does
>>>> 'http://www.hotmail.msn.com' appear in the status bar at the bottom
>>>> of the Internet Explorer window? 'http://www.hotmail.msn.com' is
>>>> itself a valid link to sign-in to Hotmail.
>>>
>>> The real underlying link is to www.explore-msn.com
>>
>> Which is, of course, legit and resolves to http://www.msn.com/.
>
> N, it's not legit, if it pretends to be a Microsoft site.

Yes, *if* it pretends to be a MS site. www.msn.com is legit.


>
>> Have you also received this message, Paul?
>
> I no longer have a copy. You have to look deeper.

<snip>
Agreed, which is why I asked 'mommycool1' (?) my question.

stsong

unread,
Feb 8, 2005, 11:05:02 PM2/8/05
to
I am perfectly fine with verifying my identity, but how many times do I have
to do that? I already have to verify twice since Saturday. A friend of mine
had already done with for several times. Now who is sending out spam?

mae

unread,
Feb 9, 2005, 11:23:37 AM2/9/05
to
I wouldn't know. I would think one time periodically would be enough. Who
knows? Sounds more like a server problem. Do you have a lot of accounts or
send close to the maximum? Hotspot or some other 3rd party application
interfering?
--
mae

"stsong" <sts...@discussions.microsoft.com> wrote in message
news:38E076F0-6B04-42FB...@microsoft.com...


| I am perfectly fine with verifying my identity, but how many times do I
have
| to do that? I already have to verify twice since Saturday. A friend of
mine
| had already done with for several times. Now who is sending out spam?
|
| "mae" wrote:
|
| > These are the directions you should see to verify after getting that
| > message:

| > ----snip


| | > We ask you to match the picture to confirm that you are a person,
rather
| > than an automated program. This is can help keep programs from
fraudulent
| > account creation or misusing an account, and help keep people from
sending
| > spam.
| >
| > --
| > mae
| >
| > "Mummycool1" <Mummy...@discussions.microsoft.com> wrote in message
| > news:561C4B3C-94BB-4C96...@microsoft.com...
| > | I have a two part question.
| > | Firstly I am getting this mail, which although it doesnt appear in my
msn
| > | mailbox is stuck in my mailwasher pro and will not go even after
deletion.
| > | ----- Original Message -----
| > | From: Hotmail Staff
| > | Sent: Thursday, January 20, 2005 17:50 PM
| > | To: ********@msn.com
| > | Subject: Please visit hotmail.com

| > --snip----

mae

unread,
Feb 9, 2005, 12:27:11 PM2/9/05
to
Most of what she describes is like the validation.
The way to determine is close out everything, go to the website and try to
sign-in.
It did not say to "click" here.

I am familiar with the phishing methods. Sounds like you got one of the
usual.

And hotmail.msn.com may not be valid as you say, but that is where Passport
redirects me and what shows in the address bar at Hotmail and is registered
to Microsoft Corporation. If I put that in my address bar- goes there. What
do you show in address bar.?
--
mae

"Paul R. Sadowski [MVP]" <sado...@mvps.org> wrote in message

news:%23eFbpKh...@TK2MSFTNGP14.phx.gbl...

stsong

unread,
Feb 9, 2005, 12:31:04 PM2/9/05
to
I only have one account, it's not anywhere near 250mb storage. I did notice
that I have been getting more junkmail lately. I am using Outlook 2003 to
read email when I am home in the evening, but read email via the web during
the day.

mae

unread,
Feb 9, 2005, 12:42:37 PM2/9/05
to
What he is talking about is similar to this one. That site was reported:
Their response:
"We try to investigate all reports of e-mail messages and Web sites that
imitate Microsoft and to trace any companies that are soliciting our
customers in a fraudulent manner. We have escalated a complaint to the Web
site hosting the Web page in this e-mail. If you receive any further e-mails
similar to this, please forward all documentation to "Ab...@msn.com," and be
sure to include the full e-mail header so that we can further evaluate the
offending message. "

This will explain if you dare to go there:
http://groups.msn.com/CommunityFeedback/general.msnw?action=get_message&mview=0&ID_Message=776199
--
mae

"PA Bear" <PABe...@gmail.com> wrote in message
news:O%23s7vIhD...@TK2MSFTNGP15.phx.gbl...

mae

unread,
Feb 9, 2005, 12:49:20 PM2/9/05
to
What she describes looks like these:
http://groups.msn.com/communityfeedback/general.msnw?action=get_message&mview=0&ID_Message=776350
-----------------------
http://groups.msn.com/CommunityFeedback/general.msnw?action=get_message&mview=1&ID_Message=776796

The other side of the tracks.
--
mae


"PA Bear" <PABe...@gmail.com> wrote in message

news:%235Sltoh...@TK2MSFTNGP10.phx.gbl...

PA Bear

unread,
Feb 9, 2005, 9:23:14 PM2/9/05
to
Thanks, Mae.

mae wrote:
> What he is talking about is similar to this one. That site was reported:
> Their response:
> "We try to investigate all reports of e-mail messages and Web sites that
> imitate Microsoft and to trace any companies that are soliciting our
> customers in a fraudulent manner. We have escalated a complaint to the Web
> site hosting the Web page in this e-mail. If you receive any further
> e-mails similar to this, please forward all documentation to
> "Ab...@msn.com," and be sure to include the full e-mail header so that we
> can further evaluate the offending message. "
>
> This will explain if you dare to go there:
> http://groups.msn.com/CommunityFeedback/general.msnw?action=get_message&mview=0&ID_Message=776199
>

Paul R. Sadowski [MVP]

unread,
Feb 10, 2005, 3:25:59 AM2/10/05
to
Hello, mae:
On Wed, 9 Feb 2005 11:27:11 -0600: you wrote...

m> And hotmail.msn.com may not be valid as you say, but that is where

I never said anything like that. I said hotmail.msn.com and hotmail.com are
synonymous.

Paul R. Sadowski [MVP]

unread,
Feb 10, 2005, 3:14:09 PM2/10/05
to
Hello, mae:
On Wed, 9 Feb 2005 11:49:20 -0600: you wrote...

m> What she describes looks like these:
m>
http://groups.msn.com/communityfeedback/general.msnw?action=get_message&mview=0&ID_Message=776350
m> -----------------------
m>
http://groups.msn.com/CommunityFeedback/general.msnw?action=get_message&mview=1&ID_Message=776796

Well, if it's only going to the WebDav users then it would make more sense -
in effect it forces you to do a Passport based login for verification. I
don't use WebDav and mine was of suspicious origin and intent so perhaps
someone is using this as a template in their deceitful scheme.

robroy1971

unread,
Feb 11, 2005, 10:20:20 AM2/11/05
to
Mummycool1 wrote:
> I have a two part question.
> Firstly I am getting this mail, which although it doesnt appear in my
msn
> mailbox is stuck in my mailwasher pro and will not go even after
deletion.

I had the same thing happen to me, but I managed to fix it using the
following steps:
Close Outlook Express.
Open Browser.
Login to Hotmail.
Select "Options" in the top right hand corner.
Select "Mail" from the left hand menu to get "Mail Options".
Select "Junk E-mail Protection".
Select "Junk E-Mail Filter".
When it says "Choose your Junk E-Mail Filter Level:", select Low and
select OK.
This seemed to fix my Inbox and other folders in Outlook Express the
next time I opened it.
Hope this helps.

mae

unread,
Feb 12, 2005, 10:36:05 AM2/12/05
to
Sorry, my bad interpretation.
--
mae

"Paul R. Sadowski [MVP]" <sado...@mvps.org> wrote in message

news:%23qE9xo0...@TK2MSFTNGP12.phx.gbl...

stsong

unread,
Feb 14, 2005, 11:25:07 AM2/14/05
to
I wrote Hotmail tech support Friday and here's what I got today. It is indeed
a bug and they are working on it.

*********************************************************
I understand that you are still being continuously redirected to complete an
HIP validation process, when trying to access your Hotmail account. I do
realize the difficulties you are facing due to this.

Tinna, I apologize for any inconvenience this issue may have caused you.

Our Technical Support Staff is aware of this situation and is currently
working on a fix to the issue.
**********************************************************

mae

unread,
Feb 15, 2005, 8:38:49 AM2/15/05
to
Thanks for posting back with that. I wonder if they will get it fixed for
you before they stop free access from Outlook. Do you have to go through
that if you just use the web? You could try going to Passport and clear all
the info and retype it in. Select a password of no more than 12 characters.
Make sure your region is correct and then click update. After awhile see if
you still get the picture when you signin. That helps sometimes when there
are problems.
--
mae

"stsong" <sts...@discussions.microsoft.com> wrote in message

news:6F93292C-44BE-4A90...@microsoft.com...

stsong

unread,
Feb 15, 2005, 9:27:01 AM2/15/05
to
It seems like it only hapened when I am using Outlook. Hotmail is probably
working on taking POP access away from us. When the generic message comes in,
it stop all activities on the mailbox until you verify your identity.
I guess one can always use gmail since it has way more storage and it allows
POP access.

Geshe

unread,
Apr 1, 2005, 9:13:02 AM4/1/05
to
I have the same problem...hotmail has got me in this loop or something......i
complete the hip validation process and it takes me back to the sign in page
....i sign in again and it takes me back to the hip validation process....and
so on and so on.............will hotmail sort this mess out or will we have
to wait for ever?

stsong

unread,
Apr 1, 2005, 11:41:06 AM4/1/05
to
Geshe,

I've received email from hotmail support, they basically said that it's not
uncommon to have to validate multiple times. No, they never said anything
about fixing in another word, this is by design as Microsoft likes to put it.

0 new messages