It is probably not phish. BigFoot is a notorious
"optin" sender of unwanted ads. To use their
service(s) they tell you in ultra fine print that
you then agree on getting "relevant" promotions
from them. Even when you leave using their
"services" the UCE continues. Since they do have
"sigup" and "optin" records, legitimate
advertisers get sucked in.
I have a niece that got sucked into their "free"
websites and we had to have her discontinue it
and I created a new one for her becuase even
though she left using the services she was still
getting tons of UCE.
Here we treat them as if they were classic
spammers and block their emails. They aren't
phisherman; they're just unethical marketers.
Tom
At 10:14 AM -0800 2/15/07, Dave Cohoe wrote:
Does anyone know the history of
<http://bfi0.com>bfi0.com vis-à-vis suspected
phishing? I googled them and saw that a lot of
people are unsure. Here are partial headers (up
to my gateway - my info hopefully
changed/removed) of a recent e-mail I received
purporting to be from MetLife - all the links in
the e-mail go to <http://bfi0.com>bfi0.com
(BigFoot Interactive) instead of MetLife. They
appear to be a third party who does
marketing/remailing for other companies: Target
& Capital One for instance. However, I'd like a
second opinion.
I e-mailed MetLife several hours ago and haven't heard anything back.
Thanks,
Dave
--
Dave Cohoe, CISSP, RHCT, MCP
<http://dave.cohoe.googlepages.com> http://dave.cohoe.googlepages.com
"The future is already here. It's just not very
evenly distributed." - William Gibson
---------- Forwarded message ----------
Microsoft Mail Internet Headers Version 2.0
Received: from
<http://bigfootinteractive.com>bigfootinteractive.com
(<http://arm-ei57.bigfootinteractive.com>
arm-ei57.bigfootinteractive.com
[<http://216.33.63.57>216.33.63.57 ])
by
<http://smtp-gateway-4a.company.us>smtp-gateway-4a.company.us
(8.13.1/8.13.1) with SMTP id l1FD5tcI014985
for <
<mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED]>;
Thu, 15 Feb 2007 05:05:56 -0800
Reply-To: MetLife Dental Claims
<<mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] >
Bounces_to: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
Message-Id:
<<mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] >
X-BFI: W1TH056132218D866401F309AE5230
Date: Thu, 15 Feb 2007 08:05:55 EST
From: MetLife Dental Claims
<<mailto:[EMAIL PROTECTED]>
[EMAIL PROTECTED]>
Subject: Your recent dental claim is ready for your review
To: <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="ABCD-W1TH056132218D866401F309AE5230-EFGH"
Sender: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
X-OriginalArrivalTime: 15 Feb 2007 13:06:02.0571
(UTC) FILETIME=[0B5BF9B0:01C75102]
--ABCD-W1TH056132218D866401F309AE5230-EFGH
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
--ABCD-W1TH056132218D866401F309AE5230-EFGH
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
--ABCD-W1TH056132218D866401F309AE5230-EFGH--
_______________________________________________
phishing mailing list
[email protected]
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing
--
Tom Shaw - Chief Engineer, OITC
<[EMAIL PROTECTED]>, http://www.oitc.com/
US Phone Numbers: 321-984-3714,
321-729-6258(fax), 321-258-2475(cell/voice
mail,pager)
Text Paging: http://www.oitc.com/Pager/sendmessage.html
AIM/iChat: [EMAIL PROTECTED]
Google Talk: [EMAIL PROTECTED]
skype: trshaw
_______________________________________________
phishing mailing list
[email protected]
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing