It is probably not phish. BigFoot is a notorious "optin" sender of unwanted ads. To use their service(s) they tell you in ultra fine print that you then agree on getting "relevant" promotions from them. Even when you leave using their "services" the UCE continues. Since they do have "sigup" and "optin" records, legitimate advertisers get sucked in.

I have a niece that got sucked into their "free" websites and we had to have her discontinue it and I created a new one for her becuase even though she left using the services she was still getting tons of UCE.

Here we treat them as if they were classic spammers and block their emails. They aren't phisherman; they're just unethical marketers.

Tom

At 10:14 AM -0800 2/15/07, Dave Cohoe wrote:
Does anyone know the history of <http://bfi0.com>bfi0.com vis-à-vis suspected phishing? I googled them and saw that a lot of people are unsure. Here are partial headers (up to my gateway - my info hopefully changed/removed) of a recent e-mail I received purporting to be from MetLife - all the links in the e-mail go to <http://bfi0.com>bfi0.com (BigFoot Interactive) instead of MetLife. They appear to be a third party who does marketing/remailing for other companies: Target & Capital One for instance. However, I'd like a second opinion.

I e-mailed MetLife several hours ago and haven't heard anything back.

Thanks,
Dave
--
Dave Cohoe, CISSP, RHCT, MCP
<http://dave.cohoe.googlepages.com> http://dave.cohoe.googlepages.com
"The future is already here. It's just not very evenly distributed." - William Gibson

---------- Forwarded message ----------

Microsoft Mail Internet Headers Version 2.0
Received: from <http://bigfootinteractive.com>bigfootinteractive.com (<http://arm-ei57.bigfootinteractive.com> arm-ei57.bigfootinteractive.com [<http://216.33.63.57>216.33.63.57 ]) by <http://smtp-gateway-4a.company.us>smtp-gateway-4a.company.us (8.13.1/8.13.1) with SMTP id l1FD5tcI014985 for < <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED]>; Thu, 15 Feb 2007 05:05:56 -0800
Reply-To: MetLife Dental Claims
<<mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] >
Bounces_to: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
Message-Id: <<mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] >
X-BFI: W1TH056132218D866401F309AE5230
Date: Thu, 15 Feb 2007 08:05:55 EST
From: MetLife Dental Claims <<mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]>
Subject: Your recent dental claim is ready for your review
To: <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/alternative;
  boundary="ABCD-W1TH056132218D866401F309AE5230-EFGH"
Sender: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]
X-OriginalArrivalTime: 15 Feb 2007 13:06:02.0571 (UTC) FILETIME=[0B5BF9B0:01C75102]

--ABCD-W1TH056132218D866401F309AE5230-EFGH
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

--ABCD-W1TH056132218D866401F309AE5230-EFGH
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable


--ABCD-W1TH056132218D866401F309AE5230-EFGH--


_______________________________________________
phishing mailing list
[email protected]
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing


--

Tom Shaw - Chief Engineer, OITC
<[EMAIL PROTECTED]>, http://www.oitc.com/
US Phone Numbers: 321-984-3714, 321-729-6258(fax), 321-258-2475(cell/voice mail,pager)
Text Paging: http://www.oitc.com/Pager/sendmessage.html
AIM/iChat: [EMAIL PROTECTED]
Google Talk: [EMAIL PROTECTED]
skype: trshaw
_______________________________________________
phishing mailing list
[email protected]
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing

Reply via email to