Internetworkers: http://www.ibiblio.org/internetworkers/

["Alan MacHett" <machett AT ibiblio.org>]

A friend forwarded a message to me for analysis.  It's the first
(potential) spam he's received at his new account and wonders if it really
is spam or just a "wrong number" sort of message.  He doesn't know anyone
by the names listed in the message, and if it is spam he said he's
surprised by it's subtlety.

Reasons I'm certain it's spam:
(1) It's a sales pitch, however subtle.
(2) The return address (name) and signed name don't match:
Blythe Wall vs. Candace
(3) The return address and return path don't match:
northstate.net vs. ponyexpress.neonova.net

And just out of curiosity, who the heck is NeoNova.net?
WHOIS:
NeoNova Network Services (NEONOVA2-DOM)
1000 Perimeter Park. Suite K
Morrisville, NC 27560

-Alan


> -------- Original Message --------
> From:         - Thu Oct 16 16:45:53 2003
> X-UIDL:       1aaeXT7dO3Nl3qW0
> X-Mozilla-Status:     0001
> X-Mozilla-Status2:    00000000
> Status:       U
> Return-Path:  <blythew AT northstate.net>
> Received:     from ponyexpress.neonova.net ([137.118.131.3]) by
> watson.mail.atl.earthlink.net (Earthlink Mail Service) with ESMTP id
> 1aaeXT7dO3Nl3qW0 for <[snip]>; Thu, 16 Oct 2003
> 16:43:20 -0400 (EDT)
> Received:     from [216.237.198.180] (HELO Blythe) by
> ponyexpress.neonova.net (CommuniGate Pro SMTP 4.1.3) with SMTP id
> 198199000 for [snip]; Thu, 16 Oct 2003 16:43:19 -0400
> Message-ID:   <000a01c39426$22825220$0600000a@Blythe>
> From:         Blythe Wall <blythew AT northstate.net>
> To:   <[snip]>
> Subject:      Fruit
> Date:         Thu, 16 Oct 2003 15:43:20 -0500
> MIME-Version:         1.0
> Content-Type:         multipart/alternative;
> boundary="----=_NextPart_000_0007_01C393FC.396BE5C0"
> X-Priority:   3
> X-MSMail-Priority:    Normal
> X-Mailer:     Microsoft Outlook Express 6.00.2720.3000
> X-MimeOLE:    Produced By Microsoft MimeOLE V6.00.2727.1300
>
>
>
> Hi there.  I hope everyone is doing well.  Mom said that you and Macon
> went on a trip recently, but I don't remember where she said that you
> went.  I hope you had a great time away.
>
> I was wondering if you were interested in buying any fruit this year?
> It's the same price and box size as last year.  Oranges and/or
> grapefruit $15.00 per box.  Just let me know if you're interested.  Talk
> to you soon.
>
> Love,
> Candace