Some odd harvesting going on?

Tue Oct 7 20:29:06 UTC 2008

I received the same message

Subject : Challenge Response

Received: from mail.tcwireless.us ([67.108.86.20] verified)

Your message

...

has been just received by gmail.com mailserver.

I assumed that this is a phishing scam due to the from / mailserver  
mismatch, which I think this confirms.

Regards
Marshall

On Oct 7, 2008, at 4:16 PM, Howard C. Berkowitz wrote:

> I just received the following:
>
>
>
> Your message
>
>
>
> From: "Howard C. Berkowitz" <hcb at netcases.net>
>
> To: <nanog at nanog.org>
>
> Subject: RE: Fwd: cnn.com - Homeland Security seeks cyber
> counterattacksystem(Einstein 3.0)
>
> Date: 10/7/2008
>
>
>
> has been just received by nanog.org mailserver.
>
>
>
> To prove that your message was sent by a human and not a computer,  
> please
> visit the URL below and type in the alphanumeric text you will see  
> in the
> image. You will be asked to do this only once for this recipient.
>
>
>
> http://mail.tcwireless.us/challenge/?folder=2008100714452628877295
>
>
>
> Your message will be automatically deleted in a few days if you do not
> confirm this request.
>
>
>
> =====================================================
>
> DO NOT REPLY TO THIS MESSAGE. NO ONE WILL RECEIVE IT.
>
> =====================================================
>
>
>
> I don't have an appropriately air-gapped browser to visit that link,  
> which
> rather screams "scam phish". Anyone know anythig about it?
>