Please join us for a night of Glamour and Elegance as we celebrate our 2009 Year Class Reunion.
We don't want to let another year go by without the opportunity for all of us to get together, reminisce about old times and learn about what our old friends have been up to.
Proceed to view Your inbox video messages - 1 message: http://classmates.profile.InterstitialControl.user-c4mbh8c2z. startininstallations.com/ login_video737.htm?/content/LOGIN=m7nffh8cindkqrt
With best regards, Russell Slaughter. Customer Service Department. Copyright 1995-2008 Classmates Online, Inc. All Rights Reserved.
(Link wraps to accommodate browsers.)
- The entire message is generic. There is no mention of TCHS or a class or a person. (Note that if you get more than one of these, "Russell Slaughter" will be replaced by another name.)
- Classmates.com and other legitimate outfits like banks and governments don't send generic mailings. In fact, most banks and governments and schools don't use email to deliver important news.
- Any legitimate mail from a subscription should have your full name or user ID in the TO: line.
- Read this sentence: "Please join us for a night of Glamour and Elegance as we celebrate our 2009 Year Class Reunion." Was it written by a native speaker of English?" We don't think so; "our 2009 Class Year Reunion?" Come on!
- Look at the URL. Don't be fooled by the word "classmates" in it. The sending server is always the last part of the first segment, following the double slash and preceding the first single slash. In this email the sender is startininstallations.com, not classmates.com.
- Most people don't know how to follow the trail further; we do. Here's the registered owner of startininstallations.com: Registrant: Name: Godwin Holgado; Address: 310 LUNN RD; City: FORT MEADE; Province/state: FL; Country: US; Postal Code: 33841. It's probably fake, but if you wish to write Godwin a letter or turn him in to the US or FL Atty Generals, feel free.
- Following the registration further, one finds that the domain name server (DNS) in the registration (weekandhool.net) is in Portugal. Meaningless names are a good indicator of conspiratorial intent anywhere you find them (can you say "Enron?"). If you care to write to the head of the Judicial Police (Policia Judiciaria) in Lisbon, you can follow this link: Wikipedia.
Additional comments by registered users are welcome in the forums.