<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:Helvetica;
        panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:"Segoe UI";
        panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p
        {mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman",serif;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
        {mso-style-priority:99;
        mso-style-link:"Balloon Text Char";
        margin:0in;
        margin-bottom:.0001pt;
        font-size:8.0pt;
        font-family:"Tahoma",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
        {mso-style-name:msonormal;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman",serif;}
span.BalloonTextChar
        {mso-style-name:"Balloon Text Char";
        mso-style-priority:99;
        mso-style-link:"Balloon Text";
        font-family:"Tahoma",sans-serif;}
span.m-6772254178919981874highlight
        {mso-style-name:m_-6772254178919981874highlight;}
span.m-6772254178919981874colour
        {mso-style-name:m_-6772254178919981874colour;}
span.m-6772254178919981874font
        {mso-style-name:m_-6772254178919981874font;}
span.m-6772254178919981874size
        {mso-style-name:m_-6772254178919981874size;}
span.js-phone-number
        {mso-style-name:js-phone-number;}
span.EmailStyle25
        {mso-style-type:personal;
        font-family:"Calibri",sans-serif;
        color:#1F497D;}
span.EmailStyle27
        {mso-style-type:personal-reply;
        font-family:"Calibri",sans-serif;
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>A simple name server lookup shows that a dns <i>uncc.services</i>? does not exist but <i>uncc.services</i> does exist which to me suggest either the spammer got address wrong by which if you tried to respond to the mail it would have bounced back (not sure).<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>C:\>nslookup uncc.services<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Server:  UnKnown<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Non-authoritative answer:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Name:    uncc.services<o:p></o:p></span></p><div><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Address:  162.255.119.229</span><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#767171'>|</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#767171'>Skype: bram.fudzulani <o:p></o:p></span></p><p class=MsoNormal><a href="https://www.facebook.com/angledimensionmw/"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#385623;text-decoration:none'><img border=0 width=31 height=28 style='width:.3229in;height:.2916in' id="Picture_x0020_2" src="cid:image002.png@01D362A8.9C3C1F50" alt=dc36f8aa-3677-4a31-aea2-04f8525a8131></span></a><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#385623'>  </span><a href="https://twitter.com/AngleDimension"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#0563C1;text-decoration:none'><img border=0 width=27 height=28 style='width:.2812in;height:.2916in' id="Picture_x0020_3" src="cid:image003.png@01D362A8.9C3C1F50" alt=0da17e2a-9ed5-496a-b161-9fd4491ce5c7></span></a><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#385623'>  </span><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#767171'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#385623'><o:p> </o:p></span></p></div><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> Ncuc-discuss [mailto:ncuc-discuss-bounces@lists.ncuc.org] <b>On Behalf Of </b>AbdulRasheed Tamton<br><b>Sent:</b> Tuesday, November 21, 2017 8:04 AM<br><b>To:</b> NCUC-discuss <ncuc-discuss@lists.ncuc.org><br><b>Cc:</b> NCSG-DISCUSS@LISTSERV.SYR.EDU<br><b>Subject:</b> [NCUC-DISCUSS] FW: COMPENSATION FUND<br><b>Importance:</b> High<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Dear All,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>I received the attached spam email today. When I checked, where it will go if replied, it (the below screenshot) shows the reply to email domain as uncc.services</span><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:red'>?</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>My question is: are domains allowed with a question mark; <u>especially at the end of the domain name</u>. If yes, it will definitely make real issues with novice users and the spammers can easily fool novice users by exploiting it.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><img border=0 width=622 height=562 style='width:6.4791in;height:5.8541in' id="Picture_x0020_1" src="cid:image004.png@01D362A8.9C3C1F50"><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>BR,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Rasheed Tamton.<o:p></o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif'> UNCC Group [<a href="mailto:donotreply@blackberry.com">mailto:donotreply@blackberry.com</a>] <br><b>Sent:</b> Monday, November 20, 2017 12:00 AM<br><b>To:</b> AbdulRasheed Tamton<br><b>Subject:</b> [possibly spoofed sender] COMPENSATION FUND<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>For email user: <a href="mailto:rasheedt.c@stc.com.sa">rasheedt.c@stc.com.sa</a><o:p></o:p></p></div><div><p class=MsoNormal><br> <o:p></o:p></p></div><div><p class=MsoNormal>We wish to notify you as a Beneficiary in a Compensation Fund that We the authorized governing body of the World Bank Group Monitory unit has been authorized to investigate the unnecessary delay on your payment recommended and approved in your favor. <br><br>If you have been scammed before, this is a Compensation refund payment to refund you for your Loss/payouts. You are advised to get back to us Immediately on this regards.<br><br>With best Compliments,<br>World Bank Group Auditor.<br><span class=m-6772254178919981874size><span style='font-size:9.5pt;font-family:"Helvetica",sans-serif;color:#666666;background:white'><a href="mailto:compensation@uncc.services" target="_blank"><span style='color:#222222'>compensation@uncc.services</span></a> </span></span><br><span class=js-phone-number>+1 (612) 213-5775</span><o:p></o:p></p></div><p><span style='font-size:10.0pt;font-family:"Arial",sans-serif;color:gray'>The information in this email may contain confidential material and it is intended solely for the addresses. Access to this email by anyone else is unauthorized. If you are not the intended recipient, please delete the email and destroy any copies of it, any disclosure, copying, distribution is prohibited and may be considered unlawful. Contents of this email and any attachments may be altered, Statement and opinions expressed in this email are those of the sender, and do not necessarily reflect those of Saudi Telecommunications Company (STC). </span><o:p></o:p></p></div></body></html>