Slightly confused on the safe phishing list

[Billy A. Pumphrey]

If the email states:
MailScanner has detected a possible fraud attempt from
"r.email.microsoft.com" claiming to be
http://www.microsoft.com/seminar/events/security/default.mspx

Does that mean that r.email.microsoft.com should be added or
http://www.microsoft.com/seminar/events/security/default.mspx?

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!