Yes, its still an odd one though. Some E-Mail systems will reject e-mails that do not have a recipient configured so my guess would have been that the hotmail address was bogus in order to get around that problem. That said however, from the headers it looks like a "sort of" legit e-mail because its coming from a marketing type company so i would have thought these tactics wouldn't be used.
Think its definatly the BCC though thats causing this.
Cheers
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit
www.sec-1.com
or PM me for details.
