Product purchase scam - Igomill Limited

Product Purchasing Scam .

No IP Address Indentified on a trace.

From [email protected]




Begin Scam Email:

Dear Sir/Madam



Thanks for the response to our message. Here is the exact sample of
the product we wish to purchase from your company, so please confirm
to us if you/your company can make provision of the exact product
which you can view by clicking the link below and login:

http://colouringh.site90.net/Colour.htm

TO VIEW SAMPLE LOGIN YOUR EMAIL ACCOUNT



Upon the receipt of your confirmation, I shall forward to you the
order quantity and delivery details, which will enable you to give us
a proper quotation.



Thanks.

Igor Vadim
Purchasing Manager.
Igomill Limited

End Scam Email

Full Header Details:

Delivered-To: xxxxxx
Received: by 10.180.94.170 with SMTP id dd10cs51744wib;
Tue, 27 Sep 2011 08:44:18 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.229.29.201 as permitted sender) client-ip=10.229.29.201;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.229.29.201 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.229.29.201])
by 10.229.29.201 with SMTP id r9mr7726504qcc.238.1317138258049 (num_hops = 1);
Tue, 27 Sep 2011 08:44:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=qFmm9sBCsKenrjl2zr+K+oLUV9fJUu+QiS5zWDoeHYs=;
b=atYkXKvXmEIHCPMT110Ni5PbURK76Hir5B3+zR70T19G5ke77J61BqKE3xQr7xDsDJ
KUphpq+AOWgH5FaW8o/nCEcYRoAtIQXQTFpeJVK3xSx9iUq80OF9XFXy5CWxvYABAhXC
wrPIfUg8usho/WGAosWCHYLPyIWoHwxy4z4oA=
Bcc: xxxxxx
MIME-Version: 1.0
Received: by 10.229.29.201 with SMTP id r9mr5840028qcc.238.1317138250960; Tue,
27 Sep 2011 08:44:10 -0700 (PDT)
Received: by 10.229.237.80 with HTTP; Tue, 27 Sep 2011 08:44:10 -0700 (PDT)
Date: Tue, 27 Sep 2011 23:44:10 +0800
Message-ID: <CAAsWPAv+BOKNwtCT3hs32wQ0GQBDaePmLLnt3sL0TmA+0ZygSA@mail.gmail.com>
Subject: READ
From: Igor Vadim <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=ISO-8859-1


Abuse Report Filed at Site90.net


Edited subject line to identify scam type -Jillian

The site is offline.

The email is the basic format for a fake order scam, which use stolen credit cards or fraudulent checks, but appears to actually be a phishing email:

TO VIEW SAMPLE LOGIN YOUR EMAIL ACCOUNT

Website dead per fraud report to site90