Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by fried chicken Wed Dec 15, 2010 6:22 pm
I have received an email today advertising the following website

http://www.cycbao.com
I think it looks very suspicious.
here is the email.

How are you doing?**************************
21:05
Reply ?Delete
Not junk
Mark as unread
Mark as read
Print message
View message source
Show message history
Hide message history
Show details
Hide details Frank [email protected]

Send email
Find email Add to contacts
From: Frank ([email protected])
Sent: 15 December 2010 21:05:52
To: ******************************************

How are you!
I am sorry for I give this message to you and hinder you. If you have the necessary and welcome you contact us!

We are a electronic wholesaler, Can offer you Laptops, Digital Cameras, Motorcycles, GPS, Cellphone, Mp3, Mp4, Game Consoles and many other electronic products.

Now we are try our efforts to explore our abroad market.

We have our own website and warehouse. Sticking to the principle of "Quality First and Reputation First", we ensure you of 100% qualified products. Hope we have long and good business together!


For our full range of products and the technical specifications, please visit :www.cycbao.com

Can respond to this message
Last edited by fried chicken on Wed Dec 15, 2010 6:29 pm, edited 1 time in total.
Advertisement

by fried chicken Wed Dec 15, 2010 6:27 pm
Just discovered how to show message source so here it is!


X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9Ng==
X-Message-Status: s1
X-SID-PRA: Frank <[email protected]>
X-AUTH-Result: NONE
X-Message-Info: 6sSXyD95QpUrVDJqGGgdZSI1iAaAnY2SbqebhxXUuXNt/e0ag/y0i+Wa/iE23dmvniejoQyqESzD2CNYV0N0AVGEmSIOPJ5//Oq21V5yaQk=
Received: from mail.CYBAO.INFO ([98.131.1.116]) by col0-mc1-f32.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 15 Dec 2010 13:05:52 -0800
X-AuthUser: [email protected]
Received: from ??????? ([115.49.61.62]:1966)
by CYBAO.INFO with [XMail 1.27 ESMTP Server]
id <S10AB6> for <**********************> from <[email protected]>;
Wed, 15 Dec 2010 16:05:50 -0500
Date: Wed, 15 Dec 2010 18:06:51 +0800
To: "ajprops" <**********************************>
From: "Frank" <[email protected]>
Subject: How are you doing?*********************************
Message-Id: <[email protected]>
X-mailer: Foxmail 6, 14, 103, 24 [cn]
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=====oIp_SayDYAr38_nLue8PG2DcSVZOMJq9ni_====="
Reply-To: [email protected]
In-Reply-To: <[email protected]>
Return-Path: [email protected]
X-OriginalArrivalTime: 15 Dec 2010 21:05:52.0227 (UTC) FILETIME=[DB3D1B30:01CB9C9B]


This is a multi-part message in MIME format

--=====oIp_SayDYAr38_nLue8PG2DcSVZOMJq9ni_=====
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: base64
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--=====oIp_SayDYAr38_nLue8PG2DcSVZOMJq9ni_=====
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64
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--=====oIp_SayDYAr38_nLue8PG2DcSVZOMJq9ni_=====--
by Norman Barlleo Wed Dec 15, 2010 9:41 pm
It's your typical electronics scam site.

Ip: 115.49.61.62
Country:China cn flag
State/Region:Henan
City: Nanyang


The site Whois

Domain Name: CYCBAO.COM
Registrar: HICHINA ZHICHENG TECHNOLOGY LTD.
Whois Server: grs-whois.hichina.com
Referral URL: http://www.net.cn
Name Server: DNS23.HICHINA.COM
Name Server: DNS24.HICHINA.COM
Status: ok
Updated Date: 13-sep-2010
Creation Date: 13-sep-2010
Expiration Date: 13-sep-2011


Registered a few months ago for one year!
Avoid !

DON'T tell the scammer that you found him in this site. Just cease all communications with him and move on.

Who is online

Users browsing this forum: ClaudeBot and 18 guests