by Ralph
Fri Jul 31, 2009 1:19 am
Here we have another scam email that shows many of the common signs of a scam;
The religious references
The poor spelling and grammar
The reasurance and in particular the mention of being "risk free"
The all too common list of questions the scammers always seem to want answered
and the free email address
If that isn't enough to convince you that it is a scam, here is a search result on the email address Click Here
Here is the header with some details removed to protect the identity of the receiver and to prevent page blowout
The religious references
The poor spelling and grammar
The reasurance and in particular the mention of being "risk free"
The all too common list of questions the scammers always seem to want answered
and the free email address
If that isn't enough to convince you that it is a scam, here is a search result on the email address Click Here
Date:
From: [email protected]
Subject: RE:
To: Removed
Hello Removed
how are you today and the entire member of the family hope all is well if so glory be to GOD.am very glad for your respond. please this is a legit business transaction so i want you to treat this transaction in a mature way b'cos this is not a child business.
secondly this transaction is 100% risk free if you follow the due process
you will be further acquainted with the detailed transfer itinerary including information of the bank.below is the form fill it and get back to
APPLICATION FOR FUND RELEASE
NAME.........................................................................................
SURNAME.....................................................................................
DATE OFBIRTH.................................................................................
ADDRESS..........................................................................
NAMEOFBANK..........................................................................
OCCUPATION.....................................................................................
COUNTRYCODE.........................................................................................
TELEPHONE...................................................................................
FAX.............................................................................................................
EMAIL .................................................
JAMES WALTER
[email protected]
Here is the header with some details removed to protect the identity of the receiver and to prevent page blowout
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtTQ0w9Mw==
X-Message-Status: n:0
X-SID-PRA: Walter James <[email protected]>
X-Message-Info: JGTYoYF78jGCBr+IX4UhZgbwhxiRcd2gGjQ+RE+e0huEdV16BpDuPaye0BO/XdAKdaudg72d/ZmEdio/2kZsZVZoBioDzt8X
Received: from col0-mc4-f40.Col0.hotmail.com ([10.12.236.178]) by bay0-imc2-s21.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Fri, 29 May 2009 02:05:51 -0700
Received: from n8.bullet.re3.yahoo.com ([68.142.237.93]) by col0-mc4-f40.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 29 May 2009 02:05:49 -0700
Received: from [68.142.237.89] by n8.bullet.re3.yahoo.com with NNFMP; 29 May 2009 09:05:48 -0000
Received: from [67.195.9.83] by t5.bullet.re3.yahoo.com with NNFMP; 29 May 2009 09:05:48 -0000
Received: from [67.195.9.104] by t3.bullet.mail.gq1.yahoo.com with NNFMP; 29 May 2009 09:05:48 -0000
Received: from [127.0.0.1] by omp108.mail.gq1.yahoo.com with NNFMP; 29 May 2009 09:05:48 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 57742 invoked by uid 60001); 29 May 2009 09:05:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1243587948; bh=M1aqGGbrYT5ct+E5qBbiNjL/AifshZ9yG7JxvErPtTA=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; Domain key removed
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.hk;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
domain key removed
Message-ID: <[email protected]>
X-YMail-OSG: domain key removed
Received: from [41.219.244.201] by web111014.mail.gq1.yahoo.com via HTTP; Fri, 29 May 2009 02:05:47 PDT
X-Mailer: YahooMailClassic/5.3.9 YahooMailWebService/0.7.289.10
Date: Fri, 29 May 2009 02:05:47 -0700 (PDT)
From: Walter James <[email protected]>
Subject: RE: Hello name removed
To: email address removed>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-103265242-1243587947=:56752"
Return-Path: [email protected]
X-OriginalArrivalTime: 29 May 2009 09:05:49.0425 (UTC) FILETIME=[A8F7EE10:01C9E03C]
--0-103265242-1243587947=:56752
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable