SPAM/Fraud e-mail received

CarolX

Trusted Information Resource
FYI all,
I just received this e-mail with someone attempting a fraud scheme. For those who don't know how this works, when you reply to the e-mail, you get a request for your bank account info to make the deposit of this money, from there your personal info is stolen from you.

e-mail headers
X-Message-Info: JGTYoYF78jEHjJx36Oi8+Q1OJDRSDidP
Received: from xxxx.com ([199.239.233.70]) by mc7-f38.law1.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600);
Fri, 25 Jul 2003 07:58:05 -0700
Received: from xxxx.com (xxxx.com [199.239.233.70])
by elsmar.com (8.12.6p2/8.12.6) with ESMTP id h6PEw43P030034
for; Fri, 25 Jul 2003 14:58:04 GMT
(envelope-from [email protected])
Received: (from www@localhost)
by xxx.com (8.12.6p2/8.12.6/Submit) id h6PEw4WT030023;
Fri, 25 Jul 2003 14:58:04 GMT
Date: Fri, 25 Jul 2003 14:58:04 GMT
Message-Id: <[email protected]>
To:
Subject: ORPHANAGE CALL
From: "tomtomyaro @ The Elsmar Cove Forums" <[email protected]>
Return-Path: [email protected][
X-OriginalArrivalTime: 25 Jul 2003 14:58:05.0975 (UTC) FILETIME=[27654270:01C352BD]

Actual Message

This is a message from tomtomyaro. The The Elsmar Cove Forums owner does not accept any responsibility for the contents of this e-mail, however the sender does not have access to your actual e-mail address through the forums or in sending you this message - your actual e-mail address is hidden.

To stop any further messages, Disable (turn off) your e-mail option in your User Control Panel (UserCP) Options.

http://Elsmar.com/Forums/profile.php?do=editoptions

To e-mail tomtomyaro, you can use the online form:
http://Elsmar.com/Forums/sendmessage.php

This is the message to you from tomtomyaro:

Attn:
TEL.225-07-98-64-21
Sir,

Good a thing to write you. I have a proposal for
you-this however is not mandatory nor will I in
any manner compel you to honour against your will.

Your profile pushed me to send you this mail,I am Silvia J.Martins ,21years old and the only daughter of my late parents Mr.and Mrs.Martins. My father was a highly reputable busnness magnet-(a cocoa merchant)who operated in the capital of Ivory coast during his days.

It is sad to say that he passed away mysteriously in France during one of his business trips abroad year 12th.Febuary 2000.Though his sudden death was linked or rather suspected to have been masterminded by an uncle of his who travelled
with him at that time.But God knows the truth!

My mother died when I was just 4 years old and my brother (GEORGE)2yrs ,and since then my father took us so special. Before his death on Febuary 12, 2000 he called the secretary who accompanied him to the hospital and told him that he has the sum of twen

ty two million,seven hundred thousand United State Dollars.(USD$22.700,000) left in one of the leading security company here in Abidjan Ivory Coast West Africa.

He further told him that he deposited the money in my name AND my brother ,and finally issued a written instruction to his lawyer whom he said is in possession of all the necessary but legal documents to this fund and the security company .

I am just 21 years old and a university undergraduate and really don't know what to do.Now I want an account overseas where I can transfer this funds. This is because I have suffered a lot of set backs as a result of incessant political crisis here in ivory coast.

The death of my father actually brought sorrow to my life.

Sir,I am in a sincere desire of your humble assistance in this regards.Your suggestions and ideas will be highly regarded.

Now permit me to ask these few questions:-
2. Can I completely trust you?
3. What percentage of the total amount in question will
be good for you after the money is in your account?

Please,Consider this and get back to me as soon as possible. Through my private email box bellow for security reasons: [email protected]

Thank you so much.My sincere regards,

Silvia .JOICE MARTINS
 
Last edited:

howste

Thaumaturge
Trusted Information Resource
I've received similar emails many times. I've never seen them do it through forum email before though. :mad: Hopefully we're all smart enough to not fall for this.

Marc should have ip address info for the user "tomtomyaro" who sent it. Does it do any good to send it to authorities?
 

Marc

Fully vaccinated are you?
Leader
howste said:
I've received similar emails many times. I've never seen them do it through forum email before though. :mad: Hopefully we're all smart enough to not fall for this.

Marc should have ip address info for the user "tomtomyaro" who sent it. Does it do any good to send it to authorities?
I just checked and this person registered today. I just put the account into 'Banned'.

The IP address is: 213.136.97.109
France Telecom FTRSI/DPI (OPENTRANSIT-DOM)
246, rue de Bercy
Paris Cedex 12 75584
FR

Domain Name: OPENTRANSIT.NET

Administrative Contact, Technical Contact:
admin (AO946-ORG) [email protected]
admin opentransit
France Telecom Long Distance
246 rue de bercy
Paris
FRA
999 999 9999 fax: 999 999 9999

Record expires on 18-May-2004.
Record created on 19-Sep-2002.
Database last updated on 25-Jul-2003 12:12:03 EDT.

Domain servers in listed order:

BOW.RAIN.FR 194.51.3.49
DNS.OPENTRANSIT.NET 193.251.151.59
PROOF.RAIN.FR 194.51.3.65
VENUS.OPENTRANSIT.NET 193.251.151.57
 

Attachments

  • trace-564.jpg
    trace-564.jpg
    64 KB · Views: 193

Marc

Fully vaccinated are you?
Leader
Naw. Reporting it is a useless exercise. It comes down to report it to who and on what charge?

This is unfortunate. After Jim Wade's escapade I stopped accepting Yahoo and Hotmail registrations but several people wrote and I eased up. I'll probably end up banning new registrations from those e-mail accounts again.

This is, in part, why I enabled masking where people have to use a form and don't get your e-mail address directly from the forum. It stops e-mail BOTs from harvesting e-mail addresses (unless you put your e-mail address in a post somewhere) as well.
 
B

Bob_M

Marc said:
Naw. Reporting it is a useless exercise. It comes down to report it to who and on what charge?

This is unfortunate. After Jim Wade's escapade I stopped accepting Yahoo and Hotmail registrations but several people wrote and I eased up. I'll probably end up banning new registrations from those e-mail accounts again.

This is, in part, why I enabled masking where people have to use a form and don't get your e-mail address directly from the forum. It stops e-mail BOTs from harvesting e-mail addresses (unless you put your e-mail address in a post somewhere) as well.

I found the email "form" to be nice.
If you choose not to respond to someone they don't have your email.
End of story :p
 

CarolX

Trusted Information Resource
howste said:
I've received similar emails many times. I've never seen them do it through forum email before though. :mad: Hopefully we're all smart enough to not fall for this.

Yeah, I was really suprised by this. My main reason for posting it openly was for the internet newbies (I was one once) and people that may work from home/e-mail from home/kids spying in your e-mail/get rich thinking...LOL....with 3 out of 5 kids going on line on a regular basis, ya never know which one is gonna come across something like that....:vfunny:.

CarolX
 

Marc

Fully vaccinated are you?
Leader
It's surprising to me because something like this relies on bulk e-mail. For someone to register and start e-mailing people 1 by 1... I wouldn't have guessed it would even make sense.
 

howste

Thaumaturge
Trusted Information Resource
Well Carol, your avatar does look kind of young and inexperienced...
 

CarolX

Trusted Information Resource
Lol

howste said:
Well Carol, your avatar does look kind of young and inexperienced...

Youl'd be surprised. We are StarTrek fans, and John will sit in front of the comp and watch the StarTrek screen saver for hours. He loves to sit on his sister's and brothers' lap and watch what they are doing. If we ain't carefull, he'll be spaming us in a few years :biglaugh:!


Marc,
It's surprising to me because something like this relies on bulk e-mail. For someone to register and start e-mailing people 1 by 1... I wouldn't have guessed it would even make sense.

Me, too. Has someone developed a new bot.....ggrrrrrrr!!!

Carol
 
C

Craig H.

Carol:

I got the same one, too, at about the same time you did. I decided to call Marc for the first time, out of my usual paranoia about something "big and bad" happening at the Cove.

Marc took it in stride, and has quickly taken corrective action. Again.

This is one time spam did pay off for me, though. Marc and I had a wonderful conversation (lots of politics, of course).

I wonder how many other Covers have been hit by the spamjerk today.
 
Top Bottom