Example of E-mail Scam

The technical information about the e-mail shows interesting details about the origin of the scam e-mail (see the line in red!). Naturally Dr. Frigns is no employee of KAS BANK and naturally, kasbank.co.uk is not a web presence of Amsterdam based KAS BANK N.V. (See www.kasbank.com).

The contents of the email (below, in blue) would make anybody laugh!

Return-Path: jmgfrigns@kasbank.co.uk
Received: from compute1.internal (compute1.nyi.mail.srv.osa [10.202.2.41])by sloti14d5p3 (Cyrus git2.5+0-git-fastmail-7760) with LMTPA;Wed, 07 Mar 2012 03:34:40 -0500
X-Sieve: CMU Sieve 2.4
X-Spam-charsets: plain='iso-8859-1'
X-Mail-from: jmgfrigns@kasbank.co.uk
Received: from mx3.nyi.mail.srv.osa ([10.202.2.202])
by compute1.internal (LMTPProxy); Wed, 07 Mar 2012 03:34:40 -0500
Received: from mail.healingourspirit.org (mail.healingourspirit.org [209.52.170.114])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx3.nyi.mail.srv.osa (Postfix) with ESMTPS id 320B44C27A7
Wed, 7 Mar 2012 03:34:39 -0500 (EST)
Received: from mail.healingourspirit.org (localhost.localdomain [127.0.0.1])
by mail.healingourspirit.org (8.13.8/8.13. with ESMTP id q278KHnr027425;
Wed, 7 Mar 2012 00:20:17 -0800
Received: (from apache@localhost)
by mail.healingourspirit.org (8.13.8/8.13.8/Submit) id q278KEdt027424;
Wed, 7 Mar 2012 00:20:14 -0800X-Authentication-
Warning: mail.healingourspirit.org: apache set sender to jmgfrigns@kasbank.co.uk using -f
Received: from 184.75.218.254(SquirrelMail authenticated user info)
by 209.52.170.114 with HTTP;Wed, 7 Mar 2012 00:20:14 -0800 (PST)
Message-ID: 56070.184.75.218.254.1331108414.squirrel@209.52.170.114
Date: Wed, 7 Mar 2012 00:20:14 -0800 (PST)
Subject: Business ProposalFrom: "Dr J.M.G Frigns" jmgfrigns@kasbank.co.uk
Reply-To: jmgfrigns@live.ca
User-Agent: SquirrelMail/1.4.8-4.0.1.el5.centos.2
MIME-Version: 1.0Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bitX-Priority: 3 (Normal)
Importance: NormalX-Truedomain-Domain: kasbank.co.uk
X-Truedomain-SPF: Neutral (mx3: 209.52.170.114 is neither permitted nor denied by domain of kasbank.co.uk)
X-Truedomain-DKIM: No Signature
X-Truedomain-ID: F4375F6BD8B43CA40F7B4AED2DD111A5
X-Truedomain: Neutral

Hello Friend,

My name is Dr. J.M.G Frigns

I have a Business Proposal of $35,500,000.00 (Thirty Five Million Dollars) for you to handle with me from my bank.

Please kindly keep this secret, I believe you will not betrayed me with the trust i intend putting on you. If you disregard this email, you might just be loosing a life time opportunity, and last relationship between us

If interested do contact me on my email: (jmgfrigns@live.ca) for more details.

Thank you

No comments: