posted on August 18, 2007 12:39:03 PM
Watch out for this one. It sounded real enough. Even the email address seemed familiar but I do not know a Karen Smith.
Further investigation of my ebay logs shows a sale from 2005(!) to a buyer with this email address. I have not corresponded with that buyer since then, so I can only speculate that their computer has been hijacked.
Perhaps thier system had been infected with a program that is sending out feelers trying to find live email addresses to spam? I have altered my own email address in the following.
----- Original Message -----
From: "The Adams family" <[email protected]>
To: "Dianna" <[email protected]>
Sent: Saturday, August 18, 2007 11:23 AM
Subject: Hi,
Hi, Dianna, How's your summer? Mine sucks right now. I just got home
from the hospital. I had acute appendicitis and they removed the nasty
little thing on Wednesday night. Do you have Karen White's e-mail? She
is going to be supervising me and I need to get some guidance as I go
in. Can't sit long, so I'll send this as is. Thanks, Betty
**** End of Message******
Can any of you teckies tell where this really came from? I stumbled through it but it looks normal to me.
Return-Path: <[email protected]>
X-Spam-Checker-Version: Knology SpamFryer (2005-09-13) on
spamlite7.mailservers
X-Spam-Status: 2.0 hits, 5.0 required
Delivered-To: [email protected]
Received: (qmail 30812 invoked by uid 0); 18 Aug 2007 16:23:20 -0000
Received: from unknown (HELO vms042pub.verizon.net) (206.46.252.42)
by spamlite7.knology.net with SMTP; 18 Aug 2007 16:23:24 -0000
Received: from [192.168.0.101] ([68.163.7.183])
by vms042.mailsrvcs.net (Sun Java System Messaging Server 6.2-6.01 (built Apr
3 2006)) with ESMTPA id <[email protected]> for [email protected]; Sat, 18 Aug 2007 11:23:12 -0500 (CDT)
Date: Sat, 18 Aug 2007 12:23:17 -0400
From: The Adams family <[email protected]>
Subject: Hi,
To: Dianna <[email protected]>
Message-id: <[email protected]>
MIME-version: 1.0
Content-type: text/plain; charset=ISO-8859-1; format=flowed
Content-transfer-encoding: 7bit
User-Agent: Thunderbird 1.5.0.12 (Windows/20070509)
X-Antivirus: avast! (VPS 000766-1, 08/17/2007), Inbound message
X-Antivirus-Status: Clean
posted on August 19, 2007 10:17:55 AM
Are you 100% positive that this is a spoof? I guess my thought on this would be to delete the e-mail, then wait and see if she e-mails back.
posted on August 19, 2007 10:44:26 PM
The header looks legitimate here is the IP who is in the from field.
OrgName: Verizon Internet Services Inc.
OrgID: VRIS
Address: 1880 Campus Commons Dr
City: Reston
StateProv: VA
PostalCode: 20191
Country: US
NetRange: 68.160.0.0 - 68.163.255.255
CIDR: 68.160.0.0/14
NetName: VIS-68-160
NetHandle: NET-68-160-0-0-1
Parent: NET-68-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.BELLATLANTIC.NET
NameServer: NS2.BELLATLANTIC.NET
NameServer: NS2.VERIZON.NET
NameServer: NS4.VERIZON.NET
Comment: Please send all abuse reports to [email protected].
Comment: DO NOT send e-mail to [email protected] as it will not be answered.
RegDate: 2002-08-30
Updated: 2006-06-01
OrgAbuseHandle: VISAB-ARIN
OrgAbuseName: VIS Abuse
OrgAbusePhone: +1-214-513-6711
OrgAbuseEmail: [email protected]
///
The first IP# looks like a local machine IP number a common number in a network sometimes. Anyway looks legit. They could be phishing for email addresses if you respond then they know your email is valid. But other than that if you don't know the person ignore it. I sometimes get an email from someone in another persons email list I do correspond with and they have addressed my email along with other friends all in the to field it reveals my email and I get into their friends address books because they don't know how to stop email addresses from being added to their books when they get new emails.. OK I know that was confusing but it does happen.
************** I married my wife for her looks, but Not the one she gives me lately!
posted on August 20, 2007 08:21:14 AM
The reason I suspect email harvesting is because I only dealt with this person one time. Sold them 1 item. That item was something I do not normally sell and have never sold another like it since. Transaction is over two years old.