Search This Blog

Monday, August 23, 2010

Scam Email: Smith Paul

I just love when I get these myself in my own email box. Then I can look at the full headers and see all kinds of things. Let's begin with the actual lame scam email:

From: Smith Paul [smithpaul479@gmail.com]
Subject: Mail Order

Hello Sales, Top of the day to you. I am Smith Paul, I would like to place an order from your store but before i proceed, i would like to know if you can ship to AUSTRALIA and accept credit card as a method of payment, If you do kindly get back to me with your valid website address for selection of items needed. I await to read from you today. Regards Smith Paul
Now look at the full headers and see what you can see:
Return-path: [alfuraih@l1.fancytech.com]
Delivery-date: Mon, 23 Aug 2010 15:53:26 -0500
Received: from l1.fancytech.com ([74.200.215.226]:59448)
(envelope-from [alfuraih@l1.fancytech.com])    id 1One1G-0004cI-KY
Subject: Mail Order
From: Smith Paul [smithpaul479@gmail.com]
Message-Id: [E1OndlA-0007mM-P6@l1.fancytech.com]
Date: Mon, 23 Aug 2010 15:36:48 -0500
X-AntiAbuse: Primary Hostname - l1.fancytech.com
X-AntiAbuse: Sender Address Domain - l1.fancytech.com
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/alfuraih/public_html/aa.php
X-Source-Dir: alfuraih.com:/public_html
You'll notice that this scammer is using php software to send these emails and it even has the folder address on his server computer where the software lives that is generating these scam emails. You'll notice the actual server origin is registered to fancytech.com, which no surprise is a foreign entity. You'll notice the actual IP of the originating server that sent the email: 74.200.215.226.

He probably doesn't even get that he probably got his faked name backwards...

3 comments:

  1. Good ole Smith Paul is making the rounds. An artist forwarded me this email and you can see, it is identical to the one I received myself:

    From: Smith Paul [smithpaul479@gmail.com]
    Date: August 23, 2010 1:37:21 PM PDT
    Subject: Mail Order

    Hello Sales, Top of the day to you. I am Smith Paul, I would like to place an order from your store but before i proceed, i would like to know if you can ship to AUSTRALIA and accept credit card as a method of payment, If you do kindly get back to me with your valid website address for selection of items needed. I await to read from you today. Regards Smith Paul

    ReplyDelete
  2. He's BA-ACK and he's got his fake name all switched around, so it's really going to work this time....
    -Rebecca


    Paul Smith paulsmtmrcht@gmail.com via relay.dotsterhost.com
    reply-to paulsmtmrcht@gmail.com
    to xxxxxxxxxxxxxxxxxxx
    date Sun, Nov 20, 2011 at 4:45 PM
    subject Order Inquiry
    mailed-by relay.dotsterhost.com

    hide details 4:45 PM (22 hours ago)

    Hello, This mail is to make inquiry on the below question. 1- Do you carry overseas? (though i already know of a freight forwarder that will pick my packages from you,since they ship lesser than any other courier and they are so effective in shipping my goods to me here in Queensland,Australia is estimated to be 3-4days) I have used their services in the past and it was splendid. 2- Do you accept credit card for payment(my U.S.A Master and Visa card to be precise)? Kindly let me know your comments on these, before i send the items i am interested in purchasing from you. Thanks, Paul

    ReplyDelete
  3. OMG I just got two emails from a "Paul Smith" wanting to buy some paintings. The grammar seemed sketchy, so I just googled "Paul Smith Art Scam?" and this popped up immediately. Damn.

    ReplyDelete