From: Smith Paul [smithpaul479@gmail.com]Now look at the full headers and see what you can see:
Subject: Mail Order
Hello Sales, Top of the day to you. I am Smith Paul, I would like to place an order from your store but before i proceed, i would like to know if you can ship to AUSTRALIA and accept credit card as a method of payment, If you do kindly get back to me with your valid website address for selection of items needed. I await to read from you today. Regards Smith Paul
Return-path: [alfuraih@l1.fancytech.com]
Delivery-date: Mon, 23 Aug 2010 15:53:26 -0500
Received: from l1.fancytech.com ([74.200.215.226]:59448)
(envelope-from [alfuraih@l1.fancytech.com]) id 1One1G-0004cI-KY
Subject: Mail Order
From: Smith Paul [smithpaul479@gmail.com]
Message-Id: [E1OndlA-0007mM-P6@l1.fancytech.com]
Date: Mon, 23 Aug 2010 15:36:48 -0500
X-AntiAbuse: Primary Hostname - l1.fancytech.com
X-AntiAbuse: Sender Address Domain - l1.fancytech.com
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/alfuraih/public_html/aa.php
X-Source-Dir: alfuraih.com:/public_htmlYou'll notice that this scammer is using php software to send these emails and it even has the folder address on his server computer where the software lives that is generating these scam emails. You'll notice the actual server origin is registered to fancytech.com, which no surprise is a foreign entity. You'll notice the actual IP of the originating server that sent the email: 74.200.215.226.
He probably doesn't even get that he probably got his faked name backwards...
Good ole Smith Paul is making the rounds. An artist forwarded me this email and you can see, it is identical to the one I received myself:
ReplyDeleteFrom: Smith Paul [smithpaul479@gmail.com]
Date: August 23, 2010 1:37:21 PM PDT
Subject: Mail Order
Hello Sales, Top of the day to you. I am Smith Paul, I would like to place an order from your store but before i proceed, i would like to know if you can ship to AUSTRALIA and accept credit card as a method of payment, If you do kindly get back to me with your valid website address for selection of items needed. I await to read from you today. Regards Smith Paul
He's BA-ACK and he's got his fake name all switched around, so it's really going to work this time....
ReplyDelete-Rebecca
Paul Smith paulsmtmrcht@gmail.com via relay.dotsterhost.com
reply-to paulsmtmrcht@gmail.com
to xxxxxxxxxxxxxxxxxxx
date Sun, Nov 20, 2011 at 4:45 PM
subject Order Inquiry
mailed-by relay.dotsterhost.com
hide details 4:45 PM (22 hours ago)
Hello, This mail is to make inquiry on the below question. 1- Do you carry overseas? (though i already know of a freight forwarder that will pick my packages from you,since they ship lesser than any other courier and they are so effective in shipping my goods to me here in Queensland,Australia is estimated to be 3-4days) I have used their services in the past and it was splendid. 2- Do you accept credit card for payment(my U.S.A Master and Visa card to be precise)? Kindly let me know your comments on these, before i send the items i am interested in purchasing from you. Thanks, Paul
OMG I just got two emails from a "Paul Smith" wanting to buy some paintings. The grammar seemed sketchy, so I just googled "Paul Smith Art Scam?" and this popped up immediately. Damn.
ReplyDelete