View Single Post
Old 08-08-2008, 03:13 AM   #5
Waynem
Montana Master
 
Join Date: Sep 2007
Location: Texas City
Posts: 5,736
M.O.C. #7673
This is a scam. In most cases you can look at the url it has directed you to and tell it is phony. I recently received an invitation to download MS Explorer 7 for the MAC. The URL pointed to Brazil. Sorry, Microsoft is in the US.

What you can do:

Depending on your email client, you need to view the "headers." Headers are not the from and to line that you see in the email. In Outlook, you need to use the options feature and somewhere in there you will see the header. Highlight it, copy it, and then do a forward of the original email. When you have clicked on FORWARD, paste the header into the top of the email.

This is what a header would look like:
(You read from the bottom up for the trail of delivery)
=====================
-------- Original Message --------
[b]From: - Fri Aug 08 09:10:52 2008
X-Account-Key: account2
X-UIDL: AKXHjkQAAVF2SJvhGgbuYEJe1YA
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: golferm@sbcglobal.net via 68.142.199.165; Thu, 07 Aug 2008 23:00:57 -0700
X-Originating-IP: [209.191.89.25]
Authentication-Results: mta109.sbc.mail.re3.yahoo.com from=dscs.com; domainkeys=neutral (no sig)
Received: from 207.115.20.178 (EHLO flpi138.prodigy.net) (207.115.20.178) by mta109.sbc.mail.re3.yahoo.com with SMTP; Thu, 07 Aug 2008 23:00:57 -0700
X-Originating-IP: [209.191.89.25]
Received: from mta140.sbc.mail.mud.yahoo.com (mta140.sbc.mail.mud.yahoo.com [209.191.89.25]) by flpi138.prodigy.net (8.13.8 inb regex/8.13.8) with SMTP id m7860tTJ025675 for ; Thu, 7 Aug 2008 23:00:56 -0700
X-Yahoo-Forwarded: from jarhead60-84@sbcglobal.net to golferm@sbcglobal.net
X-Originating-IP: [66.0.218.162]
Authentication-Results: mta140.sbc.mail.mud.yahoo.com from=dscs.com; domainkeys=neutral (no sig)
Received: from 66.0.218.162 (EHLO flpi094.prodigy.net) (207.115.20.63) by mta140.sbc.mail.mud.yahoo.com with SMTP; Thu, 07 Aug 2008 23:00:56 -0700
X-Originating-IP: [66.0.218.162]
Received: from [66.0.218.162] (summitcapitallending.com [66.0.218.162] (may be forged)) by flpi094.prodigy.net (8.13.8 inb regex/8.13.8) with ESMTP id m7860kIf003788 for ; Thu, 7 Aug 2008 23:00:54 -0700
X-mailed-to: jarhead60-84@sbcglobal.net
X-To: cnn-dailytop10#*#jarhead60-84@sbcglobal.net
X-job: 20080801155902.cnn-dailytop10.7058
Message-Id:
From: Daily Top 10
To: jarhead60-84@sbcglobal.net
Date: Fri, 8 Aug 2008 02:00:54 -0400
Subject: CNN.com Daily Top 10
Content-type: multipart/alternative; boundary="276jbystj184"
MIME-version: 1.0


>+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
>THE DAILY TOP 10
>from CNN.com
>Top videos and stories as of: Aug 1, 2008 3:58 PM EDT
>+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

TOP 10 VIDEOS

=============================

When you have prepared your forward, send it to:

ABUSE@WHEREVER.COM (In my case, and the above is not the email, I sent it to abuse@microsoft.com

Also, you can send it to POSTMASTER@WHEREVER.COM (Send it to both to make sure they get it.)

If they are interested they will act on the information. They may even send you a reply.

Remember, the Secret Service has been working the Nigerian scam for over 20 years when it started out as letter mail and has progressed through FAX to EMail.
Waynem is offline   Reply With Quote