SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 What the heck kind of scam is this??

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
Bart Fargo
Corporate Baiter


Joined: 22 May 2010
Posts: 1605
Location: Free munchies for the cantaloupe masters


PostPosted: Wed Aug 25, 2010 9:14 pm Reply with quoteBack to top

I'm not even sure it's a scam other than it's going to undisclosed recepients.

Quote:
Return-Path: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mc3.midcoast.com
X-Spam-Flag: YES
X-Spam-Level: ************
X-Spam-Status: Yes, score=12.7 required=5.0 tests=FORGED_MUA_OUTLOOK,
FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,FROM_MISSP_MSFT,FROM_MISSP_TO_UNDISC,
HTML_IMAGE_ONLY_16,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,
MSOE_MID_WRONG_CASE,T_FROM_MISSPACED,T_REMOTE_IMAGE shortcircuit=no
autolearn=disabled version=3.3.1
X-Spam-Report:
* 0.0 T_FROM_MISSPACED From: missing whitespace
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words
* 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
* 0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
* 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
* 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
* 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
* 3.2 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
* 0.0 T_REMOTE_IMAGE Message contains an external image
* 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Original-To:
Received: from localhost (localhost [127.0.0.1])
by mc3.midcoast.com (Postfix) with ESMTP id 662B4F4BD4
for <>; Wed, 25 Aug 2010 12:37:30 -0400 (EDT)
X-Virus-Scanned: by amavisd-new at midcoast.com
Received: from mc3.midcoast.com ([127.0.0.1])
by localhost (mc3.midcoast.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id D2RLGNyZ7DHZ for <>;
Wed, 25 Aug 2010 12:37:30 -0400 (EDT)
Received: from mx1.midcoast.com (mx1.midcoast.com [69.39.100.26])
by mc3.midcoast.com (Postfix) with ESMTP id 3D26CF4B99
for <Wed, 25 Aug 2010 12:37:30 -0400 (EDT)
Received: from mail.beifa.com (www.beifa.com [202.101.188.84])
by mx1.midcoast.com (Postfix) with SMTP id 5896F6C4EC
for <>; Wed, 25 Aug 2010 12:37:28 -0400 (EDT)
Received: (qmail 6988 invoked from network); 25 Aug 2010 12:32:03 -0000
Received: from unknown (HELO User) ([email protected])
by www.beifa.com with SMTP; 25 Aug 2010 12:32:03 -0000
From: "Flying Blue"<[email protected]>
Subject: PJM-> Flying Blue booking confirmation email
Date: Wed, 25 Aug 2010 14:14:46 +0200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Prev-Subject: Flying Blue booking confirmation email

<br><pre><font face=verdana style='font-size: 10pt' color=black>
<img src="https://www.klm.com/travel/us_en/images/klmlogo_tcm518-187356.gif">

Thanks for the purchase!

<b>Booking number: LVSN50</b>
Your credit card has been charged for $391.62.

Please print PASSENGER ITINERARY RECEIPT by logging into your Flying Blue personal pages
by clicking the link below:

<a href="http://finally.gammanetplus.com/catalog/images/www.klm.com/travel/us_en/flying_blue/index.html">https://www.klm.com/travel/us_en/flying_blue/login.htm?successUrl=/travel/us_en/flying_blue/your_account/miles/index.htm</a>

To cancel your ticket, please click the link below:

<a href="http://finally.gammanetplus.com/catalog/images/www.klm.com/travel/us_en/flying_blue/index.html">https://www.klm.com/travel/us_en/flying_blue/cancel_flight.htm</a>


On board you will be offered:
– Beverages;
– Food;
– Daily press.

You are guaranteed top-quality services and attention on the part of our benevolent personnel.
We recommend you to print PASSENGER ITINERARY RECEIPT and take it alone to the airport.
It will help you to pass control and registration procedures faster.

See you on board!

Regards
Customer Care
KLM Royal Dutch Airlines/Air France
</font></pre>


I have a character that is planning to fly to the vicinity of Burkina Faso, but I haven't done the phony intinerery yet. I don't even have a credit card or a working debit card in RL.

_________________
What the hell happened to all my little icons I earned and my quotes???
Mc Fry <===the hardest icon to earn
View user's profileSend private message
BRUIN
419eater charity case


Joined: 10 Apr 2006
Posts: 7427
Location: Somewhere over the rainbow


PostPosted: Wed Aug 25, 2010 9:17 pm Reply with quoteBack to top

Probably some sort of phishing! I do NOT recommend clicking on those links.

Bruin

_________________
------------------------------
pony pony pony Easter Egg 2011

Safari Ivory Coast to Ghana by Margaret Don & Angus (WIMP) - approx 524 miles, round trip

Safari Lagos to Ghana (WIMP) by Emanuel, approx 454 miles round trip

YOU CAN GO TO HAIL - Barrister Benard Koffi

YOU HAVE REALLY INCONVINSE THE CHAMBERS AND WE HAVE NEVER ENCOUNTER SUCH DIFICULTIES - Barrister Sinega Amah

I will not and will never link you up to someone that is reputable - Thomas Malcom

UR A FUCKING DESTITUTE. U WERE A DRAIN DUCK AND NOW U A SCAM FRAUDSTAR -- SMALL TIME 419. - Marcus Owen

South Africa

Hello Kitty! <--- TS certified
View user's profileSend private message
Master of Puppets
In Denial


Joined: 12 Mar 2009
Posts: 3295
Location: Pulling the Strings


PostPosted: Wed Aug 25, 2010 9:21 pm Reply with quoteBack to top

Hold your mouse over the links, at the bottom of the screen (in some sort of status bar, at least if your using FF as browser) you should see where the link would actually send you to if you clicked it.
Notice how different that is from the text you're clicking on?

_________________
Closed lad accounts x4 Goat Easter Egg
Oke: Todger club entry submission + T.W.A.T (Co-bait with Albator)
View user's profileSend private message
Aussiegal
Not quite a Newb


Joined: 24 Jul 2010
Posts: 68


PostPosted: Thu Aug 26, 2010 12:39 am Reply with quoteBack to top

Right click on the link and then click on properties. This will show you the actual URL that the link is for. In this case:

http://finally.gammanetplus.com/catalog/images/www.klm.com/travel/us_en/flying_blue/index.html

And presto you have yourself a scam website.
View user's profileSend private message
psychicbait
Mistress of Piggies


Joined: 22 Nov 2009
Posts: 2782
Location: wherever, dressed to kill


PostPosted: Thu Aug 26, 2010 5:54 am Reply with quoteBack to top

^^^Thanks, AussieGal, that was new to me and well worth knowing!
View user's profileSend private message
evil_sheep
Compulsive Self Abuser


Joined: 15 Jul 2010
Posts: 1100
Location: 419eater Passport office.


PostPosted: Thu Aug 26, 2010 6:47 am Reply with quoteBack to top

That fake KLM site now says:

Quote:

Error 404: File Not Found

The requested page is not found. This may happen due to the following reasons:

* Page or file is outdated, renamed, moved, or does not exist.
* You typed the address incorrectly, like http://www.example.com/pgae.html instead of http://www.example.com/page.html

Please contact your webmaster if you are not sure what goes wrong.

_________________
Closed lad accounts x11 Thailand x3 Ghana Senegal United Kingdom Welsh Flag United Nations

"I thank you for your quick massage this morning. " - Prince Abdul Hakeem
"u lied. i know u as black man" - Timothy Fred
"Get out. If you mail me again, i will destroy your mailbox." - Clydesdale Bank PLC.
"picece of shit gett off here junkie" "arse hole like u" "u r a bullshit around the corner" "fuck off and die" "is that how you write ur father?" "do u need some crack from Brazil?" "please leave me alone" - Dr. Mohamed Gaza

FREE BEER!

"Baiting is like sex. If it does go pear-shaped, pull out, get a new email address and try again from a different angle." - Me
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



E-Mail Header Analysis


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT