Welcome and happy reading!

Since, like anyone else, I receive tons of scam emails and snail mail letters, I decided to present here some of these. All of these (and many more which I just delete) are scams. This means, what the senders have in mind is to racket one of us. And according to what I've seen, they do succeed quite often.

If you have similar letters in your mailbox, either disregard or play with the person knowing that you can't give him (or her) any information about:

  1. Your bank account,
  2. Your address — or any valid address if that matter,
  3. Your family, and
  4. any other information that you judge private or even intimate.

Ha! I say "Your"... even if you don't like your neighbor at all, don't give his information either. The Internet leaves tracks (hackers in the US are being caught one after another!) and you would certainly be in even bigger trouble.

In the meantime, I hope you will enjoy reading these letters as I do myself once in a while. 8-)I do not always add comments with the letters since I usually don't have time to do so, but there would often be a lot of joke to tell!

Soap Bubbles

 

Latest Scams
  • Last update: 10/31/2009
    Return-Path:		<mrsdora_okereke1@myway.com>
    X-Original-To:		alexis@halk.m2osw.com
    Delivered-To:		alexis@halk.m2osw.com
    Received:		from snap.turnwatcher.com (colo [168.150.251.50])
    			by halk.m2osw.com (Postfix) with ESMTP id 12B181BDE2
    			for <alexis@halk.m2osw.com>; Sat, 16 Jun 2007 00:44:39 -0700 (PDT)
    Received:		from mail03.talkactive.net (loadbalancing01.talkactive.net [195.128.174.2])
    			by snap.turnwatcher.com (Postfix) with SMTP id BDD1426ACFA
    			for <alexis@m2osw.com>; Sat, 16 Jun 2007 00:44:26 -0700 (PDT)
    Received:		(qmail 65978 invoked from network); 16 Jun 200
     
  • Last update: 10/31/2009
    X-Apparently-To:		alexis_wilke@yahoo.com via 206.190.38.200; Wed, 14 Jul 2004 00:09:52 -0700
    X-YahooFilteredBulk:		66.35.250.206
    X-Originating-IP:		[66.35.250.206]
    Return-Path:			<mrsann100@email.ro>
    Received:			from 66.35.250.206 (EHLO sc8-sf-mx1.sourceforge.net) (66.35.250.206)
    				by mta301.mail.scd.yahoo.com with SMTP; Wed, 14 Jul 2004 00:09:52 -0700
    Received:			from zerg.cluj.astral.ro ([193.230.240.30] helo=zerg.astral.ro)
    				by sc8-sf-mx1.sourceforge.net with esmtp (Exim 4.34)
    				id 1Bkdtm-00043Q-SA; Wed, 14 Jul 2004 00:09:51 -0700
    Received:			(from httpd@localhost) by ze
     
  • Last update: 10/31/2009

    Here the real link was: <a href="http://www.creval-bci.com/login2007/index.html"> The correct URL is simply http://www.creval.it.

    Another interesting tag was the BASE that was broken in half:
    <BASE
    href="http://mailstore.rossoalice.alice.it/exchange/Alice000000001146149/Pos
    ta%20eliminata/Attenzione!%20Comunicazione%20Urgente.EML/" />


     
  • Last update: 11/01/2009

    Achetez un domain... pour continuer nos études? Hmmm

     
  • Last update: 10/31/2009
    Return-Path:		<davidrichd@yahoo.de>
    X-Original-To:		info@halk.m2osw.com
    Delivered-To:		alexis@halk.m2osw.com
    Received:		from yahoo.de (unknown [41.220.16.42])
    			by halk.m2osw.com (Postfix) with SMTP id 60A921BDE2
    			for <info@halk.m2osw.com>; Fri, 10 Aug 2007 21:09:48 -0700 (PDT)
    Message-ID:		<A33D9E7D.097A602@yahoo.de>
    Date:			Sat, 11 Aug 2007 07:47:49 -0400
    Reply-To:		"David Richard" <davidrichd@yahoo.de>
    From:			"David Richard" <davidrichd@yahoo.de>
    X-Accept-Language:	en-us
    MIME-Version:		1.0
    To:			<info@halk.m2osw.com>
    Subject:		SOS CALL
    Content-T
     
  • Last update: 11/15/2012

    The following is my compiled list of email addresses from people who claim they have loads of money to share with me. Do whatever you want with them. If it happens to be your email address and you think you are innocent... you may want to change it at once.

     
  • Last update: 10/31/2009
    X-Apparently-To:		alexis_wilke@yahoo.com via 206.190.38.199; Fri, 05 Nov 2004 07:01:31 -0800
    X-Originating-IP:		[66.35.250.206]
    Return-Path:			<claudinenkoneci@jumpy.it>
    Received:			from 66.35.250.206 (EHLO sc8-sf-mx2.sourceforge.net) (66.35.250.206)
    				by mta359.mail.scd.yahoo.com with SMTP; Fri, 05 Nov 2004 07:01:31 -0800
    Received:			from outgoing1.jumpy.it ([213.215.144.9] helo=mail.jumpy.it)
    				by sc8-sf-mx2.sourceforge.net with esmtp (Exim 4.41)
    				id 1CQ5ai-0002iR-Bi; Fri, 05 Nov 2004 07:01:31 -0800
    Received:			from [196.201.71.182] by mail.jumpy.it with HTTP; Fri
     
  • Last update: 10/31/2009

    I was not thinking I'd put too many more scams on my page here, but this one was so badly written that I just couldn't resist! I have no idea what the ? characters were; for sure, these are not supported by my system. Mozilla is saying it's Japanese...

     
  • Last update: 10/31/2009

    Interesting... these people sent an email with two links one of which does not correspond at all to its label. I suppose most people do not notice these problems before clicking. And as usual, the emails includes URLs to non-secure pages (http instead of https) and the URLs start with numbers (the IP address here was: 81.113.212.146). Finally, that's the wrong URL for access to citibank. He! He! He!

    Also the HTML is quite bad. I left the closing body found at the beginning since I find that quite funny... He! He! He!

     
  • Last update: 10/31/2009
    From ciaka umaru Thu Sep 6 12:36:29 2007
    X-Apparently-To:	alexis_wilke@yahoo.com via 206.190.38.200; Thu, 06 Sep 2007 12:41:54 -0700
    X-Originating-IP:	[65.54.246.162]
    Return-Path:		<ciaka_umaru17@hotmail.fr>
    Authentication-Results:	mta418.mail.re4.yahoo.com from=hotmail.fr; domainkeys=neutral (no sig)
    Received:		from 65.54.246.162 (EHLO bay0-omc2-s26.bay0.hotmail.com) (65.54.246.162)
    			by mta418.mail.re4.yahoo.com with SMTP; Thu, 06 Sep 2007 12:41:53 -0700
    Received:		from BLU116-W27 ([10.6.19.62]) by bay0-omc2-s26.bay0.hotmail.com
    			with Microsoft SMTPSVC(6.0.3790.3959); Thu, 6 S