Not cool. They're asking you to "facilitate purchases" through "a bank" to a "bank wire transfer payment system."

That's a lot of quotes we used. When we do that, we're repeating them in a snarky way, because they seem to think that by peppering their email with a bit of corpspeak it will fool the average person.

We're not average. For instance, we deduce that it's strange for Dr. Rita to send the email but make you contact Mike. And when we look at the headers we find it odd that the From line uses an account at evrgreen.org, the Reply-to uses a Gmail.com account, but they want you to reply to a live.com account. And look at how they end their letter by telling you to send your reply via a secure email channel. Exactly where does one get one of those?

Best of all, look one more time at those headers. Notice the gov.br? The associated IP checks out as belonging to the Brazilian government! Who's going to get to the bottom of this? Anyone? We'd love to know if the government of Brazil condones ripping off Americans or if they have actually investigated and caught the creator of the scam.

We think you're better off looking elsewhere while we challenge law enforcement ANYWHERE at ANY level to actualy do something about this atrocity.

Message text:
EVERGREEN COMPANY INTERNATIONAL
Brookmount House  London WC2N 4LP UK.

ATTENTION: INCREASE YOUR EARNING POTENTIALS!!!

   Greetings to you. I am Dr. Rita Naveira, Personnel Director for EVERGREEN
RESOURCES based in the United Kingdom.

We are producers of Liquified natural gas (LNG),looking to expand our small
scale business consultancy in your country.

With the Global financial crisis and the economic recession,we are recruiting
representatives and partners to facilitate purchases with our numerous
customers across the globe through a bank to bank wire transfer  payment
system.

Job Description:
Work from home with an internet enabled computer and a phone
No experience needed. $3,000-$200,000 p/month
Earn as you learn. Work around your schedule.

If interested,reply with the necessary details for more information  .

Full names:
Age:
Telephone No:
Residential address:

This will enable us send you a letter of confirmation.

For further enquires, please reply via a secure email channel to our human
resource department for assistance:

Michael Brooks
evrgrnrecruitment @ live.com
Tel:+447031938008

Visit the link below for more on our company profile:

http :// www .indeed.co.uk/jobs?q=Evergreen+Resources

All information will be treated confidentially.

Sincerely,
 
Dr.Rita Lopes Naveira
EVERGREEN COMPANY  RESOURCES

Headers:
X-Originating-IP: [200.198.55.4]
Authentication-Results: mta241.mail.mud.yahoo.com from=evrgreen.org; domainkeys=neutral (no sig)
Received: from 200.198.55.4 (EHLO mail.funed.mg.gov.br) (200.198.55.4)
     by mta241.mail.mud.yahoo.com with SMTP; Sun, 26 Apr 2009 03:29:28 -0700
Received: from funed.mg.gov.br (ciclopse.funed.mg.gov.br [200.198.55.4])
     by mail.funed.mg.gov.br (Postfix) with ESMTP id 2A20BF00BB;
     Sun, 26 Apr 2009 03:21:22 -0300 (BRT)
From: "EVERGREEN COMPANY LTD" <info @ evrgreen.org>
Reply-To: evrgrn.onlinedept1 @ gmail.com
Subject: AFFILIATE PARTNERSHIP
Date: Sun, 26 Apr 2009 03:21:22 -0300
X-Mailer: Open WebMail 2.51 20050228
X-OriginatingIP: 41.205.172.30 (crisolita)
MIME-Version: 1.0
Content-Type: text/plain;
     charset=iso-8859-1
To: [removed]
Content-Length: 844

 

WHOIS sender IP 200.198.55.4:
(Courtesy: http://whois.domaintools.com/200.198.55.4)
inetnum:     200.198.0/18
aut-num:     AS10670
abuse-c:     PGM14
owner:       COMPANHIA DE TECNOLOGIA DA INFORMAÇÃO ESTADO MG
ownerid:     016.636.540/0001-04
responsible: Governo Minas Gerais
country:     BR
owner-c:     PGM14
tech-c:      PGM14
inetrev:     200.198.55/24
nserver:     zeus.prodemge.gov.br
nsstat:      20090617 AA
nslastaa:    20090617
nserver:     jupiter.prodemge.gov.br
nsstat:      20090617 AA
nslastaa:    20090617
nserver:     titanio.prodemge.gov.br
nsstat:      20090617 AA
nslastaa:    20090617
created:     19991117
changed:     20011205
nic-hdl-br:  PGM14
person:      Prodemge Ger. Rede - Dominios MG.GOV.BR
e-mail:      dominio @ mg.gov.br
created:     20000901
changed:     20050506

Comments

Add New Search RSS

The views expressed and the links provided on our comment pages are the personal views of individual contributors and do not necessarily reflect the views of PhishBucket.org.

3.26 Copyright (C) 2008 Compojoom.com / Copyright (C) 2007 Alain Georgette / Copyright (C) 2006 Frantisek Hliva. All rights reserved."

---

Tag it: