The email address in the offer below is actually a link that goes to: http :// us.mc1113.mail.yahoo.com/mc/compose?to=entrepreneur @ apnamultan.com. What does this mean? Well, they're obviously hoping you have a Yahoo email account, which might mean it will get compromised if you click that link to reply. We wouldn't take the chance, that's for sure!

THis sounds like a pyramid or multi-level marketing scheme. Not that we expect them to be world-class writers or anything, but what exactly do they mean when they say, "Would you like to be the house just like Vegas or Atlantic City?"

This email passes through all kinds of IP addresses before it gets to its intended victim, but the very first IP, 82.128.70.190, resolves back to Nigeria according to WHOIS. We think we've made the case for you not bothering with this so-called opportunity.

Message text:
From: Powell, Gary <giniwari @ bimtegltd.com>
Subject: Business Tips
To:

Date: Thursday, October 8, 2009, 6:26 AM

Do you want to retire early?
Tired of working for someone else?
Tired of making a salary?
Would you like to make ten to twenty five thousand plus a month in your own business?
Would you spend less than one thousand dollars to get started?
Would you like to be the house just like Vegas or Atlantic City?
Profit from this 15 billion dollar per year turnkey industry.
Roll a seven for your financial future.
Don’t miss out on football season.
For more info reply with your name and telephone number and best time to call to
(entrepreneur @ apnamultan.com) and one of our reps will contact you.
It is money in the bank.
Be your own boss and stop making someone else rich.
Greg Powell.

Headers:
X-Originating-IP: [98.136.44.48]
Authentication-Results: mta177.mail.re3.yahoo.com from=bimtegltd.com; domainkeys=neutral (no sig); from=bimtegltd.com; dkim=neutral (no sig)
Received: from 98.136.44.48 (HELO n76.bullet.mail.sp1.yahoo.com) (98.136.44.48) by mta177.mail.re3.yahoo.com with SMTP; Thu, 08 Oct 2009 04:27:44 -0700
Received: from [216.252.122.217] by n76.bullet.mail.sp1.yahoo.com with NNFMP; 08 Oct 2009 11:26:21 -0000
Received: from [69.147.65.170] by t2.bullet.sp1.yahoo.com with NNFMP; 08 Oct 2009 11:26:21 -0000
Received: from [127.0.0.1] by omp505.mail.sp1.yahoo.com with NNFMP; 08 Oct 2009 11:26:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 488274.73033.bm @ omp505.mail.sp1.yahoo.com
Received: (qmail 28743 invoked by uid 60001); 8 Oct 2009 11:26:20 -0000
Message-ID: <502561.28243.qm @ web1202.biz.mail.gq1.yahoo.com>
Received: from [82.128.70.190] by web1202.biz.mail.gq1.yahoo.com via HTTP; Thu, 08 Oct 2009 04:26:20 PDT
X-Mailer: YahooMailClassic/7.0.14 YahooMailWebService/0.7.347.3
Date: Thu, 8 Oct 2009 04:26:20 -0700 (PDT)
From: "Powell, Gary" <giniwari @ bimtegltd.com>
Reply-To: bzentrepreneur @ aol.com
Subject: Business Tips
To:

MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1455672144-1255001180=:28243"
Content-Length: 4966

WHOIS sender IP 82.128.70.190:
(Courtesy: http://whois.domaintools.com/82.128.70.190)
IP Location:       Nigeria  Nigeria Cdma Evdo Pool
IP Address:     82.128.70.190
organisation: ORG-AFNC1-RIPE
org-name:     African Internet Numbers Registry
org-type:     RIR
address:      see http://www.afrinic.net
e-mail:       bitbucket @ ripe.net
admin-c:      AFRI-RIPE
tech-c:       AFRI-RIPE
remarks:      For more information on AFRINIC assigned blocks, use
remarks:      AFRINIC's whois database, whois.afrinic.net.
mnt-ref:      RIPE-NCC-HM-MNT
mnt-by:       RIPE-NCC-HM-MNT
source:       RIPE # Filtered
role:         The African Internet Numbers Registry
org:          ORG-AFNC1-RIPE
address:      AFRINIC, see http://www.afrinic.net
admin-c:      AFRI-RIPE
tech-c:       AFRI-RIPE
nic-hdl:      AFRI-RIPE
e-mail:       bitbucket @ ripe.net
remarks:      For more information on AFRINIC assigned blocks, connect
remarks:      to AFRINIC's whois database, whois.afrinic.net.
mnt-by:       RIPE-NCC-HM-MNT
source:       RIPE # Filtered

Comments

Add New Search RSS

The views expressed and the links provided on our comment pages are the personal views of individual contributors and do not necessarily reflect the views of PhishBucket.org.

3.26 Copyright (C) 2008 Compojoom.com / Copyright (C) 2007 Alain Georgette / Copyright (C) 2006 Frantisek Hliva. All rights reserved."

---

Tag it: