Phishing? [email protected]

[kwaping]

Hi everyone,

I received this message and it smells fishy to me. I'd like to hear your opinions. The reason I'm suspicious is because of the full headers (see below) - it originated in Russia.

Thanks for your opinions!

-Ollie

---
Return-Path: <[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from looneymail-mx1.g.dreamhost.com (looneymail-mx1.g.dreamhost.com [208.113.200.14])
by postalmail-mx2.g.dreamhost.com (Postfix) with ESMTP id 8AB57CC8E5
for <[email protected]>; Sat, 3 Nov 2007 12:11:44 -0700 (PDT)
Received: from smtp03.mtu.ru (smtp03.mtu.ru [62.5.255.50])
by looneymail-mx1.g.dreamhost.com (Postfix) with ESMTP id 3042E3C629
for <[email protected]>; Sat, 3 Nov 2007 12:11:43 -0700 (PDT)
Received: from firstbroker (ppp129-46.dialup.mtu-net.ru [62.118.129.46])
by smtp03.mtu.ru (Postfix) with SMTP id 5FB274650FC
for <[email protected]>; Sat, 3 Nov 2007 22:11:39 +0300 (MSK)
From: TG Network Consulting <[email protected]>
To: [email protected]
Subject: greensportcoupe.com
X-Mailer: NetMasters SMTP Demo
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-Id: <[email protected]>
Date: Sat, 3 Nov 2007 22:11:39 +0300 (MSK)


Hello,

We are interested in greensportcoupe.com

Your name was listed in online auction. What is your price for the name?

Our company is involved in software development/support business.

Now domain invetsing/reselling is just an additional direction of our investment strategy.

Looking forward to do business with you.

Regards,
Paul Camacho
President
TG Network Consulting
============================================================================
NOTICE - This communication may contain confidential and privileged
information that is for the sole use of the intended recipient. Any
viewing, copying or distribution of, or reliance on this message by
unintended recipients is strictly prohibited. If you have received this
message in error, please notify us immediately by replying to the message
and deleting it from your computer.

===========================================================================
---

 

[jberryhill]

Notify abuse at HotPop, which provides email service via toughguy.net and other domains.

I know the guys at HotPop, and they do act on these.

 

[kwaping]

Thanks jberryhill! I've directed a copy with headers to [email protected].

-Ollie

 

[labrocca]

smtp03.mtu.ru

The russian mail server...dead giveaway.

 

[Kate]

The classic appraisal scam