Sometime two weeks ago my sister received an email stating that she won a green card lottery to the United States of America. As I was reading the whole mail, the sender was asking her to send through Western Union an amount to a certain person from the United Kingdom. Upon analyzing the letter she forwarded me, I told my sister to immediately put it in her spam mail because it was a fraudulent mail. In short it was a scam mail.
I believed the mail which I also received today from email address email@example.com with originating IP address 126.96.36.199 is also a scam. Below is the detail of the mail and part of the full header of that mail.
BE CAREFUL WITH THIS KIND OF MAIL….THESE KIND OF MAILS ARE SCAM!
This is to inform all public that we are looking for talented people who will support our employment principles and are looking for opportunities that will be challenging Balfour Construction. In return offers excellent learning and career development opportunities and competitive benefit packages. Skilled and Unskilled workers are invited to apply to work in the Multi-Million Dollar Export processing Zone project in GuineaConakry. Contact the project administrator immediately for more detail at: firstname.lastname@example.org
Note: Replies sent direct to the email address above will receive immediate response.
FULL HEADER OF THE MAIL
From Good News Sunday Sun Aug 14 16:52:39 2011
X-Apparently-To: XXXXXXXX@yahoo.de via 188.8.131.52; Sun, 14 Aug 2011 16:52:40 +0000
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
Authentication-Results: mta1037.mail.ird.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm22-vm0.bullet.mail.bf1.yahoo.com) (184.108.40.206)
by mta1037.mail.ird.yahoo.com with SMTP; Sun, 14 Aug 2011 16:52:40 +0000
Received: from [220.127.116.11] by nm22.bullet.mail.bf1.yahoo.com with NNFMP; 14 Aug 2011 16:52:39 -0000
Received: from [18.104.22.168] by tm7.bullet.mail.bf1.yahoo.com with NNFMP; 14 Aug 2011 16:52:39 -0000
Received: from [127.0.0.1] by omp1052.mail.bf1.yahoo.com with NNFMP; 14 Aug 2011 16:52:39 -0000
Received: (qmail 23141 invoked by uid 60001); 14 Aug 2011 16:52:39 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1313340759; bh=1zFBCmHAjNNQLmnEjOIfX2SE/7DQvKLVrK1HLybfoAQ=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=IGdYPOF9cI9TkKymmSAfgVR5uT02UwA+VmjEhVdyzGY3JRsd/6c/cP85eSCYtBt2o8IAYIBWNGyLYh1jXmopB9qADbDHHxp1UWKztapC533neYKr6g2Qtj9k+f8DpME/yjleBfAcPoq6QZdW+V8pG63L5rYsJxJKPp3GoZtj3ug=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
Received: from [22.214.171.124] by web160714.mail.bf1.yahoo.com via HTTP; Sun, 14 Aug 2011 09:52:39 PDT
X-Mailer: YahooMailClassic/14.0.4 YahooMailWebService/0.8.113.313619
Date: Sun, 14 Aug 2011 09:52:39 -0700 (PDT)
From: Good News Sunday email@example.com
Subject: Job Vacancy In Balfourconstruction
Content-Type: multipart/alternative; boundary=”0-1097842932-1313340759=:17851″