Spam: Aleksei Ivanov - broken Mercedes Benz in Kaluga, Russia
I received the following email about a troubled car owner in Russia. Out of curiosity I replied and received a follow-up message.
Both e-mails were bulk-mailed to many recipients. The first email was sent from an IP address in Sweden (220.127.116.11), the second one from an IP address in the Netherlands (18.104.22.168). It seems very unlikely that the sender lives in two countries. Perhaps the emails were sent through hijacked third-party computers in those countries to obscure the real sender.
The second mail mentions that the car owner lives in Kaluga, 160 km from Moscow. This immediately reminded me of another series of spam emails (see here on Snopes.com) sent by a scammer in that same city, who has been sending out thousands of emails to deceive people all over the world for many years.
The phone number listed in the second mail (+7-960-5145083) is a (non-geographic) mobile phone number, so the person could be anywhere in Russia (or even outside of Russia with global roaming).
If you have received these same e-mails and have replied, I would advise that you use utmost caution!
Received: from av11-1-sn2.hy.skanova.net (av11-1-sn2.hy.skanova.net [22.214.171.124]) by snug.pobox.com (Postfix) with ESMTP id 6E8D2AC2C8 for <email@example.com>; Tue, 29 Jul 2008 14:17:28 -0400 (EDT) Received: by av11-1-sn2.hy.skanova.net (Postfix, from userid 502) id 2E736388EB; Tue, 29 Jul 2008 20:16:22 +0200 (CEST) Received: from smtp4-2-sn2.hy.skanova.net (smtp4-2-sn2.hy.skanova.net [126.96.36.199]) by av11-1-sn2.hy.skanova.net (Postfix) with ESMTP id DF4D7388C0; Tue, 29 Jul 2008 20:16:21 +0200 (CEST) Received: from 90-228-233-71-no126.tbcn.telia.com (90-228-233-71-no126.tbcn.telia.com [188.8.131.52]) by smtp4-2-sn2.hy.skanova.net (Postfix) with SMTP id 1403837E51; Tue, 29 Jul 2008 20:16:18 +0200 (CEST) In-Reply-To: <370401c78184$dfc58b00$eeeea8c0@local> References: <firstname.lastname@example.org> <email@example.com> Date: Tue, 29 Jul 2008 22:16:15 +0300 From: "Aleksey Ivanov" <firstname.lastname@example.org> Subject: AW: Mercedes-Benz - ACHTUNG To: <email@example.com>
Received: from smtp-2.orange.nl (smtp-2.orange.nl [184.108.40.206]) by fence.pobox.com (Postfix) with ESMTP id E21FD4BA21 for <firstname.lastname@example.org>; Fri, 1 Aug 2008 15:10:52 -0400 (EDT) Received: from me-wanadoo.net (localhost [127.0.0.1]) by mwinf6112.online.nl (SMTP Server) with ESMTP id E9FB01C0008C; Fri, 1 Aug 2008 21:09:53 +0200 (CEST) Received: from c529c768d.cable.wanadoo.nl (c529c768d.cable.wanadoo.nl [220.127.116.11]) by mwinf6112.online.nl (SMTP Server) with SMTP id 7D0B61C000B8; Fri, 1 Aug 2008 21:09:45 +0200 (CEST) X-ME-UUID: 20080801190945512.7D0B61C000B8@mwinf6112.online.nl In-Reply-To: <370401c78hj18gh4$dfc58b00$eeeea8c0@local> References: <email@example.com> <firstname.lastname@example.org> Date: Fri, 01 Aug 2008 23:11:47 +0300 From: "Aleksei" <email@example.com> Subject: AW: Mercedes-Benz To: <firstname.lastname@example.org>