Inheritance Scam -  October 22, 2007

Please be sure to read my Inheritance Scams Home Page

Things I Did, Below

I, personally, receive email in HTML format. The following was received (and looked) like I received it. At the time, I was more interested in the message than the headers and do not have the original. This is a copy I forwarded to myself as I sent it to my father.

• I removed my email addresses. These came to various accounts and some no longer exist. There are places on this site you can get hold of me if you wish or need to. They are protected from spambots using JavaScript, but all you have to do is click on them.
• All scammer and related email addresses, and any actual website links have been changed, at least putting spaces into them. They appear as underlined blue links, though they aren't.
• Any notes I added in the actual letter are in square brackets ("[" "]"), are bold, red in color, and highlighted. If what I found "behind the links" (email or website) are different than what was displayed, I will include them in this type of note.
• All spelling, spacing, and punctuation errors are the ones that appeared in the original received email. (I may or may not analyze some or all of these.)

Scam Example
Received 10/22/2007

Email Headers

[DO NOT send email to any of the following email addresses]

Notes

Problems I see:

• Obvious (to me, anyway) errors:
  • from the email, itself:
    • A quick google search turned up NO "Dr. Quantin Etienne". There was a
      "Etienne Quantin" but he is manager for Maine Optical in in village of Aigrefeuille, France (and here) and a "Quantin Etienne" was mayor of Sacquenay, France ("An VII of the Republic") between 1792 and 1804. NO other names were found. There are more records for a "Quentin Etienne", but a wife would not misspell her husband's name, would she? ... And NONE were mentioned as having been in Hong Kong for any length of time.
    • The typical grammar, punctuation and spelling errors that an educated person, foreign or otherwise, would most likely never make.
    • See more about the email addresses, below.
  • from the Email Headers:
    • The IP Address "81.199.89.28" is from Nairobi, Kenya. Why would someone from the UK or Hong Kong send an email from Kenya?
    • UN-typically, the free email address (yahoo.com.hk) is actually from the same country as the message appears to be associated (Hong Kong).  HOWEVER, due to the fact that anyone from anywhere can create an email address from any country, this means nothing.
    • For either of those email addresses used, be aware that Yahoo is a free email service all over the world, therefore making it very easy to set up email addresses.
    • city.websitewelcome.com is a simple search website. It appears as one of those set up by the webmaster to draw people to the site based on keywords, then sending them off to sponsored sites, each click from there providing them income.
    • notindeyhappenooo.mykraze.com is a domain (notindeyhappenoo) "parked" (at mykraze.com) website. My guess is that this part of the headers, above, is "spoofed", since the first part of the message id appears to be an invalid IP address.

Send comments/questions about this page to Bill Sanders at:

Return to OFPv2/SSFF - Scams - Inheritance Scam Home page

Send email to Bill Sanders ()
with questions or comments about this page or site.

This site, all text and graphics (unless otherwise noted) on it
were designed, developed and published by Bill Sanders of Orange Frog Productions.
It and it's CSS was validated and complies with both the: CSS and HTML 4.01 validators from W3C.
NOTE: All CSS validates except the "New Window Buttons" which include some invalid code (ie: hacks),
added PicoSearch Tables, and warnings for using transparent backgrounds when color foregrounds defined.
Copyright © 2003, 2004, 2005, 2006, 2007 by Bill Sanders / Full site last modified: October 21, 2006
Any reproduction, printing, or selling of this content is prohibited without express written consent from William D. Sanders.