He's using a web-based email service like hotmail, so this is tricky. The best you can do is forward that header to abuse@caramail.com and hope they nuke his account. You might also want to send it to abuse@ripe.net, since they are the owners of the IP space that caramail is using: Netname: RIPE-CBLK3 Netblock: 195.0.0.0 - 195.255.255.255 Maintainer: RIPE Coordinator: RIPE Network Coordination Centre (RIPE-NCC-ARIN) nicdb@RIPE.NET +31 20 535 4444 Fax- - +31 20 535 4445 I agree with a previous poster that you should also send a copy to the AG's office. Not sure what they'll do from there. Didn't this scam first start out on fax machines and work it's way into email? I remember working at a software company in 1996/7 and the president of the company got a letter VERY similar to that. hehe ~G -----Original Message----- From: plug-discuss-admin@lists.PLUG.phoenix.az.us [mailto:plug-discuss-admin@lists.PLUG.phoenix.az.us]On Behalf Of David Demland Sent: Wednesday, March 14, 2001 2:21 PM To: plug-discuss@lists.PLUG.phoenix.az.us Subject: RE: confidential business Gary, Here is the header: >From samuel_churchil@caramail.com Wed Mar 14 05:39:34 2001 Received: from mail2.caramail.com (mail2.caramail.com [195.68.99.69]) by cadtel.com (8.8.5) id FAA12603; Wed, 14 Mar 2001 05:39:29 -0700 (MST) Received: from caramail.com (www30.caramail.com [195.68.99.115]) by mail2.caramail.com (8.8.8/8.8.8) with SMTP id NAA07484 for ddemland@cadtel.com; Wed, 14 Mar 2001 13:41:54 GMT Posted-Date: Wed, 14 Mar 2001 13:41:54 GMT From: samuel churchil To: ddemland@cadtel.com Message-ID: <984574084018591@caramail.com> X-Mailer: Caramail - www.caramail.com X-Originating-IP: [193.251.161.27] Mime-Version: 1.0 Subject: confidential business Date: Wed, 14 Mar 2001 11:48:04 GMT+1 Content-Type: multipart/mixed; boundary="=_NextPart_Caramail_018591984574084_ID" X-UIDL: 8746477d6af6312d72f96677433721ab Status: U Let me know what you find. I am working on it as well, but I have never done this before. Thank You, David Demland Qa/Process Manager CADTEL Systems, Inc. 11201 N. Tatum Ste. 200 Phoenix, AZ 85028 (602) 648-6054 Fax: (602) 648-6054 ddemland@cadtel.com -----Original Message----- From: plug-discuss-admin@lists.PLUG.phoenix.az.us [mailto:plug-discuss-admin@lists.PLUG.phoenix.az.us]On Behalf Of Gary Nichols Sent: Wednesday, March 14, 2001 11:34 AM To: plug-discuss@lists.PLUG.phoenix.az.us Subject: RE: confidential business David - can you send the entire header of the message? I track down SPAMmers on a daily basis here. ~ Gary -----Original Message----- From: plug-discuss-admin@lists.PLUG.phoenix.az.us [mailto:plug-discuss-admin@lists.PLUG.phoenix.az.us]On Behalf Of David Demland Sent: Wednesday, March 14, 2001 11:35 AM To: Plug-Discuss Subject: FW: confidential business I just got this E-Mail here at work. It is most likely not true. Question: how do I find out where it came from. Any ideas? Thank You, David Demland Qa/Process Manager CADTEL Systems, Inc. 11201 N. Tatum Ste. 200 Phoenix, AZ 85028 (602) 648-6054 Fax: (602) 648-6054 ddemland@cadtel.com -----Original Message----- From: samuel churchil [mailto:samuel_churchil@caramail.com] Sent: Wednesday, March 14, 2001 4:48 AM To: ddemland@cadtel.com Subject: confidential business MR SAMUEL CHURCHILL TEL 225 07 96 94 14 FAX 225 21 25 25 09 DEAR SIR I AM MR SAMUEL CHURCHILL ,THE ONLY SON OF LATE CHIEF JOSEPH ALFRED CHURCHIL FROM SIERRA LEONE. I GOT YOUR CONTACT FROM THE DIARY OF MY LATE UNCLE REV CHARLES DICKSON CHURCHILL WHO DIED ON JANUARY 2000 AS A RESULT OF AIR CRASH INVOLVING KENYA AIRWAYS. MY SOURCE OF YOUR CONTACT GAVE ME THE COURAGE AND CONFIDENCE TO RELY ON YOU. I AM WRITING YOU IN ABSOLUTE CONFIDENCE PRIMARILY TO SEEK YOUR ASSISTANCE TO TRANSFER OUR CASH OF THIRTEEN MILLION EIGHT HUNDRED THOUSAND DOLLARS ($ 13,800,000) NOW IN THE CUSTODY OF A SECURITY TRUST COMPANY HERE IN ABIDJAN TO YOUR PRIVATE ACCOUNT PENDING OUR ARRIVAL TO YOUR COUNTRY. SOURCE OF THIS MONEY MY LATE FATHER ,CHIEF JOSEPH ALFRED CHURCHILL , A NATIVE OF MENDE DISTRICT IN THE NORTHERN PROVINCE OF SIERRA LEONE , HE WAS THE GENERAL MANAGER OF SIERRA LEONE MINING COOPERATION (S.L.M.C.) FREETOWN. ACCORDING TO MY FATHER , THIS MONEY WAS THE INCOME ACCRUED FROM MINING COOPERATION' S OVER DRAFT AND> MINOR SALES .BEFORE THE PEAK OF THE CIVIL WAR BETWEEN THE REBELS FORCES OF MAJOR PAUL KOROMA AND THE COMBINED FORCES OF ECOMOG PEACE KEEPING OPERATION THAT> ALMOST DESTROYED MY COUNTRY ,FOLLOWING THE FORCEFUL REMOVAL FROM POWER OF THE CIVILIAN ELECTED PRESIDENT AHMED TEJAN KABBAH BY THE REBELS. MY FATHER HAD ALREADY MADE ARRANGEMENT FOR HIS FAMILY _MY MOTHER ,MY YOUNGER SISTER AND MYSELF TO BE EVACUATED TO ABIDJAN, COTE D'IVOIRE WITH OUR PERSONAL EFFECTS AND THE BOX CONTAINING THE MONEY THROUGH THE AID OF UN EVACUATION TEAM. MY FATHER INSTRUCTED US TO DEPOSIT THE BOX IN A PRIVATE SECURITY COMPANY FOR THE SAFE CUSTODY UNTIL AFTER THE WAR WHEN HE WILL JOIN US. DURING THE WAR IN MY COUNTRY, AND FOLLOWING THE INDISCRIMINATE LOOTING OF PUBLIC AND GOVERNMENT PROPERTIES BY THE REBEL FORCES, THE SIERRA LEONE MINING CORP WAS ONE OF THE TARGET LOOTED AND DESTROYED. MY FATHER INCLUDING OTHER TOP GOVERNMENT FUNCTIONARIES WERE ATTACKED AND KILLED BY THE REBELS IN APRIL 2000 BECAUSE OF HIS RELATIONSHIP WITH THE CIVILIAN GOVERNMENT OF AHMED TEJAN KABBAH. AS A RESULT OFMY FATHERS DEATH ,AND WITH THE NEWS OF MY UNCLE 'S INVOLVEMENT IN THE AIR CRASH IN JANUARY ,DASHED OUR HOPE OF SURVIVAL. THE UNTIMELY DEATHS CAUSED MY MOTHERS HEART FAILURE AND OTHER RELATED COMPLICATIONS OF WHICH SHE LATER DIED IN THE HOSPITAL AFTER WE MUST HAVE SPENT A LOT OF MONEY ON HER. NOW MY 16 YEAR OLD SISTER AND MYSELF (28 ) ARE ALONE IN THIS STRANGE COUNTRY SUFFERING WITHOUT ANY CARE OR> HELP.WITHOUT ANY RELATION, WE ARE NOW REFUGES AND> ORPHANS. OUR ONLY HOPE NOW IS IN YOU AND THE BOX WE DEPOSITED IN THE SECURITY COMPANY. TO THIS EFFECT, I HUMBLY SOLICIT YOUR ASSISTANCE IN THE FOLLOWING WAYS. _TO ASSIST ME CLAIM THIS BOX FROM THE SECURITY COMPANY AS CO-BENEFICIARY. TO TRANSFER THIS MONEY IN YOUR NAME TO YOUR COUNTRY TO MAKE A GOOD ARRAAANGEMENT ON ANY PROFITABLE INVESTMENT ON OUR BEHALF AND YOU, THE CARE TAKER TO SECURE A COLLEGE FOR MY LITTLE SISTER AND MY SELF IN YOUR COUNTRY TO FURTHER OUR EDUCATION AND TO MAKE ARRANGEMENT FOR OUR TRAVEL WITH YOU TO YOUR COUNTRY AFTER YOU HAVE TRANSFERRED THIS FUND. MOST IMPORTANTLY, THE SECURITY COMPANY OFFICIALS DO NOT KNOW THE EXACT CONTENT OF THE BOX BECAUSE IT WAS DECLARED FAMILY VALUABLES. THE WHOLE DOCUMENTS ISSUED AFTER DEPOSIT IS IN MY CUSTODY. FOR YOUR ASSISTANCE, I BEG TO CONCEDE 15 % OF THIS MONEY TO YOU FOR YOUR EFFORTS AND ASSISTANCE. LASTLY, I URGE YOU TO KEEP THIS TRANSACTION STRICTLY CONFIDENTIAL. NB : PLEASE, I AM LOOKING FORWARD TO YOUR QUICK AND> POSITIVE RESPONSE FOR MORE DISCUSSIONS. BEST REGARDS. MR. SAMUEL CHURCHILL _________________________________________________________ Le journal des abonnés Caramail - http://www.carazine.com ________________________________________________ See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail. Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss ________________________________________________ See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail. Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss ________________________________________________ See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail. Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss