Spam: The other white meat

Ugh. Selling something else, and, yet another scam. Here's the details on this one:

My post: http://newyork.craigslist.org/brk/sys/135483890.html

The first email:

Hello i have intrest in buying your Mac which am pok with your fixed price get back to me with more dettails and how and where we can meet for pick up. Thankz

I responded by suggesting a place to meet. Of course, now comes the revelation that they aren't near by:

Hello i am in florida i wont be able to come down but i can send you a bank of america money order which will be deliverd at your home address and i will wait till you confirm the money order before you ship it out just get back to me with your full name and valid addrress so i can send out the money order today and dont worry about the shipping i will be paying for that myself with fedex private shipping account. am waiting to read from you soon

The dead give away is the florida/fedex combo. And within a few minutes I receive the following. You can clearly see that they are using "boa.com" for bank of america, yet a quick check of http://boa.com/ makes it pretty clear that this isn't a bank. Interestingly, looks like the user sending stuff is darec@islamabad.net. I removed my email and address from this, but I don't think it's really needed to see what's going on here.

Here are the headers from the email I received:

Return-Path:

Received: from 127.0.0.1 by freemail (envelope-from , uid 1020) with qmail-scanner-1.24
(
Clear:RC:1(127.0.0.1):.
Processed in 0.220363 secs); 21 Feb 2006 00:17:58 -0000
Received: from localhost (HELO wapda.com) (127.0.0.1)
by 0 with SMTP; 21 Feb 2006 00:17:58 -0000
X-MessageWall-Score: 0 (wapda.com)
Received: from [209.71.203.5] by wapda.com (MessageWall 1.0.9) with SMTP; 21 Feb 2006 0:17:58 -0000
Received: from 192.116.71.104 (proxying for 192.168.0.5, 192.116.71.104)
(SquirrelMail authenticated user darec@islamabad.net)
by webmail.islamabad.net with HTTP;
Mon, 20 Feb 2006 19:17:58 -0500 (EST)
Message-ID: <34790.192.116.71.104.1140481078.squirrel@webmail.islamabad.net>
Date: Mon, 20 Feb 2006 19:17:58 -0500 (EST)
Subject: ******Your Money Order #$500 Has Been Approved*******
From: "Bank Of America"
User-Agent: SquirrelMail/1.4.2
MIME-Version: 1.0
Content-Type: text/html;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at eggplantmedia.com

Here's the html version of the email:

Dear
Arthur,

Bank Of America hereby congratulate you and at the same time informing you that the Money Order sent to you from Beckham Zizo has been Approved, Money
Order SM:$500.00.

 
Auction Item: Mini Mac
Auction Site: Craigslist.org

Order Number:
845645794

 Payment status is listed below:-

Billed from:

Buyer's Billing
Informations:-

Name: Beckham Zizo 
Address: 2829 Forestbrook Dr  North

City: Lakeland
State: FL

Zip Code: 33811.
Country: USA

Card Type: Visa
Name On
Card: Beckham M. Zizo 
Amount Charged:
$9.34.00
Card Number: 427**********739

Expiry Date: 06/07
CCV2:
564

Please verify that the
following address (as entered by the buyer) is correct:- Country:
USA