恐嚇與詐騙郵件 Scams and Frauds

最近收到標題名為Res 的一封郵件，寄件者是Ms.Ella Golan，說他是以色列第一銀行的頭頭balabala，有重要的事要跟我進一步聯繫，感覺像是要來查水表。

I am Ms.Ella Golan, I am the Executive Vice President Banking Division with FIRST INTERNATIONAL BANK OF ISRAEL LTD (FIBI).

不過看寄件人跟google一下就知道是假的。看起來寄件人在宏都拉斯(Honduras)

想不到還有個網站專門在彙整這種幸運信+恐嚇信的大全集，各位收到來路不明郵件，可以稍做查證。也請提醒親朋好友不要亂點來路不明郵件，小心查證。

http://scamhunter.org/2015/11/ella-golan-first-international-bank-of-israel/

Ms. Ella Golan <ggmejia@ihcafe.hn>

Received: from 120.xx.xx.xx
 by xx.xx.xx.tw with  ESMTP Server V6.00(27686:0:AUTH_RELAY)
 (envelope-from <ggmejia@ihcafe.hn>); Tue, 31 Oct 2017 20:22:50 +0800 (CST)
Return-Path: <ggmejia@ihcafe.hn>

Received: from 190.92.47.134
 by mgates.nd.nthu.edu.tw with MailGates ESMTP Server V4.0(7269:0:AUTH_NONE)
 (envelope-from <ggmejia@ihcafe.hn>); Tue, 31 Oct 2017 20:22:51 +0800 (CST)
Return-Path: <ggmejia@ihcafe.hn>
Received: from localhost (localhost [127.0.0.1])
 by mail.ihcafe.hn (Postfix) with ESMTP id D340230128839;
 Tue, 31 Oct 2017 05:23:09 -0600 (CST)
Received: from localhost (localhost [127.0.0.1])
 by mail.ihcafe.hn (Postfix) with ESMTP id 1B89C30128836;
 Tue, 31 Oct 2017 05:23:09 -0600 (CST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ihcafe.hn;
 s=283B9DA8-90CA-11E5-9F19-63FCB66FF19A; t=1509448989;
 bh=83bnW/aYbAzYBRpt9O7xEC8dBgQ5IFtQvlW+ZoP5pNY=;
 h=MIME-Version:To:From:Date:Message-Id;
 b=gCim5XJvEynggAhrh0Q+YkH0UPPrFYI9FvgS1+IDDkduf2gBvd/SD+jLZE/jcVkiX
  qC2yy0z2dFLBxObFRhA+VepFV0sHmY2+PMqtv66ZfutzwIY5CepiN7QhbTYUC96p67
  iiKtKi9eJsN8Kek3QhvxnEWoENIeyCRdnUK2BtUQ=
X-Virus-Scanned: amavisd-new at ihcafe.hn
Received: from [192.168.8.103] (unknown [154.118.88.149])
 by mail.ihcafe.hn (Postfix) with ESMTPSA id 531DA3014A379;
 Tue, 31 Oct 2017 05:22:31 -0600 (CST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Res
To: inbox <ggmejia@ihcafe.hn>
From: "Ms. Ella Golan" <ggmejia@ihcafe.hn>
Date: Tue, 31 Oct 2017 11:20:37 +0000
Reply-To: elgolanel4032@foxmail.com
Message-Id: <20171031112232.531DA3014A379@mail.ihcafe.hn>