Analizziamo lo spam - Truffa

Oggi, scaricando la posta, mi è arrivata una bella mail in inglese da parte di una certa signora Miriam Daivds. Colgo l'occasione per mostrare la mail truffa e per analizzarla:

RAVE YOUR INDULGENCE

Greetings to you in the most wonderful name of our God Almighty. His richest blessings shall be upon you forever.

I am Mrs. Miriam Davids, I am 51 years old from Netherlands, I am deaf and suffering from a long time cancer of the Lungs which also affected my brain, from all indication my conditions is really deteriorating and it is quite obvious that, according to my doctors they have advised me that I live for the next four months, this is because the cancer stage has gotten to a very bad stage.

I was brought up from a motherless babies home, was married to my late husband for twenty years without a child. My husband died in a fatal motor accident. Before his death we were true Christians.

Since his death I decided not to re-marry, I sold all my inherited belongings and deposited all the sum of $13.5 million dollars with a Security Company. Presently, this money is still with them and the management just wrote me as the true owner to come forward to receive the money for keeping it so long Or rather issue a letter of authorization to somebody to receive it on my behalf since I can not come over because of my illness or they get it seized.

Presently, I'm with my laptop in a hospital where I have been undergoing treatment for cancer of the lungs. I have since lost my ability to talk and my doctors have told me that I have only a few months to live.It is my last wish to see that this money is invested to any organization of your choice and distributed each year among the charity organizations, the poor and the motherless babies' homes where I come from.

I want you as a God fearing person, to also use this money to fund churches, orphanages and widows. I took this decision, before I rest in peace because my time will soon be up. As soon as I receive your reply I shall give you the contact of the Security Company. I will also issue you a letter of authority that will improve you as the new beneficiary of my fund.

Please assure me that you will act accordingly as I stated herein.
I shall wait at your prayerful reply .

Yours truely,
Mrs Miriam Daivds.

Spettacolo. Povera donna olandese vedova con 51 anni e malata. A quanto pare, il marito le ha lasciato una bella somma. Come al solito, si offre di dare tutto a me...tanto è sicura che li spenderò per chiese, orfanotrofi... la fregatura? Oltre al fatto che non è vera neanche una parola (ti sto scrivendo da un portatile nell'ospedale dove mi sto curando), se si risponde prima o poi chiederà soldi (qualche migliaio) per costi di transazione eccetera. Peccato che i 13 milioni di dollari promessi non li vedrà mai nessuno :-D. La mail è inviata dall'indirizzo miriam.davids88@yahoo.ca...in teoria, Yahoo Canadese.

Ora analizziamo da dove proviene la mail: la donna dice di essere olandese. Vediamo...apriamo le intestazioni della mail da Thunderbird: Visualizza -> Intestazioni -> Tutte.
Mi soffermo su un campo:
Received: from gmail.com (dsl-243-177-27.telkomadsl.co.za [41.243.177.27]) by mx.google.com with SMTP id q26si1603340ele.6.2007.12.21.04.28.59;

Umh, questo (dsl-243-177-27.telkomadsl.co.za) non mi ispira per niente. Apro il terminale e uso il whois, che mi mostra le seguenti informazioni:

% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.243.0.0 - 41.243.255.255'

inetnum:        41.243.0.0 - 41.243.255.255
netname:        IPNET-BROADBAND
descr:          Telkom SA Limited
descr:          Integrated Network Planning
descr:          Private Bag X74
descr:          Pretoria
descr:          Gauteng
descr:          0001
country:        ZA
admin-c:        MST95-AFRINIC
tech-c:         PB455-AFRINIC
tech-c:         JDU24-AFRINIC
status:         ASSIGNED PA
mnt-by:         TELKOM-SA-IPNET-MNT
remarks:        noc e-mail: , phone: +27-12-680-0224
remarks:        abuse e-mail: , phone: +27-12-680-7561
source:         AFRINIC # Filtered
parent:         41.240.0.0 - 41.247.255.255

Bello vero? L'indirizzo Ip da cui è stata spedita la mail viene da un servizio di broadband in Pretoria...Sudafrica :-) Cavolo, spiegate a questa povera donna morente che è ad uno stadio avanzato, pensa addirittura di essere in Olanda e invece è in Africa...

Non cascateci!!!!