Doug forwarded the message to me and I've had a look through the source and headers. There's no nasty code attached or anything like that, but you can bet it's an attempt to initiate some sort of scam.
First, the sender has his mailer program set to a time zone which is one hour ahead of the U.K. The supplied originating e-mail address has a .no domain, which is Norway. It's possible that a U.K. company could use a Norwegian e-mail address, but not likely.
A check of the routing shows the message went via a server in Denmark before hitting the Pan Am Sat server on its way to North America.
The tell-tale line is buried down in the source as the original "to:" line: rrep@telus.ne
That's Niger (not to be confused with Nigeria, but still in Africa). My guess is that this con-artist was using a Scandinavian server as a proxy and that the .ne address was a copy sent to himself.
Of course, a search for the supposed company on the internet reveals nothing.
So scammers, you'll have to do better than this to fool us. And take some English lessons!
![[Linked Image]](https://www.electrical-contractor.net/ubb/mad.gif)
[This message has been edited by pauluk (edited 01-19-2005).]