subject info? someone on their deathbed, or is it?

Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.

subject info? someone on their deathbed, or is it?

by Koraxbear Wed Sep 15, 2010 11:24 pm
I've seen this one a few times in my mailbox and always know it is a scam, in this I got sent the message 3 times in two days here is the message and the headers:

I will like you to help me see my final wish come true,i am very sick with cancer and i want
to donate my estate to the orphanage and widows($18.5M) is currently in the Security Company .
I will give you more instruction as soon as i hear from you.

Judith Ferguson,


Header 1
Return-Path: <[email protected]>
X-Original-To: (removed)
Delivered-To: (removed)
Received: from mxen7.enta.net (mxen7.enta.net [78.33.48.10])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id EACAA19962D
for <(removed)>; Mon, 13 Sep 2010 20:50:51 +0100 (BST)
Received: from localhost (localhost [127.0.0.1])
by mxen7.enta.net (Postfix) with ESMTP id B866938CD28
for <(removed)>; Mon, 13 Sep 2010 20:50:51 +0100 (BST)
Received: from mxen7.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 79298-10 for <(removed)>;
Mon, 13 Sep 2010 20:50:49 +0100 (BST)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from vsmtp2.tin.it (vsmtp2.tin.it [212.216.176.222])
by mxen7.enta.net (Postfix) with ESMTP id EF6DD38CCF2
for <(removed)>; Mon, 13 Sep 2010 20:50:48 +0100 (BST)
Received: from User (41.26.87.188) by vsmtp2.tin.it (8.0.022) (authenticated as [email protected])
id 49F5BE42289484CB; Mon, 13 Sep 2010 21:50:25 +0200
Message-ID: <[email protected]> (added by [email protected])
Reply-To: <[email protected]>
From: "info"<[email protected]>
Subject: [Norton AntiSpam]***SPAM*** important
Date: Mon, 13 Sep 2010 21:50:21 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: Yes, hits=6.91 tagged_above=-999 required=3 tests=AWL=1.138,
BAYES_60=1, FORGED_MUA_OUTLOOK=3.116, SARE_CHARSET_W1251=1.656
X-Spam-Level: ******
X-Spam-Flag: YES
X-Brightmail-Tracker: AAAAChQrRdITjN18Donffgr7SqoV9YqqFfZabBX2YPEV9mvmFfZsexX2Yyk=



Header 2

Return-Path: <[email protected]>
X-Original-To: (removed)
Delivered-To: (removed)
Received: from mxen4.enta.net (mxen4.enta.net [78.33.48.7])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id A287B199692
for <(removed)>; Tue, 14 Sep 2010 17:18:28 +0100 (BST)
Received: from localhost (localhost [127.0.0.1])
by mxen4.enta.net (Postfix) with ESMTP id 6C7FBDB96F9
for <(removed)>; Tue, 14 Sep 2010 17:18:28 +0100 (BST)
Received: from mxen4.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 59596-07 for <(removed)>;
Tue, 14 Sep 2010 17:18:26 +0100 (BST)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from vsmtp4.tin.it (vsmtp4.tin.it [212.216.176.224])
by mxen4.enta.net (Postfix) with ESMTP id 2685ADB96F8
for <(removed)>; Tue, 14 Sep 2010 17:18:26 +0100 (BST)
Received: from User (41.29.227.86) by vsmtp4.tin.it (8.5.113) (authenticated as [email protected])
id 4BCE3CBE0B455153; Tue, 14 Sep 2010 18:17:08 +0200
Message-ID: <[email protected]> (added by [email protected])
Reply-To: <[email protected]>
From: "info"<[email protected]>
Subject: [Norton AntiSpam]***SPAM*** important
Date: Tue, 14 Sep 2010 18:17:03 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: Yes, hits=6.495 tagged_above=-999 required=3 tests=AWL=1.722,
BAYES_50=0.001, FORGED_MUA_OUTLOOK=3.116, SARE_CHARSET_W1251=1.656
X-Spam-Level: ******
X-Spam-Flag: YES
X-Brightmail-Tracker: AAAAChQrRdITjN18Donffgr7SqoV9YqqFfZabBX2YPEV9mvmFfZsexX2Yyk=



Header 3

Return-Path: <[email protected]>
X-Original-To: (removed)
Delivered-To: (removed)
Received: from mxen9.enta.net (mxen9.enta.net [78.33.48.12])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id C21471996B3
for <(removed)>; Tue, 14 Sep 2010 18:41:54 +0100 (BST)
Received: from localhost (localhost [127.0.0.1])
by mxen9.enta.net (Postfix) with ESMTP id 4C019205D2A
for <(removed)>; Tue, 14 Sep 2010 18:41:54 +0100 (BST)
Received: from mxen9.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 37006-10 for <(removed)>;
Tue, 14 Sep 2010 18:41:52 +0100 (BST)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from vsmtp4.tin.it (vsmtp4.tin.it [212.216.176.224])
by mxen9.enta.net (Postfix) with ESMTP id F4201205D5F
for <(removed)>; Tue, 14 Sep 2010 18:41:51 +0100 (BST)
Received: from User (41.29.137.136) by vsmtp4.tin.it (8.5.113) (authenticated as [email protected])
id 4BCE3CBE0B46ADF4; Tue, 14 Sep 2010 19:41:32 +0200
Message-ID: <[email protected]> (added by [email protected])
Reply-To: <[email protected]>
From: "info"<[email protected]>
Subject: [Norton AntiSpam]***SPAM*** important
Date: Tue, 14 Sep 2010 19:41:27 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: Yes, hits=6.323 tagged_above=-999 required=3 tests=AWL=1.550,
BAYES_50=0.001, FORGED_MUA_OUTLOOK=3.116, SARE_CHARSET_W1251=1.656
X-Spam-Level: ******
X-Spam-Flag: YES
X-Brightmail-Tracker: AAAAChQrRdITjN18Donffgr7SqoV9YqqFfZabBX2YPEV9mvmFfZsexX2Yyk=

Advertisement

Re: subject info? someone on their deathbed, or is it?

by Jillian Thu Sep 16, 2010 12:32 am
Hi and thank you for posting this. :D Yes, it's very definitely a scam. I have moved this thread from the charity scams forum, which is for scammers posing as a charity, to this forum for advance fee fraud scams.

The supposed plea of a wealthy widow dying of cancer is very, very common and comes in a few slightly different forms.

If you look at the "introduction to advance fee fraud" topic in this forum, you'll see an explanation of how the scam works. Please let us know if you have any specific questions.

Have you sent a payment to a scammer with Western Union and now realize it's a scam? If the payment has not been picked up, you can cancel it immediately! 1-800-448-1492

Follow ScamWarners on Twitter: http://twitter.com/ScamWarners
Return to Advance fee fraud

Who is online

Users browsing this forum: ClaudeBot, Majestic-12 [Bot] and 13 guests