Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by therusty Sat May 08, 2010 7:16 am
At least, that's my bet. The only relveant search hit I got for this was http://www.scamwarners.com/forum/viewtopic.php?f=13&t=5272&p=18896 a thread about "Blessing" (had a common IP address) so I thought you'd enjoy a new report.

Received: from mx05.mfg.onr.siteprotect.com (unknown [192.168.33.227])
by mf30.mfg.siteprotect.com (Postfix) with ESMTP id 3B03FEA008D
for <[my email]>; Fri, 7 May 2010 21:09:57 -0500 (CDT)
Received: from smtp1-pc.aruba.it (smtp184-pc.aruba.it [62.149.157.184])
by mx05.mfg.onr.siteprotect.com (Postfix) with SMTP id BE09D55C0B1
for <[my email]>; Fri, 7 May 2010 21:09:56 -0500 (CDT)
Received: (qmail 29000 invoked by uid 89); 8 May 2010 02:09:46 -0000
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on smtp1-pc.ad.aruba.it
X-Spam-Level: ****
X-Spam-Status: No, score=4.0 required=5.0 tests=BAYES_50,MIME_HTML_ONLY,sp195
autolearn=no version=3.2.5, No
Received: from unknown (HELO localhost) (10.10.176.102)
by smtp1-pc.ad.aruba.it with SMTP; 8 May 2010 02:09:45 -0000
MIME-Version: 1.0
X-Mailer: AtMail PHP 5.1
Message-ID: <[email protected]>
To: <[email protected]>
Reply-To: [email protected]
Content-Type: text/html; charset="utf-8"
X-Origin: 222.124.249.115
Date: Sat, 8 May 2010 04:09:45 +0200
Subject: hello
From: [email protected]
Content-Transfer-Encoding: quoted-printable
Mail-Filter-Gateway: Scanned OK
X-Mail-Filter-Gateway-SpamDetectionEngine: NOT SPAM,
MailFilterGateway Engine (Score=1.673, Score Required 3,
autolearn=disabled, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.67)
X-Mail-Filter-Gateway-SpamScore: *
X-Mail-Filter-Gateway-From: [email protected]
X-Mail-Filter-Gateway-To: [my email]


hi
how are you today and your health?i am tecy.i have an important issue to disscuse with you,if you dont mind.i will appreciate your feed back.take care and God bless you.
yours sincerely
tecy


--------------------------------------------------------------------------------
Nuova grafica e nuove funzionalitĂ ! Crea subito Gratis la tua nuova Casella di Posta Katamail
Advertisement

by Chris Fuller Sat May 08, 2010 11:46 am
Hello therusty and welcome to ScamWarners!

i have an important issue to disscuse with you


This 'important issue' is very likely to be connected to money. 'Tecy' could be pretending to be an orphan and/or refugee who has inherited several million dollars (and yes, you are right, one of those could add in the possibility of love, just to further tempt you); or could be pretending to be a banker who has discovered some millions in the bank as 'excess' or once belonging to someone who has died without a next-of-kin; or could be pretending to be an investor wanting to invest in 'your country'; or maybe several other scenarios.

The one thing that is certain to happen though: there will be some fees to pay. The background story may vary, but there will always been a demand for money before anything (money transfer, meeting, investment) will happen. The promised event will never happen, of course: it is a lie and a scam.

Some scammers think that they will have more luck in prompting replies if they don't mention their background story of millions of dollars (or pounds, or euros) in their first email. This is what this scammer is hoping for.

The email was sent from an Italian webmail provider. The IP address:

X-Origin: 222.124.249.115


is an Indonesian Proxy Server, which hides where the sender of the email is actually located. This probably isn't deliberate: it is probably just what their local internet café uses. My guess would be that it was sent from West Africa.

Thank you for posting this, as it is a good example of this type of 'I'm-not-telling-you-yet-what-it-is-all-about' scam mail.
by Ralph Sun May 09, 2010 10:56 pm
Finding a matching IP really only proves that the same internet connection was used for sending each email.

The random nature of receiving an email like the one you received is a very strong indicator of a scam.

For what its worth, it may not be the same scammer in both cases so there is no way to be sure of the type of scam yours is, we can only make an educated guess.

BTW, my guess would be another claiming to be an orphan who quickly falls in love and needs your money to collect the large sum of fake money that daddy left for her 8)

Who is online

Users browsing this forum: ClaudeBot, Majestic-12 [Bot] and 20 guests