by Koraxbear
I've seen this one a few times in my mailbox and always know it is a scam, in this I got sent the message 3 times in two days here is the message and the headers:
I will like you to help me see my final wish come true,i am very sick with cancer and i wantHeader 1
to donate my estate to the orphanage and widows($18.5M) is currently in the Security Company .
I will give you more instruction as soon as i hear from you.
Judith Ferguson,
Return-Path: <[email protected]>Header 2
X-Original-To: (removed)
Delivered-To: (removed)
Received: from mxen7.enta.net (mxen7.enta.net [78.33.48.10])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id EACAA19962D
for <(removed)>; Mon, 13 Sep 2010 20:50:51 +0100 (BST)
Received: from localhost (localhost [127.0.0.1])
by mxen7.enta.net (Postfix) with ESMTP id B866938CD28
for <(removed)>; Mon, 13 Sep 2010 20:50:51 +0100 (BST)
Received: from mxen7.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 79298-10 for <(removed)>;
Mon, 13 Sep 2010 20:50:49 +0100 (BST)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from vsmtp2.tin.it (vsmtp2.tin.it [212.216.176.222])
by mxen7.enta.net (Postfix) with ESMTP id EF6DD38CCF2
for <(removed)>; Mon, 13 Sep 2010 20:50:48 +0100 (BST)
Received: from User (41.26.87.188) by vsmtp2.tin.it (8.0.022) (authenticated as [email protected])
id 49F5BE42289484CB; Mon, 13 Sep 2010 21:50:25 +0200
Message-ID: <[email protected]> (added by [email protected])
Reply-To: <[email protected]>
From: "info"<[email protected]>
Subject: [Norton AntiSpam]***SPAM*** important
Date: Mon, 13 Sep 2010 21:50:21 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: Yes, hits=6.91 tagged_above=-999 required=3 tests=AWL=1.138,
BAYES_60=1, FORGED_MUA_OUTLOOK=3.116, SARE_CHARSET_W1251=1.656
X-Spam-Level: ******
X-Spam-Flag: YES
X-Brightmail-Tracker: AAAAChQrRdITjN18Donffgr7SqoV9YqqFfZabBX2YPEV9mvmFfZsexX2Yyk=
Return-Path: <[email protected]>Header 3
X-Original-To: (removed)
Delivered-To: (removed)
Received: from mxen4.enta.net (mxen4.enta.net [78.33.48.7])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id A287B199692
for <(removed)>; Tue, 14 Sep 2010 17:18:28 +0100 (BST)
Received: from localhost (localhost [127.0.0.1])
by mxen4.enta.net (Postfix) with ESMTP id 6C7FBDB96F9
for <(removed)>; Tue, 14 Sep 2010 17:18:28 +0100 (BST)
Received: from mxen4.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 59596-07 for <(removed)>;
Tue, 14 Sep 2010 17:18:26 +0100 (BST)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from vsmtp4.tin.it (vsmtp4.tin.it [212.216.176.224])
by mxen4.enta.net (Postfix) with ESMTP id 2685ADB96F8
for <(removed)>; Tue, 14 Sep 2010 17:18:26 +0100 (BST)
Received: from User (41.29.227.86) by vsmtp4.tin.it (8.5.113) (authenticated as [email protected])
id 4BCE3CBE0B455153; Tue, 14 Sep 2010 18:17:08 +0200
Message-ID: <[email protected]> (added by [email protected])
Reply-To: <[email protected]>
From: "info"<[email protected]>
Subject: [Norton AntiSpam]***SPAM*** important
Date: Tue, 14 Sep 2010 18:17:03 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: Yes, hits=6.495 tagged_above=-999 required=3 tests=AWL=1.722,
BAYES_50=0.001, FORGED_MUA_OUTLOOK=3.116, SARE_CHARSET_W1251=1.656
X-Spam-Level: ******
X-Spam-Flag: YES
X-Brightmail-Tracker: AAAAChQrRdITjN18Donffgr7SqoV9YqqFfZabBX2YPEV9mvmFfZsexX2Yyk=
Return-Path: <[email protected]>
X-Original-To: (removed)
Delivered-To: (removed)
Received: from mxen9.enta.net (mxen9.enta.net [78.33.48.12])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id C21471996B3
for <(removed)>; Tue, 14 Sep 2010 18:41:54 +0100 (BST)
Received: from localhost (localhost [127.0.0.1])
by mxen9.enta.net (Postfix) with ESMTP id 4C019205D2A
for <(removed)>; Tue, 14 Sep 2010 18:41:54 +0100 (BST)
Received: from mxen9.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 37006-10 for <(removed)>;
Tue, 14 Sep 2010 18:41:52 +0100 (BST)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from vsmtp4.tin.it (vsmtp4.tin.it [212.216.176.224])
by mxen9.enta.net (Postfix) with ESMTP id F4201205D5F
for <(removed)>; Tue, 14 Sep 2010 18:41:51 +0100 (BST)
Received: from User (41.29.137.136) by vsmtp4.tin.it (8.5.113) (authenticated as [email protected])
id 4BCE3CBE0B46ADF4; Tue, 14 Sep 2010 19:41:32 +0200
Message-ID: <[email protected]> (added by [email protected])
Reply-To: <[email protected]>
From: "info"<[email protected]>
Subject: [Norton AntiSpam]***SPAM*** important
Date: Tue, 14 Sep 2010 19:41:27 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: Yes, hits=6.323 tagged_above=-999 required=3 tests=AWL=1.550,
BAYES_50=0.001, FORGED_MUA_OUTLOOK=3.116, SARE_CHARSET_W1251=1.656
X-Spam-Level: ******
X-Spam-Flag: YES
X-Brightmail-Tracker: AAAAChQrRdITjN18Donffgr7SqoV9YqqFfZabBX2YPEV9mvmFfZsexX2Yyk=
Yes, it's very definitely a scam. I have moved this thread from the charity scams forum, which is for scammers posing as a charity, to this forum for advance fee fraud scams. 