SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 Strange mail (spoofed?)

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
Mr. Green
419Eater is my life


Joined: 07 Aug 2006
Posts: 332
Location: is everything


PostPosted: Thu Feb 10, 2011 3:50 pm Reply with quoteBack to top

Today I received an email that would appear to be from a friend of mine saying he is stranded in the UK and asking me to loan him GBP 1,500. I can't imagine this friend would ever be stuck without access to money (or that he would approach me if he was). Plus the language of this mail has several lad hallmarks.... and the originating IP traces back to Nigeria. Uh oh!

The strange thing is the mail appears to be sent from my friend's actual email address and when I click on the reply button the address comes up the same I normally use to write to him.

I'd like to warn my friend that his account may have been compromised, but don't want someone in Nigeria picking up my warning if they are in his box. I'd call the friend but we live on different continents with maybe an 11 hour time difference. So before I do that, any thoughts among the people here of what is going on?

Specifically:

> Is the return path of this mail somehow being redirected to another account than shown?

> If I start a new mail to my friend would it be more likely to reach him for real or do we think someone is in his account and scamming from there?

One thing I see in the header is that the FROM and TO lines both show my friend's real name and email address, but I am otherwise not expert in reading these things.

Thanks.


Quote:
Delivered-To: XXXXX
Received: by 10.91.209.5 with SMTP id l5cs86322agq;
Thu, 10 Feb 2011 00:35:57 -0800 (PST)
Received: by 10.151.5.21 with SMTP id h21mr2827476ybi.391.1297326956760;
Thu, 10 Feb 2011 00:35:56 -0800 (PST)
Return-Path: <XXXXX>
Received: from col0-omc3-s18.col0.hotmail.com (col0-omc3-s18.col0.hotmail.com [65.55.34.157])
by mx.google.com with ESMTP id u18si5518841ybe.9.2011.02.10.00.35.54;
Thu, 10 Feb 2011 00:35:56 -0800 (PST)
Received-SPF: pass (google.com: domain of XXXXX designates 65.55.34.157 as permitted sender) client-ip=65.55.34.157;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of XXXXX designates 65.55.34.157 as permitted sender) smtp.mail=XXXXX
Received: from COL115-W18 ([65.55.34.136]) by col0-omc3-s18.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 10 Feb 2011 00:35:34 -0800
Message-ID: <[email protected]>
Return-Path: XXXXX
Content-Type: multipart/alternative;
boundary="_3f678158-bd84-49f1-a338-db18469b521e_"
X-Originating-IP: [41.58.90.194]
From: MY FRIEND <HIS REAL EMAIL ADDRESS>
To: MY FRIEND <HIS REAL EMAIL ADDRESS>
Subject: Sorry to disturb you with this......
Date: Thu, 10 Feb 2011 01:35:34 -0700
Importance: Normal
In-Reply-To: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 10 Feb 2011 08:35:34.0727 (UTC) FILETIME=[7C437D70:01CBC8FD]

--_3f678158-bd84-49f1-a338-db18469b521e_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi,

Compliments of the season,i hope all is well with you?

I traveled to United Kingdom, London for treatment of my Cousin who is suffering from Autism, though it can't be cured, but it can be treated behaviorally and/or medically. Current therapies include Seratonin Reputake Inhibitors (SRI) and i have tried to treat her here but her appointments take too long and i hate to see her suffer as she means everything to me.

However it has now become very necessary for her to undergo therapies as the ailment is now life threatening so am deeply sorry for not writing or calling you before leaving, the news of her medical appointment in the United Kingdom arrived to me as an emergency and that she needs family support to keep her going, I hope you understand my plight and pardon me.

Seratonin Reputake Inhibitors (SRI) is very expensive here in the United Kingdom, so I want to transfer her back home to have the surgery implemented as they have called their hospital branch in the United States and booked an appointment for immediate therapy.

I Am wondering if you can be of any assistance to me at this time, I need about £1500(GBPounds) to make the necessary arrangement, I traveled with little money due to the short time I had to prepare for this trip and never expected things to be the way it is right now. I'll surely pay you back once I get back home, I'll reimburse you at my return,

Regards

THEN MY FRIEND'S NAME AND ADDRESS AT THE BOTTOM (i.e. his usual signature, but excluding phone number)



_________________
Mortar x3
Sand Timer 25 months, <a href="http://forum.419eater.com/forum/viewtopic.php?p=1014373">Mr. Scot</a> "Skipper has never communicated to us since the campaign event took place last year. we did'nt get a cent from that event either."
Sand Timer 24 months, <a href="http://forum.419eater.com/forum/viewtopic.php?t=119437">Mr. Uche-uka</a> "There is no way that I would have put in this enermous amount of time, work and money without being serious with this huge task ahead of building and running an orphanage."
<a href="/forum/donate.php">Click here to donate to 419Eater</a>
View user's profileSend private message
Mr Tambourine Man
Baiting Guru


Joined: 06 Jun 2008
Posts: 3386
Location: Magic swirlin' ship


PostPosted: Thu Feb 10, 2011 6:17 pm Reply with quoteBack to top

It's a common scam. Your friend has fallen for a phishing scam, and given his password to a scammer who has sent that email to all his contacts.
He probably knows as one of his more local contacts would have alerted him.

_________________

Closed lad accounts x 4
3 dead websites

is always Good when you have the zeal to be a hitwoman when you out of school,it makes you bold and reall and it makes you more high than any other of your friend.
you dont have a phone.that makes makes you joe butt. Fuck you and go find something to do man. Stop disturbing me please.
This is definitely why you will remain and die in poverty, ignorant of good things and easy acknowledgment of bad things and words. Shame on you, you wicked generation children.
i went you to no that this is not a cheld pray. i went you to get back to me
we are not scammer,we hate scammer as you do.scammer make out life harder and harder,a lot of people think we are scammer,in fact,we are not!! please trustt us
View user's profileSend private message
spot
Moderator


Joined: 25 Aug 2005
Posts: 9063
Location: Criminal Disruption Department.


PostPosted: Thu Feb 10, 2011 6:24 pm Reply with quoteBack to top

Consider sending him a text message.

Anyway ... what's an 11 hour difference between friends ? Your day is bound to overlap his at some point.

_________________
Mortar x32 Purple Flower TV Star
Star Whip Jack Boot
View user's profileSend private message
Mr. Green
419Eater is my life


Joined: 07 Aug 2006
Posts: 332
Location: is everything


PostPosted: Thu Feb 10, 2011 7:05 pm Reply with quoteBack to top

Yes, of course... it must be a phishing scam. Smile

I'll get in touch with him, and as you say someone local has probably told him already.

Cheers.

_________________
Mortar x3
Sand Timer 25 months, <a href="http://forum.419eater.com/forum/viewtopic.php?p=1014373">Mr. Scot</a> "Skipper has never communicated to us since the campaign event took place last year. we did'nt get a cent from that event either."
Sand Timer 24 months, <a href="http://forum.419eater.com/forum/viewtopic.php?t=119437">Mr. Uche-uka</a> "There is no way that I would have put in this enermous amount of time, work and money without being serious with this huge task ahead of building and running an orphanage."
<a href="/forum/donate.php">Click here to donate to 419Eater</a>
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



E-Mail Header Analysis


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT