Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

A classic 419er

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam
View previous topic :: View next topic  
Author Message
olliver
Expert Developer


Joined: 27 Jan 2006
Last Visit: 02 Dec 2010
Posts: 1157
Location: yes

PostPosted: Mon Jul 23, 2007 3:42 pm    Post subject: A classic 419er Reply with quote

This 419er is the classic Advanced Fee Fraud including a fabricated story built around an historic incidence and involving a huge sum of money..... phantasies, as it doesn't exist.

Mail headers:
Quote:
Return-Path: <guangyuan@poczta.pf.pl>
X-Flags: 1001
Delivered-To: <spamtrap>
Received: (qmail invoked by alias); 23 Jul 2007 01:11:47 -0000
Received: from mx-out.strefa.interia.pl (EHLO mx-out.strefa.interia.pl) [217.74.66.61]
by mx0.gmx.net (mx072) with SMTP; 23 Jul 2007 03:11:47 +0200
Received: by scol.st.interia.pl (Postfix, from userid 1235)

id 62BA543DDB; Mon, 23 Jul 2007 03:11:08 +0200 (CEST)
Received: from mx.strefa.interia.pl (mx-out.strefa.interia.pl [217.74.66.61])
by scol.st.interia.pl (Postfix) with ESMTP id 8CE5944200;
Mon, 23 Jul 2007 03:10:24 +0200 (CEST)
Received: by mx.strefa.interia.pl (Postfix, from userid 65534)
id 719DB6C03; Mon, 23 Jul 2007 03:10:24 +0200 (CEST)
Received: from new.st.interia.pl (new.st.interia.pl [217.74.66.42])
by system.wewnetrzny (Postfix) with ESMTP id 0088F6BF8;
Mon, 23 Jul 2007 03:10:24 +0200 (CEST)
Date: 23 Jul 2007 03:10:23 +0200
From: guangyuan <guangyuan@poczta.pf.pl>
Subject: GREETING FROM ME
To: <spamtrap>
MIME-Version: 1.0
Content-Type: TEXT/plain; CHARSET=ISO-8859-2
Content-Transfer-Encoding: QUOTED-PRINTABLE
X-EMID:e6740acc
X-ORIGINATE-IP:172.188.98.227
Organization: INTERIA.PL S.A.
Message-Id: <20070723011024.0088F6BF8@mx.strefa.interia.pl>

The message was sent via a free Polish webmail account (source: http://www.pf.pl/serwis/profil.html) from a British AOL address. Interia.pl S.A is the actual owner of that domain and address assignment:
Quote:
% Information related to '217.74.68.0/22AS16138'

route: 217.74.68.0/22
descr: INTERIA.PL
origin: AS16138
mnt-by: INTERIA-MNT
source: RIPE # Filtered

The usage of free webmail accounts is the usual modus operandi for 419er fraud. So the delivery chain seems plausible in this case.

Anyway, now to the fairy tale (mail body):
Quote:
I am MR.CHEN GUANGYUAN, a personal treasurer to Late Mr. Kerry Packer the Richest man in Australia and owner of the many companies. His business empire, built around Publishing and Broadcasting Ltd (PBL), includes television, magazines, Internet-related enterprises, Melbourne's Crown Casino and the Burswood Casino in Perth, beef cattle properties, petrochemicals, property investment, resources and engineering.

SOURCE OF FUNDS:
I have a profiling amount in an excess of US$65.5M, which I seek your Partnership in accommodating for me. You will be rewarded with 4% of the total sum for your partnership. Can you be my partner on this?

INTRODUCTION OF MY SELF:
As a personal treasurer to Late Mr. Kerry Packer, authority was handed over to me in transfer of money to a petrochemical merchant for his last petrochemical deal before his untimely death. Already the funds have left the shore of Australia to a European private Bank where the final crediting is expected to be carried out. While I was on the process, My Boss became ill and finally died on Monday 26th December 2005

You can catch more of the story on this website:

http://news.independent.co.uk/world/australasia/article335238.ece
http://www.cnn.com/2005/WORLD/asiapcf/12/26/obit.packer/index.html
http://www.cnn.com/2005/WORLD/asiapcf/12/27/pbl.shares/index.html
http://msnbc.msn.com/id/10609426/
http://www.cnn.com/2005/BUSINESS/12/28/globaloffice.packer/index.html

YOUR ROLE:
All I need from you is to stand as the beneficiary of the above quoted Sum and I will re-profile the funds with your name, which will enable The European bank transfer the sum to you. I have decided to use this Sum to relocate to another continent where I can invest and never to be connected to any the late Packers conglomerates. This transaction has to be concluded within the shortest possible time. As Soon as I confirm your readiness to conclude the transaction with me, I will provide you with the details.

Thank you very much.
Regards,
MR.CHEN GUANGYUAN


guangyuan@poczta.pf.pl surely wants to receive new inspirations from his fellow scammers, so I leave the address as free lunch for harvesters Twisted Evil

Olliver
_________________
Petcord netlabel :: Synflict post-digital arts :: Leftob audio cast
Each click on any of the links above will save the life of a cute kitty somewhere in the universe.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group