Payment Processing Scam. [email protected]

Charity Volunteer(Reply via [email protected]) if interested.


Email header details;

Return-Path: <[email protected]>
Received: from csgpuertant.ral.es (correo.ral.es [213.170.34.3])
by mtain-dh03.r1000.mx.aol.com (Internet Inbound) with ESMTP id 330C7380000A6;
Thu, 5 Jan 2012 13:17:22 -0500 (EST)
Received: from csgpuertant.ral.es (127.0.0.1) by csgpuertant.ral.es (MlfMTA v3.2r9) id h0nkle0171si; Thu, 5 Jan 2012 13:51:45 +0100 (envelope-from <[email protected]>)
Received: from correo.ral.es ([193.168.1.5])
by csgpuertant.ral.es (SonicWALL 7.2.1.2843 UNLICENSED)
with ESMTP (AIO); Thu, 05 Jan 2012 13:51:42 +0100
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-MimeOLE: Produced By Microsoft Exchange V6.5
Subject: Charity Volunteer(Reply via [email protected]) if interested.
Date: Thu, 5 Jan 2012 13:51:24 +0100
Message-ID: <[email protected]>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Charity Volunteer(Reply via [email protected]) if interested.
Thread-Index: AczLqLmJPt7w8QySSmiY6eES+Dnc9A==
From: "Fax" <[email protected]>
X-Mlf-Version: 7.2.1.2843
X-Mlf-UniqueId: o201201051251320088297
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:5:35426688:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d41174f05e9324e8b
X-AOL-IP: 213.170.34.3
X-AOL-SPF: domain : ral.es SPF : none

It turns out this scam is just ordinary advanced fee fraud and not an example of employment scam.


Beloved,I am suffering from a cancerous ailment of the throat and the wife of late
Dr.Collen Mannings who is now dead as a result of protracted illness..
my late husband left 6m,which was derived from his vast estates and investment in capital
market with his bank here in UK. Presently, this money is still with the
designated Bank's, which you are entitled to ten percent of the total fund.
The proposal is for the upkeep of widows, widowers, orphans, destitute, the
down-trodden, physically challenged children, barren-women and persons who
prove to be genuinely handicapped financially .I do not know if I can trust you with the above.
In Christ the King's name,Sister Deborah Mannings.


Email header details;

Delivered-To: *removed*
Received: by 10.52.90.15 with SMTP id bs15cs293470vdb;
Thu, 5 Jan 2012 22:35:00 -0800 (PST)
Received: by 10.68.192.5 with SMTP id hc5mr12665381pbc.62.1325831698350;
Thu, 05 Jan 2012 22:34:58 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm1-vm0.bullet.mail.hk2.yahoo.com (nm1-vm0.bullet.mail.hk2.yahoo.com. [124.108.111.136])
by mx.google.com with SMTP id z4si75937579pbp.172.2012.01.05.22.34.56;
Thu, 05 Jan 2012 22:34:58 -0800 (PST)
Received-SPF: neutral (google.com: 124.108.111.136 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=124.108.111.136;
Authentication-Results: mx.google.com; spf=neutral (google.com: 124.108.111.136 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]; dkim=pass (test mode) [email protected]
Received: from [124.108.111.128] by nm1.bullet.mail.hk2.yahoo.com with NNFMP; 06 Jan 2012 06:34:55 -0000
Received: from [124.108.111.126] by tm1.bullet.mail.hk2.yahoo.com with NNFMP; 06 Jan 2012 06:34:55 -0000
Received: from [127.0.0.1] by omp1001.mail.hk2.yahoo.com with NNFMP; 06 Jan 2012 06:34:55 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 7023 invoked by uid 60001); 6 Jan 2012 06:34:55 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1325831694; bh=JGQBRm1piUKuArNPuLvuq1YW1CXJNPiRtPuEfA7+/S4=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=Shq31sm1mR50pvSeOho7dal2DNm6o3nkg5wcO6XSvMmsWpnmMvEpozBreM6Ykcib3Qqm3OiIcWBZ6QSGnH0D+hdhThoNq2sWwFBkLug+xuL2R3RzRYn4aHXLr6UD+uV7Cx4S46MolVy3br5UP9KvFOkk/JtmNoMS7NWon6uejZw=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.cn;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=fSIRaUsM/MpngWBx4k8PJYD2zRsyp+/8zk459pNyptxvGEWyXsnePDBV4mkAQ/6I0Fx/lnY1HCBpGzflv8tPD/d4Z6CtmvViSadfX/aO6vbNlzVo7kiCQBAgYsCCKAPHVepLJ2yaiPv4KIfOErk7ujNLS5Tq+nSJ+ID2JmlZhZU=;
X-YMail-OSG: P1VCsOkVM1k41sRU42nmIHJW6Tp90MfYJLctCdWo0l0ahd8
.8RPdZv3Mzq4kqPm86z7d5FJ5klyKXn.xw02j3tsVF7ytIcu.68yqMrqGxDX
ljdkikOfa5nZ0czYL427yxBzFLLU_HPi0YAK1Bshal8F4OB0EuashtuXeyQd
xj0w3EEvoxJzfbrbJrP0p6rqSmFg6Mj5w1ZDDnLBLyRvRFNxcmN.YjLjkqcl
FqfJOTiZ_3oPnN47r_2bb2kFJaCU2Bh5SAqDXrWlIL6ZW.xKAlJ74Q2is2Lu
ZMWO6p0kGSix8cG8_fyYLkvaagO15rcup653EO7lr8w2xgEXKK4GnaIfvBHB
Y3TAmmuf9z36mTPHrW0AeBY_odRul
Received: from [41.203.64.131] by web92410.mail.cnh.yahoo.com via HTTP; Fri, 06 Jan 2012 14:34:54 CST
X-Mailer: YahooMailWebService/0.8.115.331698
References: <CAG9SkhLBr1sRNZiXK7kfxv=xszS0feAh_7T7tcdbnbVbG5FHKg@mail.gmail.com>
Message-ID: <[email protected]>
Date: Fri, 6 Jan 2012 14:34:54 +0800 (CST)
From: Mannings Deborah <[email protected]>
Reply-To: Mannings Deborah <[email protected]>
Subject: =?gb2312?B?u9i4tKO6IENoYXJpdHkgVm9sdW50ZWVyKFJlcGx5IHZpYSBjaGFyaXR5NGxv?=
=?gb2312?B?dmVAeWFob28uY24pIGlmIGludGVyZXN0ZWQu?=
To: "*removed*" <*removed*>
In-Reply-To: <CAG9SkhLBr1sRNZiXK7kfxv=xszS0feAh_7T7tcdbnbVbG5FHKg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1228034759-501238527-1325831694=:6986"