Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Wed Mar 23, 2011 7:46 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 23 Mar 2011 14:08:28 -0700
Received: from nm12-vm1.bullet.mail.ne1.yahoo.com ([98.138.91.41])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q2VI3-0002UO-Hi
for ; Wed, 23 Mar 2011 14:08:28 -0700
Received: from [98.138.90.54] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 23 Mar 2011 21:08:26 -0000
Received: from [98.138.89.232] by tm7.bullet.mail.ne1.yahoo.com with NNFMP; 23 Mar 2011 21:08:26 -0000
Received: from [127.0.0.1] by omp1047.mail.ne1.yahoo.com with NNFMP; 23 Mar 2011 21:08:26 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 22449 invoked by uid 60001); 23 Mar 2011 21:08:26 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1300914506; bh=VtswDXJRLplykQasgo3JRClVf1V/OrU59cuU/m/Kx+g=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=FkCjTPB/uPUhNf7w7zxXqOz+ZEzhOJ/3Jm0gCJF52IDEmJxkVYywnhkdjT/6CKdzHAvmdv8GFXUx5GxxY/lGTFnCOtUTW0WbUVJ7cKkjCEJY1Tus1zyl/XYuCwXyEMp2bjpNVX2ZDla2eZAjEfR5OPB0tUKylhD2rzUN8RtVrtM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=LuqJR54N+42jxICN1DGz69ZfgMarImNMDieIt/mwyeMlg2dQPpFsY7V/I8OzD9D4ry+EPm+19273X6UUL9bGiFjI1UP+Op5BqrVJh8pQfuNeBDc3wMToA9ICwVWdfOoYGn4TqJ2/2rZNEWFKQHaN31IsYtQDZzZ1PtHoHTwJfZ8=;
Message-ID: <[email protected]>
X-YMail-OSG: j7DdBF4VM1mH_nmWa.ytOTHaM8i1wrWg6o9.xkOhNvPLAwp

Received: from [82.128.80.89] by web181308.mail.ne1.yahoo.com via HTTP; Wed, 23 Mar 2011 14:08:26 PDT
X-Mailer: YahooMailClassic/12.0.2 YahooMailWebService/0.8.109.295617
Date: Wed, 23 Mar 2011 14:08:26 -0700 (PDT)
From: Office File <[email protected]>
Reply-To: [email protected]
Subject: Contact:Diplomat Andrew,Contact Phone: 585 250 8146
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-753361952-1300914506=:19819"
X-Spam-Subject: ***SPAM*** Contact:Diplomat Andrew,Contact Phone: 585 250 8146
X-Spam-Status: Yes, score=14.6
X-Spam-Score: 146
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.trucidodolusloricaproject.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear friend, We wish to inform you that the diplomatic agent
conveying the ATM CARD Package valued the sum of $950,000 United StatesDollars
misplaced your address and he is currently stranded at the airport now. We
required you reconfirm the following information below so that he can deliver
your consignment box to you today. FULL NAME: ================ CURRENT ADDRESS:
========== CURRENT MOBILE NO.========= NAME OF YOUR NEAREST AIRPORT:==========
A COPY OF YOUR IDENTIFICATION : ======= [...]
Content analysis details: (14.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.91.41 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is freemail (office-----da2222[at]att.net)
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[82.128.80.89 listed in zen.spamhaus.org]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(diplomatandrewjones4[at]hotmail.com
)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (office-----da2222[at]att.net)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7653]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.4 MONEY_ATM_CARD Lots of money on an ATM card
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES

--0-753361952-1300914506=:19819
Content-Type: text/plain; charset=us-ascii



Dear friend,

We wish to inform you that the diplomatic agent conveying the ATM CARD Package valued the sum of $950,000 United StatesDollars misplaced your address and he is currently stranded at the airport now. We required you reconfirm the following information below so that he can deliver your consignment box to you today.
FULL NAME: ================
CURRENT ADDRESS: ==========
CURRENT MOBILE NO.=========
NAME OF YOUR NEAREST AIRPORT:==========
A COPY OF YOUR IDENTIFICATION : =======

Please do contact the diplomatic agent with the email below with the information required.
Contact Person: Diplomat Andrew
Contact E-MAIL: ( [email protected] )
Contact Phone: 585 250 8146
NOTE: The Diplomatic agent does not know that the real content of the Package is $950,000 United States Dollars but was deface as family treasures for securities reasons and on no circumstances should you let him know the content. So never allow him to open the package.
Thanks.
Yours Faithfully
Dr.Paul Hommes
Delivery company Manager
+22997861501

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Bing [Bot], ClaudeBot, Google [Bot] and 26 guests