Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by shameem64 Tue Jun 09, 2009 6:27 am
I got a mail as below please check whether this is a scam.

Delivered-To: personal details removed - RC - mod
Received: by 10.229.100.5 with SMTP id w5cs542645qcn;
Wed, 27 May 2009 15:26:47 -0700 (PDT)
Received: by 10.114.255.1 with SMTP id c1mr1075914wai.4.1243463206091;
Wed, 27 May 2009 15:26:46 -0700 (PDT)
Return-Path: <[email protected]>
Received: from web111908.mail.gq1.yahoo.com (web111908.mail.gq1.yahoo.com [67.195.23.77])
by mx.google.com with SMTP id v39si19996083wah.62.2009.05.27.15.26.44;
Wed, 27 May 2009 15:26:45 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 67.195.23.77 as permitted sender) client-ip=67.195.23.77;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 67.195.23.77 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: (qmail 98139 invoked by uid 60001); 27 May 2009 22:26:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1243463204; bh=3pqVvBTrZnOQrXfMXc0BXm6Y2h//F73Ux0wfrzv/SSE=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=sqoNWEsE2Q9fgeb/nqTNxe7dajAhsQlxoRGfs8USbb4vHgpAkvlFgRO//PpPzv1puCLerxNv30xg+pDGTJVpJXLTAEytRoyc/70D+Uw3RXw3Eof/aILeLcAe0ALXzIfMC3wbSCaKtTvJWHjMm6NkgjNvFqDx/nU2HS5Kn7+MbHU=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
b=P4baauUGa/9wzY5hHIY9eCAicDS0O2FwvNgPvn9D4XL6JMUflbrpZO4avMF9yxyBv8xFugZHizlWp7U7aVx9Z5C+MHlzV8yArxZYRymy4l9mjULg1bPxsMh6qe1BwFAQAClyRQbm9j5Omub6ZHlJP3DwKgSAQevExyc1PjJ9B4E=;
Message-ID: <[email protected]>
X-YMail-OSG: czvDJ4kVM1muuDooGyiF9vbJfj3_OresWyVzs_mN1bxet6XrAC_fldF2QadBXtzBLRFs4zsViXATtUudunf_NH93CgB_sPKd0UHDYKzwsvh1bKhxB4NLfANGoyu5xsRgAJjwqvvORI.ehp.TzinwpPKT1m9URlI729icF_L83yWZs7bZLM92T3y_mxUdzeSDSU1VMhPGhuNYWOdA1p9bCziO1nyy2PF1j9rw5KKjvHQrZoLYjHPMbEvEJbWA6YZfwAk2KNxxgOXWNUnxlVd8t91rbma_XRrKJcV80NRPhBg1d4Kt
Received: from [41.220.75.3] by web111908.mail.gq1.yahoo.com via HTTP; Wed, 27 May 2009 15:26:44 PDT
X-Mailer: YahooMailClassic/5.3.9 YahooMailWebService/0.7.289.10
Date: Wed, 27 May 2009 15:26:44 -0700 (PDT)
From: Bill Biros <[email protected]>
Subject: Re: baby sitter in woodsland
To: details removed
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1005691491-1243463204=:97685"


--0-1005691491-1243463204=:97685
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Hello,
I got your Application. I live in London, United Kingdom with three kids an=
d I am a Medical Doctor by Profession.I can offer you the Job with a weekly=
salary of =A3800. I would love a Nanny that would come live with us. I wil=
l like to know if this would be possible .
Await your prompt response.
Bill Biros
Advertisement

by AlanJones Tue Jun 09, 2009 6:53 am
Hi shameem64 and welcome to ScamWarners

Yes it is a scam 100% certain.

How can I be so sure, well he claims to be from London but the email originates from 41.220.75.3 Nigeria .

Also, a weekly salary of 3800 is rather high - even if he doesn't say what currency it is in.

BTW you might want to edit your post to remove your email address from it.

EDIT: A search on the email address here returns various posts on Gumtree (that I have flagged) - if you check them you will see that the ages of the children appear to vary.
Last edited by AlanJones on Tue Jun 09, 2009 6:58 am, edited 1 time in total.

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
by Ralph Tue Jun 09, 2009 6:54 am
Hi Shameem

Welcome to Scamwarners

My first impression without looking too hard is yes, it is a scam

I will have a more thorough look to be sure and post my observations,

Meanwhile if you have any other emails could you please post them

Beaten to it by B8er again, well done B8er for your speedy IP checking :wink:

Just adding a search on the scammers email address, it seems he is posting his advertising all over the place, lets hope those who see the add are lucky enough to do some searching Click Here to see the search result

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 23 guests