Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Gateway Fri Jan 06, 2012 11:30 am
Return-Path: <[email protected]>
Received: from compute1.internal (compute1.nyi.mail.srv.osa [10.202.2.41])
by sloti14d5p3 (Cyrus git2.5+0-git-fastmail-7608) with LMTPA;
Fri, 06 Jan 2012 07:07:28 -0500
X-Sieve: CMU Sieve 2.4
X-Spam-charsets: plain='us-ascii', html='us-ascii'
X-Mail-from: [email protected]
Received: from mx1.nyi.mail.srv.osa ([10.202.2.200])
by compute1.internal (LMTPProxy); Fri, 06 Jan 2012 07:07:28 -0500
Received: from nm22.bullet.mail.bf1.yahoo.com (nm22.bullet.mail.bf1.yahoo.com [98.139.212.181])
by mx1.nyi.mail.srv.osa (Postfix) with SMTP id DDBAB4C01F7
Fri, 6 Jan 2012 07:07:27 -0500 (EST)
Received: from [98.139.214.32] by nm22.bullet.mail.bf1.yahoo.com with NNFMP; 06 Jan 2012 12:07:26 -0000
Received: from [98.139.212.220] by tm15.bullet.mail.bf1.yahoo.com with NNFMP; 06 Jan 2012 12:07:26 -0000
Received: from [127.0.0.1] by omp1029.mail.bf1.yahoo.com with NNFMP; 06 Jan 2012 12:07:26 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 46205 invoked by uid 60001); 6 Jan 2012 12:07:26 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1325851646; bh=TMqkVPXwqoBIr18LMkZhb+ez/6Jtr06AcjPsDZOn+lE=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=1KeQg+YIBDiiItPnqBb2yGA4HpUqR8bdDMoWNKq6gfXl/Lao+gRLqKp4IA7vpj++3TWOuW3OxqPrsZxO0JW536g04HMsAyoypxHVFqSiZN3Zc3tPfeKsut/44QhC5+rgLY4QmDZ24PL9N7771a4vpGj6SpeZ6aOdvBkJrl+NWHA=
X-YMail-OSG: Mn42XkAVM1kK8pZUR7LVzONAu3u8fmdMkAOMiXwySVqvElV
CUnVJ3whvWfY5q4_TRLq5VtnuC.sNNMunIxp.juUFcGbYUXIRN_eMj97Odou
QCtNvaEG4xyejVUeS2fBvu9CeqehyJap9qyKYxguY8hIjkUDfjgFEah5jds2
uO0EPWEX4PAGf_Va.L_ccC9EPwaVw8V2F3ypSqTCsXuhQqUjERIEVnZAhOhr
8nTvoBZHb0kGSGFCjMYMsJKBlmA8TLpRS7hZCQ8bw6dAOe9RZ0NQDz1iYmN7
4j1nfiDm1U_TcLiG.YKh0ADB.R.I4NdQ.JlwRHeaKZP73C5Nns4q3.n3Mv12
1_79aqtVMAv6SLXZrS0Wllc3krkNVeWrMMuUNuarP8L60YzRclgkBvo9jk00
gDPqSGZPxztAx
Received: from [197.255.166.160] by web161601.mail.bf1.yahoo.com via HTTP; Fri, 06 Jan 2012 04:07:26 PST
X-RocketYMMF: james_77nwakpa
X-Mailer: YahooMailClassic/15.0.4 YahooMailWebService/0.8.115.331698
Message-ID: <[email protected]>
Date: Fri, 6 Jan 2012 04:07:26 -0800 (PST)
From: Mr Law Kanu <[email protected]>
Reply-To: [email protected]
Subject: AT LAST YOUR PART PAYMENT HAS BEEN APPROVED / REPLY ME BACK FOR THE TRANSFER
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-83809723-785385594-1325851646=:45664"
X-Truedomain-Domain: yahoo.com
X-Truedomain-SPF: Neutral (mx1: 98.139.212.181 is neither permitted nor denied by domain of gmail.com)
X-Truedomain-DKIM: Pass
X-Truedomain-ID: D4323BBCAF818E2D5098D0A370CDE3F8
X-Truedomain: Neutral

Attn: Beneficiary

Your file appears in my desk two days ago Through FMS office that you are among people approved to be paid half of their payment of USD$8 million dollars. Signed by the Vice President of Federal Republic of Nigeria, On behalf of Mr.President.

I need your above information, to confirm with the one we have already here in our file, if you are the rightful owner to be paid.

Full Name

Full Address

Mobile Number

Nationality

Thank you very much for your understanding.

Regards
Mr. Law Kanu
Special Adviser to Mr. President

If you wish you can email me at
[email protected]

How to get E-Mail Headers
http://www.isipp.com/resources/email-headers/
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 18 guests