Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Gateway Tue Apr 03, 2012 11:54 am
Return-Path: <[email protected]>
Received: from compute1.internal (compute1.nyi.mail.srv.osa [10.202.2.41])
by sloti14d5p3 (Cyrus git2.5+0-git-fastmail-7802) with LMTPA;
Tue, 03 Apr 2012 09:30:10 -0400
X-Sieve: CMU Sieve 2.4
X-Spam-charsets: plain='us-ascii', html='us-ascii'
X-Mail-from: [email protected]
Received: from mx2.nyi.mail.srv.osa ([10.202.2.201])
by compute1.internal (LMTPProxy); Tue, 03 Apr 2012 09:30:10 -0400
Received: from nm29-vm1.bullet.mail.bf1.yahoo.com (nm29-vm1.bullet.mail.bf1.yahoo.com [98.139.213.144])
by mx2.nyi.mail.srv.osa (Postfix) with SMTP id A4A837601D6
Tue, 3 Apr 2012 09:30:09 -0400 (EDT)
Received: from [98.139.212.144] by nm29.bullet.mail.bf1.yahoo.com with NNFMP; 03 Apr 2012 13:30:08 -0000
Received: from [98.139.212.210] by tm1.bullet.mail.bf1.yahoo.com with NNFMP; 03 Apr 2012 13:30:08 -0000
Received: from [127.0.0.1] by omp1019.mail.bf1.yahoo.com with NNFMP; 03 Apr 2012 13:30:08 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 60832 invoked by uid 60001); 3 Apr 2012 13:30:08 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1333459808; bh=SXhX7ovkPLX31jYTl3vBYGyPVVYaSqGvvqIfzkpTTnU=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vl746KvOIZFYxKY2gRKmowIXduA20npiikzQ0nrxHrd9MdOeCpg7jjFR55NtRP8Y5oLJHftIcppTGGEadEBIovMR9FWaLJrhJFRsapQTUlZ95wRj+5B2A/zFjmTbpY9h8Yoq3A/Anp4aDpm0QI0jE/lUdKAwyf7Gm9EHZYrp/Mo=
X-YMail-OSG: snejC0EVM1mnHVR0a_3t89REIi0J_HN9Og6xF_aGmEuj9fQ
UfAlsaqnQBiUAGfDSY9uYxnYwHVRFaqyWPj5Oef3rVzX1K3GdGw1.ktixW1y
bKQldCeoojAeJEW4XKhpeRG4qrNsclKYLnrxyGQ_HseMswMUPB8kNLWf9.5t
hW0.Nfg7.UzGQEN8XxP4.ymBWdfc6SWXIGMrAQU9FZW53MI8OKaExfx3i_9g
OmYPG5iAWOZGekHd2p81e5hzlXNoEJnmzUOm4bv2bEWTPx0L.rU7.I66cdDG
ybO6Yv7TpsTiunukMeca12KS9T7hnU2DIJc12EKfD4zww8hztxHnAB0qGSAr
Y8gnqXuY66qKhWNwf5FXuSMSGSdgjE557LEOAQ604B6FxVQH3ABesYz3o4oO
Lgpw_WmW.SOvdVBRfRvkfT8Ew2ANFSH3pIAhUkvNiabgtlICymh1oePxZE7G
CltrNav_nS3vzcv9u.IZofmd85LZ_EMq6sk0JICKIvF7JHgUjOOLAtps8KmP
fdICHY8nzXPla_ebMeoB1OKT.m1p0Ou_B0Y9a7LHOfi6JQR_8D95t6KJWMKM
tkkLazCmdgcvHDG9auw--
Received: from [41.207.203.152] by web162306.mail.bf1.yahoo.com via HTTP; Tue, 03 Apr 2012 06:30:08 PDT
X-RocketYMMF: frankchinedu334
X-Mailer: YahooMailClassic/15.0.5 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Tue, 3 Apr 2012 06:30:08 -0700 (PDT)
From: Shukri Ghanem <[email protected]>
Reply-To: [email protected]
Subject: Urgent reply
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1844268657-2139063239-1333459808=:60464"
X-Truedomain-Domain: yahoo.com
X-Truedomain-SPF: Fail (mx2: transitioning domain of hotmail.com does not designate 98.139.213.144 as permitted sender)
X-Truedomain-DKIM: Pass
X-Truedomain-ID: AC7768F86FEAAF8FD61E3D2B32272F8C
X-Truedomain: Neutral

Hi,

Greetings to you and your family, firstly I apologize for sending you this sensitive information via e-mail, instead of a Certified mail/Post-mail. This is due to the urgency and importance of the information.
My name is Shukri Ghanem, the Libyan oil minister and head of the National Oil Co-operation of Libya. I would like to use your relationship with me to pull my wealth out from our African continent. I was high-ranking Libyan official but I defected and fled the country on the May 17th 2011. I have huge amount of fund with Oilibya Petroleum Company in Ivory Coast I need help to divert this fund far from Africa.

Thank you
Shukri Ghanem

If you wish you can email me at
[email protected]

How to get E-Mail Headers
http://www.isipp.com/resources/email-headers/
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Majestic-12 [Bot] and 24 guests