Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Breakwind Tue Nov 10, 2009 8:38 pm
From FedEx@ Delivery Tue Nov 10 17:08:54 2009
X-Apparently-To: via 76.13.12.208; Tue, 10 Nov 2009 13:26:18 -0800
Return-Path: <[email protected]>
X-YahooFilteredBulk: 201.25.222.154
X-YMailISG: X-Originating-IP: [201.25.222.154]
Authentication-Results: mta1004.mail.re4.yahoo.com from=fedex.com; domainkeys=neutral (no sig); from=fedex.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server.riodocampo.sc.gov.br) (201.25.222.154) by mta1004.mail.re4.yahoo.com with SMTP; Tue, 10 Nov 2009 13:26:17 -0800
Received: from riodocampo.sc.gov.br (localhost.riodocampo.sc.gov.br [127.0.0.1]) by server.riodocampo.sc.gov.br (8.13.8/8.13.8) with ESMTP id nAAH8sGG005537; Tue, 10 Nov 2009 15:09:18 -0200 (BRST) (envelope-from [email protected])
From:
"FedEx@ Delivery" <[email protected]>
Add sender to Contacts
Reply-To: [email protected]
Subject: Dear Beneficiary
Date: Tue, 10 Nov 2009 14:08:54 -0300
Message-Id: <[email protected]>
X-Mailer: OpenWebMail 2.52 20060502
X-OriginatingIP: 41.211.214.38 (agricultura)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
To: undisclosed-recipients:;
X-Virus-Scanned: ClamAV 0.88.5/10011/Tue Nov 10 12:36:54 2009 on server.riodocampo.sc.gov.br
X-Virus-Status: Clean
Content-Length: 1501


Dear Beneficiary,

Certified Bank Draft of £80,000.00 GBP was Droped in our Office by Mrs.
Tracy Moore for the Delivery to your address said that it was won by your
email on the On going 2009 Microsoft Promotions This year.Contact Head
Dispatch Officer for your Claims on
([email protected]) And get back
to us with this info.

Full Name:
Address:
Country:
Age:
Sex:
Certified Bank Draft of £80,000.00 GBP was Droped in our Office by Mrs.
Tracy Moore for the Delivery to your address said that it was won by your
email on the On going 2009 Microsoft Promotions This year.Contact Head
Dispatch Officer for your Claims on
([email protected]) And get back
to us with this info.

Full Name:
Address:
Country:
Age:
Sex:

Get back to us as soon as you get this message from our office so that we
can proceed with Delivery. Note that, you will be responsible to pay $112 for
your parcel security
keeping fees because Miss Tracy Moore has only paid for your parcel
delivery fees (COD). Please if you know that you are not paying for the
security keeping fee of
your parcel, Dont contact us because we dont need any more question about
the
parcel,
and your Delievery Payment.Please your phone number is very important so as
our Agent

will contact you when they arrive your Country.

Sincerely
Mr.christain Mark
*********************************************
FedEx® Courier Company West-Africa
Mr.christain Mark {Head Dispatch Officer}
Telephone Number:+234-807-552-9412
Advertisement

by Breakwind Wed Nov 11, 2009 12:07 am
Another version:


From =?utf-8?q?John=20Peter?= Wed Nov 11 03:25:08 2009
X-Apparently-To: via 76.13.12.136; Tue, 10 Nov 2009 19:51:57 -0800
Return-Path: <[email protected]>
X-YahooFilteredBulk: 202.86.4.227
X-YMailISG:
X-Originating-IP: [202.86.4.227]
Authentication-Results: mta126.mail.re3.yahoo.com from=yahoo.in; domainkeys=permerror (no key); from=yahoo.in; dkim=neutral (no sig)
Received: from 202.86.4.227 (HELO n11-vm0.bullet.mail.in.yahoo.com) (202.86.4.227) by mta126.mail.re3.yahoo.com with SMTP; Tue, 10 Nov 2009 19:51:57 -0800
Received: from [202.86.4.170] by n11.bullet.mail.in.yahoo.com with NNFMP; 11 Nov 2009 03:51:48 -0000
Received: from [203.104.18.95] by t1.bullet.in.yahoo.com with NNFMP; 11 Nov 2009 03:51:48 -0000
Received: from [127.0.0.1] by omp109.mail.in2.yahoo.com with NNFMP; 11 Nov 2009 03:51:48 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 48096 invoked by uid 60001); 11 Nov 2009 03:25:08 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.in; h=Message-ID:Received:X-RocketDSI:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=2Lg2ihnoadjZ+1CNSPo/pi88sJbtZpINhesLgyszwHXxgP+kfUszbba5DyyxZTNImRo05TgWH3/viD4GfrEUkwZIVdcwjLUkX059AtlL6MCJ6o8YFan1VucP1Ktabjut3RwNHrc9x3OQn1S+3GA5+HUssnGhYJIE47vDic6rgUM= ;
Message-ID: <[email protected]>
Received: from [81.91.230.142] by web95703.mail.in.yahoo.com via HTTP; Wed, 11 Nov 2009 08:55:08 IST
Date: Wed, 11 Nov 2009 08:55:08 +0530 (IST)
From:
=?utf-8?q?John=20Peter?= <[email protected]>
Add sender to Contacts
Subject: Dear Beneficiary
To:
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-119492508-1257909908=:21376"
Content-Transfer-Encoding: 8bit
Content-Length: 4094


I have a new email address!
You can now email me at: [email protected]



- Dear Beneficiary,Having review all the obstacles and problems surrounding thetransfer of your($2.5Million) One Million Five Hundred Thousand United States Dollars)and your inability to meet up with some charges levied against you due to the pasttransfer options. We the Board of Directors, Bank of Africa (BOA) has ordered our Foreign Payment Remittance Unit to issue you a CORPORATE VISA CARDwhereyour payment will be uploaded and today, we got notice that your Payment hasbeen uploaded into this CORPORATE VISA CARD and also have it withDregistered HL Courier Service.For your information, the delivery charge has been paid and they supposed to have shipped your packaged Visa CARD but they insisted that you mustre-confirm to them your current delivery address to ensure accurate Delivery.It very important: Due to the content of the package, DHLmandated that before your package will be shipped, A Tax/Stamp Duty MUST be procured according to the New Customs Creed and the essence of such Document is toensure ahitch-flivery and the amount is ($125.00) therefore reconfirm your current delivery addressFull Name:__________Your Postal Address:_________House Telephone Number:________Current Cell Phone:________Country:_______Age:___Current Occupation:______Attach Copy of Your Identification_______Contact: Mr. chioma IfezuoADDRESS: C/22 01 Bp 5468 AVOTROU AKPAPKA,COTONOU-BENIN REPUBLIC.Email: [email protected]: +229 98242 160Call Mr. chioma Ifezuo of DHL Courier Service immediately,Please hurry up now as your package might incur demurrages if itstays morethan 3days with DHL Service.Thanks,false Richard.
by Ralph Wed Nov 11, 2009 5:19 am
In the first post the header resolves to 41.211.214.38 Nigeria*

In the second 81.91.230.142 Benin*

It is unlikely these 2 scams are connected in any way, they just use a similiar script :wink:

Who is online

Users browsing this forum: ClaudeBot, Google [Bot], Google Adsense [Bot] and 22 guests