Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Sat Jun 23, 2012 5:32 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 23 Jun 2012 01:36:53 -0700
Received: from nm1.access.bullet.mail.sp2.yahoo.com ([98.139.44.128]:23204)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SiLpp-0008NW-Dh
for ; Sat, 23 Jun 2012 01:36:53 -0700
Received: from [98.139.44.100] by nm1.access.bullet.mail.sp2.yahoo.com with NNFMP; 23 Jun 2012 08:36:48 -0000
Received: from [98.139.44.71] by tm5.access.bullet.mail.sp2.yahoo.com with NNFMP; 23 Jun 2012 08:36:48 -0000
Received: from [127.0.0.1] by omp1008.access.mail.sp2.yahoo.com with NNFMP; 23 Jun 2012 08:36:48 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 96703 invoked by uid 1000); 23 Jun 2012 08:36:44 -0000
Received: from 124.108.96.86 by rel103.mail.aue.yahoo.com with SMTP; Sat, 23 Jun 2012 01:36:44 -0700
Received: (qmail 97649 invoked by uid 60001); 23 Jun 2012 08:36:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1340440604; bh=PaumNI/0Y19JJDHHgMuweWYTpyQZKg4CQzZpXYp3kR8=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=qagBYmonqh1As0xb7SDYJwdn0wp/+coiShSytZPChqGREDM4spIpmHUKaKfxi/HrkOlj6tC56JimvA6SA4Cg+cge3swMbqvdCX4DXfoFppgxEZtZgHMWEzqRWxQevdLS5JB5nXzUrKYhcd4I2BH2QbeTpsIFB9kTNypQ1Tpi+Is=
X-YMail-OSG: THf1fNsVM1mf.34baJ7M.iYIV9ioMyAW7K_ZBoWWGHlrRcf
yVdrSlHd8Rgnqm1YrZgzoTsnYSGUn9thSGmjFHS5gf5WxTx98j0ULYz2D.Lx
_sGYzNuqHeZYGWoh0024k1C2cYT.ldCYZCX2Pi1KccmXJ.MqdlR5gIniKdVw
KLFFL3DiYhBSpTMOuY.tK7896pEYOW4rm20IkRq3epAdVXD8quy7tdJ4.Qp_
H4yIwvSCvwSQvteqAgC7fZKCf7meTSo0cIgthKEM2jWn5RP3lsu6CyZJVvij
hPDf1iW40Fivt5j7qYalHqaqUoIajs08IFCoux0sSNVCKzT2EEyHGKZ44FX3
zGOo.L6PzkCGOIKmSeauq06L5Tgn1OTu4DHWMmyo7oTtY3A36l3MnWx.Fg1L
MLDUMJbi.M2Pp2PhkeTc1xZ8A2291cjyA5b4ISaHWchwNw4kaVbG3zxORBSj
d58m7BKLcAddhmbDz08Bmn3Kl0Z.OiXsp6ba.NzS_JpjxxkFq7_zHN2jtkJg
JiMpDRk6Ot2gb2E50fO4-
Received: from [41.216.48.17] by web96003.mail.aue.yahoo.com via HTTP; Sat, 23 Jun 2012 20:36:43 NZST
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.118.349524
Message-ID: <[email protected]>
Date: Sat, 23 Jun 2012 20:36:43 +1200 (NZST)
From: "Western union@come" <[email protected]>
Reply-To: [email protected]
Subject: How are you today?
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-687962752-40309555-1340440603=:97575"
X-Spam-Status: No, score=6.7
X-Spam-Score: 67
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: How are you today? I write to inform you that we have already
sent you USD6000.00 dollars through Western union as we have been given the
mandate to transfer your full compensation payment total sum of USD800,000.00
via western union by this government. [...]

Content analysis details: (6.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.216.48.17>]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.128 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mklarry4[at]gmail.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mklarry4[at]gmail.com)
1.7 HK_SCAM_N3 BODY: HK_SCAM_N3
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.216.48.17 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO

---687962752-40309555-1340440603=:97575
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable


How are you today?
I write to inform you that we have already sent you USD6000.00 dollars through Western union as we have been given the mandate to transfer your full compensation payment total sum of USD800,000.00 via western union by this government.

I was calling your telephone number to give you the information through phone but you did not pick up my calls throughout that yesterday even this morning.Now, I decided to email you the MTCN and sender name so that you will pick up this USD6000.00 to enable us send another USD6000.00 today as you know we will be sending you only USD6000.00 per day.

Please pick up this information and run to western union to pick up the USD6000.00 and call me back to send you another payment today, My direct phone line is +229 98994894, Manager Mr Paul William please try to contact this email only:( [email protected] ) caller email me once you picked up this USD6000.00 today.

Here is the western union information to pick up the USD6000.00;
MTCN : 2832037810
Sender's first name: Pius
Sender's last name: Ogugua
Text Question: Honest
Answer: Trust
Amount: USD 6000.00

I am waiting for your call once you pick up this USD6000.00, Please email me your direct telephone number because I need to be calling you once we send any payment for the information.

Thanks
Mr Paul William

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 17 guests