Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Gateway Sat Jul 14, 2012 12:59 pm
Return-Path: <[email protected]>
Received: from compute1.internal (compute1.nyi.mail.srv.osa [10.202.2.41])
by sloti14d5p3 (Cyrus git2.5+0-git-fastmail-8103) with LMTPA;
Fri, 13 Jul 2012 11:49:32 -0400
X-Sieve: CMU Sieve 2.4
X-Spam-charsets: plain='iso-8859-1'
X-Mail-from: [email protected]
Received: from mx4.nyi.mail.srv.osa ([10.202.2.203])
by compute1.internal (LMTPProxy); Fri, 13 Jul 2012 11:49:32 -0400
Received: from lealta.ru (mail.lealta.ru [89.207.216.10])
by mx4.messagingengine.com (Postfix) with ESMTP id F0425180E14
Fri, 13 Jul 2012 11:49:25 -0400 (EDT)
Received: from mail.lealta.ru (mail [89.207.216.10])
by lealta.ru (8.12.10.20060308/8.12.10/check_local-5) with ESMTP id q6DFnOLv016133;
Fri, 13 Jul 2012 19:49:24 +0400
Received: from 115.240.54.51
(SquirrelMail authenticated user angelica)
by mail.lealta.ru with HTTP;
Fri, 13 Jul 2012 19:49:24 +0400 (MSK)
Message-ID: <[email protected]>
Date: Fri, 13 Jul 2012 19:49:24 +0400 (MSK)
Subject: *****PROBABLY SPAM***** BUSINESS PROPOSAL
From: "JOSE MURPHY" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.5
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0 (lealta.ru [89.207.216.10]); Fri, 13 Jul 2012 19:49:24 +0400 (MSK)
X-Spam-Flag: YES
X-Spam-Status: Yes, score=12.4 required=6.0 tests=ADVANCE_FEE_2,ADVANCE_FEE_3,
ALL_TRUSTED,AWL,BAYES_99,DEAR_SOMETHING,FORGED_HOTMAIL_RCVD2,MILLION_USD,
MISSING_HEADERS,SUBJ_ALL_CAPS autolearn=no version=3.2.3
X-Spam-Report:
* -1.8 ALL_TRUSTED Passed through trusted hosts only via SMTP
* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 1.5 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:'
* 2.1 SUBJ_ALL_CAPS Subject is all capitals
* 1.3 MISSING_HEADERS Missing To: header
* 1.5 MILLION_USD BODY: Talks about millions of dollars
* 1.6 DEAR_SOMETHING BODY: Contains 'Dear (something)'
* 1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
* 1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
* -0.0 AWL AWL: From: address is in the auto white-list
X-Spam-Level: ************
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on mail.lealta.ru
X-Virus-Scanned: ClamAV version 0.91.2, clamav-milter version 0.91.2 on mail
X-Virus-Status: Clean
X-Truedomain: NotChecked--
Dear Sir/Madam,

I write to you based on a request by an investor and his
need for investment/funding in your country.My name is Dr.
Jose Murphy,a financial consultant.

I most times represents the interests of very wealthy investors. Due to
the sensitivity of the position they hold in their society and the
unstable investment environment of their country, they evacuate majority
of their funds into more stable economies and developed nations where they
get good yield for their money.

I was recently approached by a Reserved Client, whom I had personally
worked with a few years ago with a proposal. What he request is an
individual such as yourself, who will be willing to receive money on his
behalf abroad, and put it to good use for a period not exceeding 6 years
for a start.

The client has offered these terms:

1. 10% commission paid to me and my foreign partner of the total funds
successfully evacuated. The funds in question are over 13.2 Million
USDollars.

2. The funds will be used by the foreign partner for six years as a loan
without any interest. That is, you do not pay any interest on the money
but you give the client 50% of all profits after tax that accrued from the
use of the funds.

If these terms are agreeable to you, kindly let me know and I will provide
you with all necessary information and procedures involved.

Send your response to ( email: [email protected] )

Sincerely yours,
Dr.Jose Murphy

If you wish you can email me at
[email protected]

How to get E-Mail Headers
http://www.isipp.com/resources/email-headers/
Advertisement

by TheDane Mon Jul 16, 2012 5:54 am
[email protected]

Delivered-To: <snipped>
Received: by 10.114.27.41 with SMTP id q9csp18790ldg;
Fri, 13 Jul 2012 09:08:15 -0700 (PDT)
Received: by 10.112.29.233 with SMTP id n9mr1094880lbh.91.1342195695054;
Fri, 13 Jul 2012 09:08:15 -0700 (PDT)
Return-Path: <[email protected]>
Received: from lealta.ru (mail.lealta.ru. [89.207.216.10])
by mx.google.com with ESMTP id ee6si11717363lbb.46.2012.07.13.09.08.14;
Fri, 13 Jul 2012 09:08:15 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 89.207.216.10 as permitted sender) client-ip=89.207.216.10;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning [email protected] does not designate 89.207.216.10 as permitted sender) [email protected]
Received: from mail.lealta.ru (mail [89.207.216.10])
by lealta.ru (8.12.10.20060308/8.12.10/check_local-5) with ESMTP id q6DG8DLv019572;
Fri, 13 Jul 2012 20:08:13 +0400
Received: from 115.240.54.51
(SquirrelMail authenticated user angelica)
by mail.lealta.ru with HTTP;
Fri, 13 Jul 2012 20:08:14 +0400 (MSK)
Message-ID: <[email protected]>
Date: Fri, 13 Jul 2012 20:08:14 +0400 (MSK)
Subject: *****PROBABLY SPAM***** BUSINESS PROPOSAL
From: "JOSE MURPHY" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.5
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0 (lealta.ru [89.207.216.10]); Fri, 13 Jul 2012 20:08:14 +0400 (MSK)
X-Spam-Flag: YES
X-Spam-Status: Yes, score=12.4 required=6.0 tests=ADVANCE_FEE_2,ADVANCE_FEE_3,
ALL_TRUSTED,AWL,BAYES_99,DEAR_SOMETHING,FORGED_HOTMAIL_RCVD2,MILLION_USD,
MISSING_HEADERS,SUBJ_ALL_CAPS autolearn=no version=3.2.3
X-Spam-Report:
* -1.8 ALL_TRUSTED Passed through trusted hosts only via SMTP
* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 1.5 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:'
* 2.1 SUBJ_ALL_CAPS Subject is all capitals
* 1.3 MISSING_HEADERS Missing To: header
* 1.5 MILLION_USD BODY: Talks about millions of dollars
* 1.6 DEAR_SOMETHING BODY: Contains 'Dear (something)'
* 1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
* 1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
* -0.0 AWL AWL: From: address is in the auto white-list
X-Spam-Level: ************
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on mail.lealta.ru
X-Virus-Scanned: ClamAV version 0.91.2, clamav-milter version 0.91.2 on mail
X-Virus-Status: Clean



Dear Sir/Madam,

I write to you based on a request by an investor and his
need for investment/funding in your country.My name is Dr.
Jose Murphy,a financial consultant.

I most times represents the interests of very wealthy investors. Due to
the sensitivity of the position they hold in their society and the
unstable investment environment of their country, they evacuate majority
of their funds into more stable economies and developed nations where they
get good yield for their money.

I was recently approached by a Reserved Client, whom I had personally
worked with a few years ago with a proposal. What he request is an
individual such as yourself, who will be willing to receive money on his
behalf abroad, and put it to good use for a period not exceeding 6 years
for a start.

The client has offered these terms:

1. 10% commission paid to me and my foreign partner of the total funds
successfully evacuated. The funds in question are over 13.2 Million
USDollars.

2. The funds will be used by the foreign partner for six years as a loan
without any interest. That is, you do not pay any interest on the money
but you give the client 50% of all profits after tax that accrued from the
use of the funds.

If these terms are agreeable to you, kindly let me know and I will provide
you with all necessary information and procedures involved.

Send your response to ( email: [email protected] )

Sincerely yours,
Dr.Jose Murphy

I am a scambaiter with expierience in dealing with scammers. Kindly do not correspond with any of these criminals in any way.

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 18 guests