Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Wed Oct 03, 2012 4:03 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 03 Oct 2012 00:50:45 -0700
Received: from nm29-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.236]:46598)
by with smtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1TJJjB-0003sx-63
for ; Wed, 03 Oct 2012 00:50:45 -0700
Received: from [98.139.91.69] by nm29.bullet.mail.sp2.yahoo.com with NNFMP; 03 Oct 2012 07:50:47 -0000
Received: from [98.139.44.84] by tm9.bullet.mail.sp2.yahoo.com with NNFMP; 03 Oct 2012 07:50:47 -0000
Received: from [127.0.0.1] by omp1021.access.mail.sp2.yahoo.com with NNFMP; 03 Oct 2012 07:50:47 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 40636 invoked by uid 60001); 3 Oct 2012 07:50:46 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1349250646; bh=ClEVdiMiW42qx6/YIngNp7cMLczsuHQEm+8dCCxhR2s=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=yQ7s6C+iWf4qeFyW+5jcWzadErxkFJsWMVYNM3PwSVOrra/huSfYTnMbXXcoHtuJJaES2soNs9rw+jtP/inHzUIn2AOw5LS+AIXFrfDTDxLlIQ7DFsc6GtEfq1v5kLnjvSTZ8oLe1PCaWOmZVcph/DUHRbiAqR7ERpFQtQB+Ugg=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=t/cuKooceaQRoFFAXkRGqfBFS70ALXgNNmcy1+n+sg50T0FpFchv31fIV5zHUkqfrjxU7i4wj6l1Z5a6UrDEP/YPkHzKDmS2YSCMifS5zqVrfv91jgxyi6yzxaCs6Dm5gOQ4+dsqeTxo4gYMYgVSh03kQZOgiz4TkR8xk0L7Vdc=;
X-YMail-OSG: uncQ9OwVM1lK.1l6espBYWhayffqL_66Ac0.T0Ci7sMmaCd
ffUieQAfOpX_Xbi6SJ6T84ZKj7pBy8DyQ815zY1Fa8my.Fg0y17BHDXz0HLl
b5dVDc9DPBcPz_vCMG8OiIuMkxON5M7sNefWhFdjMixSq7S9LUcUsNl9owUI
D6hYtUofvz8oxu3kXYUJ_9dXNPljOZ_Vyl3g_ivT.XpIWbzu3X91_W9roekr
mvCNPmkD9dZUFqtLRgtR9KbUL1a2hrzbc.v8l9JqjffCDdoU.HbsCDJGTTQY
HFjlpRrqI7CpySlKxm1IWc2EP15_bWw1ayOgLvmUjYtvwIOUhzhgwa0UH8nj
vsvd_Y8LQ1RoFXP6LFcPVPRWYAdlV1ggZYgwdUZ7XNSm0QRsFBRmkKkNbcfs
rJHsTewTRwJP_IfkpC2TcbdX8ULvjsmbs1iioKh9XmWoZt8AJQ3DBaOb_YG_
7gyIpOlbaA5qA4piV_Y7_Tlk24wavsX_sWUSct17EVXhjNSOuMlLKSYaWW0V
wgOd5qZ2booM-
Received: from [173.219.189.95] by web185303.mail.gq1.yahoo.com via HTTP; Wed, 03 Oct 2012 00:50:46 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.122.442
Message-ID: <[email protected]>
Date: Wed, 3 Oct 2012 00:50:46 -0700 (PDT)
From: Emily Arthur <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="470446061-2136051837-1349250646=:92138"
X-Spam-Status: No, score=4.3
X-Spam-Score: 43
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: I am Mrs. Emily Arthur, a Christian. I have made you a beneficiary
of my funds, contact me! I am Mrs. Emily Arthur, a Christian. I have made
you a beneficiary of my funds, contact me! [...]

Content analysis details: (4.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(weboffice.12.13por[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.236 listed in list.dnswl.org]
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6133]
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MISSING_SUBJECT Missing Subject: header
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO

--470446061-2136051837-1349250646=:92138
Content-Type: text/plain; charset=us-ascii



I am Mrs. Emily Arthur, a Christian. I have made you a beneficiary of my funds,

contact me!

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

by Reportandie Fri Oct 12, 2012 5:46 pm
[email protected]
550 [SUSPEND] Mailbox currently suspended - Please contact correspondent directly

Who is online

Users browsing this forum: ClaudeBot, Google Adsense [Bot] and 23 guests