Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Fri Dec 28, 2012 2:15 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 28 Dec 2012 09:45:34 -0800
Received: from nm4-vm0.bullet.mail.tp2.yahoo.com ([203.188.200.202]:26718)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1Todzv-0001K5-AB
for ; Fri, 28 Dec 2012 09:45:34 -0800
Received: from [203.188.200.142] by nm4.bullet.mail.tp2.yahoo.com with NNFMP; 28 Dec 2012 17:45:29 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 28 Dec 2012 17:45:29 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 28 Dec 2012 17:45:29 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 804 invoked by uid 60001); 28 Dec 2012 17:45:28 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1356716728; bh=+7fIEdmHK0teCjm27IBE6T6HCrcJ0+t6aGLh6ZdVv3I=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tBx+wUJD8XjYY2eTe0cTtf9uIAGl7MzBZ+xVsr6pLSVyhpB63ZVY+GgPILUaztcH6hurLp1JcYyhW9EnTK2oGHyYoZJjc4rywDqdL4P6fea1qpx2fjzdK1ycZeM10C3ZjfquBGucjXeBYr41fDW87M4p+oWKO2ultda+dhlmlNA=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.cn;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=kV4kikEK51TXdmyKS3Cmy0B8vf2sAEr0SV0rE41C/2SpA57acOIomOis8wFCb0vFyp2TKBHXIwJVJ9SPCtdvx24ajch0yGmXTE6fk7c/msqTv7laiUDvRsyRWRKil3nvT3nDOQ1J2CUJinqI51ljPyBDErwsyliyZ+62+Gc32uM=;
X-YMail-OSG: nrj75AEVM1lLUv.ufz_dJVT46Hb5KsFSXY7tBzHsQqrV_i0
gj3tiB3PMBoDr6ycKFItN
Received: from [41.85.176.19] by web92414.mail.cnh.yahoo.com via HTTP; Sat, 29 Dec 2012 01:45:28 CST
X-Rocket-MIMEInfo: 001.001,CgoKCgoKCgoKCkF0dG4gQmVuZWZpY2lhcnkNCsKgDQpQbGVhc2Ugc2VuZCB0aGUgZGlwbG9tYXQgd2hvIGlzIHN0cmFuZGVkIAphdCBIYXJ0c2llbGQtQXRsYW50YSBBaXJwb3J0IHlvdXINCmFkZHJlc3Mgd2hlcmUgdG8gbWFrZSB5b3VyIGRlbGl2ZXJ5LiBIaXMgCm5hbWUgaXMgRHIuIEZyZWQgVWdvIGJvbiBhbmQgaGUNCmFycml2ZWQgYXQgSGFydHNpZWxkLUF0bGFudGEgQWlycG9ydCB0aHJlZSAKZGF5cyBhZ28gd2l0aCB5b3VyIHBhY2thZ2UgYW5kDQpoZSdsbCBuZWVkIHRvIHByb2NlZWQgdG8geW91ciABMAEBAQE-
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <[email protected]>
Date: Sat, 29 Dec 2012 01:45:28 +0800 (CST)
From: "Rev. Dr. Richard Bruno" <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1138787684-718622880-1356716728=:48987"
X-Spam-Status: Yes, score=13.4
X-Spam-Score: 134
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Attn Beneficiary Please send the diplomat who is stranded
at Hartsield-Atlanta Airport your address where to make your delivery. His
name is Dr. Fred Ugo bon and he arrived at Hartsield-Atlanta Airport three
days ago with your package and he'll need to proceed to your address. Please
E-mail him your Phone number and all identities that will help him for smooth
delivery. The bellow is his contact. Don't let him know the content because
it contains 2.5 million U.S.A Dollars. Email ([email protected] ) Your full
name_________ Your country Your phone numbers_________ Your Age Your occupation________
Marital statue [...]

Content analysis details: (13.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ofile663[at]yahoo.cn)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[203.188.200.202 listed in list.dnswl.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.85.176.19 listed in zen.spamhaus.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (ofile663[at]yahoo.cn)
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_REMOTE_IMAGE Message contains an external image
4.0 MONEY_FROM_41 Lots of money from Africa
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
Subject: ***SPAM*** Attn Beneficiary

--1138787684-718622880-1356716728=:48987
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

=0A=0A=0A=0A=0A=0A=0A=0A=0A=0AAttn Beneficiary
=A0
Please send the diplomat who is stranded =0Aat Hartsield-Atlanta Airport yo=
ur
address where to make your delivery. His =0Aname is Dr. Fred Ugo bon and he
arrived at Hartsield-Atlanta Airport three =0Adays ago with your package an=
d
he'll need to proceed to your address. Please =0AE-mail him your Phone numb=
er
and all identities that will help him for smooth =0Adelivery. The bellow is
his contact. Don't let him know the content because =0Ait contains 2.5
million U.S.A Dollars.
Email ([email protected] =0A)=0AYour full name_________
Your country_____________
Your phone =0Anumbers_________
Your Age____________
Your occupation________
Marital =0Astatue=0A=0ARev. Dr. Richard Bruno
DHL DIRECTOR
+229 =0A98387438
--1138787684-718622880-1356716728=:48987
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Attn Beneficiary

Please send the diplomat who is stranded
at Hartsield-Atlanta Airport your
address where to make your delivery. His
name is Dr. Fred Ugo bon and he
arrived at Hartsield-Atlanta Airport three
days ago with your package and
he'll need to proceed to your address. Please
E-mail him your Phone number
and all identities that will help him for smooth
delivery. The bellow is
his contact. Don't let him know the content because
it contains 2.5
million U.S.A Dollars.
Email ([email protected]
)
Your full name_________
Your country_____________
Your phone
numbers_________
Your Age____________
Your occupation________
Marital
statue

Rev. Dr. Richard Bruno
DHL DIRECTOR
+229
98387438

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

by Faizan Docherty Mon Jan 27, 2014 9:28 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 177.36.214.218<br>Originating ISP: Brasil Tecnologia Ltda. Me<br> City: n/a<br>Country of Origin: Brazil<br>* For a complete report on this email header goto ipTRACKERonline


From: Mr.Richard Bruno <[email protected]>
Date: 2014/1/7
Subject: shipment
To: <snipped>




shipment

The delivery of your package is currently ongoing with our diplomat Oscar Igwe
and he's at Atlanta GA Airport with the package. Content is 1.5 million
Dollars while he's not aware of the content as I told him it contains African
Clothes.Please send him your delivery details as stated.

Your Name, Phone Numbers, Address and Nearest Airport the contact info's


[email protected]


Rev.Dr. Richard Bruno

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: ClaudeBot and 27 guests