Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Tue Jan 08, 2013 9:42 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 08 Jan 2013 02:57:06 -0800
Received: from nm1-vm0.bullet.mail.ird.yahoo.com ([77.238.189.95]:29122)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1TsWrf-0002VZ-4D
for ; Tue, 08 Jan 2013 02:57:06 -0800
Received: from [77.238.189.231] by nm1.bullet.mail.ird.yahoo.com with NNFMP; 08 Jan 2013 10:56:56 -0000
Received: from [212.82.108.118] by tm12.bullet.mail.ird.yahoo.com with NNFMP; 08 Jan 2013 10:56:56 -0000
Received: from [127.0.0.1] by omp1027.mail.ird.yahoo.com with NNFMP; 08 Jan 2013 10:56:56 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 38285 invoked by uid 60001); 8 Jan 2013 10:56:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1357642616; bh=LyXzkCrLBftusYnzwOEJSuBuSbw/ZkZwSXwC+wkAxvM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=26jQxZIekIujT8REFMaBmrBk6yfHd1x1XYtA1O0b79c4s3hbbYX1CuSI6pwIeSiKYjP2rFBliCSG6EHyKoQ67dpV+aWMJbI0Du4TSNWHht/bhto+J2FlwwHuaoZTMQMXKOOCRALDpbOn7W5LzqNCtUOnZq5556S8YYXsxXFAQQU=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.co.uk;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=TFtGNq12Yhd0wibRFmvg9P5xQc0Szi5HSf59YQV1s9aQlnK8tkIGQhfKm4hHEQAx2AHoaonAV/6pApTxsa6rqudseVaimPghzRASPzxR0+6wIFSZk/qr0P0YIkL7K7vc/CDj5o784D0kQYGI6K9yVP/OckECT1DM+EMGjforLoA=;
X-YMail-OSG: oVko2fUVM1l.L.R3UmqrIiitkEL2NdlA6HI8_s0TCEmXIvH
u4lUoelogeI7bB.NCpY9ujKg9nLT4lHSjgG2IV27ndFA2.XkmewWvliC2lEI
QvOZ1cnJzf8AnE4571m.topcY8Vc84J3YVljcr4C479npvGaBMDuLLNpCsG3
mZynx4TQbEYc_z1bQKtjTqlInranpCRooovtoMP33cs1a1xFpRRCOOA7g83g
MoaQpueUQz5UND5jCUMveunbVQr43UznX9pBczPj9XUnN4oB8HntryEOj.bh
AATwRmb3a6xXH.q8JoNBHWVRGjitzQ8b646yyXeR_kcOVOvxdBYqJ3Tmiz83
AOfHEWFdR1HjxPPEQt.OlSP5YtfV3T.YototYs6G2MImkgbDGWsFPpfx4HWw
Pu8kNdWThttoHMJOjF6S5TSSzBn75TuH4pkBMJv2u2acfTJoUXwEDLZkEy93
FGA--
Received: from [41.71.186.212] by web172504.mail.ir2.yahoo.com via HTTP; Tue, 08 Jan 2013 10:56:56 GMT
X-Rocket-MIMEInfo: 001.001,RnJvbS5NcnMuIE5hdGFsaWUgV29vZHMuDQpNaW5pc3RlciwgRm9yZWlnbiBBZmZhaXJzIE1pbmlzdGVyLg0KTWFwdXRvIFN0cmVldCBab25lIDMsDQpXdXNlLSBBYnVqYS1OaWdlcmlhLg0KwqANCkF0dG4gYmVuZWZpY2lhcnksDQpIYXBweSBOZXcgWWVhciwNCsKgDQpBZnRlciBhIGJyaWVmIG1lZXRpbmcgdGhpcyBtb3JuaW5nIGkgdG9vayBvdXQgdGltZSB0byBwbGVhZCBvbiB5b3VyIGJlaGFsZiBmb3IgYSBmZWUgcmVkdWN0aW9uIHdoaWNoIGhhdmUgYmVlbiBhY2NlcHRlZCB0byBoYXZlIGV2ZXJ5IGFuZCABMAEBAQE-
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <[email protected]>
Date: Tue, 8 Jan 2013 10:56:56 +0000 (GMT)
From: "Mrs. Natalie Woods" <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="34678004-1896300857-1357642616=:33751"
X-Spam-Status: Yes, score=9.6
X-Spam-Score: 96
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: From.Mrs. Natalie Woods. Minister, Foreign Affairs Minister.
Maputo Street Zone 3, Wuse- Abuja-Nigeria. Attn beneficiary, Happy New Year,
After a brief meeting this morning i took out time to plead on your behalf
for a fee reduction which have been accepted to have every and any fee needed
to secure your affidavit of claim certificate fee reduced to the sum of only
$95 from what so ever amount that may have been requested and required of
you. So do your best to raise the $95 now and go immediately you receive
this e-mail and send the $150 to the details below so that we will be able
to commence and complete your transfer today into any bank account of your
choice before the close of working hours today okay. As such you are to Please
run down to the nearest western union and have the only required $95 paid
immediately to this details below. Receivers name: Ibeh John Text question:
Best Text answer; interest Amount: $95 Destination: Lagos / Nigeria Senders
name: Senders address: Mtcn number: Go now and make the payment and have
the details forwarded to this office now so that your transfer can be effected
into your bank account before 3.30 pm your local time today. Confirm the
receipt of this e-mail by you immediately and be rest assured you will be
smiling to your bank tomorrow as soon as you send the fee today. Your quick
response will definitely go a long way as regards your transfer. Waiting
for your reply soon. Yours Sincerely. Mrs. Natalie Woods. FOREIGN AFFAIRS
MINISTER NIGERIA [...]

Content analysis details: (9.6 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[77.238.189.95 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tobechi_1[at]yahoo.co.uk)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(unitpayment42[at]yahoo.com
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (tobechi_1[at]yahoo.co.uk)
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** Attn beneficiary

--34678004-1896300857-1357642616=:33751
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

From.Mrs. Natalie Woods.
Minister, Foreign Affairs Minister.
Maputo Street Zone 3,
Wuse- Abuja-Nigeria.

Attn beneficiary,
Happy New Year,

After a brief meeting this morning i took out time to plead on your behalf for a fee reduction which have been accepted to have every and any fee needed to secure your affidavit of claim certificate fee reduced to the sum of only $95 from what so ever amount that may have been requested and required of you.

So do your best to raise the $95 now and go immediately you receive this e-mail and send the $150 to the details below so that we will be able to commence and complete your transfer today into any bank account of your choice before the close of working hours today okay.

As such you are to Please run down to the nearest western union and have the only required $95 paid immediately to this details below.

Receivers name: Ibeh John
Text question: Best
Text answer; interest
Amount: $95
Destination: Lagos / Nigeria
Senders name:
Senders address:
Mtcn number:
Go now and make the payment and have the details forwarded to this office now so that your transfer can be effected into your bank account before 3.30 pm your local time today.
Confirm the receipt of this e-mail by you immediately and be rest assured you will be smiling to your bank tomorrow as soon as you send the fee today.

Your quick response will definitely go a long way as regards your transfer.
Waiting for your reply soon.
Yours Sincerely.
Mrs. Natalie Woods.
FOREIGN AFFAIRS MINISTER NIGERIA

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Majestic-12 [Bot] and 17 guests