Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Wed Jul 03, 2013 5:16 pm
Return-Path: <[email protected]>
Received: from nm41-vm8.bullet.mail.bf1.yahoo.com (nm41-vm8.bullet.mail.bf1.yahoo.com [216.109.114.175])
(8.14.4/8.14.4) with ESMTP id r63KmUx3060025
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from [email protected])
Received: from [98.139.212.145] by nm41.bullet.mail.bf1.yahoo.com with NNFMP; 03 Jul 2013 20:48:30 -0000
Received: from [98.139.212.245] by tm2.bullet.mail.bf1.yahoo.com with NNFMP; 03 Jul 2013 20:48:30 -0000
Received: from [127.0.0.1] by omp1054.mail.bf1.yahoo.com with NNFMP; 03 Jul 2013 20:48:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 21358 invoked by uid 60001); 3 Jul 2013 20:48:30 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1372884510; bh=nLan6uKLfko7d6z+XeBlfJyKUZ7RtULTo1hiis9KFvs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZBwvWLuqPnkpaVq2xdFlqr6HYH0V/XbTy3q6wrQTvlAVl1vdEsJjQaS1/wrzbi3M6cpE8ZmWZHFRqumdHESHAp/c1Hsow3ot22IYAi00NsQCeHRjSaPCTOicsM4wJ7qrsF9KiWLtQU9MX3PSIEvmTJfHb2DmDRkHPC1bUdghEYM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.ca;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=hFH5U4EQ/m5DCiWCDLAwV4JHWfBZjkJq4XIsbeFsAX0JmGc2OvlWIeawAbofhlNRK+kaOkOgz6nXS50ZMCrCZbD5MhNXZD/dk8oCHdjZZIyfOpCNXbaHwsCmIJUxVufALDAwa+465pmil+spfWryL6taM6t4GynUi/Te6n7dVUE= ;
X-YMail-OSG: AAuwoTcVM1mRR3tOqMMYhmt8RzqDNReHHeXTUeT6HmAmCCK
8h12zpoz8r_0HBV4-
Received: from [185.12.7.195] by web141401.mail.bf1.yahoo.com via HTTP; Wed, 03 Jul 2013 13:48:30 PDT
X-Rocket-MIMEInfo: 002.001,DQoNCkhlbGxvLA0KCg0KCk15IG5hbWUgaXMgTWFyaWFtIFdlbGJlY2ssIEkgd291bGQgbGlrZSB1cyBiZSBmcmllbmRzLkkgaGF2ZSBzb21ldGhpbmcNCgppbXBvcnRhbnQgdG8gZGlzY3VzcyB3aXRoIHlvdS4NCgoNCgpUaGFua3MsDQoKDQoKTXMgTWFyaWFtATABAQEB
X-Mailer: YahooMailClassic/16.0.3 YahooMailWebService/0.8.148.557
Message-ID: <[email protected]>
Date: Wed, 3 Jul 2013 13:48:30 -0700 (PDT)
From: Ms Maria Welbeck <[email protected]>
Reply-To: [email protected]
Subject: Hello
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="783862642-749289113-1372884510=:21098"
X-Greylist: Default is to whitelist mail, not delayed by milter-greylist-4.2.7 (


--783862642-749289113-1372884510=:21098
Content-Type: text/plain; charset=us-ascii



Hello,



My name is Mariam Welbeck, I would like us be friends.I have something

important to discuss with you.



Thanks,

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

by buried under 419s Fri Jul 05, 2013 7:57 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 05 Jul 2013 03:25:40 -0700
Received: from nm19-vm0.bullet.mail.ird.yahoo.com ([77.238.189.92]:29038)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1Uv3Ct-00028D-IZ
for ; Fri, 05 Jul 2013 03:25:40 -0700
Received: from [77.238.189.231] by nm19.bullet.mail.ird.yahoo.com with NNFMP; 05 Jul 2013 10:25:36 -0000
Received: from [212.82.108.124] by tm12.bullet.mail.ird.yahoo.com with NNFMP; 05 Jul 2013 10:25:36 -0000
Received: from [127.0.0.1] by omp1033.mail.ird.yahoo.com with NNFMP; 05 Jul 2013 10:25:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 29569 invoked by uid 60001); 5 Jul 2013 10:25:36 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1373019936; bh=PVn3fZz8m5hk4DETUFTPPyTtcwG3CZ9d1cNOLQpopqA=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=3ag0idLcpKq3xiy+e93/99A08p+OWUL/fRP+Rr77LA/cCbpML3M3vhW7IuRsDonq4I4vkdDu3KteYzTG/Vz1wEaY1EVA6/qcVQ05GwIy7Z8nuaGMlKSwCNRhi8YZT/b5V97UGYoYpEsMd//ZJ5gIpxV+BP/Xj/ZXJIqHiIc8Xp0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.fr;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=sI4usO6NDJ1b5gJJZhk30YVEMGWqng9s+j1wSeha6FW9ydRP8VfkgDcN5HCNZ9y5jGazmh2OhjNulPLW7oJ5OMTyLYrf+bhW+BT3RvRgEI39W0YjJiDp1nBsqvPj0UCQLLt/iGMpLfAVgObPAT1eNVo4I//QY2V5PCyB6rh0KpM= ;
X-YMail-OSG: AF5rLQkVM1nPnKL8f_USPr_ZjmbLORMMxJWnwHZrZBRasnI
cSMB_F7Bg3LxGaN6AktHYl2RavIPbuY9M1k.pJ8A6HITN3P.D_I2bFlUL6yC
N3k1tcw.xdskJm5HGGRXHdRNP3O.DslRgxbzULJE8lqF9THEguFd2UPuE8Vc
Y6DCsjkuEd9ltoDAPJzT.8dhIGvhEeZerh7vaAvn7AmA6uzN8TZpTE.LuAg_
XXJ0UKYsU.nLopyofHLLnp.gAqmEz5Vux1L82c15U4Lk9D32ubhP2PYpp0MC
21mtG1_oCoVcTi_Vcdhix2pE3RPCKLTPqop_xv8tH1Mzf7PfYTLXqWimnr_N
QTil4NSnZKBq6jmPfDvp_YgGPJjHyhKgBj4bQgHdvx2TTENf.Nw0hQDSrIlz
V4AJhMWQDmDTs1m2aK1JV1BqJCUGDAOEGwZIZG676QDOezQPULuBXZzLNJz4
MGHWLl3d9eeQWVV5UflEGbGT5.C14aIe9UIJYwse_EOerY_qhB8HL0kSC6ZV
tPtrNWKqQ7aSfn6ydUsKnnPLXm_3Z9A6Hjm1.cajKCKUe_PMPHepOrWu7VuG
uEvXeAss-
Received: from [41.83.12.248] by web171203.mail.ir2.yahoo.com via HTTP; Fri, 05 Jul 2013 11:25:35 BST
X-Rocket-MIMEInfo: 002.001,SGVsbG8gRGVhciwNCg0KR29vZCBkYXksDQoNCkkgd291bGQgYXBwcmVjaWF0ZSBpZiB5b3UgY2FuIGFzc2lzdCBtZSB0byB0cmFuc2ZlciBteSBGdW5kcyBmcm9tIExvbmRvbiBiYW5rIHdoZXJlIGl0IHdhcyBkZXBvc2l0ZWQgdG8geW91ciBub21pbmF0ZWQgYmFuayBhY2NvdW50IGZvciBpbnZlc3RtZW50IHByb2plY3RzLlBsZWFzZSBsZXQgbWUgaGVhciBmcm9tIHlvdSBzb29uLg0KDQpSZWdhcmRzDQoNCk1hcmlhbQ0KDQoNCg0KLS0tIEVuIGRhdGUgZGXCoDogSmV1IDQuNy4xMywgQWxleCBCYW5uaXN0ZXIBMAEBAQE-
X-Mailer: YahooMailClassic/16.0.3 YahooMailWebService/0.8.148.557
Message-ID: <[email protected]>
Date: Fri, 5 Jul 2013 11:25:35 +0100 (BST)
From: Mariam Welbeck <[email protected]>
To: Alex Bannister <>
In-Reply-To: <>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="684168126-1644007000-1373019935=:20163"
X-Spam-Status: Yes, score=11.8
X-Spam-Score: 118
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Hello Dear, Good day, I would appreciate if you can assist
me to transfer my Funds from London bank where it was deposited to your nominated
bank account for investment projects.Please let me hear from you soon. [...]


Content analysis details: (11.8 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[77.238.189.92 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mariam.welber[at]yahoo.fr)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5002]
11 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
Subject: ***SPAM*** Re:

--684168126-1644007000-1373019935=:20163
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Hello Dear,

Good day,

I would appreciate if you can assist me to transfer my Funds from London bank where it was deposited to your nominated bank account for investment projects.Please let me hear from you soon.

Regards

Mariam

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: ClaudeBot and 16 guests