Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Fri Jul 26, 2013 5:23 am
Return-Path: <[email protected]>
Received: from nm16-vm3.bullet.mail.ne1.yahoo.com (nm16-vm3.bullet.mail.ne1.yahoo.com [98.138.91.146])
(8.14.5/8.14.5) with ESMTP id r6Q8emT6062149
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from [email protected])
Received: from [98.138.226.179] by nm16.bullet.mail.ne1.yahoo.com with NNFMP; 26 Jul 2013 08:40:48 -0000
Received: from [98.138.226.162] by tm14.bullet.mail.ne1.yahoo.com with NNFMP; 26 Jul 2013 08:40:48 -0000
Received: from [127.0.0.1] by omp1063.mail.ne1.yahoo.com with NNFMP; 26 Jul 2013 08:40:48 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 77039 invoked by uid 60001); 26 Jul 2013 08:40:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1374828048; bh=DsT4uuu41ONoqOBxgPIXQHpiAsCIcqn++ZHoA6AvBh8=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=t/IVlcIZ+CjN3RlbDue+G7pma+mmoinA04AWQR8/hUoZ/TodhIYSTLv/HM/+MQ/Q4uePq3O72lAw+nKeu4eVuu36bG7Trj6cQV5YqCyTvGV98O4tPKi0GUJVw8b2AxpvEW1oagrPl1bVtGKoUsLQU4sTrPOCJopmTpa69Og6B+Y=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding;

aJphJ8Rfv2ZGyycPJlik2OFz9msvWkiAS4zKgVwFWKUONhTRlHgSqrdhOJCk
9OwRnwoQ6dn5vdk7E3c4bJpq_uR0l_wmC3NdJrA9_iSutx.MI0uSl33P7NTg
o_Ner37efu8zpxDM5TdWOjQ--
Received: from [41.203.79.249] by web122201.mail.ne1.yahoo.com via HTTP; Fri, 26 Jul 2013 01:40:48 PDT
X-Rocket-MIMEInfo: 002.001,SGVsbG8sDQoNCg0KV2Ugc2VudCB5b3UgYSBtYWlsIGEgY291cGxlIG9mIGRheXMgYWdvIGhvcGluZyB0aGF0IHlvdSB3aWxsIHJlcGx5LiBVcCB0aWxsIG5vdyB0aGVyZSBpcyBubyByZXNwb25zZSBmcm9tIHlvdS7CoA0KDQoNCkRvIGxldCB1cyBrbm93IGlmIHlvdSBnb3QgaXQgb3Igbm90IHNvIHRoYXQgd2UgY2FuIHJlLXNlbmQgaXQuIFdlIGhhdmUgwqBsaW1pdGVkIHRpbWUgd2l0aCB5b3VyIGZpbGUuDQoNCg0KRG8gcmVwbHkgdXMgdG9kYXkgc28gdGhhdCB3ZSBrbm93IHRoZSBzdGF0dXMgb2Ygb3VyIGMBMAEBAQE-
X-Mailer: YahooMailClassic/280 YahooMailWebService/0.8.150.561
Message-ID: <[email protected]>
Date: Fri, 26 Jul 2013 01:40:48 -0700 (PDT)
From: [email protected]
Subject: Re. did you get our previous mails?.
To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Greylist: Default is to whitelist mail, not delayed by milter-greylist-4.2.7

Hello,


We sent you a mail a couple of days ago hoping that you will reply. Up
till now there is no response from you.


Do let us know if you got it or not so that we can re-send it. We have
limited time with your file.


Do reply us today so that we know the status of our correspondence.


Joshua Moses

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

by buried under 419s Fri Jul 26, 2013 12:20 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 26 Jul 2013 07:42:24 -0700
Received: from nm27-vm3.bullet.mail.ne1.yahoo.com ([98.138.91.157]:32743)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1V2jDo-0006Oi-S5
for ; Fri, 26 Jul 2013 07:42:24 -0700
Received: from [98.138.90.57] by nm27.bullet.mail.ne1.yahoo.com with NNFMP; 26 Jul 2013 14:42:20 -0000
Received: from [98.138.226.161] by tm10.bullet.mail.ne1.yahoo.com with NNFMP; 26 Jul 2013 14:42:20 -0000
Received: from [127.0.0.1] by omp1062.mail.ne1.yahoo.com with NNFMP; 26 Jul 2013 14:42:20 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 92296 invoked by uid 60001); 26 Jul 2013 14:42:20 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1374849740; bh=OIArWUIsj2MM/+5M8HDx7eQF6hnRtpyrJvfewsZtKFY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=dXpRWDY9TwHDRKwEIVw3X7f+faUL+U+Z7Vrb+Q3bnOAcLQzO38GaUNohqZ2t73Ztynwxd7jWyslUz4d2/vqlUx8J8Pf0OJAV4cPGFDKjKzaIrEBGhPO4wV/WXnEHPAzYaneqF0ZuGyc9/M21TJ9MkvZ6h5SP3nHcef3d9ulmLME=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
b=lm4D8dHz6+co3lFblC4heDj2T1i5tyhPzRdjEm/5EShIHREEdKRm3qd7WqKDiW0TrBgmGIkCUME75QLvroFx/omkqVeAQJ8XzH+G63P9APUbfg9pMW/2QMLZrlRzWT0nyuJTvu9a8vi/zESvrUytavmnYe45pQaw3L6avnWpMfc=;
X-YMail-OSG: slTidz4VM1m4ceiSaMHt5Jc5hdbfFjJjIKzaxswKw01p4nn

Received: from [41.203.79.249] by web122202.mail.ne1.yahoo.com via HTTP; Fri, 26 Jul 2013 07:42:20 PDT
X-Rocket-MIMEInfo: 002.001,DQpEZWFyIEFsZXgNCg0KV2UgYXJlIHNlbmRpbmcgeW91IHRoZSBtZXNzYWdlIGFnYWluIGFzIHJlcXVlc3RlZC4NCg0KTGV0IHVzIGtub3cgaWYgeW91IHdpbGwgbWFrZSB1c2Ugb2YgdGhlIG5vbiByZXBheWFibGUgZ3JhbnQgZ2l2ZW4gdG8geW91IGJ5IFVOSUNFRiB0byBlc3RhYmxpc2ggYnVzaW5lc3MgaW4geW91ciBsb2NhbGl0eSBzbyBhcyB0byByZWR1Y2UgdW5lbXBsb3ltZW50Lg0KDQpJZiB5b3Ugd2lsbCwgZG8gc2VuZCB0byB1cyB0aGUgbmFtZSBhbmQgYWRkcmVzcyB3ZSBzaG91bGQgdXNlIHRvIHABMAEBAQE-
X-Mailer: YahooMailClassic/280 YahooMailWebService/0.8.150.561
Message-ID: <[email protected]>
Date: Fri, 26 Jul 2013 07:42:20 -0700 (PDT)
From: [email protected]
Subject: XXXX the message again
To:
In-Reply-To: <20130726060523.50895bzqa3txj4sg@>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: No, score=1.1
X-Spam-Score: 11
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Dear Alex We are sending you the message again as requested.
Let us know if you will make use of the non repayable grant given to you
by UNICEF to establish business in your locality so as to reduce unemployment.
[...]

Content analysis details: (1.1 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(joshua.moses204[at]yahoo.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.138.91.157 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.203.79.249 listed in dnsbl.sorbs.net]
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (joshua.moses204[at]yahoo.com)
-0.5 BAYES_05 BODY: Bayes spam probability is 1 to 5%
[score: 0.0118]
1.3 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: NO


Dear Alex

We are sending you the message again as requested.

Let us know if you will make use of the non repayable grant given to you by=
UNICEF to establish business in your locality so as to reduce unemployment=
.

If you will, do send to us the name and address we should use to process th=
e disbursement and also let us know what you will use the money for.

If you send these details to us, we will be able to complete the processing=
of your grant in four working days and advise you accordingly.

Waiting for your reply

Joshua Moses
CEO=20
Lotmark Financial Services Inc.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: ClaudeBot, Majestic-12 [Bot] and 17 guests