Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Tue Feb 17, 2015 11:52 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 16 Feb 2015 20:26:11 -0800
Received: from mail.yes123agency3.com.tw ([218.211.34.34]:43696)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1YNZjd-0006Wi-2r
for ; Mon, 16 Feb 2015 20:26:11 -0800
Received: from User (unknown [187.5.212.60])
by mail.yes123agency3.com.tw (Postfix) with ESMTP id 3A4A6ADA34A;
Tue, 17 Feb 2015 12:26:40 +0800 (CST)
Reply-To: <[email protected]>
From: "Mr. Wayne Collins"<[email protected]>
Date: Tue, 17 Feb 2015 02:26:41 -0300
MIME-Version: 1.0
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 17 Feb 2015 04:01:55 -0800
Received: from nh502-vm14.bullet.mail.kks.yahoo.co.jp ([183.79.56.159]:39728)
by s with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1YNgqe-0001ns-SG
for ; Tue, 17 Feb 2015 04:01:55 -0800
Received: from [183.79.100.141] by nh502.bullet.mail.kks.yahoo.co.jp with NNFMP; 17 Feb 2015 12:02:31 -0000
Received: from [183.79.100.135] by t504.bullet.mail.kks.yahoo.co.jp with NNFMP; 17 Feb 2015 12:02:31 -0000
Received: from [127.0.0.1] by omp504.mail.kks.yahoo.co.jp with NNFMP; 17 Feb 2015 12:02:31 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Message-ID: <[email protected]>
Received: (qmail 179 invoked by alias); 17 Feb 2015 12:02:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ybb.ne.jp; s=ybb20110701; t=1424174551; bh=IRHcNx42wTrIfAj11m9VWesrgwy5pHRooxQSrVen1hI=; h=Received:X-YMail-JAS:X-Apparently-From:X-YMail-OSG:Reply-To:From:Subject:Date:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=EKmW/t/pqeomkZ6tiEF+GRtPad/VOPeoGWnPM3V9DOjKjlMDhQnH+ySxnVZ0pMA/gQBRZ2wAEMhDyfzUF9zT87bNByyWpXr8hTBPVQLV7GgmvyfFTc0ZSkrs6j9KE8Hu0xGl1pieqqtokk+uTXa85aLiA+gHiMkjC06oh2vPimA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=ybb20110701; d=ybb.ne.jp;
h=Received:X-YMail-JAS:X-Apparently-From:X-YMail-OSG:Reply-To:From:Subject:Date:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE;
b=EGe0/5d+cxFxWAdFoeooNlX663fJX6BwZ1kGH31CE6ugD05+aGibigl8kPKP1rRPZ/VkoAa7zqZpHmOpVDnC0vi3ewGoV+Rz5rW6vMsjlgTiSQTja8ZFkUAKZX7tnBnUl5c7kJe+5K9VhBhHVjnA+9QkJTuzJhi2/juvJ4aR774= ;
Received: from unknown (HELO User) (180.19.192.15 with login)
by ybbsmtp504.mail.kks.yahoo.co.jp with SMTP; 17 Feb 2015 12:02:30 -0000
X-YMail-JAS: iPPf1DMVM1ky_DrLafTZYrU944CIXAoCe_EWmcvslj5ymdwcqiZJIthTh1f_B6hWDQGFtNtEn4x3iGHtPrW4F.JHNbHBvZmNavmc16utL1aXHqD.NQX1o.mHjRZrBYZAMukqIg--
X-Apparently-From: <[email protected]>
X-YMail-OSG: BuBUcNsVM1lCCm5ul1D01bzaF.OrZn7zJTnDm91Id2_zLsw
KD3JylfUWz4UyWPqDKCCsOp9Dv5OgpkpwaoYuAXtvSkeqjWDd_eYi7.qtwg2
Dxq3fcLQjc6Pcwgs3pFlBEyOsGUqvxSRS72f55uaF2O30hf323CuiJBGtZe7
j2tLseiasa2LJ9B5GEAh0vG.Jd6jyBypAgobjfvIz4_q7bI46BN1AnqZqUUY
5cXq3AC46Tj_ssNYQ._Tr9vNQNMo52U5_5Aiq2cFzHXtXnUkrWjTED9kyMZR
pUjz_7yHM3YT_uRvbdba0b0NE0DJBlmqsutasxGatUDwQ4XXw1PORroI4g86
GgKkaP4xiApD8mjrq5v2TwWr.g7pxqpUtzI81dk_WxuN5VTVh6ff10DyBSnS
zCZfyouJlR8ncKj3K8SNTUUA8q1uYXAB1Ki7yBvDgODZnSmWbi_d14B.mGhR
kJXk0vPYWBlMVhUbPY5uoGx_yE2o__85TlL.iKQdP0zAGMMQsbf5j4d8dWPx
TDEBx0mmi1rWUsSh4Aoxatq5MTWpWKpz7Rxc9qYWdKcYCA50-
Reply-To: <[email protected]>
From: "Hon Emmanuel Armah-Kofi Buah"<[email protected]>
Date: Tue, 17 Feb 2015 04:02:28 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=9.4
X-Spam-Score: 94
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: From Hon Emmanuel Armah-Kofi Buah Dear Sir/Ma, I have a Deal
project for you to handle with me, if you are interested,pls contact me urgent
for more details. [...]

Content analysis details: (9.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[183.79.56.159 listed in list.dnswl.org]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.9 NSL_RCVD_HELO_USER Received from HELO User
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5969]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.4 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** BUSINESS PROPOSAL...pls get back to m urgent


From Hon Emmanuel Armah-Kofi Buah


Dear Sir/Ma,


I have a Deal project for you to handle with me, if you are interested,pls contact me urgent for more details.


Thanks.
Hon Emmanuel Armah-Kofi Buah

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Bing [Bot], ClaudeBot, Majestic-12 [Bot] and 28 guests