Scammer Spoofed Email Pretending To Be A US Attorney

From Sean O'Keefe Tue Sep 4 08:40:39 2012
X-Apparently-To: via 67.195.8.162; Tue, 04 Sep 2012 08:40:41 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
bWlseSBhbmQgSSBjYW1lIGRvd24gaGVyZSB0byBtYWRyaWQoc3BhaW4pLCBm
b3IgYSBzaG9ydCB2YWNhdGlvbiB1bmZvcnR1bmF0ZWx5IHdlIHdlcmUgbXVn
Z2VkIGF0IHRoZSBwYXJrIG9mIHRoZSBob3RlbCB3ZSBzdGF5ZWQsYWxsIGNh
c2ggY3JlZGl0IGNhcmRzIGFuZCBjZWxsIHdlcmUgc3RvbGVuIG9mZiBidXQg
bHVja2lseSBmb3IgdXMgd2Ugc3RpbGwgaGF2ZSBvdXIgcGFzcwEwAQEBAQN0
ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: QOizQ80WLDtvCWAmsZCpaleLN5li6eaDGq5DQbtBQnlba6Ag
s8PFSBT9UMbLQDErmcwtF0PC6k5PSIRxvjlk_3RHisOBWwRqxV.NbaYX7qMW
4bhfozHa05YHsoaklwtgsNCCESsNLn1pmpEEaww_guUjwMfFQbltCoJ3pGyf
GMbCgOMAKBbOvZECUKMHzusBHqdDsGPeYIbkIeSxPiQpAbDsOnAUAHxKmAh8
IqMlfNPMsxIVTecVLYI14aykKQI2UJz0WxMV8HIFQP9z83n8hox7tvDWda72
YtuGgbJauAmDBIycSn6TxbgacDzMQgIVB8ztPDKAEt0VlduQfmdhq.RwLXXI
.VXmwXyuv0M7Ci4I8RoSS7ro.iggVOoekpg5xCZ1tdswK5IA0eBZveQcYUcc
uRMnCgGsrmSD.EvM4mGZUM8vih5fQYaHBONqJ0aZEdHO47bEAbXooNM_KN6P
tK0VQebgAlCycewKj1WQrrFfd33avW6LYlh4SGnD6krZEA7xwVVhTebFYtLW
rsPnuV6ygyzEa32mMu.3GyO8Nznd3kwHsu0AiO8VdOqhBPvnvje4vu5g_iKm
6H0USj.r.MIQuUs8.IrplIh0wce7fpbdZhszZ0xN1uwm8Zc1iKHOPLXgVAs7
ZRBkKKs47r6SKaDby7Ybwxj869zNPY5dU0EC2nuAzSje0VhwyOekjTfLobOc
4KYegAFPQqr8vFQtsluNhbag9s3JD7_aurm6b19tQUvCXETb_hQWz5BcUYZK
nm7zMVJOak25XfFS87XYNfL5ODVvPQxsDmmedKgMDQGZR7Hp6R.bZo3HiaNv
uc.I3OJHx5dnbKQxS8sF2mpZUC5P61SmUjEEyTIGXITrit6pnsbxI5oOb0Nr
pv300nnCnYHI7NRyAwVMuNWvMYkGLIUXIbqX.NyZ.NcPMvFQ3SPxCCDWJVQ3
Rcbc_hzNL1I.x2f.hjdgwvdR6igcbeYjD_iWBFygIP5e1r20Lk7UST6d99Uw
KDIgXl3Emt8u_N3g8nrVNCzeKrxN.yK71HReR8eWJdbdGx5VtxEutfGUSGF_
xqwvb0AHMNkf1FXChOtuXc8JsZ0ZIt6Ugdgux6oE7vdcXMF6.F_MGb10isBf
6jVm2cOg6LT9Oae8C8EVCn46MVPSQUCE1CyT.XOOAWukgRCuttbjbcVXEpLG
dV0vJCKWch0UtXYketub2YCYiyTTd6DmaGTRPtmw9LzQKhgdlz__X3JC6w4t
FZBpSIt4DnORH6N8RXMC0DPembQcS9Mh0LQWaEp2SYF6_4L.IO.zD1DsPWZR
0C8lOJ0sYyDQkcOwcvcfc12aU2WoSna3D8I-
X-Originating-IP: [217.146.182.224]
Authentication-Results: mta1037.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm3.bullet.mail.ukl.yahoo.com) (217.146.182.224)
by mta1037.mail.bf1.yahoo.com with SMTP; Tue, 04 Sep 2012 08:40:41 -0700
Received: from [217.146.183.182] by nm3.bullet.mail.ukl.yahoo.com with NNFMP; 04 Sep 2012 15:40:39 -0000
Received: from [217.146.183.203] by tm13.bullet.mail.ukl.yahoo.com with NNFMP; 04 Sep 2012 15:40:39 -0000
Received: from [127.0.0.1] by omp1001.bt.mail.ukl.yahoo.com with NNFMP; 04 Sep 2012 15:40:39 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 8490 invoked by uid 60001); 4 Sep 2012 15:40:39 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1346773239; bh=yhUf/qCgUHTsh/UZ+9whBes665sb+MA7lQNUVO1F7H8=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=lKko20qioJ6/ZmO34kNv8kxSnSXH5mceY0R4Mo7B0CiTTtSPhj71HEaVRB3rQ3Ahy+dntynJGRhpJl7OfL+j60VSflkAYuf9pVgF97VZsmcITcAXvrFZTn9HsTGIw5vy2TNN8kqCxTqoLBNTVgv+Twak5zCOFFWulhYTmn6EkmI=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=usOAQw5ujU4NXQSWv24guqLz1SNOQDFG4WKGev7njJMgswGp257StCW533MxE5Duf6iABU6H48I9L8unwchAjVB25/fqe6utXHEq2sks0FmSfejjl4aI9xc/j2T/5XPy0zZMku2+xWW/3i4xzej9dx1bJc710HN1FmlBGZUuKMg=;
X-YMail-OSG: aRsHIFIVM1mHX2Ycig1Le2q1g4ctGkjfp7lmAQEcXQr.kfK
E3DlTpmgzGWVOSsbntjrsdFcaS1ViNCifQqE5F_p72vkRPQ16cIEYyRhKEJQ
sqVKm_ljF1HfMtrjdcdyz1vRLQ64dPyRBRkRiHyeUrEDN3.th1pvQJl2UJTW
O0JniaMJfD5hK3BlTiWRMKrozfIV7yvV5wEcDWiFYIe5_RBidbd8vQWql6AH
2_ftVjIlXh8CCxbr9ZPtMIB7NUyIoof4vRlm3EOnlxCzpHEjmch4JX5RGKSt
OnAaYG3zLwCpnU63VlPXwnvUYA9cHVJxKOwcmxuXx9gDyXj.cUw.yiK33LFg
siBBpcVO2bcRM2FLxf0oidNaQ2D0bFrpxWlUQNPrMp4p8BFMvb._hFjpx0ke
ttp2pY2RfopuXgrCmix1n58OM1CYammrau4qPTdo-
Received: from [41.138.176.203] by web87401.mail.ir2.yahoo.com via HTTP; Tue, 04 Sep 2012 16:40:39 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.416
Message-ID: <[email protected]>
Date: Tue, 4 Sep 2012 16:40:39 +0100 (BST)
From: Sean O'Keefe <[email protected]>
Reply-To: [email protected]
Subject: HELP ................................ Sean O'Keefe
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-47836184-1607343266-1346773239=:3877"
Content-Length: 5018

IP is
41.138.176.203 Check 41.138.176.203 at Senderbase.org Check 41.138.176.203 at Reputationauthority.org Visafone Communications Limited Lagos Nigeria





HELP ................................ Sean O'Keefe
Hide Details

FROM:

Sean O'Keefe

Message flagged
Tuesday, September 4, 2012 7:40 AM
I'm writing with tears in my eyes,my family and I came down here to madrid(spain), for a short vacation unfortunately we were mugged at the park of the hotel we stayed,all cash credit cards and cell were stolen off but luckily for us we still have our passports with us.

I have been to the embassy and the Police here but they're not helping issues at all and our flight leaves pretty soon from now but we're having problems settling the hotel bills and the hotel manager won't let us leave until we settle the bills.Please be so kind to reply back so I can tell you what to do and how to get some cash to us.

I'm freaked out at the moment

Law Offices Of Sean X O'Keefe
xxxx Camino XXXXX xxxx, Ste. xxx
Removed, CA xxxxx



THIS MESSAGE IS INTENDED ONLY FOR THE USE OF THE INDIVIDUAL OR ENTITY TO WHICH IT IS ADDRESSED AND MAY CONTAIN INFORMATION THAT IS PRIVILEGED, CONFIDENTIAL AND EXEMPT FROM DISCLOSURE UNDER APPLICABLE LAW. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by telephone, and return the original message to us at the above address via the U.S. Postal Service. Thank you.