Example 419 Email Fraud 1708

Back to full index

From ???@??? Mon Nov 09 07:26:53 2009
Return-path: 
Envelope-to: Isp402@dsl.Isp2.com
Delivery-date: Mon, 09 Nov 2009 07:33:40 +0000
Received: from mk-filter-5.mail.uk.tiscali.com ([212.139.137.132])
	by mk-delivery-2.b2b.uk.tiscali.com with esmtp (Exim 4.69)
	(envelope-from )
	id 1N7Oku-000CKv-U7
	for Isp402@dsl.Isp2.com; Mon, 09 Nov 2009 07:33:40 +0000
Received-SPF: None identity=pra; client-ip=72.1.201.195;
  receiver=mk-inboundfilter-1-a-1.b2b.uk.tiscali.com;
  envelope-from="officefile1_02@yahoo.co.th";
  x-sender="officefile1_02@yahoo.co.th";
  x-conformance=sidf_compatible
Received-SPF: None identity=mailfrom; client-ip=72.1.201.195;
  receiver=mk-inboundfilter-1-a-1.b2b.uk.tiscali.com;
  envelope-from="officefile1_02@yahoo.co.th";
  x-sender="officefile1_02@yahoo.co.th";
  x-conformance=sidf_compatible
Received-SPF: None identity=helo; client-ip=72.1.201.195;
  receiver=mk-inboundfilter-1-a-1.b2b.uk.tiscali.com;
  envelope-from="officefile1_02@yahoo.co.th";
  x-sender="postmaster@mx5.Isp5.co.uk";
  x-conformance=sidf_compatible
X-Trace: 1480252698/mk-filter-5.mail.uk.tiscali.com/ListenerSBRS/$ACCEPTED/UNKNOWNLIST/72.1.201.195/2.8/officefile1_02@yahoo.co.th
X-SBRS: 2.8
Received: from mx5.Isp5.co.uk ([72.1.201.195])
  by mk-inboundfilter-1-a-1.b2b.uk.tiscali.com with ESMTP; 09 Nov 2009 07:33:39 +0000
Received: from [203.188.202.87] (helo=n6.bullet.mail.tp2.yahoo.com)
	by mx5.Isp5.co.uk with smtp (Exim 4.69 #1 (Debian))
	id 1N7Okp-0007eR-F6
	for ; Mon, 09 Nov 2009 02:33:38 -0500
Received: from [203.188.202.70] by n6.bullet.mail.tp2.yahoo.com with NNFMP; 09 Nov 2009 07:33:33 -0000
Received: from [124.108.115.243] by t1.bullet.mail.tp2.yahoo.com with NNFMP; 09 Nov 2009 07:33:33 -0000
Received: from [124.108.114.82] by t2.bullet.mail.sg1.yahoo.com with NNFMP; 09 Nov 2009 07:33:33 -0000
Received: from [127.0.0.1] by omp102.mail.sg1.yahoo.com with NNFMP; 09 Nov 2009 07:33:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 136524.62493.bm@omp102.mail.sg1.yahoo.com
Received: (qmail 31647 invoked by uid 60001); 9 Nov 2009 07:26:53 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.th; s=ymail_nen1; t=1257751613; bh=DzgUjInyBS8dTbceO3pUbsCW5MZr9x8f3w92JcZtnWQ=; h=Message-ID:Received:X-RocketDSI:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=ZdVtkftZrTPFJOTjGdu0MRszF8o/cdRr78gGUy5w87w5Kacdo3GwdbUxGz4F5nIUkCfjG2tweMECPaXoWgwubJmZP5olibQMuHr6XGNlNnOCHtEd0d9AtggnhccPjH7hJwKoLSCJbkGZW7Du0JfT6FCBJlcbnmTJXIjFtjcc7wA=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=ymail_nen1; d=yahoo.co.th;
  h=Message-ID:Received:X-RocketDSI:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding;
  b=wZteUbNqq3KBtU+CfMnDb7U7SfBEcdaakVG7tvNNmtmIZWHCrxLHKq7LUwzID3pU2h5UhiEV9VJz2aUydMQN9Zbeudgo4RaeS1JphH6WemGs95mUkyQp0rNaCBSo4OYv5aeZSqGqDwNoYj0JWm1Kzc1RPXyzAHpu13n5z9ReZa8=;
Message-ID: <430758.22293.qm@web76705.mail.sg1.yahoo.com>
Received: from [41.191.85.41] by web76705.mail.sg1.yahoo.com via HTTP; Mon, 09 Nov 2009 15:26:53 SGT
Date: Mon, 9 Nov 2009 15:26:53 +0800 (SGT)
From: =?utf-8?q?Office=20File?= 
Reply-To: westernmoneyt40@live.fr
Subject: PICK UP YOUR FIRST PAYMENT OF $6500.00 AND GET BACK FOR SECOND PAYMENT
To: Email_addr20220@Domain.net
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1468725931-1257751613=:22293"
Content-Transfer-Encoding: 8bit
X-Antivirus-Scanner-Outbound: Clean mail though you should still use an Antivirus
X-Spam-Score: 5.0

--0-1468725931-1257751613=:22293
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit




- My Dear Friend.The first payment of $6500.00 U.S.D was sent today. We have concluded to effect your payment through western union $6500.00 daily until the ($2.8M) U.S.D is completed.The below are the payment information;www.westernunion.com MTCN NUMBER:050-474-5117 Sender's Name:Mr.Jean LouisText Question:HONEST Answer; TRUST Amount Send:$6500.00 U.S.D.Please Contact Dr,John Bayo if there is any problem below is our E-mail address:(westernmoneyt40@live.fr) or call him (+229)98454624 and forward him yourTelephone number,---------your country,------------City,-----------your receiver name,------------so that he will be sure.Note, that the total sum of ($2.8M) has been programmed to our electronic wire transfer system for transfer once we hear from you Thanks for your understanding.Contact Dr,John Bayo as soon as you pick up your first payment for more payment Contact him through this email address (westernmoneyt40@live.fr) and call him through his office telephone number +229-98454624.Best Regards Barr,Mike Philip