Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#323437 by buried under 419s Sun Mar 26, 2017 2:17 pm
Viewing Full Header - View message
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id 0bI+Jdf711iDSAAAjbubUg
for <>; Sun, 26 Mar 2017 10:35:19 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 26 Mar 2017 10:35:19 -0700
Received: from april.khv.ru ([212.19.6.22]:52701)
by with esmtp (Exim 4.88)
(envelope-from <[email protected]>)
id 1csC4T-0004ox-PF
for ; Sun, 26 Mar 2017 10:35:19 -0700
Received: from [87.236.215.9] (account eeugenia HELO User)
by april.khv.ru (CommuniGate Pro SMTP 5.1.16)
with ESMTPA id 4767968; Mon, 27 Mar 2017 04:35:29 +1100
Reply-To: <[email protected]>
From: "Dip. Laurence Weiss"<[email protected]>
Date: Sun, 26 Mar 2017 10:34:30 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=21.8
X-Spam-Score: 218
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: I am diplomat Laurence Weiss, mandated to deliver your consignment
to you in your country of residence and I am currently at Nashville International
Airport Tennessee United States of America. The consignment you were made
the beneficiary of these funds by a benefactor whose details will be revealed
to you after handling over the consignment to you in accordance with the
agreement I signed with the benefactor when he enlisted my assistance in delivering
the funds to you. [...]

Content analysis details: (21.8 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
1.5 SUBJ_ALL_CAPS Subject is all capitals
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[212.19.6.22 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[212.19.6.22 listed in dnsbl.sorbs.net]
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(careisu98[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.5 FAKE_REPLY_C No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** Re: CONSIGNMENT RELEASE NOTIFICATION.



I am diplomat Laurence Weiss, mandated to deliver your consignment to you in your
country of residence and I am currently at Nashville International Airport Tennessee
United States of America.



The consignment you were made the beneficiary of these funds by a benefactor whose
details will be revealed to you after handling over the consignment to you in
accordance with the agreement I signed with the benefactor when he enlisted my
assistance in delivering the funds to you.



I am presently at Nashville International Airport Tennessee United States of
America. and before i can deliver the consignment (funds) to you, you have to
reconfirm the following information so as to ensure that your details corresponds
with the documents and delivery details i have here with me.



However you are to send me the below information to enable me deliver your
consignment to your door step and to avoid any wrong delivery of your consignment.



Full Name:
Full Home Address:
Direct Phone Number:
Driver's License
Occupation:


You are to call me on this number +1 615 732 5526 so we can talk better on the
delivery schedule/Time.Waiting to hear from you soon as your service is our pride..



Best Regards
Dip. Laurence Weiss
Diplomat

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 84 guests