Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#210949 by buried under 419s Sat Jul 19, 2014 5:05 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 19 Jul 2014 00:36:10 -0700
Received: from s4.n248.n6.n64.static.myhostcenter.com ([64.6.248.4]:51976 helo=ps11.myhostcenter.com)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1X8PBd-0006Bz-0M
for ; Sat, 19 Jul 2014 00:36:09 -0700
Received: (qmail 1787 invoked by uid 48); 19 Jul 2014 03:21:43 -0400
X-Additional-Header: /usr/share/psa-horde/imp
Received: from 41.220.69.103.vgccl.net (41.220.69.103.vgccl.net
[41.220.69.103]) by webmail.missionprinting.com (Horde MIME library) with
HTTP; Sat, 19 Jul 2014 03:21:41 -0400
Message-ID: <[email protected]>
Date: Sat, 19 Jul 2014 03:21:41 -0400
From: Graham Cash <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients: ;
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.1.6)
X-Spam-Status: Yes, score=18.3
X-Spam-Score: 183
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: I have an interesting Business proposal worth 20 million USD
that will be of immense benefit to you.I will be so much glad if my request
is been put into consideration. so get back for more info [...]

Content analysis details: (18.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
2.7 FSL_HELO_BARE_IP_2 FSL_HELO_BARE_IP_2
1.7 FH_FROM_CASH From name has "cash"
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(nelsonleo70[at]yahoo.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[64.6.248.4 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[64.6.248.4 listed in psbl.surriel.com]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (nelsonleo70[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5022]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 MONEY_FROM_41 Lots of money from Africa
X-Spam-Flag: YES
Subject: ***SPAM***



I have an interesting Business proposal worth 20 million USD that will be
of immense benefit to you.I will be so much glad if my request is been
put into
consideration. so get back for more info

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 116 guests