Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#243546 by buried under 419s Fri Mar 27, 2015 11:35 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 27 Mar 2015 05:00:39 -0700
Received: from mulsanne.websitewelcome.com ([192.185.83.111]:48555)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1YbSwE-0005cK-2u
for ; Fri, 27 Mar 2015 05:00:39 -0700
Received: from bedlbd by mulsanne.websitewelcome.com with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1YbSyf-0003Nx-1w
for ; Fri, 27 Mar 2015 07:03:05 -0500
To:
Subject: From Mr. Simon Jones
X-PHP-Script: www.bedlbd.com/ipo/m@!L3r_arab.php for 154.118.15.165
From: Mr. Simon Jones <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Fri, 27 Mar 2015 07:03:05 -0500
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - mulsanne.websitewelcome.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [1571 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - mulsanne.websitewelcome.com
X-BWhitelist: no
X-Source-IP:
X-Exim-ID: 1YbSyf-0003Nx-1w
X-Source: /opt/php54/bin/php-cgi
X-Source-Args: /opt/php54/bin/php-cgi /home/bedlbd/public_html/ipo/m@!L3r_arab.php
X-Source-Dir: bedlbd.com:/public_html/ipo
X-Source-Sender:
X-Source-Auth: bedlbd
X-Email-Count: 249
X-Source-Cap: YmVkbGJkO2J0czttdWxzYW5uZS53ZWJzaXRld2VsY29tZS5jb20=
X-Spam-Status: No, score=1.1
X-Spam-Score: 11
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: I am writing you with regards to your protracted and stalled
funds transfer from the U.K. and would urge you to accord this correspondence
your full indulgence and attention, as the authenticity and difference would
be evident if you do so. As a freelance, independent External Audit expert
assisting a private financial institution here in Britain in all aspects
of their work, your transfer file came to my attention just this morning,
and I was compelled to take special interest in it owing to its peculiar history
of procedural inconsistencies. [...]

Content analysis details: (1.1 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(annabemichelle589[at]ciudad.com.ar)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4681]
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO

I am writing you with regards to your protracted and stalled funds transfer from the U.K. and would urge you to accord this correspondence your full indulgence and attention, as the authenticity and difference would be evident if you do so. As a freelance, independent External Audit expert assisting a private financial institution here in Britain in all aspects of their work, your transfer file came to my attention just this morning, and I was compelled to take special interest in it owing to its peculiar history of procedural inconsistencies.

Obviously all the persons you assigned to process your transfer have proved to be incompetent. Simply put it that they have given room to some management of the Bank to try and smuggle your through a non-existent back door. My intention is to quickly reactivate and sort out your transfer without any distraction through a simple, transparent and authoritative means where you will not be required to pay any unauthorized fees. You are forbidden to preempt anyone of this contact and I await your response at your earliest convenience.

Thank you.

Sincerely,

Mr. Simon Jones

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google Adsense [Bot] and 101 guests