Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#259413 by buried under 419s Tue Jul 07, 2015 6:50 pm
Envelope-to:
Delivery-date: Tue, 07 Jul 2015 15:20:41 -0700
Received: from 125-227-242-216.hinet-ip.hinet.net ([125.227.242.216]:13220 helo=mail.hungchuan.com.tw)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1ZCbEF-0001wW-OI
for ; Tue, 07 Jul 2015 15:20:41 -0700
Received: from [197.228.139.243] (8ta-228-139-243.telkomadsl.co.za [197.228.139.243])
(authenticated bits=0)
by mail.hungchuan.com.tw (8.14.4/8.14.4/hgmail=1) with ESMTP id t67Lw0ND002027;
Wed, 8 Jul 2015 06:24:51 +0800
Message-Id: <[email protected]>
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Christopher Johnson" <[email protected]>
Date: Wed, 08 Jul 2015 00:22:58 +0200
Reply-To: [email protected]
X-Spam-Status: Yes, score=12.4
X-Spam-Score: 124
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: ATTN: A customer of ours who died eleven years ago in Tsunami
tragedy in Indonesia leaving behind an estate/capital (US$43M) in a Bank
here where I work, till date nobody has come forward or put application for
the claim. [...]

Content analysis details: (12.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.9 HK_SCAM_N2 BODY: HK_SCAM_N2
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(andleverett[at]gmail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[125.227.242.216 listed in psbl.surriel.com]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(ccstjohnson3[at]yahoo.co.za
)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0024]
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.2 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** FOR YOUR PERUSAL

ATTN:

A customer of ours who died eleven years ago in Tsunami tragedy in Indonesia leaving behind an estate/capital (US$43M) in a Bank here where I work, till date nobody has come forward or put application for the claim.

During the Bank private search for the late gentle man relatives your name and email contact was among the findings that matches the same surname as the deceased who died intestate with no Will or next of kin. To maintain the level of security required I have intentionally left out the final details.

Banking regulation/legislation demand that I notify the fiscal authorities after a statutory time period when dormant accounts of this type are called in by the monetary regulatory bodies if nobody applies to claim the funds.

I urge you to come forward since I can provide you with the details needed for you to claim the estate/capital so that I can be gratify by you, in this way $25,800,000.00 for you and $17,200,000.00 for me. I will do all the crucial part in the Bank to have the claim released to you promptly.Please endeavor to observe utmost discretion in all matters concerning this issue

To affirm your willingness and cooperation,please do so by replying with your Telephone/Fax number.

I do expect your prompt response.

Thank you,
Christopher Johnson.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 268 guests