Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#270585 by buried under 419s Thu Oct 08, 2015 4:38 am
X-Spam-Flag: YES
Return-Path: <MAILER-DAEMON>
Received: from APC01-HK2-obe.outbound.protection.outlook.com (mail-hk2apc01hn0213.outbound.protection.outlook.com [104.47.124.213])
by mail50c28.carrierzone.com (8.14.9/8.13.1) with ESMTP id t9829aDt032445
for <>; Wed, 7 Oct 2015 22:09:41 -0400
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=<>;
Received: from [192.168.0.104] (103.226.201.218) by
SG2PR03MB0777.apcprd03.prod.outlook.com (10.161.8.17) with Microsoft SMTP
Server (TLS) id 15.1.286.20; Thu, 8 Oct 2015 02:09:31 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Description: Mail message body
Subject: *****SPAM***** Quick
To: Recipients
From: <>
Date: Thu, 8 Oct 2015 07:39:28 +0530
Reply-To: <[email protected]>
X-Originating-IP: [103.226.201.218]
X-ClientProxiedBy: PN1PR01CA0031.INDPRD01.PROD.OUTLOOK.COM (25.164.137.38) To
SG2PR03MB0777.apcprd03.prod.outlook.com (25.161.8.17)
Message-ID: <SG2PR03MB07770236630DDB13C58A0BE8B8350@SG2PR03MB0777.apcprd03.prod.outlook.com>
X-Microsoft-Exchange-Diagnostics: 1;SG2PR03MB0777;2:qZ8nydnsaqVkSfHyZfDAJBZznJ1PC++Tyz+2VG2I7vZ6QwOpbjOOLu/BLCJvJGy2yB4qtlq0Do52XwrJYzDkpEOieT7wzOXTjrpi8jXU/g2HNJoWaCS2qMJuVsDIBJJ6hlfNaAYkltuYOG+Mlq71PgGz4n0zt1iKot/2+1B8qlI=;3:gUb/t8+4Mbwe9Zy1GDebunhae6KEOmyN2JiMKTpr9bvxlVTPJgmGX6j3lBcwQhn9j6XPQcBw3XzJKkH+66BfKRRCQ1+PYVoBVOEm3ZsggNnIjs7j6o4Va5loK5n/zHU1qQ1tEuxq5oNpArMjAnxDNA==;25:hyv/I4Xy8QhBv608Q5JwN81MeS860MXZ1dPoC6WQNmmOydf2yIO2mllzjNSEYU66M3Fj4TN9m/H21nRcWoMo9tRX8tJAoepy5AbtpI/JeSZop1Wl0VUiHQK4NjsgPBofA0U3NL73EozXCkwIdGw0ZXUco+AZWTc0nlId6Pe4g1MGYeYdKcQYEmw9qB4ZM3Uy9j8z3XqUPYmLgvgM3u+88PvdXQUFD62Z6jxBduo5NXCmuAZiC6OIe3mNeF+Qciix/jnFxx0xZgHE+8Y9Wl1sIA==
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SG2PR03MB0777;
X-Microsoft-Antispam-PRVS: <SG2PR03MB0777C90E018A26A44279B7CDB8350@SG2PR03MB0777.apcprd03.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(2401047)(8121501046)(5005006)(520078)(3002001);SRVR:SG2PR03MB0777;BCL:0;PCL:0;RULEID:;SRVR:SG2PR03MB0777;
X-Microsoft-Exchange-Diagnostics:
1;SG2PR03MB0777;4:LfdNbvcmZvk4z89Y0huENxVwsS86Vl3MaK2fhtUISuYeaxAkfkxFP9E6e/9yPtNJJ7itaopYSaRWde070DHEiz61hyTn7Dsv5gcrNoJ8qKkWN7PDUafbYHPJIjcO0dIHAazsOt2c1LKUOPbMDb3I5AtKju4UBnescF/lpcge+pvkEyClzDy9+fqgH5j/S2ExlY4diFiIupSs0jwk9YBK037XRGVSaTOw75wykKIBrZn/tHIIMM/ij8hTqp8dm2llZgUZ180YPunvUcT1Ej/tcRwzKGwrvHnpdIdSzmP5HIXOBXzC93k7rXssE9KgilfEaoMBsVwpvwdlQrTvxtRcTIed8jb7FnAt6PB/SrSn60k=;23:KhrFIdENfeGnyO11CfwN3EPPiI9qnLpoh5yWSin6PmoO0nB/dgDXonjutC7imWEbUtTufiConwL+3gAA5afXSzbB4+WFS8FvaU3erFKOeA7MOOnO1h8aSC0P/t+cHXQWjir2Wh9aDKXHk8j7cfRwpKl7MgMpNaLFAHR4MwfirQ5xworgOPLaYUk2ITIz7v4CV53scf6nP3KTcC+3axsWjbrmkdMaXRfziR8zuRqT8AnYxcFWiTCoRwmkC/sTqLbk;5:Bwg8phE2gDFOjwl+GI7cfP7ZneusWux0CJTKOqKSBAQdFKJ6xqy3zKRlFpp1p1DUXXuF7KYNSQwvKWVNrQRd8mFuQbZxDVBm5ohXQjRGJ2bs9DJoit0mox/M3q3uatNEN+g7DJQHuP384ahkRc9PHA==;24:AlceJpZ2/pudrdFKdz92Mtrj/AbSsweuYEXA3qIwUVQXporQH4/+PouOjN+i+9LEpvi5R2Up5kRLIrbLJUpkIQ==;20:l0XyPPi98UWAtjcitTuLUKqkougfqB7su25UYvtH3j2pN90unHpcCK9x195oZ6HdeApXEDbQBuj7Q+r5WbY/EA==
X-Forefront-PRVS: 0723A02764
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10009020)(6049001)(6009001)(5005620100007);DIR:OUT;SFP:1501;SCL:9;SRVR:SG2PR03MB0777;H:[192.168.0.104];FPR:;SPF:None;PTR:InfoNoRecords;LANG:en;
Received-SPF: none (mail50c28: domain of does not provide an SPF record) client-ip=104.47.124.213; envelope-from=postmaster@;
Received-SPF: None (protection.outlook.com: [192.168.0.104] does not designate
permitted sender hosts)
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: frankjimmy0a.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Oct 2015 02:09:31.1381
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR03MB0777
X-CTCH-RefID: str=0001.0A020206.5615D00D.00C5,ss=3,sh,re=2.100,recu=0.000,reip=0.000,cl=3,cld=1,fgs=0
X-CTCH-VOD: Unknown
X-CTCH-Spam: Bulk
X-CTCH-Score: 2.100
X-CTCH-Rules: FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO,
X-CTCH-Flags: 0
X-CTCH-ScoreCust: 0.000
X-CSC: 100
X-CHA: v=2.1 cv=UetoFsiN c=1 sm=1 tr=0 p=gQAJjiAQHC5GB6Ur7d3vfQ==:17
p=1V4i1S1e-gQA:10 p=LhOv3hhS1EEA:10 a=hBfjGvQcuqJ4IEHU+0jnlg==:117
a=UqCG9HQmAAAA:8 a=g0qM3YM6AAAA:8 a=3oc9M9_CAAAA:8 a=bL07Nd5_7fAA:10
a=8nJEP1OIZ-IA:10 a=5lJygRwiOn0A:10 a=bqGI9lnU0IMxLvSXo-AA:9
a=wPNLvfGTeEIA:10
X-WHL: LR
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by mail50c28.carrierzone.com id t9829aDt032445



I NEED YOUR ASSISTANCE.CAN YOU BE TRUSTED?IF YES CONTACT FOR MORE INFO

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

#270635 by buried under 419s Thu Oct 08, 2015 12:30 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 08 Oct 2015 06:28:47 -0700
Received: from omr-a019e.mx.aol.com ([204.29.186.67]:54655)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1ZkBFW-0002Dp-40
for ; Thu, 08 Oct 2015 06:28:47 -0700
Received: from mtaomg-mcc01.mx.aol.com (mtaomg-mcc01.mx.aol.com [172.26.253.85])
by omr-a019e.mx.aol.com (Outbound Mail Relay) with ESMTP id 91A8C38000BE
for <>; Thu, 8 Oct 2015 09:40:48 -0400 (EDT)
Received: from core-mxb004b.mail.aol.com (core-mxb004.mail.aol.com [172.29.192.141])
by mtaomg-mcc01.mx.aol.com (OMAG/Core Interface) with ESMTP id 4C66D38000086
for <>; Thu, 8 Oct 2015 09:40:48 -0400 (EDT)
Received: from 103.226.201.218 by webprd-a06.mail.aol.com (10.72.19.167) with HTTP (WebMailUI); Thu, 08 Oct 2015 09:40:48 -0400
Date: Thu, 8 Oct 2015 09:40:48 -0400
From: Sgt Earl Melvin Wright <[email protected]>
To:
Message-Id: <[email protected]>
In-Reply-To: <20151008011202.15795b1ben113s00@>
References: <20151008011202.15795b1ben113s00@>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_140812_1510227379.1444311648160"
X-MB-Message-Source: WebUI
X-MB-Message-Type: User
X-Mailer: JAS STD
X-Originating-IP: [103.226.201.218]
x-aol-global-disposition: G
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20150623; t=1444311648;
bh=QY+aEH/X6fqnsa8QRMvF694V3EcXPC9uSdcpjjfqClU=;
h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type;
b=2eKdQanOUG+4/8fPUDhwdjO7hJCEqFuz90mmk4MSDg7vyRsz8pki/Puf80DHuW8HH
5j1DpKH95ts4sTIyghzvSgWXlIdwztHUOqY2p9jCMZs0RGpXfWSwSdgrQ67ObWvOb0
yEuBSPFHbpw4rp2KvRxPe/H5dh/MaXb+HSb1ehfo=
x-aol-sid: 3039ac1afd55561672600c9b
X-Spam-Status: Yes, score=15.4
X-Spam-Score: 154
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Greetings' I am Sgt Wright Earl ,A US Army who work with the
3rd Infantry Division in Iraq and Afghanistan, for building investment to
the Less privilege Orphans Charity Home, I actually found your profile interesting
and I would love to getting to know you more and I need your help in getting
this business actualize the income shall be shared among the both of us as
partner for more details contact me with the request information for process.
[...]

Content analysis details: (15.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[103.226.201.218 listed in zen.spamhaus.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[204.29.186.67 listed in list.dnswl.org]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9997]
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sgtearl.melvinwright[at]aol.com)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 0.9997]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.6 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
-1.4 AWL AWL: Adjusted score from AWL reputation of From: address
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Quick Reply

------=_Part_140812_1510227379.1444311648160
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable




Greetings'

I am Sgt Wright Earl ,A US Army who work with the 3rd Infantry Division in Iraq and Afghanistan, for building investment to the Less privilege Orphans Charity Home, I actually found your profile interesting and I would love to getting to know you more and I need your help in getting this business actualize the income shall be shared among the both of us as partner for more details contact me with the request information for process.



Thanks for your response,I sincerely apologize for intruding into your privacy, especially by contacting you through this means for a business transaction of this magnitude. I contacted you here because I want this message you receive to be confidential and official. For this reasons, I want our communication to be basically through email for now. You are 100% guarantee trust in this transaction.


I want you to read this mail carefully and understand it . In 2003 my men and I found over $900 million in Saddam Husein's hideout in Baghdad, we sent some back to the Iraq government after counting it in a satisfied location, we also kept some behind for ourselves. Some of the money we shared among ourselves worth over $100 million United States Dollars ,I deposited my own share of the money at the Citi Bank.


I need someone whom I can trust to help me receive and secure my own share, since I have found a secured way of getting the funds out of the Citi Bank I do not know for how long I will remain here in the hospital ' as I have been lucky to survive 3 suicide bomb attacks by Afghanistan Taliban Militants, I know this was Pure Divine intervention from God for me to be alive till this moment as soon as you send the requirement information send your private request information for further process.


The total amount of money is $10,000.000.00 (Ten Million United States Dollars ), I am ready to entrust it in your care till I complete my treatment and meet with you for subsequent sharing and investment projects in your Country I want to invest my own share of this fund in any profitable business you can handle that can yield us good interest within the shortest time and period there in your Country. If you can handle this deal please let me know immediately you will receive 30% of the total money as your own share of the money.


This transaction will not take more than 7 working days if you are sincere and co-operative with me.




Reply back with the following details so we can proceed :


1 - Your direct telephone/Mobile fax numbers:
2 - Your full names and address:
3– Your Age:
4- Your Occupation:
5- Nationality :
6- Your Copy of your Pan I.d identity Passport Card:
7-Phone Mobile Number:
8-Email Contact Address:


Thanks for your concern this is 100% guarantee sure in your care according to my wishes okay.


All you need to do right now send down the processing request information on time okay.


The Certificate of this project proposal investment has been approval already over 2013 before my health condition started again' due to bomb blast at War.


I wait you to do as much as possible to put the wish without loss of the capital ' I want you to invested it with good profitable investor okay.


Thanks And God Bless . Regards, Sgt Wright Earl.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: Clive Wire, Majestic-12 [Bot] and 112 guests