Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#301649 by buried under 419s Tue Jul 26, 2016 2:50 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 25 Jul 2016 20:24:31 -0700
Received: from mail.ohiorealtitle.com ([172.98.102.14]:32881)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1bRsyp-0006Xy-Mk
for ; Mon, 25 Jul 2016 20:24:31 -0700
Received: from localhost (localhost [127.0.0.1])
by mail.ohiorealtitle.com (Postfix) with ESMTP id 9DD5D673B6B;
Fri, 22 Jul 2016 20:00:21 -0400 (EDT)
Received: from mail.ohiorealtitle.com ([127.0.0.1])
by localhost (mail.ohiorealtitle.com [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id 8Nhs7pRXslv7; Fri, 22 Jul 2016 20:00:21 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1])
by mail.ohiorealtitle.com (Postfix) with ESMTP id B748C590B9D;
Thu, 21 Jul 2016 20:30:33 -0400 (EDT)
DKIM-Filter: OpenDKIM Filter v2.9.2 mail.ohiorealtitle.com B748C590B9D
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ohiorealtitle.com;
s=55B38F68-D0A3-11E3-A46E-A29DCFF65D51; t=1469147433;
bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=;
h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:To:
From:Date:Reply-To:Message-Id;
b=AwG/FRiOrt6rORL773nmx4A5J/yuRSp44vZ4x63t4v8UcRVYelGWI48wRBU3VpD0D
ud/tcXY0fqoVMvX6NKW2zoFileVX0MdwMVDXZx9ZK6eqNF8uNUbIUbWCl4tXAwIqMY
oZRKWH9FIHfOf+2e6MujGxNGcn55Te83i/PAKw3M=
X-Virus-Scanned: amavisd-new at mail.ohiorealtitle.com
Received: from mail.ohiorealtitle.com ([127.0.0.1])
by localhost (mail.ohiorealtitle.com [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id Yepn5I2upYLu; Thu, 21 Jul 2016 20:30:33 -0400 (EDT)
Received: from [192.168.1.100] (172-3-225-204.lightspeed.irvnca.sbcglobal.net [172.3.225.204])
by mail.ohiorealtitle.com (Postfix) with ESMTPSA id EBF8954119;
Thu, 21 Jul 2016 06:19:28 -0400 (EDT)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: NN Grant from previous mail ? CNN AWARD.To claim prize Email to:
[email protected] with your details immediately.
To: Recipients <[email protected]>
From: "BRYCE SHANICE" <[email protected]>
Date: Thu, 21 Jul 2016 03:19:26 -0700
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: No, score=4.7
X-Spam-Score: 47
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: [...]

Content analysis details: (4.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[172.98.102.14 listed in psbl.surriel.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=o ... roject.com]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=ma ... .102.14;r=]
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9438]
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
X-Spam-Flag: NO

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 119 guests