Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#304295 by buried under 419s Fri Aug 26, 2016 11:55 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 26 Aug 2016 06:21:58 -0700
Received: from iport-acv4-out.ucsd.edu ([132.239.0.7]:64399)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1bdH51-0000KI-Vu
for ; Fri, 26 Aug 2016 06:21:58 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=ucsd.edu; [email protected]; q=dns/txt; s=041709-iport;
t=1472219384; x=1503755384;
h=from:subject:date:message-id:reply-to:mime-version:to;
bh=WyG8rhPsdbbAW3BCqUIKeo9CpuxyMQWVUjbPNRWmC00=;
b=Truw+vu1mKIETRTptRx4kyzV5u+pUBbPkcNvOrWmI9SU6J6DR7RGAxEp
TnhE1GRmGphU7yuJ8dqkwzUjpbIXbzyOEDtEfe/Dqaks9gtZ+DNmJaxSD
cMFtwyufDcNOipSEgkKev3yYEtoAC7Wmg5nRtjMW7FvRNKLuSIVf03pGf
Q=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A2BABgCvSMBX/3UA74RdKoJkIRIBAQEBAXQ1TrM8g32CZQEThgkCgg4QAQEBAQEBAQEBAV4nhFkPLV4BDB5WDhkKARSFaoJGAaAsh2OOLYYFAQaDEgwBJI89gxAbgi8FmUwBnnqCao1SNR+EHIY9AX4BAQE
X-IPAS-Result: A2BABgCvSMBX/3UA74RdKoJkIRIBAQEBAXQ1TrM8g32CZQEThgkCgg4QAQEBAQEBAQEBAV4nhFkPLV4BDB5WDhkKARSFaoJGAaAsh2OOLYYFAQaDEgwBJI89gxAbgi8FmUwBnnqCao1SNR+EHIY9AX4BAQE
X-IronPort-AV: E=Sophos;i="5.28,581,1464678000";
d="scan'208,217";a="157606253"
X-Spam-Status: No
X-Spam-Level:
Received: from xcore-cub1.ucsd.edu (HELO XCORE-CUB1.AD.UCSD.EDU) ([132.239.0.117])
by iport-acv4-out.ucsd.edu with ESMTP/TLS/AES256-SHA; 26 Aug 2016 06:49:20 -0700
Received: from XCORE-KM2.AD.UCSD.EDU (132.239.82.172) by
XCORE-CUB1.AD.UCSD.EDU (132.239.0.117) with Microsoft SMTP Server (TLS) id
14.3.301.0; Fri, 26 Aug 2016 06:49:17 -0700
Received: from HSMBX01.AD.UCSD.EDU ([fe80::ccf4:b93b:8c41:716a]) by
XCORE-KM2.AD.UCSD.EDU ([fe80::200b:f543:79d:b3b%12]) with mapi id
14.03.0301.000; Fri, 26 Aug 2016 06:49:16 -0700
From: "Ryan, Rio" <[email protected]>
Subject: Goodmorning
Thread-Topic: Goodmorning
Thread-Index: AdH/nQSWk8aJSVZvSpmYiKjebx83YgAAD8FQAAAAGAAAAAAhcAAAACMAAAAAIWAAAAAlIAAAACEQAAAAI3AAAAAkMAAAACMgAAAAJLAAAAAlEAAAACRwAAAAJDAAAAAlkAAAACQgAAAAJEAAAAAkAAAAACeQAAAAJVAAAAAmUAAAACbQAAAAJ9AAAAAp8AAAAChQAAAAKeA=
Date: Fri, 26 Aug 2016 13:49:15 +0000
Message-ID: <[email protected]>
Reply-To: "[email protected]" <[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [154.122.37.242]
Content-Type: multipart/alternative;
boundary="_000_B70ED70F0A69D347BE2131F77FC6D76A24EFA671HSMBX01ADUCSDED_"
MIME-Version: 1.0
To: Undisclosed recipients:;
X-Spam-Status: No, score=-1.5
X-Spam-Score: -14
X-Spam-Bar: -
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Attn: I'm Mr. Liu, Can I have a legit transaction talk with
you Attn: I’m Mr. Liu, Can I have a legit transaction talk with you [...]


Content analysis details: (-1.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium
trust
[132.239.0.7 listed in list.dnswl.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4992]
X-Spam-Flag: NO

--_000_B70ED70F0A69D347BE2131F77FC6D76A24EFA671HSMBX01ADUCSDED_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable


Attn:
I'm Mr. Liu, Can I have a legit transaction talk with you

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 261 guests