Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#339833 by buried under 419s Wed Sep 20, 2017 8:41 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 20 Sep 2017 09:19:33 -0700
Received: from mail-dm3nam03hn0223.outbound.protection.outlook.com ([104.47.41.223]:52147 helo=NAM03-DM3-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1duhil-0008Pk-EM
for ; Wed, 20 Sep 2017 09:19:33 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uconn.onmicrosoft.com;
s=selector1-uconn-edu;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=ERJOwFfKU6jQZoUTDHRrjLv13MP6P+fqeCwrJcx0s4w=;
b=JssLB4dEmk9OOOyt3Q2zVa/KxavRc3cqS3Y7uUeQC5bja1GjvYGFpEX6k3kVssXadHwUO+ewt/Hvf0x8i65d27RSk/Sz1uscYNJ38VfvZHVLVazEY2dCzoEkPS0pZFSAXKq4YNDsh5PMKRcVEXHWK58Db71jRd5yjT2rNcMW7yU=
Authentication-Results: spf=none (sender IP is )
[email protected];
Received: from [172.20.10.2] (197.211.63.142) by
CY1PR05MB2490.namprd05.prod.outlook.com (10.167.10.23) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id
15.20.77.5; Wed, 20 Sep 2017 16:18:40 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "United Nations" <[email protected]>
Date: Wed, 20 Sep 2017 17:18:34 +0100
Reply-To: [email protected]
X-Originating-IP: [197.211.63.142]
X-ClientProxiedBy: DB6PR0601CA0044.eurprd06.prod.outlook.com (10.169.209.30)
To CY1PR05MB2490.namprd05.prod.outlook.com (10.167.10.23)
Message-ID: <CY1PR05MB2490941922C09806FE2C900DE5610@CY1PR05MB2490.namprd05.prod.outlook.com>
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: fabcd00c-229f-4cea-9781-08d5004345bf
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(300000503095)(300135400095)(2017052603199)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:CY1PR05MB2490;
X-Microsoft-Exchange-Diagnostics: 1;CY1PR05MB2490;3:YkYk7b0T1WhEpKtUsTbMQr6ZK6ziBB0rG1YUtkfDYs8i9j3v8TEq3lOejvUWJmtbSHc0ofM0RZRh4rmmSWVWZi8WZZdEb2KAaQW/mar8hM3LZGa6wFs7AMMiQtAWQROQhWUGISvTJhLFOQ7kNwIGf05XrTug6Uwv/9pvkpoNhvdJy82GSJp7ZXY++w/YL74zl37vhrOTh2RvMEloMMECSgAfzLSyQUmDVjEBZKrdkSkFGffhqdCfCVION+enCJeV;25:ntMALPiE/dpuB0LQJBq2gc+ULmOVW0Eu+1YHMXqV60ZdFti+Vt3EbEtBLnp1JHFEhk0+4UxczhOm78HkE/T8teS6a1IfSvtlIXoDh+bOvOk8K8HPDvxXPFqIKgLBFm7oUAy1iqj6bP1coIzOCxSYZv3oOUcAvPEhJMtmb4hT3PJZXs1K3bseR0EioFLGig8W3tSl10TXte+0OwJ2L9EeQyOrHI67rcUdx/Gmd1sL2gjZEih9ZCncliAjwh9CPhq6/+5vYg5XYi1Clw3sHIUSJJPfOApFUOyPhGG7epmtXrk3GOpjWEmZCr92eRUzHFfapPHXAojfmqPbf9x1+OmwDA==;31:Be10GUvowg0KtJWnMNpdFjJ5KcFYcC80Rf3BXvCCDq4H9fYrgZBJfYzMcwoDB4QvCR1OCqwWlRXeCY5UEMj9XOZfMitWZoAXbaQFYT48/1fGYcvldcMQQLJ7Cd01fpxsnM8EW/UcIQD46h9VkHgag3BzqM3XKJ5oJUThfBl6ct2TovNXVuJpAlYt1dREhF8HuP5xbFPAA060BAKDpJncF7GGjtwqkeP8llfOA4y92OE=
X-MS-TrafficTypeDiagnostic: CY1PR05MB2490:
X-Microsoft-Exchange-Diagnostics: 1;CY1PR05MB2490;20:/2bjdn2DhvjuIm4vGUhR4BDnmFG2bibtX0jUGdOCjItpSyoNy8lpE7Ptut3MS0NRxjvdW95qlzgKWR3H7S2ju5qOosxzcNUTNLBNs+Krhr2sYGkEMIuj7lBWo114E/zxHEsF9OmevQJvCX6vPckcAShP1nFGDS0bZB577UopmBg5dzdnzwg8kFh+CosmE5C/1Kl9cs0kwbLY3aRqm0pd1wp2fnVJKGwxudc5801YDOOh6FLLe2XpWamx9ucvfop8IXvz8RzA7vqL4qae+aaUv7SJtKRTIufu9WuFervIMe0YXcT++F/47IOx4B7iB/cw4VETYV6F010C+gADaNRhUloqkEbCJ7keEvgqioZXH7rsPDwgb4YW9Pmt21mPcwKk1vNpjh8TfJj2c6D1WPju9oDWRgFbdrT82ktwPG/9BlvggBW/597h/icfDbJZUYss3P+I4R7kfS8ML9IKLFU/ybrsxjborr7wLcNLeP/iYZZx4HadETkeUiDe9LI9fAVd;4:rq+WZtooiJ8KnrDE9pTU+wTgwcFJtdU/h785yiE374dSP4O40kZoSMRxkxGO0DglnsaY151Zatbt0MY8MfDtdykT/DJpkM5pVu2bqyqOGFZwbcsdxTIzfwhWtbsE/bbpx5dkYSKuO+xVWprMW4VJdaHBbc0cVXcpAUeYOJORLfZearp/VmP8Byi3kD6QKcY+1Lzc+ga7dZzOrFqDvpNT/3wlmVmN4B4h2JltI95bKrz/TlD4MRRrFa8+Nv51xaeA
X-Exchange-Antispam-Report-Test: UriScan:;
X-Microsoft-Antispam-PRVS: <CY1PR05MB2490823C3901A08B1E49757FE5610@CY1PR05MB2490.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(5005006)(8121501046)(100000703101)(100105400095)(93006095)(93001095)(3002001)(10201501046)(6041248)(20161123564025)(20161123560025)(20161123562025)(20161123555025)(201703131423075)(201702281529075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095);SRVR:CY1PR05MB2490;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:CY1PR05MB2490;
X-Forefront-PRVS: 04362AC73B
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10019020)(6009001)(6049001)(376002)(39860400002)(346002)(189002)(199003)(23756003)(33656002)(106356001)(75432002)(88552002)(105586002)(6200100001)(6862004)(6666003)(2906002)(47776003)(53256004)(53936002)(189998001)(2171002)(9686003)(478600001)(6486002)(561924002)(250100001)(50466002)(7416002)(90366009)(551964002)(66066001)(5001810100001)(81166006)(5660300001)(7116003)(8676002)(97736004)(8746002)(77096006)(68736007)(8936002)(10916006)(81156014)(226693001)(50986999)(101416001)(3846002)(54356999)(6116002)(4000960100001)(43066003)(16576012)(3480700004)(575854001)(25786009)(786003)(413944005)(86362001)(316002)(74316002)(305945005)(16526017)(7736002)(62346012);DIR:OUT;SFP:1501;SCL:5;SRVR:CY1PR05MB2490;H:[172.20.10.2];FPR:;SPF:None;PTR:InfoNoRecords;MX:1;A:1;LANG:en;
Received-SPF: None (protection.outlook.com: uconn.edu does not designate
permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1;CY1PR05MB2490;23:q78qc37YvdOBMLFRvk9TrW5khY2/OEEH/o5D9GS?=
=?iso-8859-1?Q?95N4NCCwsbZEgg0basphY4+Isqy6wqFHC/F4hna+t4fFktejqt6X8WjDIP?=
=?iso-8859-1?Q?nn6TH5NoP+ojsyXavyJa+YdA8QJuFSwDhRtPVhGAd3qW8SBD3/NDjAu6VO?=
=?iso-8859-1?Q?jWZUgkiX4zcGVTmUruiyYeH+lS1wLC0ejB7qAJFEfL0R5XVM5seJ/VFGYL?=
=?iso-8859-1?Q?SdsxGIw7UptCX6EeFgoByugwr7BWJycqGUzaAe1FojCUP9YHw1DhgBO5wV?=
=?iso-8859-1?Q?ScHmCAHkXNdpdKTjEpOUXcZQxdiFJNs87B/yO+LClvCEuAIQCmfSSNYivp?=
=?iso-8859-1?Q?RtizhssKSD0lEl+mZQvoUwqLKnnlwzZxDeGDmzvcDj2Kv4GNiOlOgZR5Ba?=
=?iso-8859-1?Q?RtgUh44D++6JVSY1F47cjRkO9z7zo4fzGsUrZ57zURmQNKqhwEK3Y7vrD5?=
=?iso-8859-1?Q?+ndDFMs2ZrgDJQNTTagMl6dDCpZrtFvQH9R6Jkz8AlK+CCK05RXTJaeBvq?=
=?iso-8859-1?Q?lWg5u4LQW+b8UX7oMKBZC/Z46cCgEGN/67oy3VMSh4+O2gIgUQTzjBq4Em?=
=?iso-8859-1?Q?yDq5cMn5RM5OMrRvHgrzf/qnbAmqzjWUFf/0cHcmK/sG48MWlcLyBAaz5K?=
=?iso-8859-1?Q?kG+KxVmBlX5ktelsAPr6kxOf6+4JlAnIvOt2LSso6fFLQXJ1qEa2MWzaCW?=
=?iso-8859-1?Q?Bw8c29GgQlbyrKhz7icDBXPeLwKF1opxPRQpH2bNtxxqYe0FO5x3J+990u?=
=?iso-8859-1?Q?pxr013o1JYFEb74W/WIYZ/bfqnyZRDIMcXTZvsrGqTIOCdSv4i7LMFt1kh?=
=?iso-8859-1?Q?a19maFMTo3ERmmZIVqjmoyFt1D1la4JYK3eVGhxf8K61qwsxReanWOkdtL?=
=?iso-8859-1?Q?D5LPY6XcJWlXMiJ1vqaHzEo80PJG1M1Qq7BSufqTYeKQgDLrbul/cvDP5y?=
=?iso-8859-1?Q?qSYokmmtr9qz47G+1eAXwlgDufJV8qvuwlanPDmLRrV0jprPK+wXLdHCHE?=
=?iso-8859-1?Q?ujtLrnhj+p0o7U3hMuVEEwsionL8G7LccL3ymC4bGC/8OkeUeTqiUinEjX?=
=?iso-8859-1?Q?wSsLw/MFfLq40GnHqWnAjyF3OkQOH/rW5GJDJUM+2gZQf62hQGBjQzpEKR?=
=?iso-8859-1?Q?mzree0jC80e43ydzgr5yN9fBqysmnccHjWzriy1cju9Jrc1dPKY0/J8snH?=
=?iso-8859-1?Q?ttfPqhTsC5QRgrqtwF487UI9dCqSngdksDFsFcWvQLLQ0GFmgVJdeOid9E?=
=?iso-8859-1?Q?4exhPOrKEGHIi+P4kIfLDtEfDlLAj0Z9Wm2CCivRabczj3PMygoh15Y3jm?=
=?iso-8859-1?Q?zk+KmXaA6QN/QoZv3ew/9hH2CP0AIOkr+QB2LLDAG2u2VkUY8JB5gs/uoe?=
=?iso-8859-1?Q?xwzb4QL9tPUauEo06iNVzDtPCQv0OzGuz2lOS1NGFx48fizVoIiAQxiwDc?=
=?iso-8859-1?Q?reY+gk3YKcIIa90qrvNIg9NOdqAUasjOta8+e0LUMabFT3Ik6jE5egI4XN?=
=?iso-8859-1?Q?VR4Klm9J7EhcBGX8NGpPYhSgpdxWaYcRDqZF5ecbidP7dDMxNLFaCcfHYz?=
=?iso-8859-1?Q?ybKMzsQYhYHtf05LKOFbiyQTYlJ2nxmrKoeBGBHkmPHXQiQ1yfHZbu3QgA?=
=?iso-8859-1?Q?aVlcsP8/IRQ=3D=3D?=
X-Microsoft-Exchange-Diagnostics: 1;CY1PR05MB2490;6:ccA0TntveiQrFtED/vw0CIP0o/F9gp/EzNypP2cXxUwmp4pI7tTQWIizIhBhvt3Ymtbh7vV+fLzWmDbK7GNTVR3ujs769nOSPkQH3OpOYbJIIycwFKD3kpOp+sWMnAVLy8WlPxkZc6ar11cSwYpLNgQ8riGXA5e5JS6W3PSdWmjRbTvWhZKaWUYj/b7GBK0CxPDL+U7r+wp2fRcig84EuaAFoAs1kQpMFkCvUnY4Kcsu2iqFmqI+9Nvv9vjQb1z4TDyjCjkIwxRRLnx3xtOHL5OqcuLdbdLpkmiOTZX3ohseaZK6OmawhTl4C4Y2KCtIOT6GgZOAL8qHBMx7Dt8pIg==;5:X7wqToXMT10tGQZGSefeO8EA1LNvmw+AArUWA9zZWmVs4/WIxW3AlrCHXjjL1jbXlfRlNNOrSNLU74Xa3OQBz1QOfnWj/lAgnuAet8zC27HWDHonkFvsGPUclI/MR9vsSvEGiEIYW2drEpTidCmlMg==;24:6L8rY6xYMeIjL8bIIgXOPmqEOzU0T2193BI+bDfdl+1YhrMOXr9Kl9maIG3rIsC5IEM7urcmKqD/aTKCsWGBUw==;7:5VanjBwZVv7wA69uVm1wIaKnW87bz9bjMzMX053UnssIRqplKY0UZ5OT2tUIVoRKBe4YAmZb+t0pzRUxtFZvTE5+m9qLyztrIwWDGWoGy8xwcaTS/AJlimfkcExT8+VzvX7HRHU1IO8s9X81iVSYZbr3IMFweOhYPV8wzaImGm3za0BONojMLpiUch7S+DBZFgVtC26ZbUAHCvWaDVTUlymyNrqWEbEbPy+OSHNiiCw=
SpamDiagnosticOutput: 1:22
X-OriginatorOrg: uconn.edu
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Sep 2017 16:18:40.8285
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 17f1a87e-2a25-4eaa-b9df-9d439034b080
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB2490
X-Spam-Status: Yes, score=16.5
X-Spam-Score: 165
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: United Nations Headquarters 760 United Nations Plaza, New
York 10017, U.S.A Tel: (646)948-8985 Dear Beneficiary, It has come to my knowledge
that the over-due contract/Inheritance/Winning sum,of some of our beneficiaries,
which unfortunately includes YOU,that had been placed on HOLD by the United
State Government due to lack of proper documentations, will be released to
you within 24hrs from now. This unfortunate delay occurred due to the exit
of former Secretary General of the United Nation Ban Ki-moon,US Treasury
Secretary Jacob Joseph "Jack" Lew and the sudden exit of the former FBI director
James Comey. [...]

Content analysis details: (16.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[104.47.41.223 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[104.47.41.223 listed in dnsbl.sorbs.net]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[197.211.63.142 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.211.63.142>]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(antonio.g2017[at]mail.com)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Please call!!!!!


United Nations Headquarters
760 United Nations Plaza,
New York 10017, U.S.A
Tel: (646)948-8985

Dear Beneficiary,

It has come to my knowledge that the over-due contract/Inheritance/Winning sum,of
some of our beneficiaries, which unfortunately includes YOU,that had been placed on
HOLD by the United State Government due to lack of proper documentations, will be
released to you within 24hrs from now. This unfortunate delay occurred due to the
exit of former Secretary General of the United Nation Ban Ki-moon,US Treasury
Secretary Jacob Joseph "Jack" Lew and the sudden exit of the former FBI director
James Comey.

The fund in the value of $5,352.000.00 will be ready to transfer from the Federal
Reserve Bank, as soon as you pay the re-processing fee of $187.00 only through our
fiduciary agent,John Garza.Agent John Garza will get the duty fee certified and paid
on your behalf at the IRS office and then the Federal Reserve Bank will be
authorized to transfer the fund to your Bank Account.
In the leu of this, it is imperative that you give a response to this email,kindly
providing your bank account details for a bank wire transfer from the Federal
Reserve Bank New-York.Also,if for ease of access,you wish for an electronic card
payment instead,it can be processed and delivered to you.

The following information are required and adviced to be sent through our secured
email servers.

FULL NAME.
HOME ADDRESS.
MOBILE/HOME TELEPHONE Number.

Note: You are to Send your response via email to my secure email

( [email protected] )

You are also adviced to place a Call to the above phone number as soon as you get
this email.



Yours sincerely,

Antonio Guterres
Secretary General UN

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google Adsense [Bot] and 41 guests