Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#378337 by buried under 419s Thu Dec 13, 2018 1:30 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id GBt/JSFTEVx+GAAAjbubUg
for <>; Wed, 12 Dec 2018 10:27:45 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 12 Dec 2018 10:27:45 -0800
Received: from mail.triontel.net ([185.125.120.3]:55598)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gX9ES-0001cb-Kb
for ; Wed, 12 Dec 2018 10:27:45 -0800
Received: from mail.triontel.net (mail.triontel.net [127.0.0.1])
by mail.triontel.net (Postfix) with ESMTP id 7D57280B78
for <>; Wed, 12 Dec 2018 20:20:23 +0100 (CET)
X-Virus-Scanned: amavisd-new at mail.triontel.net
X-Spam-Level: *********************
Received: from mail.triontel.net ([127.0.0.1])
by mail.triontel.net (mail.triontel.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 5C-H2xLtx7Us for <>;
Wed, 12 Dec 2018 20:20:18 +0100 (CET)
Received: from User (unknown [185.125.120.133])
by mail.triontel.net (Postfix) with SMTP id 9826E80A05;
Wed, 12 Dec 2018 20:17:37 +0100 (CET)
Reply-To: <[email protected]>
From: "Internal Revenue Service"<[email protected]>
Date: Wed, 12 Dec 2018 10:24:27 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=24.9
X-Spam-Score: 249
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Hello Beneficiary, I am pleased to inform you that your total
fund valued $11.5 Million Dollars which has been long overdue have been approved
for immediate release to you through Bank of America where it is held presently.
You are advised to contact them immediately with the details below to have
your fund release and transferred to you: [...]

Content analysis details: (24.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[185.125.120.133 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?185.125.120.133>]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=i ... rs.com;ip=
]
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.6 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** ***Spam*** Contact PNC Bank Immediately

Hello Beneficiary,

I am pleased to inform you that your total fund valued $11.5 Million Dollars which
has been long overdue have been approved for immediate release to you through Bank
of America where it is held presently. You are advised to contact them immediately
with the details below to have your fund release and transferred to you:

Contact Person: Thong M. Nguyen
President-Retail Banking & Head-Consumer Banking
Tel: +1 720 721-4738
Email: [email protected].

Contact them for more details on what needs to be done to have your fund released to
your account, I advise you call them on the telephone number provided after sending
them an email so they can attend to you urgently because the fund would be
confiscated if not released between now and Friday.

Do keep us updated when you have received your fund and once again, we say
congratulations.

Sincerely,
Vincenzo Alonso.
Internal Revenue Service.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

#378814 by buried under 419s Fri Dec 21, 2018 5:53 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id gF0DEHIrHVzwWAAAjbubUg
for <>; Fri, 21 Dec 2018 10:05:38 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 21 Dec 2018 10:05:38 -0800
Received: from smtp.mynet.at ([83.218.160.34]:39442)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gaPB2-0005up-MD
for ; Fri, 21 Dec 2018 10:05:38 -0800
Received: from localhost (localhost [127.0.0.1])
by smtp.mynet.at (Postfix) with ESMTP id 9D3141C6766;
Fri, 21 Dec 2018 19:04:54 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at mail1.mynet.at
X-Spam-Level: ******
Received: from smtp.mynet.at ([127.0.0.1])
by localhost (mail1.mynet.at [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 4UorWntFT46R; Fri, 21 Dec 2018 19:04:54 +0100 (CET)
Received: from User (unknown [83.218.162.80])
by smtp.mynet.at (Postfix) with SMTP id 76DB11C6763;
Fri, 21 Dec 2018 19:04:41 +0100 (CET)
Reply-To: <[email protected]>
From: "Internal Revenue Service"<[email protected]>
Date: Fri, 21 Dec 2018 10:04:53 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=20.0
X-Spam-Score: 200
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Hello Beneficiary, I am pleased to inform you that your total
fund valued $11.5 Million Dollars which has been long overdue have been approved
for immediate release to you through Bank of America where it is held presently.
You are advised to contact them immediately with the details below to have
your fund release and transferred to you: [...]

Content analysis details: (20.0 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[83.218.160.34 listed in list.dnswl.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[83.218.162.80 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?83.218.162.80>]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=i ... roject.com]
1.0 MISSING_HEADERS Missing To: header
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Approved

Hello Beneficiary,

I am pleased to inform you that your total fund valued $11.5 Million Dollars which
has been long overdue have been approved for immediate release to you through Bank
of America where it is held presently. You are advised to contact them immediately
with the details below to have your fund release and transferred to you:

Contact Person: Thong M. Nguyen
President-Retail Banking & Head-Consumer Banking
Tel: +1 720 721-4738
Email: [email protected].

Contact them for more details on what needs to be done to have your fund released to
your account, I advise you call them on the telephone number provided after sending
them an email so they can attend to you urgently because the fund would be
confiscated if not released between now and Friday.

Do keep us updated when you have received your fund and once again, we say
congratulations.

Sincerely,
Vincenzo Alonso.
Internal Revenue Service.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: Google [Bot], Majestic-12 [Bot], Yahoo [Bot] and 64 guests