Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#384731 by buried under 419s Fri Apr 26, 2019 9:03 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 0IwuBkvVwlz3ZgAAjbubUg
for <>; Fri, 26 Apr 2019 02:54:19 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 26 Apr 2019 02:54:19 -0700
Received: from elasmtp-kukur.atl.sa.earthlink.net ([209.86.89.65]:59896)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hJxYb-0006qh-Gb
for ; Fri, 26 Apr 2019 02:54:18 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=peoplepc.com;
s=dk12062016; t=1556272454; bh=vH3KwD5Y1pMEebXXwtj49JAR49syRd7SlqXU
JiAYMRI=; h=Received:Content-Type:MIME-Version:
Content-Transfer-Encoding:Content-Description:Subject:To:From:Date:
Reply-To:Message-ID:X-ELNK-Trace:X-Originating-IP; b=EvJssasT8HST9
GXka7UHp7tgTRdXCVsHZZNiFu/0SYlMWCo6UK2stEG0fEECh2Vc+D5nO4sQIeAr5MBx
92CFbjn7Kyz7mDlRB8Fe8xvERaIaxpohTGudgLcb2IQjtOpvChAzbxHpoKvjO+a0jOn
Bof0H0Hdd532XtgS7Xgvt8KeaylpKNJCuSf+dOKzB0awiO2aIY7Ahjmho5DPhNr8W/5
YMl1MyHPXPCTFr5sg2Jn59t0AN1IrWfy+7F9Ij6Spn0qgsXZVtUj120pbgjzAM3r/2f
DFIUhTF1i2YOZdy74uKKafUh5QoMITHPt4HBNWhFEfWPf79TB1VQrhAxzoJuQ==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=dk12062016; d=peoplepc.com;
b=hAqC0/Ws8NqqmKRKLoLJkPTaK8rEwnzeZKsWd9uOCkGC0vHbJhdlcUvIdSvmu9+ygeYUvTSDRn1DGDGdKnWcEAa3ctrp4OmHMkY7Gc50RZFJzkrCet1gvUxkz7RsnxzHoWdveC9Obt2o+ZWITQZT/hvepcrJmwXIIjnfqEl5A0cUSo90EcWPmoPNXDFWVMbVQX70QLBOn7lQuMpLYVv7ycj6zNYxAtvncTMrTVfTfa3CihzccgUudUPfezdzXS9bS9LY998nANw6ngEB1kyDrhHMqZgANRQOBTYV7tNVK17HdMPdVQIkkUZrW2bUXHS0Z9EFmusj8KupwkmtKbipEA==;
h=Received:Content-Type:MIME-Version:Content-Transfer-Encoding:Content-Description:Subject:To:From:Date:Reply-To:Message-ID:X-ELNK-Trace:X-Originating-IP;
Received: from [197.210.4.33] (helo=[192.168.88.249])
by elasmtp-kukur.atl.sa.earthlink.net with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4)
(envelope-from <[email protected]>)
id 1hJxXH-000BlK-1t; Fri, 26 Apr 2019 05:52:51 -0400
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mrs. Amelia Konan" <[email protected]>
Date: Fri, 26 Apr 2019 10:52:09 +0100
Reply-To: [email protected]
Message-ID: <[email protected]>
X-ELNK-Trace: f065d1ad07f3bee399190f421f1c1c2f1e82d87c0ab03ae44c2f125423e094602fa189f7d528d0b545e9507e059bbea0350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 197.210.4.33
X-Spam-Status: Yes, score=8.5
X-Spam-Score: 85
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Dear Beloved Good Morning I am Mrs. Amelia Konan I am very
sick and admitted in the hospital waiting to go for for surgical operation.Please
can you help me to receive $5M for investment in your country? The money
is in UK bank.I want part to go to charities motherless, less privileged,
Orphans and widows. [...]

Content analysis details: (8.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/, low
trust
[209.86.89.65 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.86.89.65 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrsameliakonann01[at]peoplepc.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mrsameliakonann01[at]peoplepc.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mrsameliakonann1[at]gmail.com)
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Your Message

Dear Beloved

Good Morning

I am Mrs. Amelia Konan I am very sick and admitted in the hospital waiting to go for
for surgical operation.Please can you help me to receive $5M for investment in your
country? The money is in UK bank.I want part to go to charities motherless, less
privileged, Orphans and widows.


I will give you details as soon as i hear from you


Please reply with out delay.
God bless you and your family.
Mrs. Amelia Konan

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 119 guests