Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#397246 by buried under 419s Wed Sep 18, 2019 8:37 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id oBvSMMlsgl0pQQAAjbubUg
for <>; Wed, 18 Sep 2019 10:43:37 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 18 Sep 2019 10:43:37 -0700
Received: from utmassis4.smrossi.com.br ([189.8.25.74]:38993)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iAdzL-0004Kd-CQ
for ; Wed, 18 Sep 2019 10:43:37 -0700
Received: from [187.62.217.51] (port=52944 helo=zimbra.smrossi.com.br)
by utmassis4.smrossi.com.br with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.82_1-5b7a7c0-XX)
(envelope-from <[email protected]>)
id 1iAB6o-0003vs-0w; Tue, 17 Sep 2019 07:53:22 -0300
Received: from zimbra.smrossi.com.br (localhost.localdomain [127.0.0.1])
by zimbra.smrossi.com.br (Postfix) with ESMTPS id 1D65D32DC370;
Tue, 17 Sep 2019 02:48:45 -0300 (-03)
Received: from localhost (localhost.localdomain [127.0.0.1])
by zimbra.smrossi.com.br (Postfix) with ESMTP id 022D232DC2F1;
Tue, 17 Sep 2019 02:48:45 -0300 (-03)
X-CTCH-RefID: str=0001.0A02020F.5D80BB22.0024,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
X-Virus-Scanned: amavisd-new at smrossi.com.br
Received: from zimbra.smrossi.com.br ([127.0.0.1])
by localhost (zimbra.smrossi.com.br [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id EkmctJsqY64o; Tue, 17 Sep 2019 02:48:44 -0300 (-03)
Received: from [192.168.43.28] (unknown [105.4.7.94])
by zimbra.smrossi.com.br (Postfix) with ESMTPSA id 0CFC332D0CE0;
Tue, 17 Sep 2019 02:48:33 -0300 (-03)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Donation" <[email protected]>
Date: Tue, 17 Sep 2019 01:48:22 -0400
Reply-To: [email protected]
X-Antivirus: Avast (VPS 190916-2, 2019/09/16), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Dear Approved Email $500,000 has been donated to you by frank
and laura rivera. Email: [email protected] for more details on further
clarification. Thanks ========================= Team-LM-Charity Foundation
[email protected] ========================== [...]

Content analysis details: (9.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?189.8.25.74>]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[189.8.25.74 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(frankrivera820[at]aol.com)
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** my subject


Dear Approved Email

$500,000 has been donated to you by frank and laura rivera. Email:
[email protected] for more details on further clarification.
Thanks
=========================
Team-LM-Charity Foundation
[email protected]
==========================

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Clive Wire, Google [Bot] and 108 guests