Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#397291 by buried under 419s Thu Sep 19, 2019 10:18 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 19 Sep 2019 19:08:09 -0700
Received: from mail-qb1can01hn2032.outbound.protection.outlook.com ([52.100.145.32]:24751 helo=CAN01-QB1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iB8L9-00085Z-TH
for ; Thu, 19 Sep 2019 19:08:09 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=P6APtXVQL0VVlrMwvbKAlVs1o0W2RoVFQYtHfXgj5H+oPCnMhgiBDlL6KIVY2Dob74pvETR1GLUYY2KFXiefioVsCvuIlYGxZ+SCWYs80/Oth7SMvIBQATZHyJJpcKtT36lCMmtMIyAXof4SdHjKg1uWP4+PNrqLN/TkgrbQ+DU2+sadQ4Qx0GfjcNwWC6u1mnM2NvAS2ZK9uWhmjNmhz2ycGgn4JYfdV/fS9/JAv+qzYg2iE9/QQoUzWFz9PHbGU2AwY/+r+aufRGwYM0ODGIXopBaSroKzQ9CR5NQFKMxWsBVRP5K6tKuA9jflI+d5NBki4cGFceNtpn6DvO6O8w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=BT4AtXNEBCaTB5kZAOJq6ReyNsieFG8Sy47zvPfmKJs=;
b=f27kPZYmAhOg4JGbAkkcq/U1TwSDRv4pUkQTeltk42BUAIiM5Oo3QLaXOgHbpbeo34RK1lbN8xeYrycEVb2M8GywfUuIi3RmkWULS4zqQWZsrnryX0Y1zviYPLrtIQJBin2BHHgU1HBMEyOnHN2BL5RgXOj8ExTm9j5tDrLjX5/XovNj++bTDIQBpDInTiCU4/wTXYdBYDPCIN2obx6+cQA53kJw5OFU/01Ehcv5BHx039ufYcp82RQI0d6Iwbt1Aip6vIXqanEKttIaCcGd3D8jJl2sKg/9EyVP2u4T3RkTvclyXweKcTPnYNp2oGuJDUrMIvhVucz2OKQMGMuJoQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=uwo.ca; dmarc=pass action=none header.from=uwo.ca; dkim=pass
header.d=uwo.ca; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uwoca.onmicrosoft.com;
s=selector2-uwoca-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=BT4AtXNEBCaTB5kZAOJq6ReyNsieFG8Sy47zvPfmKJs=;
b=QDppaexcMph6KSHxA9MHSmBiV/9oB+NVcClkxqGJl6y7UYaSzKGI8QOmZ27bM/H9cPwAab8I0kJEDphUSSXqRGgq6EI/QyrJygr0f0J8HyPNt8Sik5j7cx/kRP6ne9tYSIR0dSlWFsYUBPeZkmD2BOBvOa9ffcAU2PByHwOXJ1c=
Received: from YQBPR0101MB0785.CANPRD01.PROD.OUTLOOK.COM (52.132.65.30) by
YQBPR0101MB1026.CANPRD01.PROD.OUTLOOK.COM (52.132.70.17) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.2284.21; Fri, 20 Sep 2019 02:07:25 +0000
Received: from YQBPR0101MB0785.CANPRD01.PROD.OUTLOOK.COM
([fe80::9d8e:e35a:e5c0:bfbe]) by YQBPR0101MB0785.CANPRD01.PROD.OUTLOOK.COM
([fe80::9d8e:e35a:e5c0:bfbe%5]) with mapi id 15.20.2284.009; Fri, 20 Sep 2019
02:07:25 +0000
From: Haiya Mihir Oza <[email protected]>
To:
Subject: Project Fundings..
Thread-Topic: Project Fundings..
Thread-Index: AQHVb1TJne2CDH0yG0G5uYjRpxCcCw==
Date: Fri, 20 Sep 2019 01:43:22 +0000
Message-ID:
<YQBPR0101MB0785A82710B399B9B7C5245BA7880@YQBPR0101MB0785.CANPRD01.PROD.OUTLOOK.COM>
Reply-To: "[email protected]" <[email protected]>
Accept-Language: en-CA, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-clientproxiedby: BL0PR02CA0071.namprd02.prod.outlook.com
(2603:10b6:207:3d::48) To YQBPR0101MB0785.CANPRD01.PROD.OUTLOOK.COM
(2603:10b6:c00:2::30)
authentication-results: spf=none (sender IP is ) [email protected];
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [156.96.157.172]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 4d609d93-7d07-429e-12bf-08d73d6beba2
x-microsoft-antispam:
BCL:0;PCL:0;RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600167)(711020)(4605104)(1401327)(2017052603328)(7193020);SRVR:YQBPR0101MB1026;
x-ms-traffictypediagnostic: YQBPR0101MB1026:
x-microsoft-antispam-prvs:
<YQBPR0101MB10268C20C50DB34DC9931171A7880@YQBPR0101MB1026.CANPRD01.PROD.OUTLOOK.COM>
x-ms-oob-tlc-oobclassifiers: OLM:1091;
x-forefront-prvs: 0166B75B74
x-forefront-antispam-report:
SFV:NSPM;SFS:(10019020)(346002)(366004)(376002)(136003)(39860400002)(396003)(199004)(189003)(71200400001)(476003)(2351001)(486006)(3480700005)(6916009)(558084003)(66066001)(786003)(316002)(2501003)(5003540100004)(52536014)(86362001)(5660300002)(71190400001)(256004)(43066004)(2906002)(5640700003)(3846002)(81156014)(6116002)(99286004)(66806009)(478600001)(14454004)(25786009)(6436002)(66476007)(26005)(66556008)(9686003)(6666004)(64756008)(6506007)(66946007)(7736002)(386003)(305945005)(8676002)(55016002)(102836004)(66446008)(186003)(7696005)(52116002)(8936002)(33656002)(8796002)(7116003)(1730700003)(74316002)(81166006)(130330200001);DIR:OUT;SFP:1501;SCL:1;SRVR:YQBPR0101MB1026;H:YQBPR0101MB0785.CANPRD01.PROD.OUTLOOK.COM;FPR:;SPF:None;LANG:en;PTR:InfoNoRecords;A:1;MX:1;
received-spf: None (protection.outlook.com: uwo.ca does not designate
permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info:
D5g1pFcaqhuovfEwNlQgIfDBsvKJhoEQvt8CzuoQWEd0UAhj5UuLPHPcueQVH1uhJfKWwpdlE94kRakDTIqzmLN7uNDZsNtBQbZ/c03ifmE3CqwDPwb0An7TFnF8NuWKPpBmuoUjDKfdi8DCzL/NB8L4Fmy+9inzNlP7w+m5wgExbBmx4O2qhXt5kpMWglUMj5j8YdkHblmy26PHfwEaA1hm7nUKA0dTKAeLs3x0+YGaDE+nn0Q+lWbru1Iw01nB3WVQWAzvl6t4Zs6GzKBUaLSpvdurbVE/SMliDfch6YLdjFnGb9h/ujtUnLl9gUaPS5a9gsIUHJ0ciSKIWGBld+AGUK9dfMuwfI7lLE7iDUAnkJShiAzAzGs9Bwj0y/48UFdtPPFMsHUl3e9yDc2TBpc0f8VT+JRy5RLr2zfoVlE=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="iso-8859-1"
Content-ID: <[email protected]>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: uwo.ca
X-MS-Exchange-CrossTenant-Network-Message-Id: 4d609d93-7d07-429e-12bf-08d73d6beba2
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Sep 2019 01:43:22.1106
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: ad93a64d-ad0d-4ecd-b2fd-e53ce15965be
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: q8xmMsEqBtPRUBAl2FiYdbJx+g2hzXsETGqS6StWUjLHIrYTD6Enm1h28u5gRKx+
X-MS-Exchange-Transport-CrossTenantHeadersStamped: YQBPR0101MB1026
X-Spam-Status: No, score=6.0
X-Spam-Score: 60
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Good Morning, I wish to discuss a business opportunity with
you, Kindly reply immediately with Regards Mr Fu Hzuang CEO [...]

Content analysis details: (6.0 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.100.145.32 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[52.100.145.32 listed in list.dnswl.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
X-Spam-Flag: NO

Good Morning, I wish to discuss a business opportunity with you, Kindly reply
immediately with Regards Mr Fu Hzuang CEO

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot], Majestic-12 [Bot] and 120 guests