Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#400142 by buried under 419s Tue Nov 12, 2019 6:38 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 12 Nov 2019 14:34:10 -0800
Received: from 114-34-73-93.hinet-ip.hinet.net ([114.34.73.93]:48317 helo=mail.prior.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1iUejh-0004nw-DN
for ; Tue, 12 Nov 2019 14:34:10 -0800
Received: by mail.prior.com (Postfix, from userid 98)
id 7105B17F06; Wed, 13 Nov 2019 05:58:31 +0800 (CST)
Received: from User (unknown [82.204.193.166])
by mail.prior.com (Postfix) with ESMTPA id 25406152D25;
Wed, 13 Nov 2019 05:58:03 +0800 (CST)
Reply-To: < [email protected]>
From: "Duncan Owen"<[email protected]>
Date: Tue, 12 Nov 2019 13:58:32 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=58.9
X-Spam-Score: 589
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Attn: I sincerely apologize for intruding into your privacy,
especially by contacting you through this means for a business transaction
of this magnitude, but i had to do it for the security of this information
that i want pass across [...]

Content analysis details: (58.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.3 NSL_RCVD_FROM_USER Received from User
0.0 TVD_RCVD_IP Message was received from an IP address
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[114.34.73.93 listed in psbl.surriel.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[114.34.73.93 listed in bl.score.senderscore.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=0%40prior.com;ip=]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?114.34.73.93>]
0.0 LOTS_OF_MONEY Huge... sums of money
4.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 FROM_MISSP_USER From misspaced, from "User"
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.0 FROM_MISSP_SPF_FAIL No description available.
2.6 MSOE_MID_WRONG_CASE No description available.
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
1.9 HK_SCAM No description available.
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
3.5 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 FROM_MISSPACED From: missing whitespace
2.4 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.2 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Your Consent Needed


Attn:

I sincerely apologize for intruding into your privacy, especially by contacting
you through this means for a

business transaction of this magnitude, but i had to do it for the security of
this information that i want pass across

to you
I am Mr. Duncan Owen, Manager Halifax Bank U.K, My client Who died with his wife
and only child made a

fixed deposit of $17.5 Million in my branch .Form investigations, he did not
declare any next of kin so: i need you

to act as the next of kin [since you share surname with the deceased customer] to
get this fund for us because the

fund will revert to the government of U.K if nobody comes to claim it.
My anticipated percentages for the share shall be fair enough 55% for me 45% for
you. My attorney will perfect

the legal document . should you be interested please contact me IMMEDIATELY and i
shall provide you with

more details of this operation

Regards,
Duncan Owen

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Bing [Bot], Google [Bot], Google Adsense [Bot] and 97 guests