Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#400143 by buried under 419s Tue Nov 12, 2019 6:42 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 12 Nov 2019 12:32:28 -0800
Received: from [192.135.136.238] (port=41086 helo=WEB-INH-P2.agora.local)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iUcpr-0002lD-JM
for ; Tue, 12 Nov 2019 12:32:27 -0800
Received: from [64.52.173.59] (unknown [64.52.173.59])
by WEB-INH-P2.agora.local (Postfix) with ESMTPA id 42D70C581AF4;
Tue, 12 Nov 2019 10:02:54 -0500 (EST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Saudi Aramco Crude Oil Company" <[email protected]>
Date: Tue, 12 Nov 2019 14:18:51 -0800
Reply-To: [email protected]
X-Spam-Status: Yes, score=27.7
X-Spam-Score: 277
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Saudi Aramco Crude Oil Company. P.O. Box 5000. Dhahran 31311,
Dhahran-Saudi Arabia. Dear Friend, I have a legit and genuine lucrative business
deal to discuss with you. Can i trust you to be a sincere partner to handle
the business? For more information reply back. [...]

Content analysis details: (27.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[192.135.136.238 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[192.135.136.238 listed in psbl.surriel.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=i ... il.com;ip=]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 MISSING_MID Missing Message-Id: header
1.9 HK_SCAM No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.2 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
0.4 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
X-Spam-Flag: YES
Subject: ***SPAM*** Oil Partnership


Saudi Aramco Crude Oil Company.
P.O. Box 5000. Dhahran 31311,
Dhahran-Saudi Arabia.

Dear Friend,

I have a legit and genuine lucrative business deal to discuss with you.
Can i trust you to be a sincere partner to handle the business?
For more information reply back.

Mrs.Reem Nasser,
Sales/Marketing Manager
Saudi Aramco Crude Oil Company

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 110 guests