Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#400527 by buried under 419s Tue Nov 19, 2019 5:59 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id wFTqN+9c1F3jBwAAjbubUg
for <>; Tue, 19 Nov 2019 13:21:51 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 19 Nov 2019 13:21:51 -0800
Received: from sonic315-43.consmr.mail.bf2.yahoo.com ([74.6.134.217]:41486)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iXAwU-0000Vn-UM
for ; Tue, 19 Nov 2019 13:21:51 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aol.com; s=a2048; t=1574198465; bh=ItRVcdyBdpQL54H12HG7UdALcpXseejgAb8/QMHE6NE=; h=Date:From:To:Subject:References:From:Subject; b=YEx7PhuOP/SZ4osJAinbBDmMx7NoSwh+fQngkrDzQuBG+lliKKKbLzjxpar8vev78LMOG5ydfabMI+hsVDThkHGegNA0R6KCdUR8kAWMv80d8mhH5vcRy+OiR340SEcsaXhmcL8R+LjqqM3gRTaCgbN4ePI30ywVHc6RROpVkXRWcP488XZj7CmO/i6SCdE90LntgW3ZWb0+Y91/rKa7i8ttnJ4EzUsFRyMqkCPjuROA6uV4734T0fiojxDh2i91PCnaBdoVoXZt85EWm1AuKFVpr0pKJwuwNbPhSsoQEtms9n7ilDn77ExbQ9bmruJGDBwzxCP/80C1WFgwJRnt+g==
X-YMail-OSG: R_X_vx8VM1ld.3n6oVTOiPbXnChNCvQZd7yhUsHwEmDRohRSYbbgtOwLMBDrlP8
cLOWv6PzT3XnI.hvwyxwIQ8Jdpc8VyAGFzT4JAx3IwwML0VQIpMjiCxP7QfavvHxtkfT7_g6T.bu
O.9.SqqvSdJ0dPYxcseFCL6lvgczo_GcW.WfFv3Nd32OI_.wf6RgVlAQr0sEl0EA3TZp3Kn5cJLb
Jzppl1lJHTPyjb_TykmPN.KcC3QbWMOB9rCif7rhU9UopK3E2_BKGCJizv_fl1f3faa3rhRJZTqy
QEV2oZFa.iobwa4aGTscTHZ4gj0bdKRVlMM0_nBjNO.XXXPsEkILtmN7dMX54Dv.Au0IOEne9W76
jLKhQJyMBlODnT.O.WmgyAHy0F13AahzPDEmOtO6f95vVMOwBKhoDFLZ5Qqb.WguK4EyC94M.CgR
H_RGMge2QMsfj3RieIyw6JfuAPwHwSZGCs3cvqc8WCp0VrMMEiIb3mz7bqdxS7Z7N0RoD8GTylxk
RdSTjUOcT_ozO2jOIzKju1LwadeHRsJvePGNn2eQOevtM6XHBQOnrjrfBPcNJxaBW03LzFYcahzi
sZcKGEsH38Elu.gfx_IPQ_kfJACRlm2KdWtbpd6zJjwWEh8P4wDuRzWr_W.VWuCpfdz72oXBn71S
fH5U.uUWFFm9yXQR5S5YGSYpEbm1ikSh6mdE5v5W5G3IHzOI2wMH0Q0a.xm4Gu2MB1IZghZLCGbt
Eibvf4b2UYeI3e7SRNUU0h75rjcr2pNv7Yvnl_IkSgVieGHbS6_SLxQtCL7UoBd9OmbehgkTvAeW
JBdG0I8UGDq1vzgKYYuH3HymCMaNDk2bmWlukFAi_Q8M.GPgDKzrTbu_hrAHghtdqLzYIboWCaXR
cxdMQ0Hy_176YkGTNsMfHALWe_zphDAZtadhGK4uyv5MxJhWVZ4WhqUsBMh_eMxZqD8rz8whEBcx
k24ERTuLGuYg74wBH3twC7YxFkJLGm8aUnb.E98lnxdtiFoBKrdq5X4ZLhUW3KfHsaVMuaYFBevD
cGlNKhpLDmHXPVL3SoDpLVx2MkLAGP7MtEuazH.3ZEk5e81gD6jk15O0e2QFRYYFvUzj2E71FKot
VFUBS0vk83gFTKWEnWQc3INPmMkYUJpqIA6hkMXEESuix254ylB4qEzXQRi67LV68woLAryehpUD
pYbAhnXVhAHqFmzX4JXh9.o56NmzVWgnb5tFyy7Tn55npkBlGxZZR83YRknAZca5Nojt7RBjbGeN
1mBgrjVko.qiMNvn77dc0hDIvGCr1aC313Z49fnGXdxGI8fUtOO_Pg87UNvqxKFHPehgwI.ms3Fa
vcw--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic315.consmr.mail.bf2.yahoo.com with HTTP; Tue, 19 Nov 2019 21:21:05 +0000
Date: Tue, 19 Nov 2019 21:19:04 +0000 (UTC)
From: Joe Bains <[email protected]>
To:
Message-ID: <[email protected]>
Subject: Investment
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_1675894_1351921721.1574198344076"
References: <[email protected]>
X-Mailer: WebService/1.1.14728 aolwebmail Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.97 Safari/537.36
Content-Length: 859
X-Spam-Status: No, score=6.2
X-Spam-Score: 62
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: I was recently informed of your need for investmentWill i
get money out of it? If so i am very interested Joe I was recently informed
of your need for investment Will i get money out of it? If so i am very interested
[...]

Content analysis details: (6.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (joebains1[at]aol.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(joebains1[at]aol.com)
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[74.6.134.217 listed in list.dnswl.org]
X-Spam-Flag: NO


I was recently informed of your need for investmentWill i get money out of it? If so
i am very interested
Joe

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 28 guests