Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#405147 by buried under 419s Sat Feb 22, 2020 4:21 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id ARh8Mc4jUV5/WgEAibB4EA
(envelope-from <[email protected]>)
for <>; Sat, 22 Feb 2020 07:51:26 -0500
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 22 Feb 2020 07:51:26 -0500
Received: from mail-am6eur05olkn2012.outbound.protection.outlook.com ([40.92.91.12]:54112 helo=EUR05-AM6-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1j5UFh-000N3Z-2f
for ; Sat, 22 Feb 2020 07:51:26 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=ITDAkaXIdCJNQkuQo301u8xp0fTBPTJlgMtsqQZAW7NDAHNfGFOBlHBN5nbf0wCHADgLikAEAAvWcTRvA2bzSdxr0YqYJNykT4JhMwcGTEl20c91SZdf9hlcDpTQdrekMb3qUMJMBdvC2M2ALyz/Bct1RK6JSG0naVGkV4RjOLwidkxEDFv0HBtHvuPZb7Rf8mOt+Ieh5EdVh1URUNONPUdvT7aQY3UEg+r0xFhbOO10NXJF5V5KNmfUUE+Q9B91ROFy0ZypOLI6GcmB3XeD70fqO0mD6ND0OMNxIAyP7pF9bnP0W7Nqzf43DRFFBsNHXxF/1RUF6IMGpAau6Rew4w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=Jlo+2lR29tPjwpsDBPmwv5WQnSykIr1CfXGK43F5GxQ=;
b=aN2qHaWCh4JyjYIGLomvVhGKl1K0IS4kjpvfDfkMW/kioCbE1BpStY8U9rl7YhHerGmtYLcbrjFNaLaSicym9SjJKxn4+hhWHEk6kl5dcBwzwQnRviS+5U38Yveza8B7QLAIcfPurFCnsFxM0qpXcok33eMtJQfEtH7ZY4/zzgpULgfj6GmKRDV9Jjk3tdyJLZyLn83ZfL+Mc6pe6JaA24PfL2T4wClAEvTtW6VCgYjeQe8Pen+lwio06xxFPxgPpKAtzNkAwvAsWdDNFpfrytjZg1+ZJ9PTsqStvzaBorS0t0GC/dDa3rlwDUZiw85jzte7Tpv776/Ma4Yk8v6/tA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=Jlo+2lR29tPjwpsDBPmwv5WQnSykIr1CfXGK43F5GxQ=;
b=HL6nMWS517pZA2yWyPGfAdZMGoBA6nKHXCXTZEamjr1cc0HMkLUUeCRG6//snrMW+yFC0ZZp9wbJy0vheqVW43mIwdR1NynKB5hOWkbnbaMYFGquWGx1SwslsgAnMGvJ8GnEP6LL1x8wStkKMv05vLwzq/5m1emQntX+VNzboHXdJXIN05rl1KXPt8ZxZnmV5tZ6GZBh94BHW/1hYeiOTWWZVnM6JhI+GaUn65/FSaYv+WJChjirYnJW085akg66f6yLR7vyoR0cuj5DfIfnr/utULDkA4wh8ErYE7Bof6W6XFPhGa7w8QA6MuuAYQehW0KwIqW6O7kxGn3JfGJ6Xw==
Received: from VI1EUR05FT055.eop-eur05.prod.protection.outlook.com
(2a01:111:e400:fc12::3b) by
VI1EUR05HT198.eop-eur05.prod.protection.outlook.com (2a01:111:e400:fc12::251)
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2750.19; Sat, 22 Feb
2020 12:50:39 +0000
Received: from VI1PR05MB5517.eurprd05.prod.outlook.com (10.233.242.55) by
VI1EUR05FT055.mail.protection.outlook.com (10.233.242.142) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.2750.19 via Frontend Transport; Sat, 22 Feb 2020 12:50:39 +0000
Received: from VI1PR05MB5517.eurprd05.prod.outlook.com
([fe80::8d70:2183:3173:e786]) by VI1PR05MB5517.eurprd05.prod.outlook.com
([fe80::8d70:2183:3173:e786%5]) with mapi id 15.20.2750.021; Sat, 22 Feb 2020
12:50:39 +0000
From: barrwilliams costa <[email protected]>
Thread-Topic: CONTACT MY SECRETARY
Thread-Index: AQHV6X6ZnPaG6NmJbUSxOXeZiVSFUQ==
Date: Sat, 22 Feb 2020 12:50:38 +0000
Message-ID:
<VI1PR05MB5517F5D61C2CC78B3CF73954BDEE0@VI1PR05MB5517.eurprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker:
OriginalChecksum:3F0DF5439D5E6466200195E294EF22F70E5EF81CCA79E2CD80F2B8619C22D2D3;UpperCasedChecksum:B1CCFDD12062C38855E6486065930A719DCA8B4A045BDAD2BFC83C3D1B9DA8CB;SizeAsReceived:11670;Count:41
x-tmn: [m9mWpEANkHHuTMSKu9h+hbM5PacuYm/s]
x-ms-publictraffictype: Email
x-incomingheadercount: 41
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: 71236c3c-b2be-4e68-3d36-08d7b795d199
x-ms-exchange-slblob-mailprops:
sq1fF/OcSfcs/ITg5+Kazhmu6XF7pLKiwBHhyTIOkPTgk85kwKLzwqCz5qBfdNOUr9Y1awk3tn7EntBRiEKyrw3vvr3oCbiwdbgtnYotlSfot5rxs2Fulgz+RCpTOLvEr9rA1wcmfNZ28hTarHR/2PlYicxkb7vB9DoyKI3bo2RSk/IW82YxWdoITXgJ/ux04xdyzhe7WVbReYsvwuocu/iGnydIZVD72pnqMa+Jn1Zrbv/E4MeLMYVz39euqGKnuv1Ph9g4xePQsdU2lv0IVD+7Kd2GWJ3LjFgioWKVKI9hrO2SEbEKjw35Jr4nmfHAYHZBA6K/zG3hAL5c0Dx7wZ3bbelUpt47Igj6iu7+EHK6UB/TNM9xWr6AQnzEo3K4kib+rK3oE1vngbLJYRletHm5Ur8eC/9a1dTMqAeH+gkh1Jb2PsMPHaUZ+2pG0MyKSyMx1PwWAt6WzUZEpMoN+Mb3I/aUjC2sKiAkvOq0T1EhXaV8tKCAOORIrbv4HWMCm97b/CzWV0M384/SyMGrNzf4m3D85Sr6X2ruq3aVSpOhoD3OO9TbZ7LMfV+N+6aoYpxD24Oi5RnG7BcamSsfpA==
x-ms-traffictypediagnostic: VI1EUR05HT198:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
BZrQzCWkBHoY6OpIJS+OJXD6wZmyIKT7T1VEU3DcBl3ZYPzFe0k6NPyLd4ueVWtmtJRqhqq78f7fz4JHWPrVtHvYeMhDwvY5H2HsAzrqvTua2SD04AhlTCgVB62ajfgcnwvsIQjKHCsR3ggvkZEq5gGWXSTAf+mkRedjWeLZ+zli/Nczoyy745FeNMozqj/r
x-ms-exchange-antispam-messagedata:
gTzUrC/1hPtZHJSHPDrr3nM4mgz08+wjZ7BWQpOKXpSyxAA3oLuF2RSTxU1jk3UrcnhCvecrSxoaMKtFrmxXbYoBCcjLHIpl8OIcDG79lxj629goU8Kvrq09QTC0RsNfB+F+cvALhi0ElFzLZuPH0w==
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative;
boundary="_000_VI1PR05MB5517F5D61C2CC78B3CF73954BDEE0VI1PR05MB5517eurp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 71236c3c-b2be-4e68-3d36-08d7b795d199
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Feb 2020 12:50:38.9835
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1EUR05HT198
X-Spam-Status: Yes, score=11.9
X-Spam-Score: 119
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn My Dear , We have concluded the arrangement of releasing
this your funds this morning and we agreed up that the delivery of your $2.7
compensation Box will take off tomorrow morning.So contact them with your
fu [...]
Content analysis details: (11.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[40.92.91.12 listed in list.dnswl.org]
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[barrwilliamscosta[at]outlook.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
1.6 MALFORMED_FREEMAIL Bad headers on message from free email
service
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** CONTACT MY SECRETARY

--_000_VI1PR05MB5517F5D61C2CC78B3CF73954BDEE0VI1PR05MB5517eurp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


Attn My Dear ,

We have concluded the arrangement of releasing this your funds this
morning and we
agreed up that the delivery of your $2.7 compensation Box will take
off tomorrow morning.So contact them with your full info
(1) Full names:------------
(2) Phone line:--------------
(3) Country of origin:------------
(4) Age:---------------
(5) Occupation:--------------
(6) Home address:-----------
(7)copy of your id card
Contact Mr.don woodson
Tel: (+2348170329495
Email: ( [email protected] )

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Majestic-12 [Bot] and 80 guests