Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#414714 by buried under 419s Sat Aug 01, 2020 4:37 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id OxlINU/EJV9MQgAAibB4EA
(envelope-from <[email protected]>)
for <>; Sat, 01 Aug 2020 19:36:47 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 01 Aug 2020 19:36:47 +0000
Received: from mail-oln040092074031.outbound.protection.outlook.com ([40.92.74.31]:21998 helo=EUR04-DB3-obe.outbound.protection.outlook.com)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1k1xJG-0004PX-V4
for ; Sat, 01 Aug 2020 19:36:47 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=JvFeWcfceO1aPgbt1wKH2frh/UakTDdSos+MZCvmwhlQ6QQv7/HDwbb6xonddKd9d7c9YTE7yvzs1O7bxxtsGmrEDd/v433isTi5vGg6/4iKGM9g8sm5H7H7GtJbnBzz2t13plWRRI5ztmvHIgeBO1Iz5njvtUNlXXpMWTJmfiJoP1eNoZPC3+3XCAJF/zPvAYQr/q58a2c5zz9P6qC50DEXLDiRSBLQWyGR9khET8DNbSTPxiThldaSHybMSD4JGVVdp6ySz2bAVlAOoB1YSPNeqGF7/VyiyrdQ67jiPWoMVhhLgxLUj8m3BFRyPR/Xhg02wcb9AQwGnPKXaJY8ow==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=zrfyPzWOnZbG+sdgpWCDsGFv+D7+nRbiSHxCNqihWSE=;
b=XeQYrmAyT5pUGBMy/Tk2JAxTJpDlLO+6+T8PMCrqsLJnLdN/PJvE0O1koDn/8YgBGxmgccAOSobIjKtI6HjsWIpSGa0F1k3Vuup55m/pCwFYdb76WrkSh9p3TSwQnob2bdJZbHlKtMPH/PD01gt7vOk5Jlcp8EXDGudyMLSJvD2rA76Gts9cYvtCQZpGFs/3y+noEhIFlmi7D/jcIOs5Nnt9A5vekY6iV94hOxUV1m9jDoJRz6z8wQNbnPB80qiNI18R2Ggnxt6DQn8v8kcWE12Vv7a5KolaoGGfdqdRah3nLj9w1GAgEsVsmeP+jcsxWdaU2eqrV0cD9y61qDITSQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
Received: from DB3EUR04FT053.eop-eur04.prod.protection.outlook.com
(2a01:111:e400:7e0c::49) by
DB3EUR04HT152.eop-eur04.prod.protection.outlook.com (2a01:111:e400:7e0c::93)
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.17; Sat, 1 Aug
2020 19:36:00 +0000
Received: from VI1PR1001MB1439.EURPRD10.PROD.OUTLOOK.COM
(2a01:111:e400:7e0c::53) by DB3EUR04FT053.mail.protection.outlook.com
(2a01:111:e400:7e0c::226) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.17 via Frontend
Transport; Sat, 1 Aug 2020 19:36:00 +0000
Received: from VI1PR1001MB1439.EURPRD10.PROD.OUTLOOK.COM
([fe80::de9:b5c5:a553:2dc6]) by VI1PR1001MB1439.EURPRD10.PROD.OUTLOOK.COM
([fe80::de9:b5c5:a553:2dc6%12]) with mapi id 15.20.3239.021; Sat, 1 Aug 2020
19:36:00 +0000
From: "Dr. Duke Green" <[email protected]>
To: "[email protected]" <[email protected]>
Thread-Topic: URGENT INFORMATION
Thread-Index: AQHWaDrhuoiYfY/AjkeDFkts3oLvug==
Date: Sat, 1 Aug 2020 19:36:00 +0000
Message-ID:
<[email protected]0.PROD.OUTLOOK.COM>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker:
OriginalChecksum:FE68E0AADC9006497AD04DFAD07C490F885E16F33E6E34A88CACC353757B3A9E;UpperCasedChecksum:EEFCFB9E5AABAB0990ABE72EF38FEB8F369B0400A8E59ABDD6D8E4788E41B9A2;SizeAsReceived:6875;Count:41
x-tmn: [mnx8hMyegsO28CifLgQQPRzRLEUUmBiuuvLUBHIVcOg=]
x-ms-publictraffictype: Email
x-incomingheadercount: 41
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: 22e0b74b-ec2c-4932-260f-08d836521f05
x-ms-exchange-slblob-mailprops:
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
x-ms-traffictypediagnostic: DB3EUR04HT152:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
ens9sGe67jUVl4VLf0B1zGq5wkPW/IjDUrG6aeXIlEGy5i2jhX6RJs49uwHzpArvLTTk44HNwFeIvIAlm6yQhAYkAvvxrjLPsKUazP6lNDaGWyDn3N+hnzKFMM06lZieqioGx3OiGYlJoRLN1jpgiEvvb1MqSsR+7pYEzlV+j21kGpgLbLioli/4aBAYa5PtQ+OtUaJkKEtwvNsjX2c1HQ==
x-forefront-antispam-report:
CIP:255.255.255.255;CTRY:;LANG:en;SCL:0;SRV:;IPV:NLI;SFV:NSPM;H:VI1PR1001MB1439.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFTY:;SFS:;DIR:OUT;SFP:1901;
x-ms-exchange-antispam-messagedata:
FchdZIVaTg72zE9iYpiuCoUzYqe9pH/VpmFJbt+6L49d4+ciJLK1zPFlY9aaJPv+omCgPDmnsFmYh1FJ1GnjgxrDkvU1b39Q8clQL5P/NT1/x3osD7bBkl44nl+NwByc3LO1txzc0y7JLSWWL2JofQ==
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative;
boundary="_000_VI1PR1001MB1439266B4F18EC42634039F2984F0VI1PR1001MB1439_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-AuthSource: DB3EUR04FT053.eop-eur04.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 22e0b74b-ec2c-4932-260f-08d836521f05
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Aug 2020 19:36:00.7594
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB3EUR04HT152
X-Spam-Status: Yes, score=7.3
X-Spam-Score: 73
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "vps.trucidodolusloricaproject.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: LlOYDS TSB BANK CORPORATE HEAD OFFICE 19 CENTRAL LONDON CIRCUS
CENTRAL LONDON NW4 3AS E-MAIL;- [email protected] PHONE ;- + 44-753-9860889
FAX;- + 44-700-5963407 Attn Sir This is to inform you that we received instruction
from the United Nation's debt recovery Unit on your pending claim , for an
investigation and effect transfer if certified of the fund origin [...]
Content analysis details: (7.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.8 KAM_COUK Scoring .co.uk emails higher due to poor registry
security.
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.92.74.31 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT INFORMATION
LlOYDS TSB BANK



CORPORATE HEAD OFFICE


19 CENTRAL LONDON CIRCUS


CENTRAL LONDON NW4 3AS


E-MAIL;- [email protected]


PHONE ;- + 44-753-9860889


FAX;- + 44-700-5963407





Attn Sir


This is to inform you that we received instruction from the United Nation's debt recovery Unit on your pending claim , for an investigation and effect transfer if certified of the fund origin, As their paying bank in UK we haveaccepted their brief and wish to inform you the modalities of your fund transfer.


Be therefore advised to forward to us urgently your banking information including your identification for authentic verification and communication with your receiving bank for the transfer.


Please note that we have a limited time for this transfer therefore the reply of this important message should reach this office within 24hours upon receipt.


Help the Lloyds bank to serve you better because Lloyds bank will not be liable for any wrong transfer of fund thereafter.


Yours truly

Mrs Lilian Jack


For

Dr Duke Green

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Bing [Bot], Majestic-12 [Bot] and 57 guests