Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#417668 by buried under 419s Thu Sep 24, 2020 10:07 pm
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from vps.trucidodolusloricaproject.com
by vps.trucidodolusloricaproject.com with LMTP
id U/rnHtlpbF/MUAAAibB4EA
(envelope-from <[email protected]>)
for <[email protected]>; Thu, 24 Sep 2020 09:41:45 +0000
Return-path: <[email protected]>
Delivery-date: Thu, 24 Sep 2020 09:41:45 +0000
Received: from win103b.small-dns.com ([]:50695 helo=win103.small-dns.com)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kLNl0-0005MD-Hs
for ; Thu, 24 Sep 2020 09:41:45 +0000
Received: from User (UnknownHost []) by win103.small-dns.com with SMTP;
Thu, 24 Sep 2020 16:41:57 +0800
Reply-To: <[email protected]>
From: "JOHN JOHNSON"<[email protected]>
Date: Thu, 24 Sep 2020 09:41:57 +0100
MIME-Version: 1.0
Content-Type: text/plain;
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=17.1
X-Spam-Score: 171
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: John Johnson Worldwide Courier Agent, How are you doing, Trust
you are doing great?
Content analysis details: (17.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
[Blocked - see <https://www.spamcop.net/bl.shtml?>]
[ listed in bl.score.senderscore.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
1.6 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** Ready to deliver

John Johnson

Worldwide Courier Agent,

How are you doing, Trust you are doing great?

Be advised that I am still waiting to hear from you over the delivery of your fund. I also wish to bring to your notice that the clearance process is completed and I need to proceed with the delivery to your doorstep. I need you to reconfirm your address and telephone number where you can be reached.

All is required now is the delivery tag to get the delivery completed.

I need you to get back to me immediately so we can move forward.


John Johnson.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: Google [Bot], Google Adsense [Bot] and 36 guests