Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#420400 by buried under 419s Mon Nov 23, 2020 9:33 am
Delivered-To:
Received: from
by with LMTP
id vAqgD1Kuu18+aAAAibB4EA
(envelope-from <[email protected]nces.google.com>)
for <>; Mon, 23 Nov 2020 12:42:58 +0000
Return-path: <[email protected]nces.google.com>
Envelope-to:
Delivery-date: Mon, 23 Nov 2020 12:42:58 +0000
Received: from mail-io1-f71.google.com ([209.85.166.71]:34689)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]nces.google.com>)
id 1khBBJ-0006vG-2P
for ; Mon, 23 Nov 2020 12:42:58 +0000
Received: by mail-io1-f71.google.com with SMTP id q6so6716425iog.1
for <>; Mon, 23 Nov 2020 04:42:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:message-id:date:subject:from:to;
bh=vYPdXKCju2tcBCQIrLUbsEjFB2mHMKXcNzsXiF1U1ws=;
b=fwKRFZ+1opx6q3Q5NIEXgLZgEPMziRMbgbuIBe+1Axqs7rRqivZMWojN0MGq11TNu/
3YVcIfn4ozjzXto9AgmdD7lPDebREzCJjVtoT0l8VIObjjT85skG2Tn62oNyJ3tg2OMq
bYYLt0m6fwhk6ARaqpZo3acNyQRx8d9P+bFH6wLueK3S9AbH92kFzIXR4JSlA6+N4XOB
4sEbVmalGm04K6BwOwWlYkw6aVdT5wGK0EaKXBZ4fvaq4u4UpCmwfYgw+RIpP0DlqP0S
FTcc9bPktFWRORuYTluG9dDe4M6MhGNbyPQyg+5QV5JQBkq6R9t3XLBQT8wHlTZl4TlZ
zBfg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:message-id:date:subject
:from:to;
bh=vYPdXKCju2tcBCQIrLUbsEjFB2mHMKXcNzsXiF1U1ws=;
b=hp3FHHv7NDbYuCQ2rsHfu1VDLmmnuMbTPvXQMGAXmyUbirc7NtmfGb6Qw5FLC1S2fI
X5v6KZvaIs4uEvWxev4qqeEWn+GwCUiT3m/K/AdA344n/0eBPG4RNx6Cho5pMheah6dN
pF7Uv36XXEvCQRW75bXUQ1WbileW3lPsPcGQfrLvr5aZGnErQvHTuWeRr/UZZ9T+u7JV
kaRJTLmfP5QxI2BmzqyEjj/AosgWp3q2MINe7RviISDCZXSzDBzzTJvQJj6TvMG0yfhC
UVQhVCV3XTpNvqwR8bb7vi5Ayez6vrMpVV2bVWJa3ucbP0RzOsA8s7xSIE9dGX2u8E6S
9Fsg==
X-Gm-Message-State: AOAM531CcsBr7okYzPhZCpajH2Z0/tp37NCZtb2jzH2eq94QXmTwZc/T
TSqgpGOUwkiYYei/b/3aTAfves4Vv6+raVUl5qD8
MIME-Version: 1.0
X-Received: by 2002:a05:6e02:d03:: with SMTP id g3mt38764700ilj.175.1606135336020;
Mon, 23 Nov 2020 04:42:16 -0800 (PST)
Reply-To: [email protected]
X-No-Auto-Attachment: 1
Message-ID: <[email protected]>
Date: Mon, 23 Nov 2020 12:42:16 +0000
From: [email protected]
To:
Content-Type: multipart/alternative; boundary="00000000000030024f05b4c586c9"
X-Spam-Status: Yes, score=7.2
X-Spam-Score: 72
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I've invited you to fill out the following form: Untitled
form To fill it out, visit: https://docs.google.com/forms/d/e/1FAIp ... _form_link

Content analysis details: (7.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HK_RANDOM_FROM From username looks random
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel
letters
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[cfffbgg653[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[cfffbgg653[at]gmail.com]
0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of
words
0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image
area
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
X-Spam-Flag: YES
Subject: ***SPAM*** We are ready to assist you achieve your goal.

--00000000000030024f05b4c586c9
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Attention: Dear,

I was informed that you might have a project that requires financing. In case you need our help to assist you financially, to enable you complete your project, we are ready to assist you achieve your goal.

Your Chance!

MR. JOSE D. TITO
HY CREDIT LTD, HONG KONG
Email: [email protected]

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 33 guests