Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#422772 by buried under 419s Tue Jan 26, 2021 8:10 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id 3xVUDWapEGDCMgAAibB4EA
(envelope-from <[email protected]>)
for <>; Tue, 26 Jan 2021 23:44:38 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 26 Jan 2021 23:44:38 +0000
Received: from bufferz.csloxinfo.com ([203.146.237.187]:47771 helo=bufferz9.csloxinfo.com)
by with esmtp (Exim 4.93)
(envelope-from <[email protected]>)
id 1l4Y0i-0003NC-VV
for ; Tue, 26 Jan 2021 23:44:38 +0000
Received: from mailx2-8.csloxinfo.com (unknown [10.20.140.28])
by bufferz9.csloxinfo.com (Postfix) with ESMTP id F114922440D6
for <>; Wed, 27 Jan 2021 06:32:18 +0700 (ICT)
IronPort-SDR: GKGLEoyKwidCN9yPYq5114GvXCnep0IRrNdcgACWXmX46ZrOJ9Y4XG9y9JRnBRkuAxLJHFYCJz
eJ7D42zaxrPJQ0kJ1tpN6xc2ENZRBGVGE=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DC/wBbpRBg/z735zFKgSiBSksHgSi?=
=?us-ascii?q?CSo1Yg2eDZwGBBTuFEYUwj2CBaAsBAQEBAQEBAQE1AQIEAQGBa4JZBBIVgVY?=
=?us-ascii?q?mSwUBAQsCBQMCAQYEhl5DAQEBAwEKhRoQBAECAhcHCgIfAgMBAScCCAIBDRE?=
=?us-ascii?q?GCi8BBAgCDAEDBgUBKBMBAgIBAYVqAQECLZ1zlSaBFAUBFw0pYoQvgjdlAjM?=
=?us-ascii?q?3IoF3lRCDeRABE4YYgRpBLW0ugToJIgKBPEYBAQGFSZR4gXWHBZN+SQUJAQY?=
=?us-ascii?q?CAiEpgSZgDhmSJ40VijSJGg4BJYE1ihYHgnmIKqtTghdTHXCBbi+BWxEmj0Y?=
=?us-ascii?q?BC405I34JdAgSAQoBgRqCKxqHHAE?=
Spam_Positive: LL
X-IronPort-AV: E=Sophos;i="5.79,377,1602522000";
d="scan'208";a="94890412"
Received: from 49-231-247-62.sbn-idc.com (HELO User) ([49.231.247.62])
by mail-2.csloxinfo.com with SMTP; 27 Jan 2021 06:32:17 +0700
Reply-To: <[email protected]>
From: "JP MORGAN CHASE BANK"<[email protected]>
Date: Tue, 26 Jan 2021 15:32:16 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=40.8
X-Spam-Score: 408
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: After several attempts to reach you on phone, I deemed it
necessary and urgent to contact you via your e-mail address and to notify
you finally about your outstanding compensation payment $10,700,000. [...]

Content analysis details: (40.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.3 NSL_RCVD_HELO_USER Received from HELO User
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[jpmorganwj6418504[at]gmail.com]
1.0 MISSING_HEADERS Missing To: header
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jpmorganwj64185041[at]gmail.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[jpmorganwj64185041[at]gmail.com]
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 HK_SCAM No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 MALFORMED_FREEMAIL Bad headers on message from free email
service
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.7 MONEY_NOHTML Lots of money in plain text
0.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FROM_MISSP_PHISH Malformed, claims to be from financial
organization - possible phish
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing
list
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.5 SPOOFED_FREEMAIL No description available.
0.2 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail
reply-to
2.9 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.7 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Compensation Payment $10,700,000.00 USD Phone Number: (337) 502-8021


After several attempts to reach you on phone, I deemed it necessary and urgent to contact you via your e-mail address and to notify you finally about your outstanding compensation payment $10,700,000.00 USD deposited in our bank.

Please contact Mr. Don Irwin the Managing Director of Chase bank connecticut branch with your name, resident address and your direct telephone number for the transfer of your payment to you accordingly

Name: Mr. Don Irwin
Phone Number: (337) 502-8021
Private Email: [email protected]

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 33 guests