Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#319720 by buried under 419s Fri Feb 17, 2017 5:03 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id UhmJILgfplgOEQAAjbubUg
for <>; Thu, 16 Feb 2017 13:55:04 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 16 Feb 2017 13:55:04 -0800
Received: from mail506.opentransfer.com ([98.130.1.162]:51946)
by with esmtp (Exim 4.87)
(envelope-from <[email protected]>)
id 1ceU0y-00016y-8K
for ; Thu, 16 Feb 2017 13:55:04 -0800
Comment: DKIM? See http://www.dkim.org
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=handforge.co.uk; s=dkim-shared; x=1487886900; h=Comment:
DomainKey-Signature:Received:Received:Reply-To:From:Subject:Date:
MIME-Version:Content-Type:Content-Transfer-Encoding; bh=IzhhJo48
sDoMCz4+rlzouRJkKUlbr04WMzRPs5XAEac=; b=AP3YGSM2vnhNR3hXc/1rdeHI
kwa++i5YUnColW8mdP5c4ZsMenaqxUon4RXk2FSMZUmsAa/9VHpvORylYm5NKTb4
8n1YaK5AcdFHV2I+AJDkdD0VH9SfuGbuilsR+scxKiWIxLPjnK/ylJcubUMbhUtj
hxtXYT6d8MPnjjq1nsM=
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=dkim-shared; d=handforge.co.uk;
h=Received:Received:X-Originating-IP:Reply-To:From:Subject:Date:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE;
b=QWR4S5SjL8QB15ELDk+GHrn+1cSOche+LcO/EU/woTalu3BngcercIqwZX0ihi
mgH/qdADThT9harlLHQLHZBXeGeyHdYAHaRf7+KTdffLYf1JrJhueSlq/AlnjMTb
ijoDzM8FdsLScvSnjJv0mkFPCDvdrcJdFhnUa0REtR1uY=;
Received: (qmail 10739 invoked by uid 399); 16 Feb 2017 21:54:19 -0000
Received: from unknown (HELO User) ([email protected]@87.236.215.113)
by mail506.opentransfer.com with ESMTPAM; 16 Feb 2017 21:54:19 -0000
X-Originating-IP: 87.236.215.113
Reply-To: <[email protected]>
From: "AKAEZE JAMES"<[email protected]>
Date: Thu, 16 Feb 2017 13:54:16 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=24.6
X-Spam-Score: 246
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Good day I am Mr. Akaeze James your Authorized Fund Account
officer handling all foreign unpaid inheritance fund. your payment file was
open yesterday after the executive board meeting concerning all Unpaid inheritance
and we notice that your payment have been kept pending for a very long time
due to the wrong information given previously by the payment Administrative
officer. [...]

Content analysis details: (24.6 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.1 KAM_COUK Scoring .co.uk emails higher due to poor registry security.
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.130.1.162 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[98.130.1.162 listed in wl.mailspike.net]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 MISSING_MID Missing Message-Id: header
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
1.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** NEW YEAR GOOD NEWS, READCAREFULLY.


Good day



I am Mr. Akaeze James your Authorized Fund Account officer handling all foreign
unpaid inheritance fund. your payment file was open yesterday after the executive
board meeting concerning all Unpaid inheritance and we notice that your payment have
been kept pending for a very long time due to the wrong information given previously
by the payment Administrative officer.


I decided to contact you immediately to inform you about the Re-approval of your
part payment. To enable us know that we have contacted the rightful beneficiary. Do
fill and return the below listed personal details so as to enable us cross check
with the one in your payment file and commence with the release of your part
approval payment of $4.5m.


First Name:
Last Name:
Middle Name:
Address:
DOB: (Date of Birth):
Telephone:
Mobile Phone:
Occupation:


My contact email is: [email protected]

Thanks.

MR. AKAEZE JAMES
Fund Account Officer
ECO BANK PLC

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Majestic-12 [Bot] and 82 guests