Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#320259 by buried under 419s Thu Feb 23, 2017 5:09 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 22 Feb 2017 20:12:34 -0800
Received: from [211.149.222.225] (port=4518 helo=ejiabest.com)
by with smtp (Exim 4.88)
(envelope-from <[email protected]>)
id 1cgklW-0004kR-BJ
for ; Wed, 22 Feb 2017 20:12:33 -0800
Received: from [74.208.129.229] ([74.208.129.229])
(envelope-sender <[email protected]>)
by 211.149.222.225 with ESMTP
for <[email protected]>; Thu, 09 Feb 2017 00:10:50 +0800
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Elizabeth James" <[email protected]>
Date: Fri, 17 Feb 2017 16:53:28 +0000
Reply-To: [email protected]
X-Spam-Status: Yes, score=23.6
X-Spam-Score: 236
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: I have doneted my funds to you due to my poor health condition
[...]

Content analysis details: (23.6 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.4 DATE_IN_PAST_96_XX Date: is 96 hours or more before Received: date
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[211.149.222.225 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[211.149.222.225 listed in dnsbl.sorbs.net]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(studio.88[at]hotmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (studio.88[at]hotmail.com)
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.6 MISSING_MID Missing Message-Id: header
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** A MUST READ



I have doneted my funds to you due to my poor health condition

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Bing [Bot] and 202 guests