Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#325717 by buried under 419s Thu Apr 20, 2017 9:22 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 20 Apr 2017 06:18:57 -0700
Received: from mail.springlake-earth.org ([216.229.112.79]:53918)
by with esmtps (TLSv1:ECDHE-RSA-AES256-SHA:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1d1Bz5-0001KB-N8
for ; Thu, 20 Apr 2017 06:18:56 -0700
Received: from wolverine.springlake-earth.org (172.16.8.25) by
wolverine.springlake-earth.org (172.16.8.25) with Microsoft SMTP Server (TLS)
id 15.0.1044.25; Thu, 20 Apr 2017 08:18:13 -0500
Received: from wolverine.springlake-earth.org ([fe80::cca0:5f9a:ef38:497f]) by
wolverine.springlake-earth.org ([fe80::cca0:5f9a:ef38:497f%12]) with mapi id
15.00.1044.021; Thu, 20 Apr 2017 08:18:13 -0500
From: Tori Clayton <[email protected]>
To: "[email protected]" <[email protected]>
Thread-Topic: Hi
Thread-Index: AdK52JAEK8yfGzbl/0e4/xwlnnTRfA==
Date: Thu, 20 Apr 2017 13:18:12 +0000
Message-ID: <[email protected]>
Reply-To: "[email protected]" <[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [103.240.234.235]
Content-Type: multipart/related;
boundary="_004_3f30ca855569486fbee960c5e310b33bwolverinespringlakeeart_";
type="multipart/alternative"
MIME-Version: 1.0
X-Spam-Status: Yes, score=11.3
X-Spam-Score: 113
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: I need to talk to you regarding a business deal. Reply Back.
Contact Details: Sgt. Frank Lugard [cid:[email protected]] [...]


Content analysis details: (11.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[216.229.112.79 listed in dnsbl.sorbs.net]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9994]
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(sgtlugard123[at]hotmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 0.9994]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** FW: Hi

I need to talk to you regarding a business deal. Reply Back.

Contact Details: Sgt. Frank Lugard

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

#328586 by Tim Atem Sat May 20, 2017 6:00 am
Also using [email protected]

from: Alix McPherson - [email protected]
reply-to: [email protected]

I am Sgt Frank Lugard. need your assistance. Reply Back.

cid:[email protected]

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5

Who is online

Users browsing this forum: No registered users and 149 guests