Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#329248 by buried under 419s Sun May 28, 2017 11:05 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 28 May 2017 04:26:42 -0700
Received: from rrcs-50-84-49-6.sw.biz.rr.com ([50.84.49.6]:29928 helo=stoneoaktherapy.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dEwLF-0004Ah-OO
for ; Sun, 28 May 2017 04:26:42 -0700
Received: from User ([197.211.59.131]) by stoneoaktherapy.com with Microsoft SMTPSVC(6.0.3790.4675);
Sat, 27 May 2017 04:33:05 -0500
Reply-To: <[email protected]>
From: "Mr. Peter Alexandra"<[email protected]>
Date: Sat, 27 May 2017 10:33:01 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-Antivirus: Avast (VPS 170526-0, 05/26/2017), Outbound message
X-Antivirus-Status: Clean
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 27 May 2017 09:33:05.0507 (UTC) FILETIME=[3E5C3B30:01D2D6CC]
X-TM-AS-Product-Ver: SMEX-11.1.0.1278-8.100.1062-23094.005
X-TM-AS-Result: Yes-103.726700-5.000000-31
X-TM-AS-User-Approved-Sender: No
X-TM-AS-User-Blocked-Sender: No
X-Spam-Status: Yes, score=33.3
X-Spam-Score: 333
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: FROM THE DESK OF MR. Peter Alexandra INTERNATIONAL MONETARY
FUND AGENCY INTERNATIONAL OPERATION DEPT VICTORIA ISLAND LAGOS-NIGERIA. RE-OUTSTANDING
PAYMENT This is to inform you of your long overdue Payment outstanding our
Banking records. I saw your name in the Central Computer among list of unpaid
inheritance claims individuals and have to update your information through
this email contact for immediate confirmation.Your name appeared among the
beneficiaries who will receive a part-payment of US$20.500, 000 million (Twenty
million and five hundred thousand United State dollars) and it has been approved
already for payment months ago. However we received an email from one Mr.
Morris Thompson who told us that he is your next of kin and that you died
in a car accident last four months back. [...]

Content analysis details: (33.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[50.84.49.6 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[50.84.49.6 listed in bb.barracudacentral.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[197.211.59.131 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[197.211.59.131 listed in dnsbl.sorbs.net]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(alexandrapeter575757[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 T_HK_NAME_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
Subject: ***SPAM*** Hello...Dead or Alive


FROM THE DESK OF MR. Peter Alexandra
INTERNATIONAL MONETARY FUND AGENCY
INTERNATIONAL OPERATION DEPT
VICTORIA ISLAND
LAGOS-NIGERIA.


RE-OUTSTANDING PAYMENT


This is to inform you of your long overdue Payment outstanding our Banking records.
I saw your name in the Central Computer among list of unpaid inheritance claims
individuals and have to update your information through this email contact for
immediate confirmation.Your name appeared among the beneficiaries who will receive a
part-payment of US$20.500, 000 million (Twenty million and five hundred thousand
United State dollars) and it has been approved already for payment months ago.
However we received an email from one Mr. Morris Thompson who told us that he is
your next of kin and that you died in a car accident last four months back.


He has also submitted his account information to the office department for transfer
of the fund to him as your inheritor. We are now verifying by contacting your email
address as we have in our Bank records before we can make the transfer into his
account and for us to conclude confirmation if you are dead or not. Please, confirm
response immediately before our action release of the outstanding payment against
your name listed out. Upon this, I request you send your full personal information
as soon as possible to enable this department finalize the transfer of the fund
release to your nominated foreign Bank Account. This department needs the following
information from you urgently.


1. Full Names........................
2. Telephone and Fax Number..........
3. Contact Address...................
4. Age...............................
5. Occupation........................
6. Sex...............................
7. Id Card


CONFIDENTIALITY NOTICE: This E-Mail is intended only for the use of the individual
or entity to which it is addressed and may contain information that is privileged,
confidential and exempt from disclosure under applicable law. Once again, I
apologize to you on behalf of International Monetary fund Agency towards this
contact and proper confirmation required urgently from you if alive. Make sure you
reply to my alternative mail address([email protected])


Thanks,
Yours Sincerely
MR. Peter Alexandra
International Monetary Fund Agency
E-mail: [email protected]

Hello...Dead or Alive

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 286 guests