Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#331886 by buried under 419s Sat Jun 24, 2017 1:59 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 23 Jun 2017 22:24:10 -0700
Received: from smtp.geoinc.org ([72.34.94.114]:24673 helo=mail.geoinc.org)
by with smtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dOdYA-0007zC-KS
for ; Fri, 23 Jun 2017 22:24:10 -0700
Received: from User ([190.147.208.219])
by mail.geoinc.org
; Fri, 23 Jun 2017 18:55:07 -0700
Message-ID: <[email protected]>
Reply-To: <[email protected]>
From: "QQ"<[email protected]>
Date: Fri, 23 Jun 2017 11:28:29 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=30.2
X-Spam-Score: 302
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: I have a lucrative business model with extensive funds I would
love to share with you [...]

Content analysis details: (30.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.5 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)
[72.34.94.114 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[72.34.94.114 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(richardzu1[at]excite.co.jp)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (richardzu1[at]excite.co.jp)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.9 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** HI


I have a lucrative business model with extensive funds I would love to share with you

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 248 guests