Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#337121 by buried under 419s Fri Aug 18, 2017 8:55 pm
Return-path: <"www."@world.ocn.ne.jp>
Envelope-to:
Delivery-date: Fri, 18 Aug 2017 13:39:38 -0700
Received: from mbkd0104.ocn.ad.jp ([153.149.230.5]:35915)
by with esmtp (Exim 4.89)
(envelope-from <"www."@world.ocn.ne.jp>)
id 1dio3I-0005le-Nb
for ; Fri, 18 Aug 2017 13:39:37 -0700
Received: from mf-smf-ucb007.ocn.ad.jp (mf-smf-ucb007.ocn.ad.jp [153.149.231.6])
by mbkd0104.ocn.ad.jp (Postfix) with ESMTP id 5E9011201C0B;
Sat, 19 Aug 2017 05:38:51 +0900 (JST)
Received: from mf-smf-ucb007.ocn.ad.jp (mf-smf-ucb007 [153.149.231.6])
by mf-smf-ucb007.ocn.ad.jp (Postfix) with ESMTP id 3C5A7805D6;
Sat, 19 Aug 2017 05:38:51 +0900 (JST)
Received: from ntt.pod01.mv-mta-ucb024 (mv-mta-ucb024.ocn.ad.jp [153.149.142.98])
by mf-smf-ucb007.ocn.ad.jp (Switch-3.3.4/Switch-3.3.4) with ESMTP id v7IKcJgw034245;
Sat, 19 Aug 2017 05:38:46 +0900
Received: from vcwebmail.ocn.ad.jp ([153.149.227.167])
by ntt.pod01.mv-mta-ucb024 with
id ykem1v0013dLKTM01kemyP; Fri, 18 Aug 2017 20:38:46 +0000
Received: from mzkstore481.ocn.ad.jp (mz-ukg481p.ocn.ad.jp [118.23.186.163])
by vcwebmail.ocn.ad.jp (Postfix) with ESMTP;
Sat, 19 Aug 2017 05:38:46 +0900 (JST)
Date: Sat, 19 Aug 2017 05:38:46 +0900 (JST)
From: Diplomat Jude Mark <"www."@world.ocn.ne.jp>
Reply-To: Diplomat Jude Mark <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Originating-IP: [41.79.219.207]
X-Spam-Status: Yes, score=21.6
X-Spam-Score: 216
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Urgent reply is needed? Am Diplomat Jude Mark, am currently
in Orlando International Air port, with your package worth of 11.2million
usd,but i misplace your home address during the transit in France.i want
you to reconfirm your residential as listed below here, so that i will connect
my flight to your city and deliver your box to you right now. [...]

Content analysis details: (21.6 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[153.149.230.5 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[153.149.230.5 listed in bb.barracudacentral.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[41.79.219.207 listed in zen.spamhaus.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.79.219.207>]
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[153.149.230.5 listed in dnsbl.sorbs.net]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
X-Spam-Flag: YES
Subject: ***SPAM*** Am in Orlando International Air Port with your box


Urgent reply is needed?

Am Diplomat Jude Mark, am currently in Orlando International Air port, with your
package worth of 11.2million usd,but i misplace your home address during the transit
in France.i want you to reconfirm your residential as listed below here, so that i
will connect my flight to your city and deliver your box to you right now.

Your Country::::

Your Home address:

Your Cell phone::

Your Occupation::

Your Sexy:::

Regard
Diplomat Jude Mark

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 140 guests