Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#383855 by buried under 419s Sat Apr 06, 2019 6:54 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 06 Apr 2019 15:45:12 -0700
Received: from [123.57.184.24] (port=59471 helo=drupolicy.org)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1hCu3i-0005Zp-4M
for ; Sat, 06 Apr 2019 15:45:12 -0700
Reply-To: [email protected]
From: "Mr. Tim Baldwin"<[email protected]>
To:
Date: 07 Apr 2019 06:44:27 +0800
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=25.5
X-Spam-Score: 255
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Hello How are you? Did you not get my mail yesterday? Yours
faithfully [...]

Content analysis details: (25.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[123.57.184.24 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?123.57.184.24>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[123.57.184.24 listed in bl.score.senderscore.com]
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mrtimbaldwin50[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.4 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.7 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
X-Spam-Flag: YES
Subject: ***SPAM*** Hello


Hello
How are you? Did you not get my mail yesterday?
Yours faithfully
Mr. Tim Baldwin
London UK

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Bing [Bot] and 110 guests