Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#384151 by buried under 419s Fri Apr 12, 2019 8:29 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 12 Apr 2019 06:54:49 -0700
Received: from 92-223-212-106.ip275.fastwebnet.it ([92.223.212.106]:45425 helo=pbx.localdomain)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1hEwdg-0005FR-Lk
for ; Fri, 12 Apr 2019 06:54:49 -0700
Received: from User (pbx [127.0.0.1])
by pbx.localdomain (Postfix) with SMTP id 12B2F338593;
Fri, 12 Apr 2019 15:46:49 +0200 (CEST)
Reply-To: <[email protected]>
From: "Alina Kolisnychenko"<[email protected]>
Date: Fri, 12 Apr 2019 14:47:33 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=25.4
X-Spam-Score: 254
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: I am ,Alina Kolisnychenko. A Ukrine my late father was oil
Veteran.Am looking for opportunities to invest US$10m Dollars in a profitable
business.I am interested in a Profitable investment.Contact Me For More info
on my Email [...]

Content analysis details: (25.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 TVD_RCVD_IP Message was received from an IP address
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[92.223.212.106 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[92.223.212.106 listed in bl.score.senderscore.com]
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 LOTS_OF_MONEY Huge... sums of money
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.5 KAM_LINKBAIT Short messages containing little more than a link, from
a domain with no security in place
2.2 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
X-Spam-Flag: YES
Subject: ***SPAM*** Good day ...


I am ,Alina Kolisnychenko. A Ukrine my late father was oil Veteran.Am looking for
opportunities to invest US$10m Dollars in a profitable business.I am interested in a
Profitable investment.Contact Me For More info on my Email

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot], Jownlik, MarySue and 26 guests