Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#387801 by buried under 419s Fri Jun 07, 2019 8:33 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 06 Jun 2019 22:44:15 -0700
Received: from [162.241.210.135] (port=43620 helo=server.pevengineeringplc.partners)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hZ7fi-0002Ge-6J
for ; Thu, 06 Jun 2019 22:44:15 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=pevengineeringplc.partners; s=default; h=Content-Transfer-Encoding:
Content-Type:MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:
Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:
Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=DhsRSr7JfYsLqwM0MaP63yGEIgqkQE4T4g6A0SRwGlI=; b=DWgF9DrzEzynlgnl5QWoqmy1N
sOW4bItqtsu2CSJU7bWpv6TTB8qb+Gyw1rZSKjKi/MvFhOvB2DA5txTjbImPKi1/haiy5pLcdjI5n
Ol43NFK5JuAPAgRLWbOmuQshDZclf9DRKH3+9+ofBYQ+jKkeAf3nyCOQxafStSJ4qFH+gWPCfiBWP
dB0gu5h4ZJ/tfCMtFwiMjFPaHm5EhUWRcJ3bu98g7OnO0im+jxUjq3SI9HOErg5utsl+DBhstAz39
7vzBosgA5qTFNhImR0kpS05wpzw6WFcccrn/dvO9rXLNVudq9UsU/Dqx0vqVPtMXZdtuoDtEd4Hq4
EyJur2SDQ==;
Received: from [79.134.225.11] (port=61887 helo=pevengineeringplc.partners)
by server.pevengineeringplc.partners with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1hZ7f3-0008E0-B1
for ; Fri, 07 Jun 2019 05:43:33 +0000
Reply-To: [email protected]
From: Sufian Allaw <[email protected]>
To:
Date: 6 Jun 2019 22:43:32 -0700
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.pevengineeringplc.partners
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - pevengineeringplc.partners
X-Get-Message-Sender-Via: server.pevengineeringplc.partners: authenticated_id: [email protected]
X-Authenticated-Sender: server.pevengineeringplc.partners: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=25.3
X-Spam-Score: 253
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Hello, I hope my email will arrive to you at good time. My
name is Sufian Allaw from Damascus Syria. I was the former oil minister of
Syria Republic. Why I'm contacting you is to know if we can have a personal
conversation. Whatever truth you may brief me will be highly recommended.
Tell me more about your country, how good it will be to invest in your country.
Such as buying of properties, or real estate and some tourist places or any
profitable investment venture that will yield good profit. [...]

Content analysis details: (25.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[162.241.210.135 listed in psbl.surriel.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(sufian.allaw1946[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: pevengineeringplc.partners]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[79.134.225.11 listed in zen.spamhaus.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** INVESTMENT PROPOSAL

Hello,

I hope my email will arrive to you at good time. My name is Sufian Allaw from
Damascus Syria. I was the former oil minister of Syria Republic.


Why I'm contacting you is to know if we can have a personal conversation. Whatever
truth you may brief me will be highly recommended. Tell me more about your country,
how good it will be to invest in your country.
Such as buying of properties, or real estate and some tourist places or any
profitable investment venture that will yield good profit.


I will appreciate whatever result you may brief me.
Do let me know your idea and knowledge regarding this or any other profitable
investment venture you may suggest.
I have the total of (US$22,300,000.00) that I deposited in South East Asia and I am
willing to order the transfer of the money to you for investment if you are
interested with my proposal.


In my next mail I will explain the full details of the project and interest, and
then we reach an agreement on what will be your share from the money or investment.


I shall tell you more about myself when I read from You as well. Tell me little more
about yourself when replying. Also your private mobile phone number where I can
reach you.


Waiting for your Mail.
Thanks and best regards,.
Email: [email protected]
Mr. Sufian Allaw
Damascus,Syria.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 183 guests