Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#411485 by buried under 419s Wed Jun 03, 2020 8:49 am
Return-Path: <[email protected]>
Delivered-To:
Received: from vps.trucidodolusloricaproject.com
by with LMTP
id dszXC4Je117gWgAAibB4EA
(envelope-from <[email protected]>)
for <>; Wed, 03 Jun 2020 04:25:38 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 03 Jun 2020 04:25:38 -0400
Received: from sonic310-23.consmr.mail.ne1.yahoo.com ([66.163.186.204]:36790)
by vps.trucidodolusloricaproject.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jgOiO-00062V-9H
for ; Wed, 03 Jun 2020 04:25:38 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1591172693; bh=PKacKgt7rIprxNo0XL9uT+iGMDwnTHGpgdhypqCwrmk=; h=Date:From:Reply-To:Subject:References:From:Subject; b=nutNQTfQtxeI2x9uhyPg9bKMABVKjPtd/kT4DiTa2NJUUrwflNVf34QVu96n8y9P3zTSIJw6mIjOFMLokfrgT+4v2VL688zPQ33+5L6FVxz/lWTu8Z0FOzcuN4TEAIBRv4yuZYW8KFAQvmZocDl7LiX5Dk6pqMtIilidjYboBxlWKrHWh6JIiMmFxGG6AFXv/4/I2wGmC1lLQxlrhcS9oytDNOmzfgLrxxmu/iyWcSj4iGm6KMKcba/nXtUC2A74wWVvw+SRL/ohoZHfIwX7x/5Jwa1FKeQynZirQx+wfY+O3X7+FvCzD0NYvGvVsdJMyEca5/+ibSC1G+l3XtVqCg==
X-YMail-OSG: OEb5OhUVM1kermeEtkn88NYx.P327a452XTZ70oAdmtIg20eNSWO._kBwiA9D94
lrHK8wwYYb_14S.ApuriTUtDqDnnr2kpIOK1hj4gWXP5OP5lcZ1Kror_eyCSE0U8aqhCHUeFczdJ
dn2O6v8z0DFvbtdG2KalmXH3P8hDmz7ST5gogui0qfimMYvCMS2QcY.1vA8Ywvl.oSxniHBpivm4
ccDwOReenq5ZxpekuJMevqr0mYVgeepcXEwyFco5rptzTmP2t8G5cdqDC1zndwtifh9YdQ3YPUVD
oj_FvwKu3ZIwN2yyC5E4LWnmzCskejo79cd.AL8j52Z3k4nHJysJKqAnueS1LnHiO8UpQzaHBoCN
xRKn7FqBmFMEW.pBVD11iU4bJLgAw2N8KA1PinMw7k5HnsTT1ug3A4wV84AZ0bDU1AGPxLxTo6lR
yhbQnTbAAwSKtvFyo0O0orpZC.CrkEnwedeikmTEMLGIC047nZNQD8MSXyNWwAOqXVODOaVcu38P
iP7gt4aXWmnvbqPV3IB_ry0LDv9mkWJRtSfKjFCis_NqTEbWz1Urt6nyCu1CSPi4hArLdfqsk1s6
UjQqt3qZPedeg1kNjWuIWXjrpqAA4WR1Ap_DudjyGgAu7WALT14P72eMBRUWJsAxnVCiowf0pRjl
kOv78PvpVIbJi.qOzDSqSAHOXW_EQ.hIFWNthrXdD1mLA64lB4YSRjqCr1hL07ExEqBTQnNN1Dwj
kQNQeDkvZYy_9OvIJdLfqMQAmyTNcVFnkITtnirMMn2CV2scC96IorjTEWGarbON9ikH4fTmEd3.
5Y1pRHKUBWWXIKm5Dfl4iNF1FWWQO54byHXA4LJ0tImsZu5cun7vZJIbMBSQC4dJw1b4pBCtfebD
yw5TWvmlK9OrgXdL85yUCemkZ3ck8JhygVoNrV292DMOPQW1HocMXqMZofZENfJWgCZDy7Js_EIU
ldQYdyCwNwHxCpTnIA7dtVpDDp2jVoFmNwy33LeT9qSBf17p9JxZ2pbATxscSm6Ah3hgIvRbJzQ4
q2PM1FHfMh2xf_KBn17goUh_RBpxytrhYyyWv7hkNc9h503rWND6zTVyc1BW9DNGmtbSSqVNFGMc
IyyAtASp5mGWGAQuX9ejirQWpPgA69plDBYe360pAcPkibzVdfehzkZDGB6nR_y_V35uEUXcT9L1
6cMQACe3G9i5Anvnxmysjz9ad3dXM0E_JyP2tycNTdTSlhFmKXkrdIcaDROgnbCryfr6Kc2pGT_z
gaW5plSZcRxj_vI_yh7lGzsvvez66ggpxcsyEV9tTvMzhsFVr.PvmzmiefDVhpg--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic310.consmr.mail.ne1.yahoo.com with HTTP; Wed, 3 Jun 2020 08:24:53 +0000
Date: Wed, 3 Jun 2020 08:24:48 +0000 (UTC)
From: Peter Brewn <[email protected]>
Reply-To: [email protected]
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
References: <[email protected]>
X-Mailer: WebService/1.1.16037 YMailNodin Mozilla/5.0 (Windows NT 6.1; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
Content-Length: 1702
X-Spam-Status: Yes, score=13.0
X-Spam-Score: 130
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Central Bank of Nigeria, Our Ref: CBN/RD/FGN-NIG/20 Date:
03/06/2020 Sir, RE: FINAL PAYMENT OF YOUR FUND Please kindly confirm to us
this account received today from Mr. John Brown, as your next of kin, instructing
us to affect your payment through this new nominated account, because of
the announcement [...]
Content analysis details: (13.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[66.163.186.204 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[66.163.186.204 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[peterbrewn[at]yahoo.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[alimusa3[at]yahoo.co.uk]
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
2.0 HK_SCAM No description available.
1.4 MALFORMED_FREEMAIL Bad headers on message from free email
service
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** From James Robert

Central Bank of Nigeria,
Our Ref: CBN/RD/FGN-NIG/20
Date: 03/06/2020
Sir,
RE: FINAL PAYMENT OF YOUR FUND

Please kindly confirm to us this account received today from Mr. John Brown, as your next of kin, instructing us to affect your payment through this new nominated account, because of the announcement the President made that we should pay all the beneficiaries their fund because of the corona virus pandemic in case they have anything to do with the fund in their Country,

BANQUE NATIONAL DE CANADA
540 1ST STREET IBERVILLE
QUEBEC , CANADA
A/c. NO. 20-181-51 TRANSIT: 04431006,

expectably, your payment will be released to your new account within 48 hours of receiving your confirmation. We shall at the same time be sending to you, the receipt including your telex copy for onward confirmation of your inherited/Contract fund from our bank.

This is a follow up on the resolution reached by the board of this bank according to the President’s instruction to intervene in the situation and release all impending inheritance/Contract funds in this bank, yours is inclusive.

We have made effort to reach you on the telephone sent to us by your next of kin but we are unable.

Hence, we decided to reach you via your former fax and email address. You are therefore advised, to confirm to this office immediately you receive this letter before the transfer would be made so that our bank will not be held responsible for wrongful payment or unlawful diversion of your fund.

Yours faithfully
James Robert

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Majestic-12 [Bot] and 116 guests