Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#413033 by buried under 419s Mon Jun 29, 2020 8:46 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id ojbFJev9+V4CnAAAibB4EA
(envelope-from <[email protected]>)
for <>; Mon, 29 Jun 2020 10:42:51 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 29 Jun 2020 10:42:51 -0400
Received: from mail-oi1-f194.google.com ([209.85.167.194]:34590)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jpuzi-000ANV-Hg
for ; Mon, 29 Jun 2020 10:42:51 -0400
Received: by mail-oi1-f194.google.com with SMTP id e4so6445854oib.1
for <>; Mon, 29 Jun 2020 07:42:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=ntYAgaqmlKvT2ZzoGGgLTXs1HOatSkxvo7fpBaiReBQ=;
b=o2+xkg+V9UCB7cRhWsVhcr/Sk+zpfkjbOhsw/ngq98jrwJoUEFEZF9C3FtGl9n2Z8E
4gvqUp/L2sVhktfbvJMVsCSH1xmTCtNgShMukIWZFRMiAprwOVX67R833U+XEGSzLcsO
0+kZsaL4IMFNHDBT5z8eY1tQ07d0kYXqxMtLNIAXQ/eopInpXBl5gRElrBuHL2NaGahX
bdSdJPKKsnl8uh/1jk6++7p9GFO6EjjfhD0yZpXoyaizuCAAiWVbHlEpXiGmlLQhY5ud
HMJ3DPrrzWXFKfXtJpY61IoWOkTON7eFvx3eV2Mi/sYzAafsN0IUeVbUl/TqIH1DHRPA
vZug==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=ntYAgaqmlKvT2ZzoGGgLTXs1HOatSkxvo7fpBaiReBQ=;
b=mLEdGZcD0Zt2QaeqEQETd1oazL/v3Xz3ATYulCnZbv/kQuiUAgLOCQpJcFpBCek0Q3
Tm05lBhU4chhmMlA2QjnvhZirZo/o5M942EtCXXgr/3xaZHntEqehbC3cgOxwtYcx2eP
0vpf/T6nZQpx+p9Y1ewG7/UCZgf09rQ7M0+gnSVM+An4YGynzbnvJmLH3Xp81PZlrnIm
jRsLhq1nEXxc7hsO/VtTSQuslpvBDhyb180mquiTokuVQ9BJSagOHNPRj2+giyMCpnnI
zG5svBIzLKg8PZeCiqNA31JGuNlaLaT5DAHbqR/ZZzD5TpX5dCvVdBFiqWG3j4g/Knki
ZP1g==
X-Gm-Message-State: AOAM533VoFZ9npiVoXWWPOPb+bnap1ILbdAYrB1iH1aVU2p3I3UpKNaE
RmxsS7cJ1rMpgOO6xlko3vtnPovdszhpd5CF+mI=
X-Google-Smtp-Source: ABdhPJz7CkzZj2e6Othr7yjXa37lHkU3S7uBUyEFDUYHZ/9DWGldSKzdWPBqHOHdINDDjJ+iiRMfDKxKrrKWEd1YMxU=
X-Received: by 2002:aca:5f0b:: with SMTP id t11mr11635139oib.7.1593441726959;
Mon, 29 Jun 2020 07:42:06 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ac9:de9:0:0:0:0:0 with HTTP; Mon, 29 Jun 2020 07:42:06 -0700 (PDT)
Reply-To: [email protected]
From: Grant dan <[email protected]>
Date: Mon, 29 Jun 2020 15:42:06 +0100
Message-ID: <CAMW=G9hhAvPC3+Fck7X1eUKcs426aFGNtyy5-10XYoNaDG=53w@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=10.4
X-Spam-Score: 104
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend, Have you received your fund since last year?
I saw your payment file that is why I decided to contact you. You have suffered
for nothing without receiving your fund due to over greediness by the offic
[...]
Content analysis details: (10.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.167.194 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mregodimma[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.194 listed in wl.mailspike.net]
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
1.0 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Friend,

Dear Friend,

Have you received your fund since last year? I saw your payment file
that is why I decided to contact you. You have suffered for nothing
without receiving your fund due to over greediness by the
officials.You would have received your fund since last year but your
problem is over greediness that cost you a lot of money and still yet,
you have never received $1 into your account. Reply to my email
address:( [email protected] ) for more details.
your full names.................
your contact address....................
your personal telephone number..........
your Date of birth......................
your Marital Status.....................
your Occupation.........................
Thanks Grant dan

Thanks Grant dan

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Majestic-12 [Bot] and 73 guests