Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#417204 by buried under 419s Mon Sep 14, 2020 8:36 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id bExyI7MQX18tOgAAibB4EA
(envelope-from <[email protected]>)
for <>; Mon, 14 Sep 2020 06:41:55 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 14 Sep 2020 06:41:55 +0000
Received: from mail-wm1-f65.google.com ([209.85.128.65]:35404)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kHiBW-0003ri-H9
for ; Mon, 14 Sep 2020 06:41:55 +0000
Received: by mail-wm1-f65.google.com with SMTP id y15so10022814wmi.0
for <>; Sun, 13 Sep 2020 23:41:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=17THt9SoiR2kf+9lmmf1097gEtUf3RQmtLu+7qfWuPQ=;
b=euKspwNbLp792mYJAXpi7F1zrkqwMpWLNoNIRUo000XzqY4tK65guLBys5SsHrf5+q
VquxJxZMWZqJmeIiW8CBTVKmb4SM/4/yeGCKLkdNGnOYS/4kyoYWund/itnivjgUSWjL
CHuEueYTgfrVplA+TcHmev5OeVFcVzBOv9EmmxzL1jzaDJ4RgLsItou0PCYE8VALBsIW
ELjukoorCm6+7cvpxejNRLasoMcikW/T8368Gu0TJjU13Mcz0ltyUqCP+uSNx0+D6xM5
gqFuDsTLyUP7tKngjmoJ7qCUmycd/WQnWOmVvxgVO7xXqA7xUYl2ZovYEQ4pYGS3Jahr
oo4g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=17THt9SoiR2kf+9lmmf1097gEtUf3RQmtLu+7qfWuPQ=;
b=p6nMZbeOze7FpRuXfZ09AdoTfR1ei5oQ7Hh2LSj7EgHaKblwgtwJej5CSDITjyVc6D
7ZXsgkkdxVhHfJIfpHqUlzIM00R7ZVQlACwNNIthqMo3UpB4H0ZdaT3jDYlFIFQEtPiu
fvcejbpJOatlYxazIQE96vi6ZA08f/UF4ha6lthC+/mpsWorOS9S9h90P48qZGpD543d
WaJb0rqlZXwUqF6naDWUVYatblLjuGOWfcQXOiMj7EJYgLwm8RE4VO/nYbNNhmfC5GQe
czE9uYMgPl0Lvi3h50F8RriP6Hh9h2QAdf01e/TvA3+mxpPSBKt6y2cnvDFIGUabAtke
qUnQ==
X-Gm-Message-State: AOAM531ZMRw0KWf616/IVPKnEBwUFdgbacInLG84fVEUZij+dxrunT+O
qWwbelGAYB0wb807zCZifBo7iSozcwkQ3jKNjEg=
X-Google-Smtp-Source: ABdhPJyCJgBPbjfho8f9rwbtz2A83XR1RpDgVYglYlN/hUsM25zXHl/S+T8g1xXmsP7lyYqGN29LGTU+pt1+VsttLVc=
X-Received: by 2002:a1c:6487:: with SMTP id y129mr14134015wmb.90.1600065672605;
Sun, 13 Sep 2020 23:41:12 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a5d:650e:0:0:0:0:0 with HTTP; Sun, 13 Sep 2020 23:41:12
-0700 (PDT)
Reply-To: [email protected]
From: Hussein Harmush <[email protected]>
Date: Mon, 14 Sep 2020 07:41:12 +0100
Message-ID: <CAGRgPYhe4T6hxXgS9jWFEBKnYGbcsyxOqgen6Uyq4-vf4gYYLA@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=12.4
X-Spam-Score: 124
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend, I sincerely apologize if my message does not
suit your current status, Inshallah i got your contact from a Business Directory
during my search for a trustworthy and reliable partner for project invest
[...]
Content analysis details: (12.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[msjenniealfred1[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[msjenniealfred1[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.65 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ccolhusseinharmush43[at]gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
1.9 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** I look forward to receiving your message soon.

Dear Friend,


I sincerely apologize if my message does not suit your current status,
Inshallah i got your contact from a Business Directory during my
search for a trustworthy and reliable partner for project investments
in your country. My name is Col. Hussein Harmush, an army officer from
Syria Arab Republic but I am presently staying in a refugee camp here
in Manila city of Philippines with my wife and my children after our
lucky escape from Syria some years ago. This is as a result of the
ongoing bloody civil war in my country Syria which has killed
thousands of innocent civilians including women and children over the
last few years. Please I would like to discuss a very important and
urgent business proposal with you involving a total sum of US$
5,000,000.00. (Five Million U.S Dollars Only) with a Bank in London
only if you can permit me by responding back to this message as soon
as possible. Inshallah i need your honest assistance in transferring
this total funds to your Bank account so that i will travel to your
country with my family in order to meet you for onward investment of
this total funds through your help.


I will be giving you more details about this transaction and thank you
very much for your understanding as i look forward to receiving your
message soon. May Allah bless you with his best.


Contact me my Private Email: ( [email protected] ).


Col. Hussein Harmush.
Philippines Refugee Camp

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot], Majestic-12 [Bot] and 136 guests