Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#77390 by buried under 419s Mon Dec 12, 2011 2:02 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 11 Dec 2011 15:53:58 -0800
Received: from fw12a.wadns.net ([196.220.39.31])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RZtDP-0002X4-SE
for ; Sun, 11 Dec 2011 15:53:58 -0800
Received: from localhost (unknown [127.0.0.1])
by fw12a.wadns.net (Postfix) with ESMTP id 890DB13806DD;
Sun, 11 Dec 2011 23:51:35 +0000 (UTC)
X-Virus-Scanned: amavisd-new at fw12a.wadns.net
X-Spam-Flag: NO
X-Spam-Score: 2.678
X-Spam-Level: **
X-Spam-Status: No, score=2.678 tagged_above=-999 required=5
tests=[BAYES_40=-0.5138, HTML_MESSAGE=0.107, RCVD_IN_PBL=2.985,
RDNS_NONE=0.1] autolearn=disabled
Received: from fw12a.wadns.net ([127.0.0.1])
by localhost (fw12a.wadns.net [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id 30ycdR9Gj+SI; Mon, 12 Dec 2011 01:51:30 +0200 (SAST)
Received: from mail4.wadns.net (mail4t.wadns.net [196.220.62.114])
by fw12a.wadns.net (Postfix) with ESMTP id 47ED413806DC;
Mon, 12 Dec 2011 01:51:15 +0200 (SAST)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=----_SmarterMail_NextPart_5627633222601647
Date: Mon, 12 Dec 2011 01:49:05 +0200
Received: from [197.169.177.205] by mail4.wadns.net via HTTP; Mon, 12 Dec 2011 01:49:05 +0200
Subject: Re: PLEASE CONTACT MR. NELSON
From: "Mr. Nelson" <[email protected]>
Reply-To: [email protected]
To: <[email protected]>
CC:
Message-ID: <[email protected]>
X-Spam-Status: No, score=5.4
X-Spam-Score: 54
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, After a long time of searching for my late client possible
relative, I came across your last name which matches with his last name.
He passes away five years ago in a boat accident. In view of this I seek your
consent to present you as beneficiary to his funds $ 16.7m , There are claim
file in Documents to enable you and claim the funds legitimately, if you
interested, Please Contact Me with your names, age, Phone and Nationality
for more Details on how to claim the funds. Regards, Mr. Nelson Makada [...]
Content analysis details: (5.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4996]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian penal code)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: NO

This is a multi-part message in MIME format.

------_SmarterMail_NextPart_5627633222601647
Content-Type: text/plain;
charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Hello,
After a long time of searching for my late client possible relative, I came across your last name which matches with his last name. He passes away five years ago in a boat accident. In view of this I seek your consent to present you as beneficiary to his funds $ 16.7m , There are claim file in Documents to enable you and claim the funds legitimately, if you interested, Please Contact Me with your names, age, Phone and Nationality for more Details on how to claim the funds.
Regards,
Mr. Nelson Makada

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 411 guests