Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#331831 by buried under 419s Fri Jun 23, 2017 11:36 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 22 Jun 2017 23:51:57 -0700
Received: from smtpout2.voxtelecom.co.za ([41.193.4.182]:34204)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dOIRc-0001wn-Iw
for ; Thu, 22 Jun 2017 23:51:57 -0700
Received: from unknown (HELO fortimail-01.voxtelecom.co.za) ([10.200.100.100])
by fm-relay-05.voxtelecom.co.za with ESMTP; 23 Jun 2017 08:51:08 +0200
Received: from smtp.voxtelecom.co.za ([196.41.6.173])
by fortimail-01.voxtelecom.co.za with ESMTP id v5N6osno018906-v5N6osnp018906;
Fri, 23 Jun 2017 08:50:54 +0200
Message-Id: <201706230650.v5N6osno018906-v5N6osnp018906@fortimail-01.voxtelecom.co.za>
Received: from [172.30.1.20] (port=64069 helo=mail.vox.co.za)
by smtp.voxtelecom.co.za with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80.1 (FreeBSD))
(envelope-from <[email protected]>)
id 1dOIQz-0005ea-4P; Fri, 23 Jun 2017 08:51:13 +0200
Received: from [87.236.215.116] (port=58839 helo=User)
by mail.vox.co.za with esmtpa (Exim 4.82 (FreeBSD))
(envelope-from <[email protected]>)
id 1dOIQe-000MIi-Q0; Fri, 23 Jun 2017 08:50:53 +0200
Reply-To: <[email protected]>
From: "USPS"<[email protected]>
Date: Thu, 22 Jun 2017 23:50:43 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
VOX-Vanity: 172.30.1.20
X-Spam-Status: Yes, score=31.2
X-Spam-Score: 312
X-Spam-Bar: +++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: PLEASE READ CAREFULLY AND RESPOND BACK IMMEDIATELY WITH THE
REQUIRED DETAILS. Postal Notification, We attempted to deliver your item
(Package) at 16th June 2017. Our Courier service agent could not make the
delivery of your parcel. Status Deny / Invalid ZIP Code and Direct Phone Number
for communication. [...]

Content analysis details: (31.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 NSL_RCVD_HELO_USER Received from HELO User
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[41.193.4.182 listed in list.dnswl.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[87.236.215.116 listed in zen.spamhaus.org]
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
1.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 MSOE_MID_WRONG_CASE No description available.
5.0 KAM_FAKE_DELIVER Fake delivery notifications
2.6 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.6 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** FROM USPS OFFICE (PACKAGE DELIVERY)


PLEASE READ CAREFULLY AND RESPOND BACK IMMEDIATELY WITH THE REQUIRED DETAILS.





Postal Notification,







We attempted to deliver your item (Package) at 16th June 2017. Our Courier service
agent could not make the delivery of your parcel. Status Deny / Invalid ZIP Code and
Direct Phone Number for communication.







If the package is not scheduled for redelivery or picked up within 48 hours, it will
be returned to the sender.





Label/Receipt Number: 205633964645

Expected Delivery Date: Jun 27th, 2017

Class: Package Services

Service(s): Delivery Confirmation

Status: eNotification sent

Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id L4fVLI26TFlyHQAAjbubUg
for <>; Thu, 22 Jun 2017 23:51:57 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 22 Jun 2017 23:51:57 -0700
Received: from smtpout2.voxtelecom.co.za ([41.193.4.182]:34204)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dOIRc-0001wn-Iw
for ; Thu, 22 Jun 2017 23:51:57 -0700
Received: from unknown (HELO fortimail-01.voxtelecom.co.za) ([10.200.100.100])
by fm-relay-05.voxtelecom.co.za with ESMTP; 23 Jun 2017 08:51:08 +0200
Received: from smtp.voxtelecom.co.za ([196.41.6.173])
by fortimail-01.voxtelecom.co.za with ESMTP id v5N6osno018906-v5N6osnp018906;
Fri, 23 Jun 2017 08:50:54 +0200
Message-Id: <201706230650.v5N6osno018906-v5N6osnp018906@fortimail-01.voxtelecom.co.za>
Received: from [172.30.1.20] (port=64069 helo=mail.vox.co.za)
by smtp.voxtelecom.co.za with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80.1 (FreeBSD))
(envelope-from <[email protected]>)
id 1dOIQz-0005ea-4P; Fri, 23 Jun 2017 08:51:13 +0200
Received: from [87.236.215.116] (port=58839 helo=User)
by mail.vox.co.za with esmtpa (Exim 4.82 (FreeBSD))
(envelope-from <[email protected]>)
id 1dOIQe-000MIi-Q0; Fri, 23 Jun 2017 08:50:53 +0200
Reply-To: <[email protected]>
From: "USPS"<[email protected]>
Date: Thu, 22 Jun 2017 23:50:43 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
VOX-Vanity: 172.30.1.20
X-Spam-Status: Yes, score=31.2
X-Spam-Score: 312
X-Spam-Bar: +++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: PLEASE READ CAREFULLY AND RESPOND BACK IMMEDIATELY WITH THE
REQUIRED DETAILS. Postal Notification, We attempted to deliver your item
(Package) at 16th June 2017. Our Courier service agent could not make the
delivery of your parcel. Status Deny / Invalid ZIP Code and Direct Phone Number
for communication. [...]

Content analysis details: (31.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 NSL_RCVD_HELO_USER Received from HELO User
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[41.193.4.182 listed in list.dnswl.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[87.236.215.116 listed in zen.spamhaus.org]
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
1.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 MSOE_MID_WRONG_CASE No description available.
5.0 KAM_FAKE_DELIVER Fake delivery notifications
2.6 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.6 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** FROM USPS OFFICE (PACKAGE DELIVERY)


PLEASE READ CAREFULLY AND RESPOND BACK IMMEDIATELY WITH THE REQUIRED DETAILS.





Postal Notification,







We attempted to deliver your item (Package) at 16th June 2017. Our Courier service
agent could not make the delivery of your parcel. Status Deny / Invalid ZIP Code and
Direct Phone Number for communication.







If the package is not scheduled for redelivery or picked up within 48 hours, it will
be returned to the sender.





Label/Receipt Number: 205633964645

Expected Delivery Date: Jun 27th, 2017

Class: Package Services

Service(s): Delivery Confirmation

Status: eNotification sent







For mode details and shipping label please contact our agent in Spokane Washington
United States of America





Name: Laurence Weiss

Email: [email protected]

Phone: +15097232470





However, you are to reconfirm the below following details to rescheduled for
redelivery of your parcel to your door step.







Full Name:

Full Home Address:

Direct Phone Number:

One Photograph/ Drivers License:

Zip Code:







Print this label to get this package at our post office.







Thank you,

Mr. Bruce Williams

Dispatching Director











*** This is an automatically generated email, please do not reply ***





CONFIDENTIALITY NOTICE:

This electronic mail transmission and any attached files contain information
intended for the exclusive use of the individual or entity to whom it is addressed
and may contain information belonging to the sender (USPS , Inc.) that is
proprietary, privileged, confidential and/or protected from disclosure under
applicable law. If you are not the intended recipient, you are hereby notified that
any viewing, copying, disclosure or distributions of this electronic message are
violations of federal law. Please notify the sender of any unintended recipients and
delete the original message without making any copies. Thank You








For mode details and shipping label please contact our agent in Spokane Washington
United States of America

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 195 guests