Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#355472 by buried under 419s Mon Feb 12, 2018 10:47 am
Return-Path: <[email protected]>
Delivered-To:
Received:
by with LMTP id eEtdG8gogVpUTQAAjbubUg
for <>; Sun, 11 Feb 2018 21:40:24 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 11 Feb 2018 21:40:24 -0800
Received: from linxtek.ru ([91.121.121.21]:43543)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1el6qk-00058J-RG
for; Sun, 11 Feb 2018 21:40:24 -0800
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=citi-moskva.ru; s=mail;
h=Message-Id:Content-Transfer-Encoding:Content-Type:MIME-Version:Date:Subject:From:Reply-To; bh=9TMuCk6aUyCY9zFNk+FqZSdygyEo70/scpTfgY9sw3s=;
b=b/lnls246hUhu5dknkalh+ftSiRwPT0yvokAc4Vu4dawV3f8gSiytqEC+UQEpMccGmyWmgVrt9xngAAzQwnqNYp1h+SKjAP9paCr1Lz5mrgI9Z6tFBjs5+nZaHH1iF5EAOBCCHOH9p3sJanI6ho3okiToFSuYZjGI6N+y0Sj/7g=;
Received: from [197.210.227.130] (helo=User)
by linxtek.ru with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1el6jI-00017w-I1; Mon, 12 Feb 2018 08:32:41 +0300
Reply-To: <[email protected]>
From: "Inspection Admin"<[email protected]>
Date: Sun, 11 Feb 2018 06:32:57 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=27.4
X-Spam-Score: 274
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Hello Good Friend, I have very vital information to give to
you, but first I must have your trust before I review it to you because it
may cause me my job, so I need somebody that I can trust for me to be able
to review the secret to you. [...]

Content analysis details: (27.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mikebrown70[at]usa.com)
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.5 FAKE_REPLY_C No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FROM_MISSPACED From: missing whitespace
1.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.2 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Your Abandoned Package For Delivery

Hello Good Friend,

I have very vital information to give to you, but first I must have your trust
before I review it to you because it may cause me my job, so I need somebody that I
can trust for me to be able to review the secret to you.

I am Mr.Mike Brown, head of luggage/baggage storage facilities
(Operations,Maintenance,Transportation) here at the Lake Charles Regional Airport
Lake Charles, Louisiana USA. During my recent withheld package routine check at the
Airport Storage Vault, I discovered an abandoned shipment from a Diplomat from
England London Uk and when scanned, it revealed an undisclosed sum of money in a
Metal Trunk Box weighing approximately 110kg ($2.5 Million ).

Write me on this email: [email protected] , if you agree to work with me. Send me
your cell phone number and your address and your full name attachment copy of your
photo. You can call me on this number 504-684-7635 if you want to speak with me or
send text sms quickly .

Mr.Mike Brown

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

#387679 by buried under 419s Wed Jun 05, 2019 8:45 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id oG+cDXaR91z9bgAAjbubUg
for <>; Wed, 05 Jun 2019 02:55:02 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 05 Jun 2019 02:55:02 -0700
Received: from [108.178.46.27] (port=36027 helo=refinedmedia.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hYSdI-0007Nn-Rz
for ; Wed, 05 Jun 2019 02:55:02 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=refinedmedia.com; s=default; h=Reply-To:Date:From:To:Subject:
Content-Description:Content-Transfer-Encoding:MIME-Version:Content-Type:
Sender:Message-ID:Cc:Content-ID:Resent-Date:Resent-From:Resent-Sender:
Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=Z5Kj7eLRL1582SmAXBfLMC7mtmIUJqInpw6kEjBDxrE=; b=ytC5vsrK/LsHeVoGjwYechSW8
56WG0VohxMtNbK1za8tkBpj5OsvS/iBjOsRW1cCd2jZdNJI77miX61WL6S+97ovbl4kUfkNdx4eee
Fx8thULyxyc+orFPuBRvOMYBA214kx69wMVHzSPvyCPK8PE1liiCZ0JbpIorDJyYqg9xk=;
Received: from [74.91.31.106] (port=54693)
by server1.jump-ventures.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.91)
(envelope-from <[email protected]>)
id 1hYScU-0000yJ-5t; Wed, 05 Jun 2019 02:54:14 -0700
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Logistics Courier " <[email protected]>
Date: Wed, 05 Jun 2019 02:54:02 -0700
Reply-To: [email protected]
X-OutGoing-Spam-Status: No, score=6.4
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.jump-ventures.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - refinedmedia.com
X-Get-Message-Sender-Via: server1.jump-ventures.com: authenticated_id: [email protected]
X-Authenticated-Sender: server1.jump-ventures.com: [email protected]
X-From-Rewrite: unmodified, already matched
X-Spam-Status: Yes, score=14.7
X-Spam-Score: 147
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Good Day! I am contacting you regarding a special cargo that
has been abandoned here at our warehouse for over a period of 2 years and
when scanned, it revealed an undisclosed sum of money in it. From my findings,
the cargo originated from Europe and the content was not declared as money
by the consignor in order to avoid diversion by the shipping agent, and also
failure to pay the special cargo non-inspection fee of US$1,200.00 I strongly
believe the box will contain about US$2.7 million or more. [...]

Content analysis details: (14.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mikebrown70[at]usa.com)
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
X-Spam-Flag: YES
Subject: ***SPAM*** Subject: You have a package!

Good Day!

I am contacting you regarding a special cargo that has been abandoned here at our
warehouse for over a period of 2 years and when scanned, it revealed an undisclosed
sum of money in it. From my findings, the cargo originated from Europe and the
content was not declared as money by the consignor in order to avoid diversion by
the shipping agent, and also failure to pay the special cargo non-inspection fee of
US$1,200.00 I strongly believe the box will contain about US$2.7 million or more.

In my private search for a reliable person, my proposal now is to present you as the
recipient of the cargo since the shipper has abandoned it which is a possibility due
to the fact it has been abandoned for a period whereby a new beneficiary can be
presented to the clearance department for claim and also my position at this
shipping service. Alternatively, I can personally bring it myself and then we share
the total money in the box equally.

One thing i understood about this life is that people hate the truth and prefer
wasting their hard earn resources due to cheap promise from hoodlums.

(1) Full Names, (2) Residential Address, (3) Phone Numbers, (4) Fax Numbers: (5)
Email Address, (6) Nationality, (7) Sex, (8) Age, (9) Occupation.

Regards,

Mr.Mike Brown

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: No registered users and 119 guests