Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#384105 by buried under 419s Thu Apr 11, 2019 8:33 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by s with LMTP id 6KxXE1t9r1xRIgAAjbubUg
for <>; Thu, 11 Apr 2019 10:46:03 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 11 Apr 2019 10:46:03 -0700
Received: from mail-pl1-f194.google.com ([209.85.214.194]:39289)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hEdlx-0002HP-F7
for ; Thu, 11 Apr 2019 10:46:03 -0700
Received: by mail-pl1-f194.google.com with SMTP id a96so3758863pla.6
for <>; Thu, 11 Apr 2019 10:45:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=9LiTeasFx1X5VwsWRK4m1JwRAS4qXVMebhzc9Q5rEas=;
b=Z/r5S5h8d3sh7ycgJ0XTP/YNprUPIYHvW6GUtwY5tTu8zg5/vCXlKTQPesscLNjueV
vKop/45MLlJxyKQQQ8Yc9iarDvx7KFKn05De+Cgi5iRPO2VJRr/iZdEl6pZOh/9/vn6i
noI711H3hfNHx7wE+lscGU2um3uexlAv4P5h3aZhW/Y+iMspqoggQPGuCjQiyX3J+16t
xWjccq0XHGGpTtLfuxoEYUYjxpxbh34a3sxezhBtBt/g7KKIygr3A9j/+UfDf7w8Wjmx
D+0UkiIV31bjkHdax24iZpN+F9s85uFAa5B2mCx1KL0rlUgFqkBte+kM5KkvlDhpxTFc
3fGQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=9LiTeasFx1X5VwsWRK4m1JwRAS4qXVMebhzc9Q5rEas=;
b=J8ApPxkvPPLmkhSqYfsFa5PiivqqKQp5120sL7OLrJ332N+GGr4q85HFoi0F3r7+H2
D2ylzhD6IrOdnzekzXFTA0V9Jc9NlPg/JLfwBmuQtTuTCWn4bkDvHKQih6DNPdYhiy0F
cQT/5qngO0GhY9RQ8GTFbRPoVXYmdoLGbmmrBkK2UT1zZVi5CCHKCklm1+WjTLrin3UT
wKV2F4gYKIaeh42GyD5ak4MSe3H6+BpGe0HiDDdZ7a3BVySlg4ccjGYxzgopR85FY3GY
LUd5DrcdAb8GaR+0zfAHIK/qt2S3RwMLC0O9FEJk8CbJvMSXJ9+Af8rlCLPTysX66HLO
gNJg==
X-Gm-Message-State: APjAAAXt604FEMi4LKvywWU5PcSPU/vq+oO9Y+yvChNELLiKylOXvTNG
rSosPdkOKYmonew6rnPaScYVqV/+2Kmnbo8m/6w=
X-Google-Smtp-Source: APXvYqwarnrV5ffxJDjRbr6nPirGK4wqXLJvOzXQeMEc022OzOXLp5XE+eTtrZMXMIimmILjzXWp/45H9/1JBOdomiU=
X-Received: by 2002:a17:902:b191:: with SMTP id s17mr50034579plr.70.1555004720642;
Thu, 11 Apr 2019 10:45:20 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: Western Union Money Transfer <[email protected]>
Date: Thu, 11 Apr 2019 10:43:23 -0700
Message-ID: <CAOiyhEAO8Mty=6-MmExEKcaXxMX3BRqgYf6QTu=O-UBk=DVKvQ@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/related; boundary="000000000000ffdac3058644bfe1"
Bcc:
X-Spam-Status: Yes, score=11.2
X-Spam-Score: 112
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: [image: Image result for usa western union logo] *Welcome
to Western Union Money Transfer Office.* *Address: 1420 K St NW, Washington,
DC 20005, USA, United State Of America.Website: http://www.westernunion.com <http://www.westernunion.com>*
*Tel: +1-206-866-7323* [...]

Content analysis details: (11.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HK_SCAM_N8 BODY: No description available.
0.6 URG_BIZ BODY: Contains urgent matter
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.214.194 listed in list.dnswl.org]
0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.194 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(nnaluoalazor[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(brightazor1[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of empty
lines
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Your Payment Is Approved..

[image: Image result for usa western union logo]
*Welcome to Western Union Money Transfer Office.*


*Address: 1420 K St NW, Washington, DC 20005, USA, United State Of
America.Website:
*Tel: +1-206-866-7323*


Attention: Sequel to the meeting held with Federal Bureau of
Investigation, The International Monetary Fund (IMF) Injunction with World
Bank is compensating all the scam victims and Hurricane and some email
users which your name and email address was found on the list.However, we
have concluded to effect your own payment through Western Union® Money
Transfer, $5,000 daily until the total sum of $2.5million your compensation
fund is transferred to you.BELOW IS THE MTCN AND TRACKING WEBSITE TO ENABLE
YOU TRACK YOUR FIRST PROGRAMMED APPROVED PAYMENT, COPY THE WEBSITE AND PAST
ON YOUR BROWSER AND TRACK FOR PROOF IS THERE.Website:::
https://www.westernunion.com/global-ser ... k-transfer
<https://www.westernunion.com/global-service/track-transfer>MTCN#:196-030-8120Sender
Name: Brown Andrew Amount Programmed: $5.000You are advised to get back to
the contact Officer trough the email below for more direction on how to be
receiving your payment.Contact person: Dr. Bright Azor Email:
[email protected] <[email protected]>And for your information the
maximum amount you will be receiving started from today is $5,000 USD till
your total funds is complete send to you. And we have listed your first
payment of $5,000 USD been sent in your name today but you will not pick up
the money unless you contact us for the Activation fee because is still
on-hold to pick it up by you. which the fee is going to cost you $153 us
dollar for activation. *


*Your $5.000 is still Available for pick up by you today, so your urgent
response is highly needed now on how to send the Activation fee of $153 *


*Please You are required to reconfirm your information to avoid any mistake
on the transfer when picking it up over there.*

*Full Name:......*
*Correct Address:....*
*Direct Phone Number:....*
*City:......*

*Country:.....*


*Thanks,*

*Director Western Union Money Transfer,*
*Head Office Washington, DC USA.*

[image: image.png]

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 102 guests