Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#399924 by buried under 419s Fri Nov 08, 2019 9:53 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id KMCOH4P3xF3BEgAAjbubUg
for <>; Thu, 07 Nov 2019 21:05:07 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 07 Nov 2019 21:05:07 -0800
Received: from mail-il1-f195.google.com ([209.85.166.195]:44642)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iSwSE-0001EX-IB
for ; Thu, 07 Nov 2019 21:05:07 -0800
Received: by mail-il1-f195.google.com with SMTP id i6so3989548ilr.11
for <>; Thu, 07 Nov 2019 21:04:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=cewXEeiwKmGBvdC4RaX+m/YlLEiQrsrQHGZz43u1zxU=;
b=bfy6gd2+kxF0ZdRjNfOfgrR+e9b7I6DWswfFiItYBm9OT+tnEmACgLGO7dG8LPaUM6
ashY3CRs9njzsUds5Xx0OuA8uuidhEt4Y0RcnwD0chBm7j9NTEcchw/ZwIVDohjhCJNE
NIoARh8mQbeE1U9jnRPThPHNfemkNsiTE4WkueJSUXtruBhFH7Y5ydqW8yV4H34+5U3g
KOZcgOpqalQaXyhH1kDM606awYUr9DyQ1K5jSJVHTUlYRsgq4lceuyyraBApCujCnc4c
1uSuoEPF9m5bP4GcbTIOt7fSxwEu1ExFd7VSnjTHbrpDVs9JCqTu+H1IUBauma34+8OF
QU2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=cewXEeiwKmGBvdC4RaX+m/YlLEiQrsrQHGZz43u1zxU=;
b=TIoeRjUXf/Wxop+W1nFN1igagdOZFOLi8poSaGCQzB4QQa9Pk9IIxzyN9pIDQLjbpu
i2ywS/amCma0XSrXFRz+kr3f8RGBIyGTvSEXy/xjplDCb60OQXCapJnAHdlPtYmY6mhL
1bxragcRKLL3Q8esxI6fAZtrUpiCO5bKN2Op6pPEy9hpDoLlmhzyD2enXC2P18g5lXo6
4+Nwfl94tyiKgMvUAnQpVH0wtJqIlk04xls3hsMdAm/zI96zQLwk3BVhs5SQe/LC5mxC
4Jk+b3Rnjl9eCTDHlR5hHSsJ5tmZZUZZhRTWqlCnB5DfWzTA7JjKLLtYitS9CLndMI+y
UgqA==
X-Gm-Message-State: APjAAAWlDwmhmd0bAiSCqDsjgFI1XFtxD+tMa9EQX1d10plvojzAze/Y
V7HDzhTUAmGbXg5gtVsOFNbVpg6GvGSImNL2XSc=
X-Google-Smtp-Source: APXvYqydjobDNM9QwlbeTThvRpmpvqpaIaAitiFEuYgbklBkRYwAgkDD5VfBW/UWSWwSZ7hG3m6RqnIhavt22TJwTAk=
X-Received: by 2002:a92:7308:: with SMTP id o8mr10657097ilc.102.1573189461527;
Thu, 07 Nov 2019 21:04:21 -0800 (PST)
MIME-Version: 1.0
Reply-To: [email protected]
From: bello mohammed <[email protected]>
Date: Thu, 7 Nov 2019 14:06:32 +0100
Message-ID: <CACEKxs6UaMiSBe=9oJjQRwkh8B03mzLU7Lw=-J7VY+Gz+QB+Vw@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000004d17e0596ceb7fc"
Bcc:
X-Spam-Status: Yes, score=20.6
X-Spam-Score: 206
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: *FROM THE DESK OF: MR BELLO MOHAMMED.DIRECTOR, INTERNATIONAL
REMITTANCE /FOREIGN OPERATIONS.DEAR SIR/MADAM,YOUR CONTRACTOR/INHERITANCE
FUNDS $10.5MILLION.THIS IS TO NOTIFY YOU THAT YOUR OVER DUE INHERITANCE FUNDS
HAS BEEN GAZETTED TO BE RELEASED, VIA TELEX TRANSFER (TT)DIRECT WIRE TRANSFER
TO YOU BY THE SENATE COMMITTEE FOR FOREIGN OVER DUE FUND TRANSFER.MEANWHILE,A
WOMAN CAME TO MY OFFICE FEW DAYS AGO WITH A LETTER,CLAIMING TO BE YOUR TRUE
REPRESENTATIVE.HERE ARE HER INFORMATION:NAME JANET WHITEBANK NAME: CITI BANKBANK
ADDRESS:ARIZONA, USA.ACCOUNT Number: 6503809428.PLEASE, DO RECONFIRM TO THIS
OFFICE, AS A MATTER OF URGENCY IF THIS WOMAN IS FROM YOU SO THAT THE FEDERAL
GOVERNMENT WILL NOT BE HELD RESPONSIBLE FOR PAYING INTO THE WRONG ACCOUNT
NAME AND FOR IMMEDIATE RELEASE OF YOUR CONTRACT, INHERITANCE/AWARD WINNING
CLAIM IS INFORMED THAT YOU ARE NOT ALLOWED TO CORRESPOND WITH ANY PERSON
OR OFFICE ANYMORE, YOU ARE REQUIRED TO SEND BELLOW:INFORMATION REQUEST FOR
YOUR TRANSFER.(1) YOUR FULL NAME:(2) FULL ADDRESS OF YOUR CITY, STATE AND
COUNTRY:(3) PHONE, FAX AND MOBILE:(4) COMPANY NAME, POSITION AND ADDRESS:(5)
BANK INFORMATION:(A) BANK NAME:(B) BANK ADDRESS:(C) ACCOUNT NUMBER:(D) SWIFT
CODE/(E) ROUTING NUMBER:(F) IBAN NUMBER(6) PROFESSION, AGE AND MARITAL STATUS:(7)
A COPY OF YOUR INT'L PASSPORT/DRIVERS LICENSE.THE RESERVE BANK GOVERNOR,
EXECUTIVE, BOARD OF DIRECTORS AND THE SENATE COMMITTEE FOR FOREIGN OVER DUE
INHERITANCE FUND HAVE APPROVED AND ACCREDITED THIS REPUTABLE BANK WITH THE
OFFICE OF THE DIRECTOR,INTERNATIONAL REMITTANCE /FOREIGN OPERATIONS,TO HANDLE
AND TRANSFER ALL FOREIGN INHERITANCE FUNDS THIS THIRD QUARTER PAYMENT OF
THE YEAR.HOWEVER,WE SHALL PROCEED TO ISSUE ALL PAYMENTS DETAILS TO THE SAID
MRS.WHITE,IF WE DO NOT HEAR FROM YOU WHITEN THE NEXT SEVEN WORKING DAYS FROM
TODAY.CONGRATULATIONS IN ADVANCE.BEST REGARDSMR.BELLO MOHAMMED. * [...]

Content analysis details: (20.6 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL
blocklist
[URIs: advance.best]
1.6 URIBL_SBL Contains an URL's NS IP listed in the Spamhaus SBL
blocklist
[URIs: advance.best]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(bellomohammed2191[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (bellomohammed2191[at]gmail.com)
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mrbellomohammed431[at]outlook.com)
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.166.195 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.195 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 YOU_INHERIT Discussing your inheritance
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.3 MONEY_FORM Lots of money if you fill out a form
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.3 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** INHERITANCE FUNDS


*FROM THE DESK OF: MR BELLO MOHAMMED.DIRECTOR, INTERNATIONAL REMITTANCE
/FOREIGN OPERATIONS.DEAR SIR/MADAM,YOUR CONTRACTOR/INHERITANCE FUNDS
$10.5MILLION.THIS IS TO NOTIFY YOU THAT YOUR OVER DUE INHERITANCE FUNDS HAS
BEEN GAZETTED TO BE RELEASED, VIA TELEX TRANSFER (TT)DIRECT WIRE TRANSFER
TO YOU BY THE SENATE COMMITTEE FOR FOREIGN OVER DUE FUND
TRANSFER.MEANWHILE,A WOMAN CAME TO MY OFFICE FEW DAYS AGO WITH A
LETTER,CLAIMING TO BE YOUR TRUE REPRESENTATIVE.HERE ARE HER
INFORMATION:NAME JANET WHITEBANK NAME: CITI BANKBANK ADDRESS:ARIZONA,
USA.ACCOUNT Number: 6503809428.PLEASE, DO RECONFIRM TO THIS OFFICE, AS A
MATTER OF URGENCY IF THIS WOMAN IS FROM YOU SO THAT THE FEDERAL GOVERNMENT
WILL NOT BE HELD RESPONSIBLE FOR PAYING INTO THE WRONG ACCOUNT NAME AND FOR
IMMEDIATE RELEASE OF YOUR CONTRACT, INHERITANCE/AWARD WINNING CLAIM IS
INFORMED THAT YOU ARE NOT ALLOWED TO CORRESPOND WITH ANY PERSON OR OFFICE
ANYMORE, YOU ARE REQUIRED TO SEND BELLOW:INFORMATION REQUEST FOR YOUR
TRANSFER.(1) YOUR FULL NAME:(2) FULL ADDRESS OF YOUR CITY, STATE AND
COUNTRY:(3) PHONE, FAX AND MOBILE:(4) COMPANY NAME, POSITION AND
ADDRESS:(5) BANK INFORMATION:(A) BANK NAME:(B) BANK ADDRESS:(C) ACCOUNT
NUMBER:(D) SWIFT CODE/(E) ROUTING NUMBER:(F) IBAN NUMBER(6) PROFESSION, AGE
AND MARITAL STATUS:(7) A COPY OF YOUR INT'L PASSPORT/DRIVERS LICENSE.THE
RESERVE BANK GOVERNOR, EXECUTIVE, BOARD OF DIRECTORS AND THE SENATE
COMMITTEE FOR FOREIGN OVER DUE INHERITANCE FUND HAVE APPROVED AND
ACCREDITED THIS REPUTABLE BANK WITH THE OFFICE OF THE
DIRECTOR,INTERNATIONAL REMITTANCE /FOREIGN OPERATIONS,TO HANDLE AND
TRANSFER ALL FOREIGN INHERITANCE FUNDS THIS THIRD QUARTER PAYMENT OF THE
YEAR.HOWEVER,WE SHALL PROCEED TO ISSUE ALL PAYMENTS DETAILS TO THE SAID
MRS.WHITE,IF WE DO NOT HEAR FROM YOU WHITEN THE NEXT SEVEN WORKING DAYS
FROM TODAY.CONGRATULATIONS IN ADVANCE.BEST REGARDSMR.BELLO MOHAMMED.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 141 guests