Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Wed Jul 27, 2011 4:24 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 27 Jul 2011 11:45:47 -0700
Received: from mxchg03.rrz.uni-hamburg.de ([134.100.38.113])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Qm974-0002Nw-Lo
for m; Wed, 27 Jul 2011 11:45:47 -0700
Received: from localhost (localhost [127.0.0.1])
by mxchg03.rrz.uni-hamburg.de (Postfix) with ESMTP id 190F81EE428;
Wed, 27 Jul 2011 20:45:42 +0200 (CEST)
X-Virus-Scanned: by University of Hamburg ( RRZ / mgw02.rrz.uni-hamburg.de )
Received: from mxchg03.rrz.uni-hamburg.de ([127.0.0.1])
by localhost (mxchg03.rrz.uni-hamburg.de [127.0.0.1]) (amavisd-new, port 10324)
with ESMTP id 0o1RoXSjZQ1d; Wed, 27 Jul 2011 20:45:41 +0200 (CEST)
Received: from mailhost.uni-hamburg.de (mailhost.uni-hamburg.de [134.100.38.99])
by mxchg03.rrz.uni-hamburg.de (Postfix) with ESMTPS;
Wed, 27 Jul 2011 20:45:41 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mailhost.uni-hamburg.de (Postfix) with ESMTP id E8D9990002;
Wed, 27 Jul 2011 20:45:41 +0200 (CEST)
X-Virus-Scanned: by University of Hamburg (RRZ/mailhost)
Received: from mailhost.uni-hamburg.de ([127.0.0.1])
by localhost (mailhost.uni-hamburg.de [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id aSdNh9vilC+K; Wed, 27 Jul 2011 20:45:41 +0200 (CEST)
Received: from webmail.rrz.uni-hamburg.de (webmail.rrz.uni-hamburg.de [134.100.38.33])
by mailhost.uni-hamburg.de (Postfix) with ESMTP id 4FADB90005;
Wed, 27 Jul 2011 20:45:40 +0200 (CEST)
Received: by webmail.rrz.uni-hamburg.de (Postfix, from userid 30)
id 1903617E958; Wed, 27 Jul 2011 20:45:39 +0200 (CEST)
Received: from 74-115-6-14.anchorfree.com (74-115-6-14.anchorfree.com
[74.115.6.14]) by webmail.rrz.uni-hamburg.de (Horde Framework) with HTTP;
Wed, 27 Jul 2011 20:45:37 +0200
Message-ID: <[email protected]>
Date: Wed, 27 Jul 2011 20:45:37 +0200
From: Jianguo <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
Subject: BUSINESS PROPOSITION.
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.4)
X-Spam-Subject: ***SPAM*** BUSINESS PROPOSITION.
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: My name is Z. Jianguo, I have a transaction of $21,830,000.00
to bring to your attention, if interested for more details, do kindly respond
back to me at ([email protected],[email protected]) for further explanation
on the said transaction. [...]
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (zjian45454[at]hotmail.com)
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (zjian45454[at]hotmail.com)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8998]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
X-Spam-Flag: YES

My name is Z. Jianguo, I have a transaction of $21,830,000.00 to bring
to your attention, if interested for more details, do kindly respond
back to me at ( [email protected] , [email protected] ) for further
explanation on the said transaction.

I would appreciate your kind response.

Sincerely,
Z.Jianguo

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 23 guests