Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Wed Aug 24, 2011 9:56 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 24 Aug 2011 18:16:15 -0700
Received: from elasmtp-scoter.atl.sa.earthlink.net ([209.86.89.67])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QwOYG-0002wY-Pe
for ; Wed, 24 Aug 2011 18:16:15 -0700
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=dk20050327; d=peoplepc.com;
b=sjiWscrhbWAKa7EqqfEtLjhMtQ1ZbaVynHKFkjFVWnohGfaiMjLLgE1WLkeJyr+v;
h=Message-ID:Date:From:Reply-To:Subject:Mime-Version:Content-Transfer-Encoding:X-Mailer:Content-Type:X-ELNK-Trace:X-Originating-IP;
Received: from [209.86.224.26] (helo=mswamui-bichon.atl.sa.earthlink.net)
by elasmtp-scoter.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <[email protected]>)
id 1QwOX9-0005fL-IO; Wed, 24 Aug 2011 21:15:03 -0400
Received: from 41.191.85.45 by webmail.peoplepc.com with HTTP; Wed, 24 Aug 2011 21:15:03 -0400
Message-ID: <9986260.1314234903371.JavaMail.root@mswamui-bichon.atl.sa.earthlink.net>
Date: Thu, 25 Aug 2011 03:15:03 +0200 (GMT+02:00)
From: John Kussy <[email protected]>
Reply-To: John Kussy <[email protected]>
Subject: VERY URGENT ABOUT YOUR PAYMENT.
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
X-Mailer: EarthLink Zoo Mail 1.0
Content-Type: text/html; charset=UTF-8
X-ELNK-Trace: ecdb6b82bbdd2cb5c63a07146a6216f5e43089e13f4d3dcc7f779e183b2ee288b6cae15fdfb197ca8014d01fc244d3b2350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 209.86.224.26
X-Spam-Subject: ***SPAM*** VERY URGENT ABOUT YOUR PAYMENT.
X-Spam-Status: Yes, score=7.3
X-Spam-Score: 73
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, I have contacted you today because I have sent you
the first transfer of $5000 from your winnings fund total sum of $1.5m, so
you have to contact Western Union agent Mr. Jim Norwood for him to give you
the details of the transfer made today. [...]
Content analysis details: (7.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.86.89.67 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.191.85.45>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
X-Spam-Flag: YES

have contacted you today because I have sent you the first transfer of $5000 from your winnings fund total sum of $1.5m, so you have to contact Western Union agent Mr. Jim Norwood for him to give you the details of the transfer made today.

Agent Mr. Jim Norwood
Email: [email protected]
Cell: +229 99416784

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 22 guests