Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Fri Oct 14, 2011 11:58 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 14 Oct 2011 02:48:47 -0700
Received: from [184.171.168.90] (helo=server.al-khayalah.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1REeNh-0001Dn-65
for ; Fri, 14 Oct 2011 02:48:47 -0700
Received: from localhost ([127.0.0.1] helo=www.arataco.com)
by server.al-khayalah.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1REeE1-0001kS-2L; Fri, 14 Oct 2011 02:38:45 -0700
Received: from 41.73.225.144 ([41.73.225.144])
(SquirrelMail authenticated user [email protected])
by www.arataco.com with HTTP;
Fri, 14 Oct 2011 03:38:45 -0600
Message-ID: <[email protected]>
Date: Fri, 14 Oct 2011 03:38:45 -0600
Subject:
From: "David Rutten" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.al-khayalah.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - rocketmail.com
X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=11.2
X-Spam-Score: 112
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Subject: Administrative concern Attn:CEO, RE: Funds Investment
and Management Placement of $1million to $100Million. [...]
Content analysis details: (11.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[184.171.168.90 listed in psbl.surriel.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(releaseboard22[at]rocketmail.com)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (releaseboard22[at]rocketmail.com)
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4277]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_NORDNS To: misformatted and no rDNS
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES




Subject: Administrative concern

Attn:CEO,

RE: Funds Investment and Management Placement of $1million to $100Million.

We solicit for a private investor who wants to invest his financial
estate in long-term business venture in
your country/company under your supervision.
Your contact details was received from our market research department and
I am writing you to confirm this address validity.
You will be required to;
[1]. Receive the funds.
[2]. Invest and Manage the funds profitably.

My client is willing to negotiate Management sharing percentage after your
acceptance.
We expect to hear from you urgently as this is a high priority
Investment placement and kindly send your
telephone number to enhance communication via emaillto :
[email protected]

Thank you for your understanding.

Sincerely Yours,
David Rutten.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 22 guests