Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Tue Dec 13, 2011 2:05 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 13 Dec 2011 03:53:38 -0800
Received: from mta2.dealeremail.com ([209.104.154.12])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RaQvP-0004xD-2Y
for ; Tue, 13 Dec 2011 03:53:38 -0800
Received: from User (193.238.128.217.sta.211.ru [193.238.128.217])
by mta2.dealeremail.com (MOS 4.1.10-GA)
with ESMTP id BQB67781 (AUTH [email protected]);
Tue, 13 Dec 2011 00:47:17 -0500
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "Kenneth Moore"<[email protected]>
Subject: ATTN: From The Desk of Kenneth Moore.
Date: Tue, 13 Dec 2011 11:47:42 +0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Junkmail: UCE(50)
X-Junkmail-Status: score=50/50, host=mta2.dealeremail.com
X-Junkmail-SD-Raw: score=bulk(0),
refid=str=0001.0A020208.4EE73C74.0098,ss=3,pt=DBB_66871,fgs=0,
ip=193.238.128.217,
so=2010-06-24 23:00:37,
dmn=2009-09-10 00:05:08,
mode=single engine
X-Junkmail-IWF: false
X-Mirapoint-RAPID-Raw: score=unknown(0),
refid=str=0001.0A020208.4EE73C74.0098,ss=3,pt=DBB_66871,fgs=0,
ip=193.238.128.217,
so=2010-06-24 23:00:37,
dmn=2009-09-10 00:05:08
X-Mirapoint-Loop-Id: d1230ab0dafa1c0fd220a79eb94ef515
X-Spam-Subject: ***SPAM*** ATTN: From The Desk of Kenneth Moore.
X-Spam-Status: Yes, score=18.8
X-Spam-Score: 188
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend, I am representing a group of investors , who
are interested in overseas investment in your country, involving large volume
of funds, for which we seek your assistance as overseas representative. [...]
Content analysis details: (18.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.6 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.104.154.12 listed in list.dnswl.org]
1.0 MISSING_HEADERS Missing To: header
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[193.238.128.217 listed in dnsbl.sorbs.net]
0.2 FSL_UA FSL_UA
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 FROM_MISSP_NO_TO From misspaced, To missing
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.9 FROM_MISSP_USER From misspaced, from "User"
1.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.1 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES

Dear Friend,

I am representing a group of investors , who are interested in overseas
investment in your country, involving large volume of funds, for which
we seek your assistance as overseas representative.

The civil service regulations here, prohibit us from getting involved
in private business, while under government employment, hence this
proposal to you, in view of your impressive profile.

I will be attaching a copy of my international travelers' passport to
give you proper knowledge of my person, as it's appropriate for a
transaction of this nature upon your response.

If you feel disposed towards the solicited role, please indicate by
prompt response, so that I may provide you further details of the
transaction, and also let you know what will be coming to you as
remuneration for your solicited role. After that we shall then come to
an understanding concerning the prospective areas of investment in your
domain, that will be conducive for investors of foreign descent.

I look forward to your prompt response.
Yours Truly,
Kenneth Moore

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 23 guests