Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Mon Jul 02, 2012 8:45 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 02 Jul 2012 05:19:01 -0700
Received: from [173.230.242.86] (port=53403 helo=usl-internal.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1Slfal-0006nu-4U
for ; Mon, 02 Jul 2012 05:19:01 -0700
Received: from uslinter by gyro.securenet-server.net with local (Exim 4.77)
(envelope-from <[email protected]>)
id 1Slfah-001Idj-PO
for ; Mon, 02 Jul 2012 08:18:55 -0400
To:
Subject: goodday
From: OAK HOTEL <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Mon, 02 Jul 2012 08:18:55 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gyro.securenet-server.net
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [824 501] / [47 12]
X-AntiAbuse: Sender Address Domain - gyro.securenet-server.net
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/uslinter/public_html/tpwsite/wp-content/plugins/aio-shortcodes/cache/cll.php
X-Source-Dir: usl-internal.com:/public_html/tpwsite/wp-content/plugins/aio-shortcodes/cache
X-Spam-Status: No, score=2.2
X-Spam-Score: 22
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: I'm Mr Leonard kofi,The hotel manager of OAK HOTEL.In my hotel
here in GHANA,A man die in our hotel room for about three days ago and when
we went to check the room he lodged,we found two boxers,and as I'm writing
to you the man's car is still packed in our hotel premises.the reason why
am writing to you is because your Name and Email, was written on his file,i
want you to come and claim it or send somebody to help you claim it,please
when coming or the person you're sending just come with or send 475$ to pay
for our hotel bills,he was owning the hotel before his death.... [...]

Content analysis details: (2.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[173.230.242.86 listed in bb.barracudacentral.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(oakdehotel[at]gmail.com)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.0661]
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[173.230.242.86 listed in dnsbl.sorbs.net]
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
X-Spam-Flag: NO

I'm Mr Leonard kofi,The hotel manager of OAK HOTEL.In my
hotel here in GHANA,A man die in our hotel room for about three days ago
and when we went to check the room he lodged,we found two boxers,and as
I'm writing to you the man's car is still packed in our hotel premises.the reason
why am writing to you is because your Name and Email, was written on his
file,i want you to come and claim it or send somebody to help you claim
it,please when coming or the person you're sending just come with or send
475$ to pay for our hotel bills,he was owning the hotel before his
death....

Contact us TEL:+233 054 387 5509

MR LEONARD KOFI
MANAGEMENT

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 14 guests