Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Tue Jul 10, 2012 1:24 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 09 Jul 2012 17:24:25 -0700
Received: from [41.222.232.122] (port=52753 helo=mx1.opportunityghana.com)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SoOFc-0008Dq-59
for ; Mon, 09 Jul 2012 17:24:25 -0700
Received: (qmail 15842 invoked by uid 48); 9 Jul 2012 21:22:13 -0000
Cc: recipient list not shown: ;
Received: from 41.138.165.16
(SquirrelMail authenticated user info)
by 41.222.232.122 with HTTP;
Mon, 9 Jul 2012 21:22:13 -0000 (UTC)
Message-ID: <[email protected]>
Date: Mon, 9 Jul 2012 21:22:13 -0000 (UTC)
From: "George Smith" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.8-4.0.1.el5
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Spam-Status: Yes, score=15.8
X-Spam-Score: 158
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Attn: Beneficiary, This is to inform you of the latest development
as regards the delivery of your inheritance fund by the diplomat who is presently
at the JFK Int'l airport New York.Confirm your Full Name,Occupation, Residence
Address & Direct Telephone Numbers. [...]

Content analysis details: (15.8 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gsmth_31[at]yahoo.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[41.222.232.122 listed in bb.barracudacentral.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[41.222.232.122 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(gsmth_31[at]yahoo.co.uk
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gsmth_31[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.0 MISSING_HEADERS Missing To: header
1.7 HK_SCAM_N3 BODY: HK_SCAM_N3
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6524]
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
1.1 MALFORMED_FREEMAIL Bad headers on message from free email service
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Attn: Beneficiary

Attn: Beneficiary,

This is to inform you of the latest development as regards the delivery of
your inheritance fund by the diplomat who is presently at the JFK Int'l
airport New York.Confirm your Full Name,Occupation, Residence Address &
Direct Telephone Numbers.

Regards,
George Smith.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Bing [Bot], ClaudeBot and 23 guests