Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Sat Oct 12, 2013 11:06 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 12 Oct 2013 02:36:51 -0700
Received: from vm-emlprdomg-04.its.yale.edu ([130.132.50.162]:49448)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1VUvcq-0006nh-Or
for ; Sat, 12 Oct 2013 02:36:51 -0700
Received: from [41.151.123.215] (8ta-151-123-215.telkomadsl.co.za [41.151.123.215])
(authenticated bits=0)
by vm-emlprdomg-04.its.yale.edu (8.14.5/8.14.5) with ESMTP id r9C9Vjix012200
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);
Sat, 12 Oct 2013 05:35:54 -0400
Message-Id: <[email protected]>
Content-Type: multipart/alternative; boundary="===============1280497384=="
MIME-Version: 1.0
To: Recipients <[email protected]>
From: "Gillian and Adrian Bayford"<[email protected]>
Date: Sat, 12 Oct 2013 11:34:58 +0200
Reply-To: [email protected]
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.10.8794,1.0.431,0.0.0000
definitions=2013-10-12_01:2013-10-11,2013-10-12,1970-01-01 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=5 spamscore=5 suspectscore=72
phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx
scancount=1 engine=7.0.1-1305240000 definitions=main-1310120016
X-Yale-Not-Spam: For more info see: http://www.yale.edu/email/spam/content.html
X-Spam-Status: Yes, score=8.8
X-Spam-Score: 88
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: We are donating 1,500,000 GBP to you, Send Name, Country,
Mobile Number, Sex, Age for more details. see http://www.bbc.co.uk/news/uk-england-19254228
We are donating 1,500,000 GBP to you, Send Name, Country, Mobile Number,
Sex, Age for more details. see http://www.bbc.co.uk/news/uk-england-19254228
[...]

Content analysis details: (8.8 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[130.132.50.162 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0007]
0.0 HTML_MESSAGE BODY: HTML included in message
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[130.132.50.162 listed in bl.score.senderscore.com]
0.0 LOTS_OF_MONEY Huge... sums of money
3.2 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
2.0 MONEY_FROM_41 Lots of money from Africa
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Donation

You will not see this in a MIME-aware mail reader.
--===============1280497384==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

We are donating 1,500,000 GBP to you, Send Name, Country, Mobile Number, Se=
x, Age for more details. see http://www.bbc.co.uk/news/uk-england-19254228
--===============1280497384==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

We are donating 1,500,000 GBP to you, Send Name, Country, Mobile Number, Sex, Age for more details. see http://www.bbc.co.uk/news/uk-england-19254228

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Majestic-12 [Bot] and 23 guests