Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by buried under 419s Sat May 17, 2014 11:48 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 17 May 2014 07:23:25 -0700
Received: from smtp2web.tin.it ([212.216.176.236]:58111)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1WlfWC-0000FW-6B
for ; Sat, 17 May 2014 07:23:25 -0700
Received: from feu3 (10.192.64.13) by smtp2web.tin.it (8.6.060.28)
id 5319830E0132527C; Sat, 17 May 2014 16:22:35 +0200
Received: from (54.86.45.222) by webmailcommunicator.alice.it; Sat, 17 May 2014 16:22:35 +0200
Message-ID: <[email protected]>
Date: Sat, 17 May 2014 16:22:35 +0200 (CEST)
From: "Mr. David White" <[email protected]>
Reply-To: [email protected]
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: 54.86.45.222
X-Spam-Status: Yes, score=11.3
X-Spam-Score: 113
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Hello; Intended Recipient; WE ARE LEGISLATORS OF AFRICAN BANKS
WHERE YOUR NAME WAS FOUND AS A BENEFICIARY FOR FUND RELEASE. UNANIMOUSLY,
IF YOU'RE STILL ALIVE AND WILING TO RECEIVE YOUR OVERDUE FUND, CONTACT US
AT THE EARLIEST INCLUDING YOUR FULL NAME…………, COUNTRY NAME………….,
MOBILE TELEPHONE NUMBER 00+…., FOR DETAILS AND REMITTANCE SUBSTANTIVE.
SIGNED; ATTORNEY Mr. David White [...]

Content analysis details: (11.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[212.216.176.236 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?54.86.45.222>]
0.0 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
[54.86.45.222 listed in dnsbl.sorbs.net]
1.9 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(salvozago[at]tin.it)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(adam.smith814[at]yahoo.ie
)
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Hi Dear


Hello;
Intended Recipient;
WE ARE LEGISLATORS OF AFRICAN BANKS WHERE YOUR NAME WAS FOUND AS A
BENEFICIARY FOR FUND RELEASE. UNANIMOUSLY, IF YOU'RE STILL ALIVE AND
WILING TO RECEIVE YOUR OVERDUE FUND, CONTACT US AT THE EARLIEST
INCLUDING
YOUR FULL NAME…………,
COUNTRY NAME………….,
MOBILE TELEPHONE NUMBER 00+…., FOR DETAILS AND REMITTANCE SUBSTANTIVE.
SIGNED;
ATTORNEY
Mr. David White

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 49 guests