Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#401395 by buried under 419s Mon Dec 09, 2019 9:37 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 2OrNAHYO7l3oWwAAjbubUg
for <>; Mon, 09 Dec 2019 01:05:58 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 09 Dec 2019 01:05:58 -0800
Received: from mail-lf1-f68.google.com ([209.85.167.68]:40154)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ieEzM-00066v-Iw
for ; Mon, 09 Dec 2019 01:05:57 -0800
Received: by mail-lf1-f68.google.com with SMTP id y5so10059894lfy.7
for <>; Mon, 09 Dec 2019 01:05:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=68Fi4dT3l/+Bo9p8Iss/8exir5Lkm4ddjLTe49bOOZU=;
b=IT2pEx0SASFea0kfocdHVX9r8xhNs33Z6OlW9Oc+Q26EBHiNGGFDACQ5SMOzqiB5o9
04wd79mNMu72mv33FL/XsinSEt1NqGYpQd8/pyvsUYymGaV9cl7Wt4wH85gnSCrNtxUe
m32O/SPxFK57NuHaLhZtwddI2KUaP6eSK9oLVKtV7NIEDVqs8JfNYtsjtEY2dVYbWfhq
x95m/MMrU+eh9zk/mq/gOJOiIpJ1/6gA31xiRraPr7sDLD9WZ5ax18aJXQ0sJgTr2Gk5
JCRUAWQ3cv3XsY3DqMJsaud8Dfkt16zOl+OPk5PhraduOgydlRhFiiXlU3dXixARi8w+
rnOg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=68Fi4dT3l/+Bo9p8Iss/8exir5Lkm4ddjLTe49bOOZU=;
b=PxEzWnkRBm+I+CM4RDUDsWYeFyg7UmWQ2m0pRMCGJuwbrpiFGdXUDw8aM56CF3Mba3
ydQl7SP44E5E/4e4s4d1BOwEPT3FSutUW4EGF11eCplVRusZLGz2FV+YdwTJ85LfWuhL
+g/TxX39qxe8GFQIi2cpfSGx5WdG0609hfDLAX1p652BT6vqyoBJxTQGJXgmwEkNYstP
oAFwfRheaOzbcL4pAISyFUCfUFs/ebaxJR9XBRKgPL8zlVNSOByCyLxkEnFGOffG4pvU
PhXr9YFurPVk2WUvrgCvpXj0QHZI2fZymQyhOC283mUe6ABgdMz0qrEm2w/zf46Li22E
j32A==
X-Gm-Message-State: APjAAAWeAbQQb6UjP2Hk25kL7RHf8eHoJqKXjx5Tpdn2Ppyh5Y1n52kn
miljzuw4ksiFFfJ3W19JqvINBuWNe/UxBV46NxE=
X-Google-Smtp-Source: APXvYqxddcPP1rfhC/wq2WhfQwhXoSg3VaX+5ZRT0dAcL8wSCONOlyi08PIIILR0dsS/K3U6lANf2jfIx7N89WjUD7U=
X-Received: by 2002:ac2:44ce:: with SMTP id d14mr10379401lfm.140.1575882314580;
Mon, 09 Dec 2019 01:05:14 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a2e:9e49:0:0:0:0:0 with HTTP; Mon, 9 Dec 2019 01:05:14 -0800 (PST)
Reply-To: [email protected]
From: Judy yanes <[email protected]>
Date: Mon, 9 Dec 2019 01:05:14 -0800
Message-ID: <[email protected]om>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=11.8
X-Spam-Score: 118
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Sir / Madam, This is to inform you that your money will soon
be transferred into your accounts as soon as you reconfirm account information
Amount expected and your phone numbers where to get you. You have as well
be informed that your money cannot be paid to you by any commercial bank
as this an other from CBN to avoid scammers, Every contact concerning this
should be made open to this office. [...]

Content analysis details: (11.8 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (judyyanes11[at]gmail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(norbertkings1[at]outlook.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.167.68 listed in list.dnswl.org]
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(judyyanes11[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.68 listed in wl.mailspike.net]
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** NOTIFICATION OF FUNDS

Sir / Madam,
This is to inform you that your money will soon be transferred into
your accounts as soon as you reconfirm account information
Amount expected and your phone numbers where to get you.

You have as well be informed that your money cannot be paid to
you by any commercial bank as this an other from CBN to avoid
scammers, Every contact concerning this should be made open to this office.

Expecting your urgent response to contact . .
Norbert Kings(Director offshore payment department CBN)
Tell +2348025000871
[email protected]

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 55 guests