Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#401397 by buried under 419s Mon Dec 09, 2019 9:46 am
Return-Path: <[email protected]>
Received: from
by with LMTP id ADH5JeEr7l3/CQAAjbubUg
for <>; Mon, 09 Dec 2019 03:11:29 -0800
Return-path: <[email protected]>
Delivery-date: Mon, 09 Dec 2019 03:11:29 -0800
Received: from mail-il1-f193.google.com ([]:33891)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ieGwl-0000eQ-TK
for ; Mon, 09 Dec 2019 03:11:29 -0800
Received: by mail-il1-f193.google.com with SMTP id w13so12378824ilo.1
for <>; Mon, 09 Dec 2019 03:11:04 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
X-Gm-Message-State: APjAAAU5GIPJymXJasLLvCSKtH6/+PJrzxwAmd6ZNKPKzeziotT0Vbvo
X-Google-Smtp-Source: APXvYqwtuhDFDfjdbx9ln7Eo1rP984qhslv6EsH0Uym+BMM0lN9dLe9BKEo/0++mXoquNuDmNblylirk/40eKGFiRoY=
X-Received: by 2002:a92:8c96:: with SMTP id s22mr25644048ill.159.1575889843437;
Mon, 09 Dec 2019 03:10:43 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a92:9c4e:0:0:0:0:0 with HTTP; Mon, 9 Dec 2019 03:10:42 -0800 (PST)
From: office mail <[email protected]>
Date: Mon, 9 Dec 2019 12:10:42 +0100
Message-ID: <[email protected]l.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
X-Spam-Status: Yes, score=9.0
X-Spam-Score: 90
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: IMPORTANT NOTICE. Latest Development Regarding the Irrevocable
release of your payment. ATTN: Beneficiary. [...]

Content analysis details: (9.0 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
[ listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (masssende5566[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[ listed in wl.mailspike.net]
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** ATTN: Please< This is a matter of urgency.>


Latest Development Regarding the Irrevocable release of your payment.

ATTN: Beneficiary.

This is to inform you that we are the authorized security agency
ascribed by the United Nations office of the oversight service whose
Unit headquarters is in Toronto Canada to deliver your consignment to

With this help from the UN office of the oversight service you are
therefore required to acknowledge receipt of this mail. You are
further advised to reconfirm your full names, your address, your cell
phone number and copy of your ID.

This is to enable us cross check with the list given to us by the UN
and FBI to make sure we are corresponding with the rightful owner.

Kindly reply for further details.
Thank You.
Ray Scot.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: Baidu [Spider] and 14 guests