Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#423979 by buried under 419s Sun Feb 28, 2021 10:37 am
Return-Path: <>
Delivered-To:
Received: from
by = with LMTP
id V9CMLkh2O2BRAwAAibB4EA
(envelope-from <>)
for <>; Sun, 28 Feb 2021 10:54:00 +0000
Return-path: <>
Envelope-to:
Delivery-date: Sun, 28 Feb 2021 10:54:00 +0000
Received: from server.bobbrooks.us ([216.194.170.233]:41994)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
id 1lGJi4-0000D9-0D
for ; Sun, 28 Feb 2021 10:54:00 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=bobbrooks.com; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Date:Subject:From:Reply-To:Sender:Message-ID:To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=bz5DfzLaFbwrNC45c1sNGq6ijdS15MXhJVG+aQiqcQo=; b=G5G73DnZmfbNS/WnoFAffynUbB
gneaUu7d8makYoU4krXbUAhY3KVxbUHP362tbfq2vUWdSjsIIMYt1iy49Vjp9xUaeJfcHHeWEtciB
9oPWxQ64VA8rMURcwQyFFj8GlJIk4JgwzwRfuH5j31IevUvfgDxGTpVMcsq45xK+AXcC81O5O/b8K
TRV2laNiKSPKdWkMYqhq3HB3icEMDlTBZOOXmlbuh0Rkl4sLOfzbb+dd8F3YPy5z7xcW18hXmA7wu
K8Xt9C9Ea9IwDFvna1H3H4ARwxGQeYdzsQRbnPCJYH/lsHyDGVPdZvgCoW3MJELcJDTSfjCpAwyjl
xAWLrsmQ==;
Received: from [156.96.47.23] (port=60704 helo=User)
by server.bobbrooks.us with esmtpa (Exim 4.93)
id 1lGJh7-000476-FW; Sun, 28 Feb 2021 05:53:01 -0500
Reply-To: <[email protected]>
From: "Adam Fletcher"<<>>
Date: Sun, 28 Feb 2021 02:53:01 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.bobbrooks.us
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain -
X-Get-Message-Sender-Via: server.bobbrooks.us: authenticated_id: [email protected]
X-Authenticated-Sender: server.bobbrooks.us: [email protected]
X-Spam-Status: Yes, score=28.5
X-Spam-Score: 285
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, After proper and several investigations
and researches at Western Union and Money Gram Office, we found your name
in Western Union database among those that have sent money through Western
Union and t [...]
Content analysis details: (28.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/Dns ... nsbl-block
for more information.
[URIs: you.you]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.3 NSL_RCVD_HELO_USER Received from HELO User
0.8 FROM_NO_USER From: has no local-part before @ sign
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?216.194.170.233>]
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
5.0 KAM_WU Western Union Scam
1.2 MONEY_NOHTML Lots of money in plain text
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.8 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Notification From Western Union/Money Gram
Dear Beneficiary,

After proper and several investigations and researches at Western Union and Money Gram Office, we found your name in Western Union database among those that have sent money through Western Union and this proves that you have truly been swindled by those unscrupulous persons by sending money to them through Western Union/Money Gram in the course of getting one fund or the other that is not real.

In this regard a meeting was held between the Board of Directors of WESTERN UNION, MONEYGRAM, the FBI alongside with the Ministry of Finance, As a consequence of our investigations it was agreed that the sum of Five Hundred And Fifty Thousand United States Dollars (U.S.550,000.00) should be AWARDED to you out from the funds that The United States Department of the Treasury has set aside as compensation payment for scam victims.

This case would be handled and supervised by the FBI. We have submitted your details to them so that your funds can be delivered to you.You are required to pay a token of $100 processing fee only.Please note that this email is highly confindential and is not meant to be disclosed to people.


Please reconform the following information's to enable us ascertain
that you are the right beneficiary.

1) Your full names as shown on your ID
2) Your Full Address
3) Your direct Contact Phone Number.


Yours sincerely,
Adam Fletcher
Payment Director,

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Majestic-12 [Bot] and 92 guests