Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#401396 by buried under 419s Mon Dec 09, 2019 9:41 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id gP0XJMEl7l1xAQAAjbubUg
for <>; Mon, 09 Dec 2019 02:45:21 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 09 Dec 2019 02:45:21 -0800
Received: from server.savemax.ca ([45.56.221.233]:36564)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ieGXV-000059-23
for ; Mon, 09 Dec 2019 02:45:21 -0800
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=savemax.ca;
s=default; h=Reply-To:Date:From:To:Subject:Content-Description:
Content-Transfer-Encoding:MIME-Version:Content-Type:Sender:Message-ID:Cc:
Content-ID:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:
Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=E+Uk/ye/NgtkjGIdDiFrNcai5CxowVyNJq6C8FsA5tw=; b=kxWm+GI6FOwynxt05UAS6FAqj8
guMq9ji5mRnwoybT93wTA80pCy5I0fiXNJ07LeaJ0jenfnS9WNuy3oE8JhYShtcqpIOKUX5OFdtyF
x9lGDbsh32xNUofqeub69DsPVhd6dNgkkREYJl0tvBl3T9Xicwcpdx8SoRsdA4R41fUBWCMuEez8C
v30N5xOaRg37Srsnwb5G4Ot4c8KjuYvUxBhv6+mhwFGlzaXm4Pg+/d9jbW8xjAlpFXaEiZQ6H2Mfs
0jFBPr4DjMSujGnker1VQF9yQ6KrWQzjBxZjGaEHsov+iTI6qId5dc7DMUeTl9J9FdaT/fQSBqg3m
duDktZRA==;
Received: from [41.58.252.134] (port=49608 helo=[192.168.8.105])
by server.savemax.ca with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1ieGWp-00011W-KH; Mon, 09 Dec 2019 05:44:36 -0500
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr.Daniel Brown" <[email protected]>
Date: Sun, 08 Dec 2019 11:44:25 -0800
Reply-To: [email protected]
X-OutGoing-Spam-Status: No, score=3.3
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.savemax.ca
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - savemax.ca
X-Get-Message-Sender-Via: server.savemax.ca: authenticated_id: [email protected]
X-Authenticated-Sender: server.savemax.ca: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=11.6
X-Spam-Score: 116
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Do you wish and wants to receive your funds My name is Mr
Daniel Thomas Call or SMS: +1 917-444-4205 for more explanations [...]

Content analysis details: (11.6 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.0 HK_NAME_MR_MRS No description available.
1.6 MISSING_MID Missing Message-Id: header
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** Do you wish and wants to receive your funds

Do you wish and wants to receive your funds My name is Mr Daniel Thomas Call or SMS:
+1 917-444-4205 for more explanations

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot], Google Adsense [Bot], Majestic-12 [Bot] and 142 guests