Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#325842 by buried under 419s Fri Apr 21, 2017 8:21 pm
Viewing Full Header - View message
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 21 Apr 2017 14:40:16 -0700
Received: from mail-cy1gcc01hn0206.outbound.protection.outlook.com ([23.103.200.206]:39957 helo=gcc01-CY1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1d1gHm-0005ul-JW
for ; Fri, 21 Apr 2017 14:40:15 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=onoli123.onmicrosoft.com; s=selector1-aclpesa-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=xb3Nigy8d3u7EOsIZlI3e2obthDHkjdkFr5G3/AioGE=;
b=cPuiiHAQbBrUBKUvbDydoshDidncQjZyNHKxjUm1FYNwguObQ29hgDB154KvUlR9ken47B4I1J6mYAraY6cKIRWC+fKPiUSiiQZNrxN0wCaQV2UYMYPE0BwU20Dzx+PwfbxlcT1yicr2B1wEcLMqyW3Os7AKq1rdPLSKNU+15yw=
Authentication-Results: artisantooland.com; dkim=none (message not signed)
header.d=none;artisantooland.com; dmarc=none action=none
header.from=aclpesa.com;
Received: from [10.34.82.59] (197.211.60.52) by
BLUPR09MB0834.namprd09.prod.outlook.com (10.162.89.14) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.1.1047.13; Fri, 21 Apr 2017 21:39:02 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: Robert Williams <[email protected]>
Date: Fri, 21 Apr 2017 22:38:25 +0100
Reply-To: <[email protected]>
X-Mailer: TurboMailer 2
X-Originating-IP: [197.211.60.52]
X-ClientProxiedBy: VI1PR0302CA0022.eurprd03.prod.outlook.com (10.171.109.32)
To BLUPR09MB0834.namprd09.prod.outlook.com (10.162.89.14)
Message-ID: <BLUPR09MB0834A29C65E5F1C73DA98797921A0@BLUPR09MB0834.namprd09.prod.outlook.com>
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: aa311100-0715-49a1-614d-08d488fee53a
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001)(201703131423075);SRVR:BLUPR09MB0834;
X-Microsoft-Exchange-Diagnostics: 1;BLUPR09MB0834;3:d1j9A3dIeW2E76aKLXERhA9zF4hHdJ6eR33uvL6BOjMXIAs1rBmZj/aznF8t8EFksUnMekoMQ5dWUd/iQ+ITEKE8Y5PU8QPO9OmclurT4uqjF9MY/+8JbjVpcV2z+hpXVH9sqMjyG+oNOxZM2mVE3Kxj3111HhUWc2GpTt3qOoigf25dL8MWtnCPe7qI6Vum/3tNAibiTyn9J3aPwVXElBFDnSn6+PzroRCUo2SjwXJ00TuS4zyRq2xjvUbOmdaWWcQtn78KnH9Xbj1RVwIBI+xp7fZ3yik6Om1bCfXL0+oG5gQR2DxMwOun6bK0xUk0;25:hsuNWCxrO0NRuoDNwQRE9YQAqGnrTOpy7zqQi3QDf0UgVRK5voF0y1qx8Lz+ZQPpUSj0SNIXGVWSAIZ66/UGv02i8WEm2tUUypgDMMKw2AmvMUPsbr1MmrG9p1DkwnAXtBM5y/p8VnXTfFV3PHwWSvw3SYMHA9sxifT2cKLTs+7Fk6oSouCtfKdnPhwNPHyIF5tMI/iop0BXXn4vqUQZmTLN2HFeXx+iOqKZ2OK470lnoNL1YtLFl5BZ+DCuBR0iUbUu/BvDvwDbVZH7Vw5IYoLt5bXrsIj5NHtkNFvJ3Fi4cooQRRyVCCoSfB8Tv8FCgnbqUee8odUrDkV0nD+rs2UftZA6PtlJnFqN2fF+7CmfbsYWwfQJYPElWkmmKUGsze1c84mkN+0McctSkmu3dZTNhC8mEJ/SjUh2t/0I9VTgyjB+Jmz7K3jBnJz0G+l+bC2fw9Yw4MHUHcE9niT0wQ==
X-Microsoft-Exchange-Diagnostics: 1;BLUPR09MB0834;31:3cCwAmgvTYe2Al6s7rjZ6UzMDZFJ58Nft4z4arRcUvOndFINa8SOk909h/86te5WyNiACy4dgFDN9t28K6JB7+nYvYvgUTA2LDKvfMbSubpESefEUpCBo7PkTQks8Xpy2CH7AI/zOgKxzGKawILKxWgnQqIcdvhkGdUUiImKPcj8AqZBmOBr04Zyb8AkWLC7TTzj55sEVO56AsEZBOpxzTM8X0rTO2WXVK+vQ/i4ZsJqcLdqJYHfG7yUnwJICTlkAY3xLcYNTswOtcXt6nBHvg==;20:RoFU4FCNmpSdouTjHKwPabJaxms7Hjgkx4gwqiG0H9rRLYgjQrGV1ynfo8kzlWAuYgcczscUQj22sd8aCuhvXOUpgs6qLzCjYl3GzbbImF/9VHrmz8GXAnDpVrdH+RGWqSblckrXlsADuv+ueAXfMnTAGbCJw/SkKZO14BfSJYE=
X-Microsoft-Antispam-PRVS: <BLUPR09MB08343F5E342D49BDF16756B2921A0@BLUPR09MB0834.namprd09.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(6040450)(601004)(2401047)(8121501046)(5005006)(10201501046)(93006095)(93001095)(3002001)(6041248)(20161123562025)(201703131423075)(201703011903075)(201702281528075)(201703061421075)(20161123564025)(20161123555025)(20161123560025)(2016111802025)(6043046)(6072148);SRVR:BLUPR09MB0834;BCL:0;PCL:0;RULEID:;SRVR:BLUPR09MB0834;
X-Microsoft-Exchange-Diagnostics: 1;BLUPR09MB0834;4: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
X-Forefront-PRVS: 02843AA9E0
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10009020)(4630300001)(6049001)(6009001)(39450400003)(39400400002)(39410400002)(39850400002)(39840400002)(39860400002)(189998001)(53936002)(23756003)(3846002)(250100001)(3480700004)(6116002)(81166006)(50226002)(6862004)(6200100001)(42186005)(9686003)(8676002)(33656002)(25786009)(38730400002)(222413001)(110136004)(10916006)(551964002)(5001810100001)(90366009)(2906002)(6666003)(5446003)(5660300001)(305945005)(8746002)(77096006)(224903001)(6486002)(86362001)(50466002)(7736002)(66066001)(221123001)(47776003)(74316002)(7416002)(43066003)(50986999)(226693001)(7116003)(53256004)(62346012);DIR:OUT;SFP:1501;SCL:5;SRVR:BLUPR09MB0834;H:[10.34.82.59];FPR:;SPF:None;MLV:ovrspm;PTR:InfoNoRecords;LANG:en;
X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1;BLUPR09MB0834;23:IN31yWszhSNPqmWhnl9pnJr+h4lraac5mePEton?=
=?iso-8859-1?Q?5EhBad0cGEmEA8TiB5H2zTVMN6bWGMDN2OxD28LtBnZ5QEMCSn94jOmNCT?=
=?iso-8859-1?Q?T1VWSwZJ1rcyiexdg8pJuo82KAMZO8+ETXWbIMjoVLjy+GbXM1LjZJQDSM?=
=?iso-8859-1?Q?FRa32E2+sQba59RBB2hhODNPN8ZX7byywK6eIS20Im20tWLgkuHJyGtBjY?=
=?iso-8859-1?Q?jSpLWNeiWWJD27srivR4+VGapG3q6/i/29LZJaYqufebOIwRzEL6YJYT7R?=
=?iso-8859-1?Q?kUah6J/qCrO5onI2gSk2gVYSK8t55pqvjWfgIX4hPkilHtadiu3YneNwMo?=
=?iso-8859-1?Q?BmBwMYbgQAC0WUvlj0oWV4ps8hk74GZUzvHmvs50INqT3GR/yNfPdMhmTv?=
=?iso-8859-1?Q?sazO82L8pEIc2k2qyUEJY0PvVstBmBmJV649DLo8PxWdz3OVLRfW1u/7wz?=
=?iso-8859-1?Q?SS5qMI8dKEv2eXFIv2CqA4WxmebmIWBR5OQyj2mo/w2xBj+XsBui4fgoen?=
=?iso-8859-1?Q?ybm6nctSzyV+yzDIhb7l0efPpLha8Zm3D0CqVSLgZ2M8x8iCVmeWTreAGx?=
=?iso-8859-1?Q?RNjYrzThcdGaURMksCAYTZKVZ5g1yIGZ1JDJqbxAe3ZRe+NUhJKZ8abMS/?=
=?iso-8859-1?Q?6IpIUECuVn5f/FXs1PxM8MMsIaNz/3s2a650MsF1ychgf1aDD2bUYLC2M+?=
=?iso-8859-1?Q?C0dDrdtOD1WfTypNein6221g/ZnGN3hFG50aJ5cSnaI//bdY6VW0ImP3om?=
=?iso-8859-1?Q?GszRR5ifF1t2RBMV6Sd4iLKB7fX+9WZIu85sMMxMCcRe5kjWL0zJjOcfrQ?=
=?iso-8859-1?Q?IqueuOMJpDEmz9o5oYHXQUdD6AIuvOfCHCr/dVXrz9YLOSkPiTAF6Vleto?=
=?iso-8859-1?Q?Vm/gJ/6n6C7T3fnfMAObm0d/9mQBe4yU6IJSKh2Q0ZV72/oKPTzsxrwtej?=
=?iso-8859-1?Q?kJVAHuMkp7rWtZqeJzUz+PzD0uVBDIHDAqZdBQjkdFqIViKaVUKhgAQhlZ?=
=?iso-8859-1?Q?TVLY89cIHad+NIBihYQtOZfAZtRT1e8ljTnc0vOKyYhFvpNpHIxIAquJ5L?=
=?iso-8859-1?Q?YAL4uGgB032cTOSsHp13bxH+fu1pOShUA6XR4zXCosR6Pv4wio/lss+524?=
=?iso-8859-1?Q?4CHEOjKdcvpKBNOxaqD+qoCEoUQ+xjxPUt+V1191kV4iVwnpOgy4tcimQX?=
=?iso-8859-1?Q?jZgXR5zKr5gmQ4N19MK9x4+bNDN4FGJ6PlqGW0WTuJcXKV1oNAfMZyONnU?=
=?iso-8859-1?Q?HBJYhaApLqjMN6ba0KCUX4/+MFDU+bPpPaUZGi9M8U2v5LNxF0i/kRb2DR?=
=?iso-8859-1?Q?Bu1Fm7/WuxDp10KIxaSqeE9WEcK4PAuGQB1n3LJt0QEfDoPlcEm/p5Xi5X?=
=?iso-8859-1?Q?84NeQdouLl1r1tuu6qTjkhMkbJAiPmxT+C//J/cyVTxqJ+L4Fbj+Ts4q4p?=
=?iso-8859-1?Q?jNRtegtuu1qlJg=3D?=
X-Microsoft-Exchange-Diagnostics: 1;BLUPR09MB0834;6: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;5:JdB11m4ObXCkVom0KSCkjCpHvtJrzoJlzUptodu+GJkeVJcTLfzfgdcdsHOwqvWWRvNTTyAkhUv3UO9a6PAoodDg6m+gh7B9fEo9OQ6zLHjtlSzdnizNMKFt/Ftr8Sdq9aH4g95Xr7an/pkp9qCzoA==;24:9a24f9krBDUAkwyVQ6A9ESzeX9N/XPmKkjnYurlQ7UDJnCvFFEXuJIc8/X6jPGRwMge0E7tauhbi1gS4+LzHaw==
SpamDiagnosticOutput: 1:22
X-Microsoft-Exchange-Diagnostics: 1;BLUPR09MB0834;7:6K8+6ZbT6eznrG2wsw1Kp5mRcPvcBVlRHBxkjxt1daDTx+f5Kh6L1HsvgD7FbUUKwgej4WyDJNNQryZ7lhwO7NtE0kkHeVp7+TPO2TY6Y1H1+q/F9SOSk0xwv7DlTCnqfW+5YQlxHJtEuOXgXjZYl5x2BhEtglA7OtPSbdpTQ5b6RYrgHGKpxvLmyZqfMzAS+NoQUsTWmMyJjzKIJNPulzcB3+2LrW9Xm/ER/KdX+Y7CEOa6Rt7uqQCah9SDxnEK7/KMA+6tUoHkU/YoGh/1usbOT7WHhEXIRB6MXcVCS8ItmYnft9bVykTbPnZlKlMIqG0HleEylDMThA+kuKXXWg==
X-OriginatorOrg: aclpesa.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Apr 2017 21:39:02.0715
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR09MB0834
X-Spam-Status: Yes, score=11.2
X-Spam-Score: 112
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: DESK OF INSPECTION MANAGER. United Nation Inspection Agency
Hartsfield-Jackson International Airport, Atlanta Dear Owner, I am Robert
Williams, Inspection Unit Manager United Nations Inspection Agency in Hartsfield
Jackson International Airport Atlanta, Georgia. During our investigation,
I discovered An abandoned shipment through a Diplomat from United Kingdom
which was transferred from JF Kennedy Airport to our facility here in Atlanta,
and when scanned it revealed an undisclosed sum of money in 2 Metal Trunk
Boxes weighing approximately 65kg each. [...]

Content analysis details: (11.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[23.103.200.206 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[197.211.60.52 listed in dnsbl.sorbs.net]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[197.211.60.52 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.211.60.52>]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Hello!


DESK OF INSPECTION MANAGER.
United Nation Inspection Agency
Hartsfield-Jackson International Airport, Atlanta

Dear Owner,

I am Robert Williams, Inspection Unit Manager United Nations Inspection Agency in
Hartsfield Jackson International Airport Atlanta, Georgia. During our investigation,
I discovered An abandoned shipment through a Diplomat from United Kingdom which was
transferred from JF Kennedy Airport to our facility here in Atlanta, and when
scanned it revealed an undisclosed sum of money in 2 Metal Trunk Boxes weighing
approximately 65kg each.

The consignment was abandoned because the Content was not properly declared by the
consignee as money rather it was declared as personal effect/classified document to
either avoid diversion by the Shipping Agent or confiscation by the relevant
authorities. The diplomat's inability to pay for Non Inspection fees among other
things are the reason why the consignment is delayed and abandoned.

By my assessment, each of the boxes contains about $4M or more.They are still left
in the airport storage facility till today. The Consignments like I said are two
metal trunk boxes weighing about 65lbs each (Internal dimension: W61 x H156 x D73
effective capacity: 680 L) Approximately. The details of the consignment including
your name and email on the official document from United Nations' office in London
where the shipment was tagged as personal effects/classified document is still
available with us. As it stands now, you have to reconfirm your full name, Phone
Number, full address so I can cross-check and see if it corresponds with the one on
the official documents.

Like I did say again, the shipper abandoned it and ran away most importantly because
he gave a false declaration, he could not pay for the yellow tag, he could not
secure a valid non inspection document(s), etc. I am ready to assist you in any way
I can for you to get back this packages.

Sincerely,
Robert Williams

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 174 guests