Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#348637 by buried under 419s Wed Dec 13, 2017 10:54 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id mEyEKHkCMVrNVQAAjbubUg
for <>; Wed, 13 Dec 2017 02:35:37 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 13 Dec 2017 02:35:37 -0800
Received: from mbkd0125.ocn.ad.jp ([153.149.230.26]:60807)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1eP4Nz-0005i9-QY
for ; Wed, 13 Dec 2017 02:35:37 -0800
Received: from mf-smf-ucb001.ocn.ad.jp (mf-smf-ucb001.ocn.ad.jp [153.149.227.3])
by mbkd0125.ocn.ad.jp (Postfix) with ESMTP id BE6CE781E90;
Wed, 13 Dec 2017 19:34:54 +0900 (JST)
Received: from mf-smf-ucb001.ocn.ad.jp (mf-smf-ucb001 [153.149.227.3])
by mf-smf-ucb001.ocn.ad.jp (Postfix) with ESMTP id A141C205F3;
Wed, 13 Dec 2017 19:34:54 +0900 (JST)
Received: from msgw004-03.ocn.ad.jp (msgw004-03.ocn.ad.jp [180.37.203.90])
by mf-smf-ucb001.ocn.ad.jp (Switch-3.3.4/Switch-3.3.4) with ESMTP id vBDAYr0k025649;
Wed, 13 Dec 2017 19:34:53 +0900
Received: from User (p18059-ipngnfx01morioka.iwate.ocn.ne.jp [153.142.9.59])
by msgw004-03.ocn.ad.jp (Postfix) with SMTP id D26E948DBD0;
Wed, 13 Dec 2017 19:34:41 +0900 (JST)
Reply-To: <[email protected]>
From: "White"<[email protected]>
Date: Wed, 13 Dec 2017 02:35:10 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="ks_c_5601-1987"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=30.1
X-Spam-Score: 301
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Attn: Sir/Madam My name is Mr.Alex White,i am the Director
Inspection Unit, United Nations Inspection Agent. We are currently in Boston
Logan International Airport,Boston, United States for official inspection
while i discovered an abandoned shipment from UK via Diplomatic cash package
with your name/email tagged on it,when i personally scanned it, it revealed
an undisclosed sum of money in three Metallic Trunk Boxes weighing approximately
35kg each. On my assumption,each of the 3 boxes will contain more than $5M
or above in each. [...]

Content analysis details: (30.1 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[153.149.230.26 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?153.149.227.3>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[153.149.230.26 listed in psbl.surriel.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[153.149.230.26 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mralexwhite2017[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.8 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSPACED From: missing whitespace
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.1 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.1 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re. Please Call!


Attn: Sir/Madam

My name is Mr.Alex White,i am the Director Inspection Unit, United Nations
Inspection Agent. We are currently in Boston Logan International Airport,Boston,
United States for official inspection while i discovered an abandoned shipment from
UK via Diplomatic cash package with your name/email tagged on it,when i personally
scanned
it, it revealed an undisclosed sum of money in three Metallic Trunk Boxes weighing
approximately 35kg each. On my assumption,each of the 3 boxes will contain more than
$5M or above in each.

On further investigation, i discovered that the consignment was abandoned due to
wrong declaration of the content, also the Diplomatic agent inability to pay for Non
Inspection Fees, because he did not know the content of the boxes.

I will arrange for the boxes to be moved out of this Airport to your address once we
put heads together and pay for the Non Inspection Clearance Charges, once we are
through I will personally bring the funds to your doorstep.

Now i want to strike a deal with you, in your acceptance to assist me pay for the
Non inspection charges i will proceed on this. I have the capacity to secure the
release of your consignment with my status as a United Nations\Inspection Agent. You
will give me 10% of the amount in the consignment and you take the remaining 90%
when we cleared the consignment. I am asking for 10% because i want to assist you to
pay for the non inspection charges but if if you feel it is too much for
you, you can give me anything you want from your heart.

If you are not in agreement with this proposal, please disregard it.But if you can
meet with my condition, then we have a deal. I can get everything concluded within
24 to 48 hours and proceed to your address for delivery upon your acceptance. Write
me on this email: [email protected] if you accepts to work with me.Send me
your cell phone number and your address and your full name.

You can as well call me on this number (+1) 617-475-0973 if you wish to speak with
me but if you call and could not reach me on phone note that i am on the field for
inspection, So leave your information so that i can reach you when i am back in the
office.

Signed,
Mr.Alex White
Director Inspection Unit
United Nations Inspection Agent.
Boston Logan International Airport,t.
UNICEF Boston - Harbor-side Dr, Boston, MA 02128
USA.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

#405046 by buried under 419s Thu Feb 20, 2020 9:55 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id HK1oAGPUTl5ZQAEAibB4EA
(envelope-from <[email protected]>)
for <>; Thu, 20 Feb 2020 13:48:03 -0500
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 20 Feb 2020 13:48:03 -0500
Received: from [194.36.84.124] (port=58458 helo=bos1.sunucucozumleri.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1j4qrh-000LK1-MJ
for ; Thu, 20 Feb 2020 13:48:02 -0500
Received: from User (unknown [172.93.148.210])
by bos1.sunucucozumleri.com (Postfix) with ESMTPA id 777A5236861;
Thu, 20 Feb 2020 23:45:16 +0300 (+03)
Authentication-Results: bos1.sunucucozumleri.com;
spf=pass (sender IP is 172.93.148.210) [email protected] smtp.helo=User
Received-SPF: pass (bos1.sunucucozumleri.com: connection is authenticated)
Reply-To: <[email protected]>
From: "White"<[email protected]>
Date: Thu, 20 Feb 2020 09:45:20 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=24.4
X-Spam-Score: 244
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Sir/Madam "Your Abandoned Consignment is Still Unclaimed"
My name is Mr.Alex White, i am a United Nations Forensic Expert and the Director
Of Inspection , United Nations Inspection Unit. We are currently in Boston
Logan International Airport, Boston, United [...]
Content analysis details: (24.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 MISSING_HEADERS Missing To: header
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[194.36.84.124 listed in bl.score.senderscore.com]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.8 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
1.3 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Re. Kindly Get Back

Attn: Sir/Madam


"Your Abandoned Consignment is Still Unclaimed"


My name is Mr.Alex White, i am a United Nations Forensic Expert and
the Director Of Inspection , United Nations Inspection Unit. We are
currently in Boston Logan International Airport, Boston, United
States of America for official inspection while i discovered an
abandoned shipment from UK via a Diplomat with your name/email tagged
on it, when i personally scanned the trunk boxes, it revealed an
undisclosed sum of money in a Metallic Trunk Boxes weighing
approximately 65kg each. On my assumption, each of the 3 boxes will
contain more than $5M or above in each.


On further investigation, i discovered that the consignment was
abandoned due to wrong declaration of the content, also the Diplomat
inability to pay for Non Inspection Fees, because he did not know the
content of the boxes.


I will arrange for the boxes to be moved out of this Airport to your
address, once we are through in paying the non inspection charges I
will personally the trunk boxes to your address with the help of our
security personnel to provide the security it needs to your doorstep.


Now i want to strike a deal with you, in your acceptance i will
proceed on this, I have the capacity to deliver the trunk boxes to you
after the release of your consignment with my status as a United
Nations Inspection Agent. You will give me 10% of the amount in the
consignment and you take the remaining 90% when i cleared it after we
put heads together and offset/pay the Compulsory Non inspection
Charges as law stipulated.


If you are not in agreement with this proposal, please disregard it
but if you can meet with my condition, then we have a deal. I can get
everything concluded within 24 to 48 hours and proceed to your address
for delivery upon your acceptance to assist me pay part of the Non
inspection charges.


Write me on this email if you agree and accept to work with me: (
[email protected] ) if you accepts to work with me.Send me
your cell phone number and your address and your full name for further
verification.


You can as well call me on this number (+1) 617-475-0973 if you wish
to speak with me but if you call and could not reach me on phone note
that i am on the field for inspection, So leave your information so
that i can reach you when i am back in the office.


Signed,
Mr.Alex White
Director Inspection Unit
United Nations Inspection Agent.
Boston Logan International Airport,t.
Unicef Boston - Harborside Dr, Boston, MA 02128

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: No registered users and 86 guests