#422684 by buried under 419s
Mon Jan 25, 2021 9:21 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id et76OPauDmDhOQAAibB4EA
(envelope-from <[email protected]>)
for <>; Mon, 25 Jan 2021 11:43:50 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 25 Jan 2021 11:43:50 +0000
Received: from a2nlsmtp01-03.prod.iad2.secureserver.net ([198.71.225.37]:60514)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1l40Hd-0003qQ-VF
for ; Mon, 25 Jan 2021 11:43:50 +0000
Received: from a2plcpnl0677.prod.iad2.secureserver.net ([198.71.234.38])
by : HOSTING RELAY : with ESMTP
id 4086liPCWf48i4086l9ICy; Mon, 25 Jan 2021 04:33:58 -0700
X-CMAE-Analysis: v=2.4 cv=ev4acqlX c=1 sm=1 tr=0 ts=600eaca6
a=uM9UyJZpylSSJEDcaCFj3Q==:117 a=pV18pPeFqZmNy3TIeQ5jjg==:17
a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19 a=dLZJa+xiwSxG16/P+YVxDGlgEgI=:19
a=HpEJnUlJZJkA:10 a=LyRpP79YlcYA:10 a=8nJEP1OIZ-IA:10 a=EmqxpYm9HcoA:10
a=x7bEGLp0ZPQA:10 a=CSnwfWI-v2w-jzKbZ_UA:9 a=qdHVrl91Mm9XdpnV:21
a=-wA3m4c8QZz8_0bQ:21 a=wPNLvfGTeEIA:10 a=cNKUXQxLCPgA:10
a=-P9_1VjE45HON4fssHtL:22
X-SECURESERVER-ACCT: [email protected]
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=nokshibari.com; s=default; h=Reply-To:Date:From:To:Subject:
Content-Description:Content-Transfer-Encoding:MIME-Version:Content-Type:
Sender:Message-ID:Cc:Content-ID:Resent-Date:Resent-From:Resent-Sender:
Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=GH2yQMLyUt0QeMlX5zZi9PCTZq5goo3guYMjSXSJstY=; b=VMRIN4WCtNjw8NKwQh78jwY5q
X3C8jm9XMhMTWGIoiTrRPu+E4F9NySysDeD8LQ0qh/O3wkoS8JFrV+V8390gN5R5CJUeYO3YtNKDA
3L9qx/TT48/Ut43X+t+IvUp4MClrsE5d2Un1Cjdwbs+/mNfCSjJyTs4bfoXzPNA58a5bUuwjvCMNr
A3MPCU9NC6cC/hThSbOuyLTZVtU9ULOZ+3oUIIBBIFo7mCN3vQtWG8yAF9sDAKP6xiJiDzG6pIJAS
Iu5+H1xvZljlgLW+SPDNiPC8vYw9TgYXCKi+wF2qqILwCbukaFHAvyyFNsf0uwWAOpcKB3FfjK0y2
2E7lupDKA==;
Received: from [197.210.64.106] (port=30627 helo=[192.168.43.252])
by a2plcpnl0677.prod.iad2.secureserver.net with esmtpsa (TLS1) tls TLS_DHE_RSA_WITH_AES_256_CBC_SHA
(Exim 4.93)
(envelope-from <[email protected]>)
id 1l4086-006Usr-6M; Mon, 25 Jan 2021 04:33:58 -0700
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr Jonathan" <[email protected]>
Date: Sun, 24 Jan 2021 12:35:05 +0100
Reply-To: [email protected]
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - a2plcpnl0677.prod.iad2.secureserver.net
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nokshibari.com
X-Get-Message-Sender-Via: a2plcpnl0677.prod.iad2.secureserver.net: authenticated_id: [email protected]
X-Authenticated-Sender: a2plcpnl0677.prod.iad2.secureserver.net: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-CMAE-Envelope: MS4xfL6D7qUNjqmq6KErr8Mcw+jha1o3kemp/Pl6rY2D8PelvZm1qbaAyCGXunB9kW0mitQ9PqqNMfepR1we9URNPtABeG/M64WivpPB2hrGt8T5nxwawz5W
wfd8yBB1JW/IfNCnp1cDo4kHakMozAJgzylizz5y9ImnnW04fxok/x4y+4SnyubWayUAKELmv0kAC88FCguuMZ/kUHgR3z6IawDCTaRT5R6fNGxf2JWMwTjx
X-Spam-Status: Yes, score=11.9
X-Spam-Score: 119
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary On further investigation, i discovered that
the consignment was abandoned due to wrong declaration of the content, also
the Diplomat inability to pay for due to the INTERNATIONAL CONSIGNMENT MONEY
MOV [...]
Content analysis details: (11.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/Dns ... nsbl-block
for more information.
[URIs: nokshibari.com]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?198.71.225.37>]
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[jastith005[at]gmail.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
1.0 HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** To whom it may Concerned
Dear Beneficiary
On further investigation, i discovered that the consignment was abandoned due to wrong declaration of the content, also the Diplomat inability to pay for due to the INTERNATIONAL CONSIGNMENT MONEY MOVEMENT Charges of US$750.00 , because he did not know the content of the boxes.
The consignment was abandoned by the assigned carrier diplomat from Dallas Texas ,because the Contents was not properly declared as "MONEY" rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for the INTERNATIONAL CONSIGNMENT MONEY MOVEMENT Charges of US$750.00 to the U.S government before bringing in the consignment into US, we refused to return back the consignment where it came from since, we have already received it.
Now i want to strike a deal with you, in your acceptance i will proceed on this, I have the capacity to deliver the trunk boxes to you after the release of your consignment with my status as a United Nations Inspection Agent. You will give me 10% of the amount in the consignment and you take the remaining 90% when i cleared it after we put heads together and offset/pay the Compulsory accumulation Charge only as law stipulated.
Write me if you accepts to work with me.Send me your cell phone number and your address and your full name for further verification.
You can as well call me on this number (+1) 563-239-5562 if you wish to speak with me but if you call and could not reach me on phone note that i am on the field for inspection, So leave your information so that i can reach you when i am back in the office.
Looking forward
Mr Jonathan Albert
Delivered-To:
Received: from
by with LMTP
id et76OPauDmDhOQAAibB4EA
(envelope-from <[email protected]>)
for <>; Mon, 25 Jan 2021 11:43:50 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 25 Jan 2021 11:43:50 +0000
Received: from a2nlsmtp01-03.prod.iad2.secureserver.net ([198.71.225.37]:60514)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1l40Hd-0003qQ-VF
for ; Mon, 25 Jan 2021 11:43:50 +0000
Received: from a2plcpnl0677.prod.iad2.secureserver.net ([198.71.234.38])
by : HOSTING RELAY : with ESMTP
id 4086liPCWf48i4086l9ICy; Mon, 25 Jan 2021 04:33:58 -0700
X-CMAE-Analysis: v=2.4 cv=ev4acqlX c=1 sm=1 tr=0 ts=600eaca6
a=uM9UyJZpylSSJEDcaCFj3Q==:117 a=pV18pPeFqZmNy3TIeQ5jjg==:17
a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19 a=dLZJa+xiwSxG16/P+YVxDGlgEgI=:19
a=HpEJnUlJZJkA:10 a=LyRpP79YlcYA:10 a=8nJEP1OIZ-IA:10 a=EmqxpYm9HcoA:10
a=x7bEGLp0ZPQA:10 a=CSnwfWI-v2w-jzKbZ_UA:9 a=qdHVrl91Mm9XdpnV:21
a=-wA3m4c8QZz8_0bQ:21 a=wPNLvfGTeEIA:10 a=cNKUXQxLCPgA:10
a=-P9_1VjE45HON4fssHtL:22
X-SECURESERVER-ACCT: [email protected]
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=nokshibari.com; s=default; h=Reply-To:Date:From:To:Subject:
Content-Description:Content-Transfer-Encoding:MIME-Version:Content-Type:
Sender:Message-ID:Cc:Content-ID:Resent-Date:Resent-From:Resent-Sender:
Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=GH2yQMLyUt0QeMlX5zZi9PCTZq5goo3guYMjSXSJstY=; b=VMRIN4WCtNjw8NKwQh78jwY5q
X3C8jm9XMhMTWGIoiTrRPu+E4F9NySysDeD8LQ0qh/O3wkoS8JFrV+V8390gN5R5CJUeYO3YtNKDA
3L9qx/TT48/Ut43X+t+IvUp4MClrsE5d2Un1Cjdwbs+/mNfCSjJyTs4bfoXzPNA58a5bUuwjvCMNr
A3MPCU9NC6cC/hThSbOuyLTZVtU9ULOZ+3oUIIBBIFo7mCN3vQtWG8yAF9sDAKP6xiJiDzG6pIJAS
Iu5+H1xvZljlgLW+SPDNiPC8vYw9TgYXCKi+wF2qqILwCbukaFHAvyyFNsf0uwWAOpcKB3FfjK0y2
2E7lupDKA==;
Received: from [197.210.64.106] (port=30627 helo=[192.168.43.252])
by a2plcpnl0677.prod.iad2.secureserver.net with esmtpsa (TLS1) tls TLS_DHE_RSA_WITH_AES_256_CBC_SHA
(Exim 4.93)
(envelope-from <[email protected]>)
id 1l4086-006Usr-6M; Mon, 25 Jan 2021 04:33:58 -0700
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr Jonathan" <[email protected]>
Date: Sun, 24 Jan 2021 12:35:05 +0100
Reply-To: [email protected]
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - a2plcpnl0677.prod.iad2.secureserver.net
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nokshibari.com
X-Get-Message-Sender-Via: a2plcpnl0677.prod.iad2.secureserver.net: authenticated_id: [email protected]
X-Authenticated-Sender: a2plcpnl0677.prod.iad2.secureserver.net: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-CMAE-Envelope: MS4xfL6D7qUNjqmq6KErr8Mcw+jha1o3kemp/Pl6rY2D8PelvZm1qbaAyCGXunB9kW0mitQ9PqqNMfepR1we9URNPtABeG/M64WivpPB2hrGt8T5nxwawz5W
wfd8yBB1JW/IfNCnp1cDo4kHakMozAJgzylizz5y9ImnnW04fxok/x4y+4SnyubWayUAKELmv0kAC88FCguuMZ/kUHgR3z6IawDCTaRT5R6fNGxf2JWMwTjx
X-Spam-Status: Yes, score=11.9
X-Spam-Score: 119
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary On further investigation, i discovered that
the consignment was abandoned due to wrong declaration of the content, also
the Diplomat inability to pay for due to the INTERNATIONAL CONSIGNMENT MONEY
MOV [...]
Content analysis details: (11.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/Dns ... nsbl-block
for more information.
[URIs: nokshibari.com]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?198.71.225.37>]
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[jastith005[at]gmail.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
1.0 HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** To whom it may Concerned
Dear Beneficiary
On further investigation, i discovered that the consignment was abandoned due to wrong declaration of the content, also the Diplomat inability to pay for due to the INTERNATIONAL CONSIGNMENT MONEY MOVEMENT Charges of US$750.00 , because he did not know the content of the boxes.
The consignment was abandoned by the assigned carrier diplomat from Dallas Texas ,because the Contents was not properly declared as "MONEY" rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for the INTERNATIONAL CONSIGNMENT MONEY MOVEMENT Charges of US$750.00 to the U.S government before bringing in the consignment into US, we refused to return back the consignment where it came from since, we have already received it.
Now i want to strike a deal with you, in your acceptance i will proceed on this, I have the capacity to deliver the trunk boxes to you after the release of your consignment with my status as a United Nations Inspection Agent. You will give me 10% of the amount in the consignment and you take the remaining 90% when i cleared it after we put heads together and offset/pay the Compulsory accumulation Charge only as law stipulated.
Write me if you accepts to work with me.Send me your cell phone number and your address and your full name for further verification.
You can as well call me on this number (+1) 563-239-5562 if you wish to speak with me but if you call and could not reach me on phone note that i am on the field for inspection, So leave your information so that i can reach you when i am back in the office.
Looking forward
Mr Jonathan Albert
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces