#377401 by buried under 419s
Tue Nov 27, 2018 9:32 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 27 Nov 2018 16:47:33 -0800
Received: from mail.nsw.gov.ph ([203.177.56.220]:35506)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gRo0m-0008K5-0t
for ; Tue, 27 Nov 2018 16:47:33 -0800
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.nsw.gov.ph (iRedMail) with ESMTP id 5C91C10B6AA2;
Tue, 27 Nov 2018 22:47:16 +0800 (PHT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=nsw.gov.ph; h=to
:message-id:x-mailer:content-transfer-encoding:content-type
:content-type:mime-version:date:date:subject:subject:from:from
:reply-to; s=dkim; t=1543330036; x=1544194036; bh=iaVV+yWGCkl/IE
B8SIM4oPVuiw8aAqX1UEhO6AxPj8A=; b=DFg8iaY8U/sSXfUle3wXvwV8+STsSv
Ut3eX92UjTirxE/8fJ020Hp7xiHZ1xhjZPZcT/weoSTzN8paTVl9X8zcO64QT07N
wDKrZFs0VU150JAi17YMyfNWwp65C3Iky1rt+St+DTOUsqEF83L/X6UtX9daRuD+
Hsq2oQOTmDY0A=
X-Virus-Scanned: amavisd-new at mail.nsw.gov.ph
Received: from mail.nsw.gov.ph ([127.0.0.1])
by localhost (mail.nsw.gov.ph [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id VbUlJq7C5u05; Tue, 27 Nov 2018 22:47:16 +0800 (PHT)
Received: from User (unknown [196.196.190.128])
by mail.nsw.gov.ph (iRedMail) with ESMTPA id D273C10AFD98;
Tue, 27 Nov 2018 18:38:56 +0800 (PHT)
Reply-To: <[email protected]>
From: "Mr. David West"<[email protected]>
Date: Sun, 18 Nov 2018 13:40:32 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Cyberoam-smtpxy-version: 1.0.6.3
X-Cyberoam-AV-Policy: default
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=23.5
X-Spam-Score: 235
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Interim Assistance General Manager, (Operations, Maintenance,
Transportation) Assistance Inspection Director Honolulu International Airport
300 Rodgers Boulevard, Honolulu, HI 96819, USA. [email protected] [...]
Content analysis details: (23.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[203.177.56.220 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?203.177.56.220>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[203.177.56.220 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[203.177.56.220 listed in psbl.surriel.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(westd0232[at]gmail.com)
3.4 DATE_IN_PAST_96_XX Date: is 96 hours or more before Received: date
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 T_HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 FAKE_REPLY_C No description available.
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Your Abandoned Package For Delivery.
Interim Assistance General Manager,
(Operations, Maintenance, Transportation)
Assistance Inspection Director
Honolulu International Airport
300 Rodgers Boulevard,
Honolulu, HI 96819, USA.
[email protected]
Hello Good Friend
I have very vital information to give to you, but first I must have your trust
before I review it to you because it may cause me my job, so I need somebody that I
can trust for me to be able to review the secret to you.
However, to enable me confirm if you are the actual recipient of this consignment as
the assistant director of the Inspection Unit, I will advise you provide your
current Phone Number and Full Address, to enable me cross check if it corresponds
with the address on the official documents including the name of nearest Airport
around your city. Please note that this consignment is supposed to have been
returned to the United States Treasury Department as unclaimed delivery due to the
delays in concluding the clearance processes so as a result of this, I will not be
able to receive your details on my official email account. So in order words to
enable me cross check your details, I will advise you send the required details to
my private email address for quick processing and response. Once I confirm you as
the actual recipient of the trunk box, I can get everything concluded within 48hours
upon your acceptance and proceed to your address for delivery.
Lastly, be informed that the reason I have taken it upon myself to contact you
personally about this abandoned consignment is because I want us to transact this
business and share the money 70% for you and 30% for me since the consignment has
not yet been returned to the United States Treasury Department after being abandoned
by the diplomat so immediately the confirmation is made, I will go ahead and pay for
the United States Non Inspection Fee of $3,700 dollars and arrange for the box to be
delivered to your doorstep Or I can bring it by myself to avoid any more trouble but
you have to assure me of my 30% share.
I wait to hear from you urgently if you are still alive and I will appreciate if we
can keep this deal confidential. Please get back to me via my private
Email:([email protected]) for further directives:
Thank you.
David West
Interim Assistance General Manager,
(Operations, Maintenance, Transportation)
Assistance Inspection Director
Honolulu International Airport
300 Rodgers Boulevard,
Honolulu, HI 96819, USA.
[email protected]
Envelope-to:
Delivery-date: Tue, 27 Nov 2018 16:47:33 -0800
Received: from mail.nsw.gov.ph ([203.177.56.220]:35506)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gRo0m-0008K5-0t
for ; Tue, 27 Nov 2018 16:47:33 -0800
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.nsw.gov.ph (iRedMail) with ESMTP id 5C91C10B6AA2;
Tue, 27 Nov 2018 22:47:16 +0800 (PHT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=nsw.gov.ph; h=to
:message-id:x-mailer:content-transfer-encoding:content-type
:content-type:mime-version:date:date:subject:subject:from:from
:reply-to; s=dkim; t=1543330036; x=1544194036; bh=iaVV+yWGCkl/IE
B8SIM4oPVuiw8aAqX1UEhO6AxPj8A=; b=DFg8iaY8U/sSXfUle3wXvwV8+STsSv
Ut3eX92UjTirxE/8fJ020Hp7xiHZ1xhjZPZcT/weoSTzN8paTVl9X8zcO64QT07N
wDKrZFs0VU150JAi17YMyfNWwp65C3Iky1rt+St+DTOUsqEF83L/X6UtX9daRuD+
Hsq2oQOTmDY0A=
X-Virus-Scanned: amavisd-new at mail.nsw.gov.ph
Received: from mail.nsw.gov.ph ([127.0.0.1])
by localhost (mail.nsw.gov.ph [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id VbUlJq7C5u05; Tue, 27 Nov 2018 22:47:16 +0800 (PHT)
Received: from User (unknown [196.196.190.128])
by mail.nsw.gov.ph (iRedMail) with ESMTPA id D273C10AFD98;
Tue, 27 Nov 2018 18:38:56 +0800 (PHT)
Reply-To: <[email protected]>
From: "Mr. David West"<[email protected]>
Date: Sun, 18 Nov 2018 13:40:32 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Cyberoam-smtpxy-version: 1.0.6.3
X-Cyberoam-AV-Policy: default
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=23.5
X-Spam-Score: 235
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Interim Assistance General Manager, (Operations, Maintenance,
Transportation) Assistance Inspection Director Honolulu International Airport
300 Rodgers Boulevard, Honolulu, HI 96819, USA. [email protected] [...]
Content analysis details: (23.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[203.177.56.220 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?203.177.56.220>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[203.177.56.220 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[203.177.56.220 listed in psbl.surriel.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(westd0232[at]gmail.com)
3.4 DATE_IN_PAST_96_XX Date: is 96 hours or more before Received: date
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 T_HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 FAKE_REPLY_C No description available.
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Your Abandoned Package For Delivery.
Interim Assistance General Manager,
(Operations, Maintenance, Transportation)
Assistance Inspection Director
Honolulu International Airport
300 Rodgers Boulevard,
Honolulu, HI 96819, USA.
[email protected]
Hello Good Friend
I have very vital information to give to you, but first I must have your trust
before I review it to you because it may cause me my job, so I need somebody that I
can trust for me to be able to review the secret to you.
However, to enable me confirm if you are the actual recipient of this consignment as
the assistant director of the Inspection Unit, I will advise you provide your
current Phone Number and Full Address, to enable me cross check if it corresponds
with the address on the official documents including the name of nearest Airport
around your city. Please note that this consignment is supposed to have been
returned to the United States Treasury Department as unclaimed delivery due to the
delays in concluding the clearance processes so as a result of this, I will not be
able to receive your details on my official email account. So in order words to
enable me cross check your details, I will advise you send the required details to
my private email address for quick processing and response. Once I confirm you as
the actual recipient of the trunk box, I can get everything concluded within 48hours
upon your acceptance and proceed to your address for delivery.
Lastly, be informed that the reason I have taken it upon myself to contact you
personally about this abandoned consignment is because I want us to transact this
business and share the money 70% for you and 30% for me since the consignment has
not yet been returned to the United States Treasury Department after being abandoned
by the diplomat so immediately the confirmation is made, I will go ahead and pay for
the United States Non Inspection Fee of $3,700 dollars and arrange for the box to be
delivered to your doorstep Or I can bring it by myself to avoid any more trouble but
you have to assure me of my 30% share.
I wait to hear from you urgently if you are still alive and I will appreciate if we
can keep this deal confidential. Please get back to me via my private
Email:([email protected]) for further directives:
Thank you.
David West
Interim Assistance General Manager,
(Operations, Maintenance, Transportation)
Assistance Inspection Director
Honolulu International Airport
300 Rodgers Boulevard,
Honolulu, HI 96819, USA.
[email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces