Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#394931 by buried under 419s Tue Aug 20, 2019 8:33 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id eFepDv0cXF27YQAAjbubUg
for <>; Tue, 20 Aug 2019 09:17:01 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 20 Aug 2019 09:17:01 -0700
Received: from [124.217.227.71] (port=36807 helo=server9212.pnbdevt.com)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1i06oc-0006Ux-TJ
for ; Tue, 20 Aug 2019 09:17:01 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=pnbdevt.com
; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Date:
Subject:From:Reply-To; bh=tukLwr1L3wn8V1BgIVn0jcfGY3vQGr0IWfHzs7WifTU=; b=gIP
h4cycDOYlHUnJo78hQTIAIl5fqC3QyEw92XgMV3SMEfQBCF6rWveXQXjHoX0UaMG7+RRkcAY6l3yC
Bwj2m/QuSv9pT62oZVan3mnKcsn4rE6Qnm7GLdJ6efC/QJF067b+EfDwDxZrQyDkIqg+RFw9Y4GSQ
dQ3HnIdpO38xAtPyrQsfUOQtfdMeUqGo3m7EFI2uBchGVJPPDDFHn3sO7nyI2jMKB1awT0/KdKC4C
ZBci704NgF4nXKFcvB0gG9oLpfaEBfJxn6cqVEl1dizrG8fq5+/8reThbIvvvgx2HBhDMeuXcyo+t
xvKfOnukoeqiQRZw4SnPkA9HRNzboTQ==;
Received: from [199.96.83.27] (port=50653 helo=User)
by server9212.pnbdevt.com with esmtpa (Exim 4.86_1)
(envelope-from <[email protected]>)
id 1i06nc-00078i-HK; Wed, 21 Aug 2019 00:15:57 +0800
Reply-To: <[email protected]>
From: "Mr.Stewart Douglas"<[email protected]>
Date: Tue, 20 Aug 2019 09:16:33 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server9212.pnbdevt.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - pnbdevt.com
X-Get-Message-Sender-Via: server9212.pnbdevt.com: authenticated_id: [email protected]
X-Authenticated-Sender: server9212.pnbdevt.com: [email protected]
X-Spam-Status: Yes, score=42.8
X-Spam-Score: 428
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Attn: Sir/Madam My name is Mr.Stewart Douglas,I am the Director
Inspection Unit, United Nations Inspection Agent. We are currently in John
F. Kennedy International Airport New York City, United States for official
inspection while i discovered an abandoned shipment from UK via Diplomat
with your name/email tagged on it, when i personally scanned it, it revealed
an undisclosed sum of money in a Metallic Trunk Boxes weighing approximately
65kg each. On my assumption, each of the 3 boxes will contain more than $5M
or above in each. [...]

Content analysis details: (42.8 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.3 NSL_RCVD_HELO_USER Received from HELO User
0.6 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[124.217.227.71 listed in bl.score.senderscore.com]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dallasfortairportunit1[at]gmail.com)
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 HK_NAME_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.6 MONEY_FROM_MISSP Lots of money and misspaced From
1.5 FAKE_REPLY_C No description available.
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.9 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
1.4 FORM_FRAUD_3 Fill a form and several fraud phrases
1.9 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Re: ***** READY FOR CLAIM/*****



Attn: Sir/Madam

My name is Mr.Stewart Douglas,I am the Director Inspection Unit, United Nations
Inspection Agent. We are currently in John F. Kennedy International Airport New
York City, United States for official inspection while i discovered an abandoned
shipment from UK via Diplomat with your name/email tagged on it, when i personally
scanned it, it revealed an undisclosed sum of money in a Metallic Trunk Boxes
weighing approximately 65kg each. On my assumption, each of the 3 boxes will contain
more than $5M or above in each.

On further investigation, i discovered that the consignment was abandoned due to
wrong declaration of the content, also the Diplomat inability to pay for Non
Inspection Fees, because he did not know the content of the boxes.

I will arrange for the boxes to be moved out of this Airport to your address, once
we are through I will deploy the services of a secured shipping Company geared to
provide the security it needs to your doorstep.

Now i want to strike a deal with you, in your acceptance i will proceed on this. I
have the capacity to secure the release of your consignment with my status as an
United Nations\Inspection Agent. You will give me 10% of the amount in the
consignment and you take the remaining 90% when we cleared it,

If you are not in agreement with this proposal, please disregard it. But if you can
meet with my condition, then we have a deal. I can get everything concluded within
24 to 48 hours and proceed to your address for delivery upon your acceptance.

Write me on this email: [email protected] if you accepts to work
with me.Send me your cell phone number and your address and your full name.


You can as well call me on this number +1-917 790-5250 if you wish to speak with me
but if you call and could not reach me on phone note that i am on the field for
inspection, So leave your information so that i can reach you when i am back in the
office.


Mr.Stewart Douglas

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 100 guests