#400924 by buried under 419s
Wed Nov 27, 2019 10:10 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id oDoTDSxY3l0NJQAAjbubUg
for >; Wed, 27 Nov 2019 03:04:12 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 27 Nov 2019 03:04:12 -0800
Received: from vlgmebel.ru ([95.181.230.9]:57926)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iZv7C-0002Qx-HD
for ; Wed, 27 Nov 2019 03:04:12 -0800
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=vlgmebel.ru
; s=mail; h=Message-Id:Reply-To:Date:From:To:Subject:Content-Description:
Content-Transfer-Encoding:MIME-Version:Content-Type:Sender:Cc:Content-ID:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=WvGc8arEZfgJLSlK9K+H2HLhBb0i1wrP1NAyVBo0Cx4=; b=p5Nz/GscCx/d1Z108eljR5aTMs
ispzjwxRBvq6eUuPQP8rg+GItMY5G0YFyP5fhWw7SuoK9I6pEB0chjfAW3rCOxLSsYkW7hDw794fR
hfF+44KAan9Xh7YPBbqULMdZkDSjoqNh2lGZRGUZQTuz8MFMFvlFzJFvuk8Q0J3as2Ig=;
Received: from [41.58.240.62] (helo=[192.168.8.106])
by vlgmebel.ru with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.90_1)
(envelope-from <[email protected]>)
id 1iZv6W-0004oJ-2I; Wed, 27 Nov 2019 14:03:28 +0300
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr Daniel Thomas" <[email protected]>
Date: Tue, 26 Nov 2019 12:03:10 -0800
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=17.6
X-Spam-Score: 176
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello My name is Mr Daniel Thomas , I am the Director Inspection
Unit United Nations Inspection Agent We are currently in John F. Kennedy
International Airport, in Queens, NY 11430, United States for official inspection
while I discovered An abandoned shipment via Diplomat with your name tagged
on it, when I personally scanned it, it revealed an undisclosed sum of money
in a Metal Trunk Box weighing approximately 65kg each. [...]
Content analysis details: (17.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[95.181.230.9 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 HK_NAME_MR_MRS No description available.
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 MONEY_FROM_41 Lots of money from Africa
1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Customer, On my assumption, each of the boxes will contain more than $3M
Hello
My name is Mr Daniel Thomas , I am the Director Inspection Unit United Nations
Inspection Agent
We are currently in John F. Kennedy International Airport, in Queens, NY 11430,
United States for official inspection while I discovered An abandoned shipment via
Diplomat with your name tagged on it, when I personally scanned it, it revealed an
undisclosed sum of money in a Metal Trunk Box weighing approximately 65kg each.
On my assumption, each of the boxes will contain more than $3M , I discovered that
The consignment was abandoned due to wrong declaration of the content, also the
Diplomat inability to pay for Non Inspection Fees.
As it stands, I want to use my good office to process the document, and we join
hands together pay the non-inspection fee on your behalf and deliver the boxes to
your address by myself for mutual benefit,
You have been giving a last minutes opportunity to get your funds delivered if still
interested or not.
Best Regards,
Mr Daniel Thomas
Call or SMS: +1 917-444-4205
Delivered-To:
Received: from
by with LMTP id oDoTDSxY3l0NJQAAjbubUg
for >; Wed, 27 Nov 2019 03:04:12 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 27 Nov 2019 03:04:12 -0800
Received: from vlgmebel.ru ([95.181.230.9]:57926)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iZv7C-0002Qx-HD
for ; Wed, 27 Nov 2019 03:04:12 -0800
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=vlgmebel.ru
; s=mail; h=Message-Id:Reply-To:Date:From:To:Subject:Content-Description:
Content-Transfer-Encoding:MIME-Version:Content-Type:Sender:Cc:Content-ID:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=WvGc8arEZfgJLSlK9K+H2HLhBb0i1wrP1NAyVBo0Cx4=; b=p5Nz/GscCx/d1Z108eljR5aTMs
ispzjwxRBvq6eUuPQP8rg+GItMY5G0YFyP5fhWw7SuoK9I6pEB0chjfAW3rCOxLSsYkW7hDw794fR
hfF+44KAan9Xh7YPBbqULMdZkDSjoqNh2lGZRGUZQTuz8MFMFvlFzJFvuk8Q0J3as2Ig=;
Received: from [41.58.240.62] (helo=[192.168.8.106])
by vlgmebel.ru with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.90_1)
(envelope-from <[email protected]>)
id 1iZv6W-0004oJ-2I; Wed, 27 Nov 2019 14:03:28 +0300
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr Daniel Thomas" <[email protected]>
Date: Tue, 26 Nov 2019 12:03:10 -0800
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=17.6
X-Spam-Score: 176
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello My name is Mr Daniel Thomas , I am the Director Inspection
Unit United Nations Inspection Agent We are currently in John F. Kennedy
International Airport, in Queens, NY 11430, United States for official inspection
while I discovered An abandoned shipment via Diplomat with your name tagged
on it, when I personally scanned it, it revealed an undisclosed sum of money
in a Metal Trunk Box weighing approximately 65kg each. [...]
Content analysis details: (17.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[95.181.230.9 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 HK_NAME_MR_MRS No description available.
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 MONEY_FROM_41 Lots of money from Africa
1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Customer, On my assumption, each of the boxes will contain more than $3M
Hello
My name is Mr Daniel Thomas , I am the Director Inspection Unit United Nations
Inspection Agent
We are currently in John F. Kennedy International Airport, in Queens, NY 11430,
United States for official inspection while I discovered An abandoned shipment via
Diplomat with your name tagged on it, when I personally scanned it, it revealed an
undisclosed sum of money in a Metal Trunk Box weighing approximately 65kg each.
On my assumption, each of the boxes will contain more than $3M , I discovered that
The consignment was abandoned due to wrong declaration of the content, also the
Diplomat inability to pay for Non Inspection Fees.
As it stands, I want to use my good office to process the document, and we join
hands together pay the non-inspection fee on your behalf and deliver the boxes to
your address by myself for mutual benefit,
You have been giving a last minutes opportunity to get your funds delivered if still
interested or not.
Best Regards,
Mr Daniel Thomas
Call or SMS: +1 917-444-4205
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces