by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id qOOuEEhQ9ly7DAAAjbubUg
for <>; Tue, 04 Jun 2019 04:04:40 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 04 Jun 2019 04:04:40 -0700
Received: from mail-it1-f196.google.com ([209.85.166.196]:39378)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hY7F5-0000qB-Ia
for ; Tue, 04 Jun 2019 04:04:40 -0700
Received: by mail-it1-f196.google.com with SMTP id j204so26261714ite.4
for <>; Tue, 04 Jun 2019 04:04:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=8vbanB6ROQPeypTxRh9K2sBT2UUJKmR4dYJSXOMsROA=;
b=GpQ3eEdRaJMQ0heFGcUeuXFZ74+qWHaoVFF8IwSFl4+6LBbj8BEf+U6udBeAvZ3dPw
TeiMNkZITmOEBKnlvo4WES7oHbH9eKi7MqfPMzPrDzuqpxDr/nj/4u7smt6QbDzPzwEr
coW25dgs2NCKPjXdEAMmSxQA071jo0pAr5/e02VCN9+Y9+VnxSwAbZqIG3UPhM+Tkkz1
OnTpuTkAReOdTgqrb/J04bWta8SYJZI9KGw2J4NdehxaX+xljQJLZe7ReBLlNP4kyLZF
Pw+w9X4mBTB4zHoKqzv7TrRpwkG6+sRQomrHdq3xSVofujNFsPUh5dOoiwJht5yj1aPW
HsSQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:frommessage-id
:subject:to;
bh=8vbanB6ROQPeypTxRh9K2sBT2UUJKmR4dYJSXOMsROA=;
b=aA5Rcnrw0eYIbkm75QDeqL37+e1UAVy61mrbcVtR3/AYCh1Iu5FRdOzvgxDCzYOmEF
KZ4NjcHYqfB/XfVS5EAKn1dFP2ddkBVzRJ7UtiSTvjzsTexJcvmX/MMQIiGntjaLKAhc
fAyRAEAPPpBJ2zDvBLzQcpMka48X7SjDpOLJphyovrUGHHktgC7lnoe6/5fLl6JmEP4k
ZRNVPy++MPMvmhfWMyzRJodWuKl5XQkL7qygr2mg4FmrB+a/EwU67DGHGDtIXpFawsqE
SUIKY2FQeN79Ok7eBWZAD0nfjcvChEpPRSiNA5bNETl8fOrD6p7xYilusNZay8FUx1js
xetA==
X-Gm-Message-State: APjAAAWmZgyGfGTdg1X8mnwdPMW9w5spQOLXEYsDKEVIxf+PuzUBDS01
ugQ0VfF9SYFY6A4FAzvCoUS0c8c7UyHnRqGE++E=
X-Google-Smtp-Source: APXvYqyPOpnv7wLZGaZo9rUjPcyLBrWM02hTSV30aNYipFm2en84/Z9C0Lhc3abvxMKigIS2pjoRbvYDHCdhSHaIRQE=
X-Received: by 2002:a02
: with SMTP id 126mr19202139jaz.72.1559646234548;
Tue, 04 Jun 2019 04:03:54 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a92:8489:0:0:0:0:0 with HTTP; Tue, 4 Jun 2019 04:03:54 -0700 (PDT)
Reply-To: [email protected]
From: Howard Renee Woods <[email protected]>
Date: Tue, 4 Jun 2019 12:03:54 +0100
Message-ID: <CAGLzmh6aLP2cEVKoE9w49fGZeZSRJPWjqkW6o-=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=9.6
X-Spam-Score: 96
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hartsfield Jackson Atlanta International Airport Address:
6000 N Terminal Pkwy Atlanta CA 30320, USA Code: ATL [...]
Content analysis details: (9.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.166.196 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(loganbelinsky[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(creditcommission2005[at]yahoo.com)
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.7 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.196 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.1 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Beneficiary
Hartsfield Jackson Atlanta International Airport
Address: 6000 N Terminal Pkwy Atlanta CA 30320, USA
Code: ATL
Elevation: 313 m
Owner: Atlanta
Phone: + 1 347-980-0050
Attention: Beneficiary,
My Name is Mr. Howard Renee Woods; I work for the U.S Customs and
Border Protection Unit, here in Hartsfield Jackson Atlanta
International Airport (ATL). We are rounding up for the last Quarter
of the auditing, all abandon Consignment in US Airports are being
transfer to our facilities here for inspection and confiscation.
During our investigation, I discovered an abandoned shipment on your
name which was transferred to our facility here in Hartsfield Jackson
Atlanta International Airport, and when scanned it revealed an
undisclosed sum of money in a Metal Trunk Box.
The consignment was abandoned because the Content was not properly
declared by the consignee as money, rather it was declared as personal
effect to avoid diversion by the Diplomatic Agent also the Diplomat
inability to pay for Non Inspection Fees.
On my assumption, the boxes will contain more than (US$8,300,000.00)
and the consignment is still left in storage house till today through
a Courier Dispatch Service. The Consignment is a metal box with weight
of about 242LBS (Internal dimension: W61 x H156 x D73 (cm). Effective
capacity: 680 L.) Approximately.
I want to use my good office and clear the Consignment and deliver it
to you. If you WILL ACCEPT MY CONDITION AND want us to transact the
delivery for mutual benefit, you should provide your name, Phone
Number and full address, to cross check if it corresponds with the
address on the official document including the name of nearest
Airport around you and other details. You should send the required
details to me for onward delivery. All communication must be held
extremely confidential. I can get everything concluded within 24 to 48
hours upon your acceptance and proceed to your address for delivery.
But it must be on the condition that you will give me 30% of the
amount contained in the boxes and I must get assurance from you
concerning my 30% before I will proceed.
I want us to transact this business and share the money, since the
shipper has abandoned it and ran away. We will contribute to pay for
the Non inspection fee and arrange for the boxes to be moved out of
this Airport to your address, once I am through, I will deploy the
services of a secured shipping Company to provide the security it
needs to your doorstep. Or I can bring it myself to avoid any more
trouble. But I will share it 70% to you and 30% to me. But you have to
assure me of my 30%. Do respond to me if you are interested to
transact this deal me.
Looking forward to hear from you
Sincerely,
Howard Renee Woods
[email protected]
Delivered-To:
Received: from
by with LMTP id qOOuEEhQ9ly7DAAAjbubUg
for <>; Tue, 04 Jun 2019 04:04:40 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 04 Jun 2019 04:04:40 -0700
Received: from mail-it1-f196.google.com ([209.85.166.196]:39378)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hY7F5-0000qB-Ia
for ; Tue, 04 Jun 2019 04:04:40 -0700
Received: by mail-it1-f196.google.com with SMTP id j204so26261714ite.4
for <>; Tue, 04 Jun 2019 04:04:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;bh=8vbanB6ROQPeypTxRh9K2sBT2UUJKmR4dYJSXOMsROA=;
b=GpQ3eEdRaJMQ0heFGcUeuXFZ74+qWHaoVFF8IwSFl4+6LBbj8BEf+U6udBeAvZ3dPw
TeiMNkZITmOEBKnlvo4WES7oHbH9eKi7MqfPMzPrDzuqpxDr/nj/4u7smt6QbDzPzwEr
coW25dgs2NCKPjXdEAMmSxQA071jo0pAr5/e02VCN9+Y9+VnxSwAbZqIG3UPhM+Tkkz1
OnTpuTkAReOdTgqrb/J04bWta8SYJZI9KGw2J4NdehxaX+xljQJLZe7ReBLlNP4kyLZF
Pw+w9X4mBTB4zHoKqzv7TrRpwkG6+sRQomrHdq3xSVofujNFsPUh5dOoiwJht5yj1aPW
HsSQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id:subject:to;
bh=8vbanB6ROQPeypTxRh9K2sBT2UUJKmR4dYJSXOMsROA=;
b=aA5Rcnrw0eYIbkm75QDeqL37+e1UAVy61mrbcVtR3/AYCh1Iu5FRdOzvgxDCzYOmEF
KZ4NjcHYqfB/XfVS5EAKn1dFP2ddkBVzRJ7UtiSTvjzsTexJcvmX/MMQIiGntjaLKAhc
fAyRAEAPPpBJ2zDvBLzQcpMka48X7SjDpOLJphyovrUGHHktgC7lnoe6/5fLl6JmEP4k
ZRNVPy++MPMvmhfWMyzRJodWuKl5XQkL7qygr2mg4FmrB+a/EwU67DGHGDtIXpFawsqE
SUIKY2FQeN79Ok7eBWZAD0nfjcvChEpPRSiNA5bNETl8fOrD6p7xYilusNZay8FUx1js
xetA==
X-Gm-Message-State: APjAAAWmZgyGfGTdg1X8mnwdPMW9w5spQOLXEYsDKEVIxf+PuzUBDS01
ugQ0VfF9SYFY6A4FAzvCoUS0c8c7UyHnRqGE++E=
X-Google-Smtp-Source: APXvYqyPOpnv7wLZGaZo9rUjPcyLBrWM02hTSV30aNYipFm2en84/Z9C0Lhc3abvxMKigIS2pjoRbvYDHCdhSHaIRQE=
X-Received: by 2002:a02
: with SMTP id 126mr19202139jaz.72.1559646234548;Tue, 04 Jun 2019 04:03:54 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a92:8489:0:0:0:0:0 with HTTP; Tue, 4 Jun 2019 04:03:54 -0700 (PDT)
Reply-To: [email protected]
From: Howard Renee Woods <[email protected]>
Date: Tue, 4 Jun 2019 12:03:54 +0100
Message-ID: <CAGLzmh6aLP2cEVKoE9w49fGZeZSRJPWjqkW6o-=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=9.6
X-Spam-Score: 96
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hartsfield Jackson Atlanta International Airport Address:
6000 N Terminal Pkwy Atlanta CA 30320, USA Code: ATL [...]
Content analysis details: (9.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.166.196 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(loganbelinsky[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(creditcommission2005[at]yahoo.com)
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.7 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.196 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.1 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Beneficiary
Hartsfield Jackson Atlanta International Airport
Address: 6000 N Terminal Pkwy Atlanta CA 30320, USA
Code: ATL
Elevation: 313 m
Owner: Atlanta
Phone: + 1 347-980-0050
Attention: Beneficiary,
My Name is Mr. Howard Renee Woods; I work for the U.S Customs and
Border Protection Unit, here in Hartsfield Jackson Atlanta
International Airport (ATL). We are rounding up for the last Quarter
of the auditing, all abandon Consignment in US Airports are being
transfer to our facilities here for inspection and confiscation.
During our investigation, I discovered an abandoned shipment on your
name which was transferred to our facility here in Hartsfield Jackson
Atlanta International Airport, and when scanned it revealed an
undisclosed sum of money in a Metal Trunk Box.
The consignment was abandoned because the Content was not properly
declared by the consignee as money, rather it was declared as personal
effect to avoid diversion by the Diplomatic Agent also the Diplomat
inability to pay for Non Inspection Fees.
On my assumption, the boxes will contain more than (US$8,300,000.00)
and the consignment is still left in storage house till today through
a Courier Dispatch Service. The Consignment is a metal box with weight
of about 242LBS (Internal dimension: W61 x H156 x D73 (cm). Effective
capacity: 680 L.) Approximately.
I want to use my good office and clear the Consignment and deliver it
to you. If you WILL ACCEPT MY CONDITION AND want us to transact the
delivery for mutual benefit, you should provide your name, Phone
Number and full address, to cross check if it corresponds with the
address on the official document including the name of nearest
Airport around you and other details. You should send the required
details to me for onward delivery. All communication must be held
extremely confidential. I can get everything concluded within 24 to 48
hours upon your acceptance and proceed to your address for delivery.
But it must be on the condition that you will give me 30% of the
amount contained in the boxes and I must get assurance from you
concerning my 30% before I will proceed.
I want us to transact this business and share the money, since the
shipper has abandoned it and ran away. We will contribute to pay for
the Non inspection fee and arrange for the boxes to be moved out of
this Airport to your address, once I am through, I will deploy the
services of a secured shipping Company to provide the security it
needs to your doorstep. Or I can bring it myself to avoid any more
trouble. But I will share it 70% to you and 30% to me. But you have to
assure me of my 30%. Do respond to me if you are interested to
transact this deal me.
Looking forward to hear from you
Sincerely,
Howard Renee Woods
[email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
