by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id aEieJAzhF1sJCAAAjbubUg
for <>; Wed, 06 Jun 2018 06:26:36 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 06 Jun 2018 06:26:36 -0700
Received: from mail.tel.ru ([87.249.14.90]:36322)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fQYSP-0000WS-Ii
for ; Wed, 06 Jun 2018 06:26:36 -0700
Received: from [78.108.195.82] (helo=User)
by mail.tel.ru with smtp (Exim 4.76 (FreeBSD))
(envelope-from <[email protected]>)
id 1fQYSU-000LGY-G8; Wed, 06 Jun 2018 16:26:38 +0300
Reply-To: <[email protected]>
From: "Peter Douglas"<[email protected]>
Date: Wed, 6 Jun 2018 06:25:53 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary I am Peter Douglas Director Inspection Unit
United Nations Inspection Agent in HartsfieldJackson Atlanta International
Airport Atlanta GA. We are rounding up for the first Quater of the auditing,
all abandom Consignment in US Airports are being transfer to our facilities
here for inspection and confiscation. During our investigation, I discovered
An abandoned shipment on your name which was transferred to our facility
here in HartsfieldJackson Atlanta International Airport and when scanned
it revealed an undisclosed sum of money in a Metal Trunk Box. The consignment
was abandoned because the Content was not properly declared by the consignee
as money, rather it was declared as personal effect to avoid diversion by
the Diplomatic Agent also the Diplomat inability to pay for Non Inspection
Fees. [...]
Content analysis details: (19.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 MISSING_HEADERS Missing To: header
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[87.249.14.90 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(pppdouglas12[at]gmail.com)
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.1 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** For Mutual Benefit
Dear Beneficiary
On my assumption, the boxes will contain more that $6M and the consignment is still
left in storage facility till today. The Consignment is a metal box with weight of
about 242LBS (Internal dimension: W61 x H156 x D73 (cm). Effective capacity: 680
L.)Approximately.
The details of the consignment including your name the official document from United
Nation office in London are tagged on the Metal Trunk box.
I want to use my good office and clear the Consignment and deliver it to you. If you
WILL ACCEPT MY CONDITION AND want us to transact the delivery for mutual benefit,
you should provide your name, Phone Number and full address, to cross check if it
corresponds with the address on the official document including the name of nearest
Airport around you and other details. You should send the required details to me for
onward delivery.
All communication must be held extremely confidential. I can get everything
concluded within 24 to 48 hours upon your acceptance and proceed to your address for
delivery. But it must be on the condition that you will give me 30% of the amount
contained in the boxes and i must get assurance from you concerning my 30% before i
will proceed.
I want us to transact this business and share the money, since the shipper have
abandoned it and ran away. I will pay for the Non inspection fee and arrange for the
boxes to be moved out of this Airport to your address, Once i am through, i will
deploy the services of a secured shipping Company to provide the security it needs
to your doorstep. or i can bring it by myself to avoid any more trouble. But i will
share it 70% to you and 30% to me. But you have to assure me of my 30%. do respond
to me immediately via my private email: [email protected] if you are
interested to conclude this with me.
Looking forward to hear from you
Best Regards,
Peter Douglas
INSPECTION OFFICER
Delivered-To:
Received: from
by with LMTP id aEieJAzhF1sJCAAAjbubUg
for <>; Wed, 06 Jun 2018 06:26:36 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 06 Jun 2018 06:26:36 -0700
Received: from mail.tel.ru ([87.249.14.90]:36322)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fQYSP-0000WS-Ii
for ; Wed, 06 Jun 2018 06:26:36 -0700
Received: from [78.108.195.82] (helo=User)
by mail.tel.ru with smtp (Exim 4.76 (FreeBSD))
(envelope-from <[email protected]>)
id 1fQYSU-000LGY-G8; Wed, 06 Jun 2018 16:26:38 +0300
Reply-To: <[email protected]>
From: "Peter Douglas"<[email protected]>
Date: Wed, 6 Jun 2018 06:25:53 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary I am Peter Douglas Director Inspection Unit
United Nations Inspection Agent in HartsfieldJackson Atlanta International
Airport Atlanta GA. We are rounding up for the first Quater of the auditing,
all abandom Consignment in US Airports are being transfer to our facilities
here for inspection and confiscation. During our investigation, I discovered
An abandoned shipment on your name which was transferred to our facility
here in HartsfieldJackson Atlanta International Airport and when scanned
it revealed an undisclosed sum of money in a Metal Trunk Box. The consignment
was abandoned because the Content was not properly declared by the consignee
as money, rather it was declared as personal effect to avoid diversion by
the Diplomatic Agent also the Diplomat inability to pay for Non Inspection
Fees. [...]
Content analysis details: (19.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 MISSING_HEADERS Missing To: header
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[87.249.14.90 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(pppdouglas12[at]gmail.com)
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.1 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** For Mutual Benefit
Dear Beneficiary
On my assumption, the boxes will contain more that $6M and the consignment is still
left in storage facility till today. The Consignment is a metal box with weight of
about 242LBS (Internal dimension: W61 x H156 x D73 (cm). Effective capacity: 680
L.)Approximately.
The details of the consignment including your name the official document from United
Nation office in London are tagged on the Metal Trunk box.
I want to use my good office and clear the Consignment and deliver it to you. If you
WILL ACCEPT MY CONDITION AND want us to transact the delivery for mutual benefit,
you should provide your name, Phone Number and full address, to cross check if it
corresponds with the address on the official document including the name of nearest
Airport around you and other details. You should send the required details to me for
onward delivery.
All communication must be held extremely confidential. I can get everything
concluded within 24 to 48 hours upon your acceptance and proceed to your address for
delivery. But it must be on the condition that you will give me 30% of the amount
contained in the boxes and i must get assurance from you concerning my 30% before i
will proceed.
I want us to transact this business and share the money, since the shipper have
abandoned it and ran away. I will pay for the Non inspection fee and arrange for the
boxes to be moved out of this Airport to your address, Once i am through, i will
deploy the services of a secured shipping Company to provide the security it needs
to your doorstep. or i can bring it by myself to avoid any more trouble. But i will
share it 70% to you and 30% to me. But you have to assure me of my 30%. do respond
to me immediately via my private email: [email protected] if you are
interested to conclude this with me.
Looking forward to hear from you
Best Regards,
Peter Douglas
INSPECTION OFFICER
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
