by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 2LhiL2A2kFvpWwAAjbubUg
for <>; Wed, 05 Sep 2018 13:02:40 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 05 Sep 2018 13:02:40 -0700
Received: from mailfilter22.vodafone.co.nz ([202.73.205.22]:41869)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fxe0Z-000673-B4
for ; Wed, 05 Sep 2018 13:02:40 -0700
Message-Id: <a660e2$[email protected]>
X-IronPort-AV: E=Sophos;i="5.53,334,1531742400";
d="scan'208,217";a="182978765"
Received: from go.furtex.co.nz (HELO User) ([203.109.233.142])
by cust.filter4.content.vf.net.nz with SMTP; 06 Sep 2018 08:01:21 +1200
Reply-To: <[email protected]>
From: "Miss Christine Kiener"<[email protected]>
Date: Wed, 5 Sep 2018 21:01:30 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=29.5
X-Spam-Score: 295
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: A courier diplomat from UN DIPLOMATIC SERVICE . There is a
diplomatic baggages with Airway Bills Nos.= 6026695201 and shipment #:
083 587 9261 respectively containing Family Treasure / gift items I accompanied
with my diplomatic immunity to be delivered to you. I write to let you know
that I have arrived safely in our HEADQUARTER [...]
Content analysis details: (29.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[202.73.205.22 listed in list.dnswl.org]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=c ... sa.com;ip=]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(christine_111[at]usa.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(christine_11[at]usa.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (christine_111[at]usa.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.5 HK_NAME_FM_MR_MRS No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.6 MSOE_MID_WRONG_CASE No description available.
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.4 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** Attn: Owner
Dear owner
I am Miss.Christine Kiener, Head Officer-in-Charge, Administrative Service
Inspection Unit United Nations Inspection Agency in Hatfield-Jackson International
Airport Atlanta, Georgia. During our investigation, I discovered an abandoned
shipment through a Diplomat from United Kingdom which was transferred from JF
Kennedy Airport to our facility here in Marion Ohio, and when scanned it revealed an
undisclosed sum of money in 2 Metal Trunk Boxes weighing approximately 110kg each.
The consignment was abandoned because the Content was not properly declared by the
consignee as money rather it was declared as personal effect/classified document to
either avoid diversion by the Shipping Agent or confiscation by the relevant
authorities. The diplomat's inability to pay for Non Inspection fees among other
things are the reason why the consignment is delayed and abandoned.
By my assessment, each of the boxes contains about $4M or more.They are still left
in the airport storage facility till today. The Consignments like I said are two
metal trunk boxes weighing about 65kg each (Internal dimension: W61 x H156 x D73
(cm) effective capacity: 680 L) Approximately. The details of the consignment
including your name and email on the official document from United Nations' office
in London where the shipment was tagged as personal effects/classified document is
still available with us. As it stands now, you have to reconfirm your full name,
Phone Number, full address so I can cross-check and see if it corresponds with the
one on the official documents. It is now left to you to decide if you still need the
consignment or allow us repatriate it back to UK (place of origin) as we were
instructed.
(REPLY TO THIS EMAIL :
([email protected])
As I did say again, the shipper abandoned it and ran away most importantly because
he gave a false declaration, he could not pay for the yellow tag, he could not
secure a valid non inspection document(s), etc. I am ready to assist you in any way
I can for you to get back this packages provided you will also give me something out
of it (financial gratification). You can either come in person, or you engage the
services of a secure shipping/delivery Company/agent that will provide the necessary
security that is required to deliver the package to your doorstep or the destination
of your choice. I need all the guarantee that I can get from you before I can get
involved in this project.
Please Reply this email strictly at
[email protected]
Best Regards,
Miss Christine Kiener
Head Officer-in-Charge
Administrative Service Inspection Unit
E-mail: [email protected]
Delivered-To:
Received: from
by with LMTP id 2LhiL2A2kFvpWwAAjbubUg
for <>; Wed, 05 Sep 2018 13:02:40 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 05 Sep 2018 13:02:40 -0700
Received: from mailfilter22.vodafone.co.nz ([202.73.205.22]:41869)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fxe0Z-000673-B4
for ; Wed, 05 Sep 2018 13:02:40 -0700
Message-Id: <a660e2$[email protected]>
X-IronPort-AV: E=Sophos;i="5.53,334,1531742400";
d="scan'208,217";a="182978765"
Received: from go.furtex.co.nz (HELO User) ([203.109.233.142])
by cust.filter4.content.vf.net.nz with SMTP; 06 Sep 2018 08:01:21 +1200
Reply-To: <[email protected]>
From: "Miss Christine Kiener"<[email protected]>
Date: Wed, 5 Sep 2018 21:01:30 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=29.5
X-Spam-Score: 295
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: A courier diplomat from UN DIPLOMATIC SERVICE . There is a
diplomatic baggages with Airway Bills Nos.= 6026695201 and shipment #:
083 587 9261 respectively containing Family Treasure / gift items I accompanied
with my diplomatic immunity to be delivered to you. I write to let you know
that I have arrived safely in our HEADQUARTER [...]
Content analysis details: (29.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[202.73.205.22 listed in list.dnswl.org]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=c ... sa.com;ip=]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(christine_111[at]usa.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(christine_11[at]usa.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (christine_111[at]usa.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.5 HK_NAME_FM_MR_MRS No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.6 MSOE_MID_WRONG_CASE No description available.
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.4 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** Attn: Owner
Dear owner
I am Miss.Christine Kiener, Head Officer-in-Charge, Administrative Service
Inspection Unit United Nations Inspection Agency in Hatfield-Jackson International
Airport Atlanta, Georgia. During our investigation, I discovered an abandoned
shipment through a Diplomat from United Kingdom which was transferred from JF
Kennedy Airport to our facility here in Marion Ohio, and when scanned it revealed an
undisclosed sum of money in 2 Metal Trunk Boxes weighing approximately 110kg each.
The consignment was abandoned because the Content was not properly declared by the
consignee as money rather it was declared as personal effect/classified document to
either avoid diversion by the Shipping Agent or confiscation by the relevant
authorities. The diplomat's inability to pay for Non Inspection fees among other
things are the reason why the consignment is delayed and abandoned.
By my assessment, each of the boxes contains about $4M or more.They are still left
in the airport storage facility till today. The Consignments like I said are two
metal trunk boxes weighing about 65kg each (Internal dimension: W61 x H156 x D73
(cm) effective capacity: 680 L) Approximately. The details of the consignment
including your name and email on the official document from United Nations' office
in London where the shipment was tagged as personal effects/classified document is
still available with us. As it stands now, you have to reconfirm your full name,
Phone Number, full address so I can cross-check and see if it corresponds with the
one on the official documents. It is now left to you to decide if you still need the
consignment or allow us repatriate it back to UK (place of origin) as we were
instructed.
(REPLY TO THIS EMAIL :
([email protected])
As I did say again, the shipper abandoned it and ran away most importantly because
he gave a false declaration, he could not pay for the yellow tag, he could not
secure a valid non inspection document(s), etc. I am ready to assist you in any way
I can for you to get back this packages provided you will also give me something out
of it (financial gratification). You can either come in person, or you engage the
services of a secure shipping/delivery Company/agent that will provide the necessary
security that is required to deliver the package to your doorstep or the destination
of your choice. I need all the guarantee that I can get from you before I can get
involved in this project.
Please Reply this email strictly at
[email protected]
Best Regards,
Miss Christine Kiener
Head Officer-in-Charge
Administrative Service Inspection Unit
E-mail: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
