by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id cBpTO6yqxlvRLwAAjbubUg
for <>; Tue, 16 Oct 2018 20:21:16 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 16 Oct 2018 20:21:16 -0700
Received: from ricky.heliohost.org ([64.62.211.134]:56106)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gCcOW-0003Aw-Mh
for ; Tue, 16 Oct 2018 20:21:16 -0700
Received: from [::1] (port=46792 helo=ricky.heliohost.org)
by ricky.heliohost.org with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gCcNN-000V0W-K1; Tue, 16 Oct 2018 20:20:01 -0700
Received: from 23.235.227.108 ([23.235.227.108]) by ricky.heliohost.org
(Horde Framework) with HTTPS; Wed, 17 Oct 2018 03:20:00 +0000
Date: Wed, 17 Oct 2018 03:20:00 +0000
Message-ID: <[email protected]>
From: Payment Office <[email protected]>
To:
Reply-to: [email protected]
User-Agent: Horde Application Framework 5
Content-Type: text/html; charset=utf-8
Content-Description: HTML Message
MIME-Version: 1.0
Content-Disposition: inline
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ricky.heliohost.org
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ricky.heliohost.org
X-Get-Message-Sender-Via: ricky.heliohost.org: authenticated_id: usntnet/primary_hostname/system user
X-Authenticated-Sender: ricky.heliohost.org: usntnet
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=14.8
X-Spam-Score: 148
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Mr. James J. Bednarz Director Inspection Unit/Cargo Section
Newark Liberty International Airport Newark New Jersey Telephone: 517 295-3661
Attn : I am Mr. James Bednarz Director Inspection United Nations Inspection
Agency here in Newark Liberty International airport New York City. During
my recent routine check at the Airport Storage/vault on withheld packages,
I discovered an abandoned shipment from a Diplomat from London and Africa,
when scanned it revealed an undisclosed sum of money in two Metal Trunk Boxes
weighing approximately 35kg each. [...]
Content analysis details: (14.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(officem91[at]aol.com)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[64.62.211.134 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Your Payment Has Been Recovered
Mr. James J. Bednarz
Director Inspection Unit/Cargo Section
Newark Liberty International Airport
Newark New Jersey
Telephone: 517 295-3661
Attn :
I am Mr. James Bednarz Director Inspection United Nations Inspection Agency here in
Newark Liberty International airport New York City. During my recent routine check
at the Airport Storage/vault on withheld packages, I discovered an abandoned
shipment from a Diplomat from London and Africa, when scanned it revealed an
undisclosed sum of money in two Metal Trunk Boxes weighing approximately 35kg each.
The consignment was abandoned because the Contents was not properly declared by the
consignee as “MONEY” rather it was declared as personal effect to avoid
interrogation by the customs and also the inability of the diplomat to pay for the
Non Inspection Charges which is about $5,850 USD before bringing in the consignment
into USA which from the delivery air way bill the shipment was suppose to be
delivered to your address and we refused to return back the consignment where it
came from since, we have already received it.
On my assumption, and after the scan each of the boxes will contain more than USD5.5
Million each and the consignment is still left in our Storage House here at the
airport till date. Your name and address is on the consignment while the airway
bill has been received by my office.
However, to enable me confirm if you are the actual recipient of this consignment,
please provide me with your current Phone Number and Full Address to enable me cross
check if it c corresponds with the address on the official documents including the
Name of the nearest Airport around your city for immediate delivery.
Note that this consignment is supposed to have been returned to the United States
Treasury Department as unclaimed delivery due to the delays in concluding the
clearance processes and you know that the United States Government is under pressure
and seriously indeed of funds, so I advise you hasten up and clear it so I will
place it for the next day delivery of which possibly I will have to accompany the
delivery to your address to ensure it's smooth and safe arrival to your address,
that is also part of my duty .
The unpaid sum of $5,850 is the Government income revenue charges which can not be
weaved or ignored and we do not have any legal authority to take any thing out
from your consignment before delivery to you, the only thing that will bring the
eyes of the custom back to the consignment is if your delay in clearing it up for
immediate delivery. The US Government is expecting you to pay the above charges
without delay .
So in order words, I will advise you to send the required details to me for quick
processing and response. Once I receive your information including the receipt of
the payment Sum of $5,850 for the Non Inspection Charges, I can get every thing
concluded within 3-6 hours upon your acceptance and proceed to your address for
delivery.
Please your direct telephone number is required so that we can reach you for more
information, I wait to hear from you urgently if you a re still alive.
Your in service
Mr. James Bednarz
Clearance Agent
Delivered-To:
Received: from
by with LMTP id cBpTO6yqxlvRLwAAjbubUg
for <>; Tue, 16 Oct 2018 20:21:16 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 16 Oct 2018 20:21:16 -0700
Received: from ricky.heliohost.org ([64.62.211.134]:56106)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gCcOW-0003Aw-Mh
for ; Tue, 16 Oct 2018 20:21:16 -0700
Received: from [::1] (port=46792 helo=ricky.heliohost.org)
by ricky.heliohost.org with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gCcNN-000V0W-K1; Tue, 16 Oct 2018 20:20:01 -0700
Received: from 23.235.227.108 ([23.235.227.108]) by ricky.heliohost.org
(Horde Framework) with HTTPS; Wed, 17 Oct 2018 03:20:00 +0000
Date: Wed, 17 Oct 2018 03:20:00 +0000
Message-ID: <[email protected]>
From: Payment Office <[email protected]>
To:
Reply-to: [email protected]
User-Agent: Horde Application Framework 5
Content-Type: text/html; charset=utf-8
Content-Description: HTML Message
MIME-Version: 1.0
Content-Disposition: inline
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ricky.heliohost.org
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ricky.heliohost.org
X-Get-Message-Sender-Via: ricky.heliohost.org: authenticated_id: usntnet/primary_hostname/system user
X-Authenticated-Sender: ricky.heliohost.org: usntnet
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=14.8
X-Spam-Score: 148
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Mr. James J. Bednarz Director Inspection Unit/Cargo Section
Newark Liberty International Airport Newark New Jersey Telephone: 517 295-3661
Attn : I am Mr. James Bednarz Director Inspection United Nations Inspection
Agency here in Newark Liberty International airport New York City. During
my recent routine check at the Airport Storage/vault on withheld packages,
I discovered an abandoned shipment from a Diplomat from London and Africa,
when scanned it revealed an undisclosed sum of money in two Metal Trunk Boxes
weighing approximately 35kg each. [...]
Content analysis details: (14.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(officem91[at]aol.com)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[64.62.211.134 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Your Payment Has Been Recovered
Mr. James J. Bednarz
Director Inspection Unit/Cargo Section
Newark Liberty International Airport
Newark New Jersey
Telephone: 517 295-3661
Attn :
I am Mr. James Bednarz Director Inspection United Nations Inspection Agency here in
Newark Liberty International airport New York City. During my recent routine check
at the Airport Storage/vault on withheld packages, I discovered an abandoned
shipment from a Diplomat from London and Africa, when scanned it revealed an
undisclosed sum of money in two Metal Trunk Boxes weighing approximately 35kg each.
The consignment was abandoned because the Contents was not properly declared by the
consignee as “MONEY” rather it was declared as personal effect to avoid
interrogation by the customs and also the inability of the diplomat to pay for the
Non Inspection Charges which is about $5,850 USD before bringing in the consignment
into USA which from the delivery air way bill the shipment was suppose to be
delivered to your address and we refused to return back the consignment where it
came from since, we have already received it.
On my assumption, and after the scan each of the boxes will contain more than USD5.5
Million each and the consignment is still left in our Storage House here at the
airport till date. Your name and address is on the consignment while the airway
bill has been received by my office.
However, to enable me confirm if you are the actual recipient of this consignment,
please provide me with your current Phone Number and Full Address to enable me cross
check if it c corresponds with the address on the official documents including the
Name of the nearest Airport around your city for immediate delivery.
Note that this consignment is supposed to have been returned to the United States
Treasury Department as unclaimed delivery due to the delays in concluding the
clearance processes and you know that the United States Government is under pressure
and seriously indeed of funds, so I advise you hasten up and clear it so I will
place it for the next day delivery of which possibly I will have to accompany the
delivery to your address to ensure it's smooth and safe arrival to your address,
that is also part of my duty .
The unpaid sum of $5,850 is the Government income revenue charges which can not be
weaved or ignored and we do not have any legal authority to take any thing out
from your consignment before delivery to you, the only thing that will bring the
eyes of the custom back to the consignment is if your delay in clearing it up for
immediate delivery. The US Government is expecting you to pay the above charges
without delay .
So in order words, I will advise you to send the required details to me for quick
processing and response. Once I receive your information including the receipt of
the payment Sum of $5,850 for the Non Inspection Charges, I can get every thing
concluded within 3-6 hours upon your acceptance and proceed to your address for
delivery.
Please your direct telephone number is required so that we can reach you for more
information, I wait to hear from you urgently if you a re still alive.
Your in service
Mr. James Bednarz
Clearance Agent
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
