by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id SNwTJ+Z22Vt9BwAAjbubUg
for <>; Wed, 31 Oct 2018 02:33:26 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 31 Oct 2018 02:33:26 -0700
Received: from mail-it1-f196.google.com ([209.85.166.196]:38501)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gHmsP-0000UH-GZ
for ; Wed, 31 Oct 2018 02:33:26 -0700
Received: by mail-it1-f196.google.com with SMTP id j9so5463199itl.3
for <>; Wed, 31 Oct 2018 02:33:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=Ja0UrHM0rJvumNNlDTqkZQ9gtP6E9au3yKeJOQr130Q=;
b=vFe8/HIholNl1UIq2t34WmV9yU3XwPmoPnEfM5Z1727IYZbkeyXi+XWh4Dc6gDvGNv
5HpebG+DJR5Pg8ObQePanE3AACTQNWesUbr85+jFA/7BgawZC+vyCmTxpU2WLS8b0FuX
AfKY0P1N974Srwn5SRiq6I4DfeQhuVY5aoOmtI+djujUl1aEd2UoB0f6LZr2iQlMeuNc
tWX2LqhAyG4s0yQUMw1BlV2LNMPmL59O8Y551K9SBiramsva6KaLhfHKUtSdwwrkZTjF
bP6d9Bj+/E42PY+X9ug6+HVQ7ieIQSbbI1t/2IlOF64Te5ZZbG/6jrPvDpj/Z0VFkt8X
zgcg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:frommessage-id
:subject:to;
bh=Ja0UrHM0rJvumNNlDTqkZQ9gtP6E9au3yKeJOQr130Q=;
b=jrtGpN8jPjSxH9NC/4EE0T6wTlzt4PCTRMz9Ra76vtkqXoY5lc1jV62+ifuqYemMvd
v7wk+15YP41Z1EpKxw3RABjC7PsB6L2SXfl8KvqXVXUv/e27HY42SrWCTkisjV8vYx0z
dIJAqfmVbFcAWn6FIPpkUaib0LYYK2Cx+EDScnsAPf7Ym8p9KWfKDjf03L4m4RJqMceG
25P4zRNlRS2N+js55fXVmZOc4NcaLlg+CY9g53LO4Ecb0fnVdt3htUAHs7t2BRg1stbl
uX3LUf0mVZLzptBhlo32Uo4SKgq3pv8grI/OG2CkUjzLHb9vKanIg5CMntE0Cf9Ds4W9
4KpQ==
X-Gm-Message-State: AGRZ1gKaq7vbQHtJX6zw0alhZKy+xPf/qyyvETAju3WmEZ1eLSwwhShb
Esiljl2kOr1gQ3Sk5un7qIR+4rIfTapbyg8znWY=
X-Google-Smtp-Source: AJdET5eHhhtReRx4uz9CYoS+PC9QUi/JPKZBUBESCuRYf3Glb3qE7bf0rehsme73bi6WhM0Vlx3cyDRP1aPJm6/7bLA=
X-Received: by 2002:a02:9951:: with SMTP id d17-v6mr1558235jak.78.1540978365690;
Wed, 31 Oct 2018 02:32:45 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: Rev Henry Mike <[email protected]>
Date: Wed, 31 Oct 2018 10:20:20 +0100
Message-ID: <CA+zrv+FUjUXroLCLgYnH+Bh4S8YCK2og=[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000180acb057982fc6e"
Bcc:
X-Spam-Status: Yes, score=10.6
X-Spam-Score: 106
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good morning, I am Rev Henry Mike the Assistant Director
Agency Chicago O Hare International Airport USA, We have been trying to reach
you on number and you Cell about I discovered an abandoned shipment from
a Diplomat. [...]
Content analysis details: (10.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.166.196 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.196 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (citibank.newyork74[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(rev.hanrymikeusa[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of empty
lines
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Good News Reply Immediately
Good morning, I am Rev Henry Mike the Assistant Director Agency Chicago O
Hare International Airport USA, We have been trying to reach you on number
and you Cell about I discovered an abandoned shipment from a Diplomat.
During my recent routine check at the Airport Storage / vault on withheld
packages, I discovered an abandoned shipment from a Diplomat from London
and Africa, Revealed When it scanned an undisclosed sum of money in two
Metal Trunk Boxes weighing approximately 35 kg each. The consignment was
abandoned Because the Contents was not properly Declared by the consignee
as "MONEY" rather it was Declared as staff effect to avoid interrogation
And Also the Inability of the diplomat to pay for International Consignment
Money Movement charge before bringing in consignment into the U.S. and we
refused to return the consignment back where it came from since, We have
already received it.
On my assumption, Your two consignment trunk boxes Contains the total sum
of (US$34.5 Million) and the consignment is still left in our Storage House
here at the O Hare International Airport USA. till date. The details of the
consignment Including your name, your email address and the official
document from the United Nations office in Geneva are tagged on the Metal
Trunk boxes in your favor. However, to enable me
confirm if you are the actual recipient of this consignment, I will advise
you to Provide your current Phone Number and Full Address to enable me
cross check if it corresponds With The address on the official documents
Including the Name of the nearest Airport around your city.
PLEASE NOTE THAT this consignment is supposed to Have Been returned to the
United States Treasury Department as unclaimed delivery due to the delays
in the Concluding clearance processes and it is the more reason why you
have to act fast now to claim your consignment before further action of the
US Government.
The unpaid International Consignment Money Movement charge is the
Government revenue income charges which Can not be waved or ignore and we
do not Have Any legal authority to deduct any money out from your
consignment before delivery to you, so note that you are in title to
receive your consignment with its exact content, and right now the U.S.
Government is expecting you to clear up the unpaid International
Consignment Money Movement charge as you receive this mail.
So in order words, I will advise you to send the required details to me for
quick processing and response. Once we receive your information Including
the payment receipt for the International Consignment Money Movement
Charges, I can get everything Concluded Within 3-6 hours upon the receipt
of your respond to our email.
I wait to hear from you urgently if you are still alive.
Thanks for your understanding & co-operation .
Rev Henry Mike
Assistant Director Agency Chicago
O Hare International Airport USA
CC: Mr Gilson Josaph
Group Chief Executive
CC: United Nation
CC: IMF
CALL/SMS: (312) 788-7326
Delivered-To:
Received: from
by with LMTP id SNwTJ+Z22Vt9BwAAjbubUg
for <>; Wed, 31 Oct 2018 02:33:26 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 31 Oct 2018 02:33:26 -0700
Received: from mail-it1-f196.google.com ([209.85.166.196]:38501)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gHmsP-0000UH-GZ
for ; Wed, 31 Oct 2018 02:33:26 -0700
Received: by mail-it1-f196.google.com with SMTP id j9so5463199itl.3
for <>; Wed, 31 Oct 2018 02:33:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;bh=Ja0UrHM0rJvumNNlDTqkZQ9gtP6E9au3yKeJOQr130Q=;
b=vFe8/HIholNl1UIq2t34WmV9yU3XwPmoPnEfM5Z1727IYZbkeyXi+XWh4Dc6gDvGNv
5HpebG+DJR5Pg8ObQePanE3AACTQNWesUbr85+jFA/7BgawZC+vyCmTxpU2WLS8b0FuX
AfKY0P1N974Srwn5SRiq6I4DfeQhuVY5aoOmtI+djujUl1aEd2UoB0f6LZr2iQlMeuNc
tWX2LqhAyG4s0yQUMw1BlV2LNMPmL59O8Y551K9SBiramsva6KaLhfHKUtSdwwrkZTjF
bP6d9Bj+/E42PY+X9ug6+HVQ7ieIQSbbI1t/2IlOF64Te5ZZbG/6jrPvDpj/Z0VFkt8X
zgcg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id:subject:to;
bh=Ja0UrHM0rJvumNNlDTqkZQ9gtP6E9au3yKeJOQr130Q=;
b=jrtGpN8jPjSxH9NC/4EE0T6wTlzt4PCTRMz9Ra76vtkqXoY5lc1jV62+ifuqYemMvd
v7wk+15YP41Z1EpKxw3RABjC7PsB6L2SXfl8KvqXVXUv/e27HY42SrWCTkisjV8vYx0z
dIJAqfmVbFcAWn6FIPpkUaib0LYYK2Cx+EDScnsAPf7Ym8p9KWfKDjf03L4m4RJqMceG
25P4zRNlRS2N+js55fXVmZOc4NcaLlg+CY9g53LO4Ecb0fnVdt3htUAHs7t2BRg1stbl
uX3LUf0mVZLzptBhlo32Uo4SKgq3pv8grI/OG2CkUjzLHb9vKanIg5CMntE0Cf9Ds4W9
4KpQ==
X-Gm-Message-State: AGRZ1gKaq7vbQHtJX6zw0alhZKy+xPf/qyyvETAju3WmEZ1eLSwwhShb
Esiljl2kOr1gQ3Sk5un7qIR+4rIfTapbyg8znWY=
X-Google-Smtp-Source: AJdET5eHhhtReRx4uz9CYoS+PC9QUi/JPKZBUBESCuRYf3Glb3qE7bf0rehsme73bi6WhM0Vlx3cyDRP1aPJm6/7bLA=
X-Received: by 2002:a02:9951:: with SMTP id d17-v6mr1558235jak.78.1540978365690;
Wed, 31 Oct 2018 02:32:45 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: Rev Henry Mike <[email protected]>
Date: Wed, 31 Oct 2018 10:20:20 +0100
Message-ID: <CA+zrv+FUjUXroLCLgYnH+Bh4S8YCK2og=[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000180acb057982fc6e"
Bcc:
X-Spam-Status: Yes, score=10.6
X-Spam-Score: 106
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good morning, I am Rev Henry Mike the Assistant Director
Agency Chicago O Hare International Airport USA, We have been trying to reach
you on number and you Cell about I discovered an abandoned shipment from
a Diplomat. [...]
Content analysis details: (10.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.166.196 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.196 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (citibank.newyork74[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(rev.hanrymikeusa[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of empty
lines
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Good News Reply Immediately
Good morning, I am Rev Henry Mike the Assistant Director Agency Chicago O
Hare International Airport USA, We have been trying to reach you on number
and you Cell about I discovered an abandoned shipment from a Diplomat.
During my recent routine check at the Airport Storage / vault on withheld
packages, I discovered an abandoned shipment from a Diplomat from London
and Africa, Revealed When it scanned an undisclosed sum of money in two
Metal Trunk Boxes weighing approximately 35 kg each. The consignment was
abandoned Because the Contents was not properly Declared by the consignee
as "MONEY" rather it was Declared as staff effect to avoid interrogation
And Also the Inability of the diplomat to pay for International Consignment
Money Movement charge before bringing in consignment into the U.S. and we
refused to return the consignment back where it came from since, We have
already received it.
On my assumption, Your two consignment trunk boxes Contains the total sum
of (US$34.5 Million) and the consignment is still left in our Storage House
here at the O Hare International Airport USA. till date. The details of the
consignment Including your name, your email address and the official
document from the United Nations office in Geneva are tagged on the Metal
Trunk boxes in your favor. However, to enable me
confirm if you are the actual recipient of this consignment, I will advise
you to Provide your current Phone Number and Full Address to enable me
cross check if it corresponds With The address on the official documents
Including the Name of the nearest Airport around your city.
PLEASE NOTE THAT this consignment is supposed to Have Been returned to the
United States Treasury Department as unclaimed delivery due to the delays
in the Concluding clearance processes and it is the more reason why you
have to act fast now to claim your consignment before further action of the
US Government.
The unpaid International Consignment Money Movement charge is the
Government revenue income charges which Can not be waved or ignore and we
do not Have Any legal authority to deduct any money out from your
consignment before delivery to you, so note that you are in title to
receive your consignment with its exact content, and right now the U.S.
Government is expecting you to clear up the unpaid International
Consignment Money Movement charge as you receive this mail.
So in order words, I will advise you to send the required details to me for
quick processing and response. Once we receive your information Including
the payment receipt for the International Consignment Money Movement
Charges, I can get everything Concluded Within 3-6 hours upon the receipt
of your respond to our email.
I wait to hear from you urgently if you are still alive.
Thanks for your understanding & co-operation .
Rev Henry Mike
Assistant Director Agency Chicago
O Hare International Airport USA
CC: Mr Gilson Josaph
Group Chief Executive
CC: United Nation
CC: IMF
CALL/SMS: (312) 788-7326
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
