by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id +A25HQQvgFy1TgAAjbubUg
for <>; Wed, 06 Mar 2019 12:35:16 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 06 Mar 2019 12:35:16 -0800
Received: from server.virtualmultimedia.us ([198.154.239.118]:60308)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1h1dFs-0005EO-If
for ; Wed, 06 Mar 2019 12:35:16 -0800
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=gefforestalbolivia.com; s=default; h=Reply-To:Date:From:To:Subject:
Content-Description:Content-Transfer-Encoding:MIME-Version:Content-Type:
Sender:Message-ID:Cc:Content-ID:Resent-Date:Resent-From:Resent-Sender:
Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=CbdQPf3jTRmt+do3cAgq+nU2KEUIUrQ6aQx3tbffHQI=; b=BhiNmRvwnPRK8eyv6xrNzNFQy
aU4VdnZV0gVLjoEKFJB265M2jr181COMRm9qWp6PNn1td6E6qMlKm027hIIlXS/D2T6PKbbBYFhJR
2lS0AChozuwh49mcfyiShGTTAjhr9cFcc203ltl3PhGpkKf3aBDJkPO8PImALkH6kFz7MWYUjJEVp
484Y7GeyDBLDf/vKuuTTwYyXbkohWZ0gq6g+LUv5VxjSMboreRM4Uu8+V24PFcDMk/IJeV4GZyKpE
5w5LAuxNA4YT+MBuTxIbWXzfMN5nY5WIGcwH42D9i8KKKS+h6m1uizAQ5tKnnzuf+Ro9WCx45XX2H
DHBm7tG5A==;
Received: from [45.35.196.147] (port=63405)
by server.virtualmultimedia.us with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.91)
(envelope-from <[email protected]>)
id 1h1dTJ-0000fY-U3; Wed, 06 Mar 2019 20:49:02 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr John Brethren Director Inspection Unit" <[email protected]
Date: Wed, 06 Mar 2019 12:37:34 -0800
Reply-To: [email protected]
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.virtualmultimedia.us
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gefforestalbolivia.com
X-Get-Message-Sender-Via: server.virtualmultimedia.us: authenticated_id: [email protected]
X-Authenticated-Sender: server.virtualmultimedia.us: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=16.9
X-Spam-Score: 169
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My name is Mr John Brethren ,i am the Director Inspection
Unit, United Nations Inspection Agent. We are currently in Gainesville Regional
Airport Gainesville, Florida, United States for official inspection while
i discovered an abandoned shipment from UK via Diplomatic cash package with
your name/email tagged on it,when i personally scanned it, it revealed an
undisclosed sum of money in 2 Metallic Trunk Boxes weighing approximately
75kg each. On my assumption, both of the 2 boxes contain $8 M . [...]
Content analysis details: (16.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(brethrenjohn02[at]gmail.com)
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 KAM_INVFROM Invalid From Header containing mismatched <>'s
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.9 FROM_ADDR_WS Malformed From address
0.6 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.5 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** My subject Mr John Brethren Urgent Notification
My name is Mr John Brethren ,i am the Director Inspection Unit, United Nations
Inspection Agent. We are currently in Gainesville Regional Airport Gainesville,
Florida, United States for official inspection while i discovered an abandoned
shipment from UK via Diplomatic cash package with your name/email tagged on it,when
i personally scanned it, it revealed an undisclosed sum of money in 2 Metallic Trunk
Boxes weighing approximately 75kg each. On my assumption, both of the 2 boxes
contain $8 M .
On further investigation, i discovered that the consignment was abandoned due to
wrong declaration of the content, also the Diplomatic agent inability to pay for the
certificate fee Fees,
I will arrange for the boxes to be moved out of this Airport to your address once we
put heads together and pay for the Clearance Charges, once we are through I will
personally bring the funds to your doorstep.
Now i want to strike a deal with you, in your acceptance to assist me pay for the
Non inspection charges i will proceed on this. I have the capacity to secure the
release of your consignment with my status as a United Nations\\Inspection Agent.
You will give me 10% of the amount in the consignment and you take the remaining 90%
when we cleared the consignment. I am asking for 10% because i want to assist you to
pay for the non inspection charges but if if you feel it is too much for you, you
can give me anything you want from your heart.
If you are not in agreement with this proposal, please disregard it.But if you can
meet with my condition, then we have a deal. I can get everything concluded within
24 to 48 hours and proceed to your address for delivery upon your acceptance. if
you accepts to work with me. Send me your cell phone number and your address and
your full name.
You can as well call me on this number (+1) 352-389-1626 if you wish to speak with
me but if you call and could not reach me on phone note that i am on the field for
inspection, So leave your information so that i can reach you when i am back in the
office.
Signed,
Mr John Brethren
Delivered-To:
Received: from
by with LMTP id +A25HQQvgFy1TgAAjbubUg
for <>; Wed, 06 Mar 2019 12:35:16 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 06 Mar 2019 12:35:16 -0800
Received: from server.virtualmultimedia.us ([198.154.239.118]:60308)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1h1dFs-0005EO-If
for ; Wed, 06 Mar 2019 12:35:16 -0800
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=gefforestalbolivia.com; s=default; h=Reply-To:Date:From:To:Subject:
Content-Description:Content-Transfer-Encoding:MIME-Version:Content-Type:
Sender:Message-ID:Cc:Content-ID:Resent-Date:Resent-From:Resent-Sender:
Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=CbdQPf3jTRmt+do3cAgq+nU2KEUIUrQ6aQx3tbffHQI=; b=BhiNmRvwnPRK8eyv6xrNzNFQy
aU4VdnZV0gVLjoEKFJB265M2jr181COMRm9qWp6PNn1td6E6qMlKm027hIIlXS/D2T6PKbbBYFhJR
2lS0AChozuwh49mcfyiShGTTAjhr9cFcc203ltl3PhGpkKf3aBDJkPO8PImALkH6kFz7MWYUjJEVp
484Y7GeyDBLDf/vKuuTTwYyXbkohWZ0gq6g+LUv5VxjSMboreRM4Uu8+V24PFcDMk/IJeV4GZyKpE
5w5LAuxNA4YT+MBuTxIbWXzfMN5nY5WIGcwH42D9i8KKKS+h6m1uizAQ5tKnnzuf+Ro9WCx45XX2H
DHBm7tG5A==;
Received: from [45.35.196.147] (port=63405)
by server.virtualmultimedia.us with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.91)
(envelope-from <[email protected]>)
id 1h1dTJ-0000fY-U3; Wed, 06 Mar 2019 20:49:02 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr John Brethren Director Inspection Unit" <[email protected]
Date: Wed, 06 Mar 2019 12:37:34 -0800
Reply-To: [email protected]
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.virtualmultimedia.us
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gefforestalbolivia.com
X-Get-Message-Sender-Via: server.virtualmultimedia.us: authenticated_id: [email protected]
X-Authenticated-Sender: server.virtualmultimedia.us: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=16.9
X-Spam-Score: 169
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My name is Mr John Brethren ,i am the Director Inspection
Unit, United Nations Inspection Agent. We are currently in Gainesville Regional
Airport Gainesville, Florida, United States for official inspection while
i discovered an abandoned shipment from UK via Diplomatic cash package with
your name/email tagged on it,when i personally scanned it, it revealed an
undisclosed sum of money in 2 Metallic Trunk Boxes weighing approximately
75kg each. On my assumption, both of the 2 boxes contain $8 M . [...]
Content analysis details: (16.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(brethrenjohn02[at]gmail.com)
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 KAM_INVFROM Invalid From Header containing mismatched <>'s
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.9 FROM_ADDR_WS Malformed From address
0.6 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.5 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** My subject Mr John Brethren Urgent Notification
My name is Mr John Brethren ,i am the Director Inspection Unit, United Nations
Inspection Agent. We are currently in Gainesville Regional Airport Gainesville,
Florida, United States for official inspection while i discovered an abandoned
shipment from UK via Diplomatic cash package with your name/email tagged on it,when
i personally scanned it, it revealed an undisclosed sum of money in 2 Metallic Trunk
Boxes weighing approximately 75kg each. On my assumption, both of the 2 boxes
contain $8 M .
On further investigation, i discovered that the consignment was abandoned due to
wrong declaration of the content, also the Diplomatic agent inability to pay for the
certificate fee Fees,
I will arrange for the boxes to be moved out of this Airport to your address once we
put heads together and pay for the Clearance Charges, once we are through I will
personally bring the funds to your doorstep.
Now i want to strike a deal with you, in your acceptance to assist me pay for the
Non inspection charges i will proceed on this. I have the capacity to secure the
release of your consignment with my status as a United Nations\\Inspection Agent.
You will give me 10% of the amount in the consignment and you take the remaining 90%
when we cleared the consignment. I am asking for 10% because i want to assist you to
pay for the non inspection charges but if if you feel it is too much for you, you
can give me anything you want from your heart.
If you are not in agreement with this proposal, please disregard it.But if you can
meet with my condition, then we have a deal. I can get everything concluded within
24 to 48 hours and proceed to your address for delivery upon your acceptance. if
you accepts to work with me. Send me your cell phone number and your address and
your full name.
You can as well call me on this number (+1) 352-389-1626 if you wish to speak with
me but if you call and could not reach me on phone note that i am on the field for
inspection, So leave your information so that i can reach you when i am back in the
office.
Signed,
Mr John Brethren
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
