by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id UOHXBQ58xVzWPwAAjbubUg
for <>; Sun, 28 Apr 2019 03:10:22 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 28 Apr 2019 03:10:22 -0700
Received: from iberao01.ibername.com ([188.93.227.95]:44882)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hKglI-0004FF-Pw
for ; Sun, 28 Apr 2019 03:10:21 -0700
Received: from [105.112.11.238] (port=57788 helo=User)
by iberao01.ibername.com with esmtpa (Exim 4.91)
(envelope-from <[email protected]>)
id 1hKgka-0009HE-LN; Sun, 28 Apr 2019 11:09:37 +0100
Reply-To: <[email protected]>
From: "Mr Kenneth Wesley"<[email protected]>
Date: Sun, 28 Apr 2019 11:09:36 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - iberao01.ibername.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - refinedmedia.com
X-Get-Message-Sender-Via: iberao01.ibername.com: authenticated_id: [email protected]
X-Authenticated-Sender: iberao01.ibername.com: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=21.1
X-Spam-Score: 211
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: My Friend My name is Mr Kenneth Wesley ,I am the Director
Inspection Unit, United Nations Inspection Agent. We are currently Phoenix
Sky Harbor International Airport United States for official inspection while
i discovered an abandoned shipment from UK via Diplomat with your name/email
tagged on it, when i personally scanned it, it revealed an undisclosed sum
of money in a Metallic Trunk Boxes weighing approximately 65kg each. On my
assumption, each of the 3 boxes will contain more than $8.5 M or above in
each. [...]
Content analysis details: (21.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.1 NSL_RCVD_HELO_USER Received from HELO User
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[188.93.227.95 listed in list.dnswl.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 HK_NAME_MR_MRS No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 MISSING_MID Missing Message-Id: header
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.1 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.3 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Kindly get in touch with us if you are still alive to avoid wrong payment or
Attn: My Friend
My name is Mr Kenneth Wesley ,I am the Director Inspection Unit, United Nations
Inspection Agent. We are currently Phoenix Sky Harbor International Airport United
States for official inspection while i discovered an abandoned shipment from UK via
Diplomat with your name/email tagged on it, when i personally scanned it, it
revealed an undisclosed sum of money in a Metallic Trunk Boxes weighing
approximately 65kg each. On my assumption, each of the 3 boxes will contain more
than $8.5 M or above in each.
On further investigation, i discovered that the consignment was abandoned due to
wrong declaration of the content, also the Diplomat inability to pay for Non
Inspection Fees, because he did not know the content of the boxes.
I will arrange for the boxes to be moved out of this Airport to your address, once
we are through I will deploy the services of a secured shipping Company geared to
provide the security it needs to your doorstep.
Now i want to strike a deal with you, in your acceptance i will proceed on this. I
have the capacity to secure the release of your consignment with my status as an
United Nations\Inspection Agent. You will give me 20% of the amount in the
consignment and you take the remaining 80%. Consequently.when i cleared it,
If you are not in agreement with this proposal, please disregard it. But if you can
meet with my condition, then we have a deal. I can get everything concluded within
24 to 48 hours and proceed to your address for delivery upon your acceptance.
Write me on this email: if you accepts to work with me.Send me your cell phone
number and your address and your full name attachment copy of your photo.
You can as well call me on this number +1-469-712-5160 if you wish to speak with me
but if you call and could not reach me on phone note that i am on the field for
inspection, So leave your information so that i can reach you when i am back in the
office.
Signed,
Mr Kenneth Wesley
Delivered-To:
Received: from
by with LMTP id UOHXBQ58xVzWPwAAjbubUg
for <>; Sun, 28 Apr 2019 03:10:22 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 28 Apr 2019 03:10:22 -0700
Received: from iberao01.ibername.com ([188.93.227.95]:44882)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hKglI-0004FF-Pw
for ; Sun, 28 Apr 2019 03:10:21 -0700
Received: from [105.112.11.238] (port=57788 helo=User)
by iberao01.ibername.com with esmtpa (Exim 4.91)
(envelope-from <[email protected]>)
id 1hKgka-0009HE-LN; Sun, 28 Apr 2019 11:09:37 +0100
Reply-To: <[email protected]>
From: "Mr Kenneth Wesley"<[email protected]>
Date: Sun, 28 Apr 2019 11:09:36 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - iberao01.ibername.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - refinedmedia.com
X-Get-Message-Sender-Via: iberao01.ibername.com: authenticated_id: [email protected]
X-Authenticated-Sender: iberao01.ibername.com: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=21.1
X-Spam-Score: 211
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: My Friend My name is Mr Kenneth Wesley ,I am the Director
Inspection Unit, United Nations Inspection Agent. We are currently Phoenix
Sky Harbor International Airport United States for official inspection while
i discovered an abandoned shipment from UK via Diplomat with your name/email
tagged on it, when i personally scanned it, it revealed an undisclosed sum
of money in a Metallic Trunk Boxes weighing approximately 65kg each. On my
assumption, each of the 3 boxes will contain more than $8.5 M or above in
each. [...]
Content analysis details: (21.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.1 NSL_RCVD_HELO_USER Received from HELO User
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[188.93.227.95 listed in list.dnswl.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 HK_NAME_MR_MRS No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 MISSING_MID Missing Message-Id: header
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.1 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.3 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Kindly get in touch with us if you are still alive to avoid wrong payment or
Attn: My Friend
My name is Mr Kenneth Wesley ,I am the Director Inspection Unit, United Nations
Inspection Agent. We are currently Phoenix Sky Harbor International Airport United
States for official inspection while i discovered an abandoned shipment from UK via
Diplomat with your name/email tagged on it, when i personally scanned it, it
revealed an undisclosed sum of money in a Metallic Trunk Boxes weighing
approximately 65kg each. On my assumption, each of the 3 boxes will contain more
than $8.5 M or above in each.
On further investigation, i discovered that the consignment was abandoned due to
wrong declaration of the content, also the Diplomat inability to pay for Non
Inspection Fees, because he did not know the content of the boxes.
I will arrange for the boxes to be moved out of this Airport to your address, once
we are through I will deploy the services of a secured shipping Company geared to
provide the security it needs to your doorstep.
Now i want to strike a deal with you, in your acceptance i will proceed on this. I
have the capacity to secure the release of your consignment with my status as an
United Nations\Inspection Agent. You will give me 20% of the amount in the
consignment and you take the remaining 80%. Consequently.when i cleared it,
If you are not in agreement with this proposal, please disregard it. But if you can
meet with my condition, then we have a deal. I can get everything concluded within
24 to 48 hours and proceed to your address for delivery upon your acceptance.
Write me on this email: if you accepts to work with me.Send me your cell phone
number and your address and your full name attachment copy of your photo.
You can as well call me on this number +1-469-712-5160 if you wish to speak with me
but if you call and could not reach me on phone note that i am on the field for
inspection, So leave your information so that i can reach you when i am back in the
office.
Signed,
Mr Kenneth Wesley
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
