by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id Ai3JD1AnFV+PcQEAibB4EA
(envelope-from <[email protected]>)
for <>; Mon, 20 Jul 2020 01:10:40 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 20 Jul 2020 01:10:40 -0400
Received: from imsantv72.netvigator.com ([210.87.250.172]:46836)
by vps.trucidodolusloricaproject.com with esmtp (Exim 4.93)
(envelope-from <[email protected]>)
id 1jxO4U-000ObG-1W
for ; Mon, 20 Jul 2020 01:10:40 -0400
Received: from ybironout4c.netvigator.com (ybironout4c.netvigator.com [210.87.250.209])
by imsantv72.netvigator.com (8.14.4/8.14.4) with ESMTP id 06K4wcwe006738;
Mon, 20 Jul 2020 12:58:38 +0800
Message-Id: <[email protected]>
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AN+gBZIxVf/36Oxd8RCkCBFYFFAREBA?=
=?us-ascii?q?gM6gjGBNoNEjjqCUQGbI4FpCwEBAToBAgQBAYRCAhgGD4F3JUsSAgUDAgEGBIY?=
=?us-ascii?q?cBTRDFgGFEhAEAQICFwcKAiEFGg0CCAIBDQMOBjkBBBYBAwsBKBMBAgIBAYMWg?=
=?us-ascii?q?koBAS8Gg3CnXoEZGA0NaoFBIWmBcoF9ASOBY4IDkyEHhHQBEwsIg0uEAAGEdoV?=
=?us-ascii?q?EB4MTBgEKGCqJYoFlmhUGBII5JAuOew6BXIYTlEsDgxMOASGBGYkfjBelcYIUc?=
=?us-ascii?q?IJeL4FbEYoakxEkfAl0CBIBCgGLTk2BZWAB?=
X-IronPort-AV: E=Sophos;i="5.75,373,1589212800";
d="scan'208";a="195961224"
Received: from unknown (HELO User) ([223.197.142.126])
by ybironout4v2.netvigator.com with SMTP; 20 Jul 2020 12:57:50 +0800
Reply-To: <[email protected]>
From: "Garry Daniel"<[email protected]>
Date: Sun, 19 Jul 2020 21:58:36 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=57.6
X-Spam-Score: 576
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hartsfield-Jackson Atlanta International Airport 1200 Toffie
Terrace, Atlanta, GA 30354, USA Attention to you. I am Garry Daniel, Head
Officer-in-Charge, and Administrative Service Inspection Unit United Nations
Inspection Agency in Hartsfield-Jackson International Airport Atlanta, Georgia.
During our investig [...]
Content analysis details: (57.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.8 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 NSL_RCVD_HELO_USER Received from HELO User
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[223.197.142.126 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[210.87.250.172 listed in bl.score.senderscore.com]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[210.87.250.172 listed in bl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[210.87.250.172 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?223.197.142.126>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[garryd1[at]hotmail.jp]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[agwillly1[at]gmail.com]
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[garryd1[at]hotmail.jp]
3.1 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.9 MALFORMED_FREEMAIL Bad headers on message from free email
service
4.2 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
2.1 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.7 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.0 FROM_MISSPACED From: missing whitespace
2.0 SPOOFED_FREEMAIL No description available.
0.7 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail
reply-to
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.7 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Final Notification On Your Consignment Delivery
Hartsfield-Jackson Atlanta International Airport
1200 Toffie Terrace, Atlanta, GA 30354, USA
Hartsfield-Jackson Atlanta International Airport
1200 Toffie Terrace, Atlanta, GA 30354, USA
Attention to you.
I am Garry Daniel, Head Officer-in-Charge, and Administrative Service Inspection Unit United Nations Inspection Agency in Hartsfield-Jackson International Airport Atlanta, Georgia. During our investigation, I discovered an abandoned shipment through a Diplomat from Africa which was transferred from JF Kennedy Airport to our facility here in Atlanta, and when scanned it revealed an undisclosed sum of money in 2 Metal Trunk Boxes weighing approximately 130 kg.
The consignment was abandoned because the Content was not properly declared by the consignee as money rather it was declared as personal effect/classified document to either avoid diversion by the Shipping Agent or confiscation by the relevant authorities. The diplomat's inability to pay for Non Inspection fees among other things are the reason why the consignment is delayed and abandoned.
By my assessment, each of the boxes contains $4 Million USD which is a total of $8 Million USD. They are still left in the airport storage facility till today. The Consignments like I said are two metal trunk boxes weighing about 65 kg each (Internal dimension: W61 x H156 x D73 (cm) effective capacity: 680 L) Approximately. The details of the consignment including your name and email on the official document from the United Nations office in Africa where the shipment was tagged as personal effects/classified document is still available with us. As it stands now, you have to reconfirm your full name, Phone Number, full address so I can cross-check and see if it corresponds with the one on the official documents. It is now left to you to decide if you still need the consignment or allow us to repatriate it back to Africa (place of origin) as we were instructed.
As I did say again, the shipper abandoned it and ran away most importantly because he gave a false declaration, he could not pay for the yellow tag, he could not secure a valid non inspection document(s), etc. I am ready to assist you in any way I can for you to get back these packages provided you will also give me something out of it (financial gratification). You can either come in person, or you engage the services of a secure shipping/delivery Company/agent that will provide the necessary security that is required to deliver the package to your doorstep or the destination of your choice. I need the entire guarantee that I can get from you before I can get involved in this project.
If you are still alive, I wait to hear from you urgently for further directives and I will appreciate it if you can keep this matter confidential.
Thanks,
Regards,
Garry Daniel
Signature Flight Support ATL-
Hartsfield-Jackson Atlanta International Airport
1200 Toffie Terrace, Atlanta, GA 30354, USA
Delivered-To:
Received: from
by with LMTP
id Ai3JD1AnFV+PcQEAibB4EA
(envelope-from <[email protected]>)
for <>; Mon, 20 Jul 2020 01:10:40 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 20 Jul 2020 01:10:40 -0400
Received: from imsantv72.netvigator.com ([210.87.250.172]:46836)
by vps.trucidodolusloricaproject.com with esmtp (Exim 4.93)
(envelope-from <[email protected]>)
id 1jxO4U-000ObG-1W
for ; Mon, 20 Jul 2020 01:10:40 -0400
Received: from ybironout4c.netvigator.com (ybironout4c.netvigator.com [210.87.250.209])
by imsantv72.netvigator.com (8.14.4/8.14.4) with ESMTP id 06K4wcwe006738;
Mon, 20 Jul 2020 12:58:38 +0800
Message-Id: <[email protected]>
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AN+gBZIxVf/36Oxd8RCkCBFYFFAREBA?=
=?us-ascii?q?gM6gjGBNoNEjjqCUQGbI4FpCwEBAToBAgQBAYRCAhgGD4F3JUsSAgUDAgEGBIY?=
=?us-ascii?q?cBTRDFgGFEhAEAQICFwcKAiEFGg0CCAIBDQMOBjkBBBYBAwsBKBMBAgIBAYMWg?=
=?us-ascii?q?koBAS8Gg3CnXoEZGA0NaoFBIWmBcoF9ASOBY4IDkyEHhHQBEwsIg0uEAAGEdoV?=
=?us-ascii?q?EB4MTBgEKGCqJYoFlmhUGBII5JAuOew6BXIYTlEsDgxMOASGBGYkfjBelcYIUc?=
=?us-ascii?q?IJeL4FbEYoakxEkfAl0CBIBCgGLTk2BZWAB?=
X-IronPort-AV: E=Sophos;i="5.75,373,1589212800";
d="scan'208";a="195961224"
Received: from unknown (HELO User) ([223.197.142.126])
by ybironout4v2.netvigator.com with SMTP; 20 Jul 2020 12:57:50 +0800
Reply-To: <[email protected]>
From: "Garry Daniel"<[email protected]>
Date: Sun, 19 Jul 2020 21:58:36 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=57.6
X-Spam-Score: 576
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hartsfield-Jackson Atlanta International Airport 1200 Toffie
Terrace, Atlanta, GA 30354, USA Attention to you. I am Garry Daniel, Head
Officer-in-Charge, and Administrative Service Inspection Unit United Nations
Inspection Agency in Hartsfield-Jackson International Airport Atlanta, Georgia.
During our investig [...]
Content analysis details: (57.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.8 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 NSL_RCVD_HELO_USER Received from HELO User
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[223.197.142.126 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[210.87.250.172 listed in bl.score.senderscore.com]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[210.87.250.172 listed in bl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[210.87.250.172 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?223.197.142.126>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[garryd1[at]hotmail.jp]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[agwillly1[at]gmail.com]
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[garryd1[at]hotmail.jp]
3.1 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.9 MALFORMED_FREEMAIL Bad headers on message from free email
service
4.2 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
2.1 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.7 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.0 FROM_MISSPACED From: missing whitespace
2.0 SPOOFED_FREEMAIL No description available.
0.7 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail
reply-to
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.7 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Final Notification On Your Consignment Delivery
Hartsfield-Jackson Atlanta International Airport
1200 Toffie Terrace, Atlanta, GA 30354, USA
Hartsfield-Jackson Atlanta International Airport
1200 Toffie Terrace, Atlanta, GA 30354, USA
Attention to you.
I am Garry Daniel, Head Officer-in-Charge, and Administrative Service Inspection Unit United Nations Inspection Agency in Hartsfield-Jackson International Airport Atlanta, Georgia. During our investigation, I discovered an abandoned shipment through a Diplomat from Africa which was transferred from JF Kennedy Airport to our facility here in Atlanta, and when scanned it revealed an undisclosed sum of money in 2 Metal Trunk Boxes weighing approximately 130 kg.
The consignment was abandoned because the Content was not properly declared by the consignee as money rather it was declared as personal effect/classified document to either avoid diversion by the Shipping Agent or confiscation by the relevant authorities. The diplomat's inability to pay for Non Inspection fees among other things are the reason why the consignment is delayed and abandoned.
By my assessment, each of the boxes contains $4 Million USD which is a total of $8 Million USD. They are still left in the airport storage facility till today. The Consignments like I said are two metal trunk boxes weighing about 65 kg each (Internal dimension: W61 x H156 x D73 (cm) effective capacity: 680 L) Approximately. The details of the consignment including your name and email on the official document from the United Nations office in Africa where the shipment was tagged as personal effects/classified document is still available with us. As it stands now, you have to reconfirm your full name, Phone Number, full address so I can cross-check and see if it corresponds with the one on the official documents. It is now left to you to decide if you still need the consignment or allow us to repatriate it back to Africa (place of origin) as we were instructed.
As I did say again, the shipper abandoned it and ran away most importantly because he gave a false declaration, he could not pay for the yellow tag, he could not secure a valid non inspection document(s), etc. I am ready to assist you in any way I can for you to get back these packages provided you will also give me something out of it (financial gratification). You can either come in person, or you engage the services of a secure shipping/delivery Company/agent that will provide the necessary security that is required to deliver the package to your doorstep or the destination of your choice. I need the entire guarantee that I can get from you before I can get involved in this project.
If you are still alive, I wait to hear from you urgently for further directives and I will appreciate it if you can keep this matter confidential.
Thanks,
Regards,
Garry Daniel
Signature Flight Support ATL-
Hartsfield-Jackson Atlanta International Airport
1200 Toffie Terrace, Atlanta, GA 30354, USA
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
