by buried under 419s
Return-Path: <3ikylXwgJCrsikpf1856hnbjm.dpnbcboojtufstipxcpbujj.dpn@trix.bounces.google.com>
Delivered-To:
Received: from
by with LMTP
id VJARCrVMpV8XZQAAibB4EA
(envelope-from <3ikylXwgJCrsikpf1856hnbjm.dpnbcboojtufstipxcpbujj.dpn@trix.bounces.google.com>)
for <>; Fri, 06 Nov 2020 13:16:37 +0000
Return-path: <3ikylXwgJCrsikpf1856hnbjm.dpnbcboojtufstipxcpbujj.dpn@trix.bounces.google.com>
Envelope-to:
Delivery-date: Fri, 06 Nov 2020 13:16:37 +0000
Received: from mail-qk1-f197.google.com ([209.85.222.197]:36341)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <3ikylXwgJCrsikpf1856hnbjm.dpnbcboojtufstipxcpbujj.dpn@trix.bounces.google.com>)
id 1kb1bY-0006im-69
for ; Fri, 06 Nov 2020 13:16:37 +0000
Received: by mail-qk1-f197.google.com with SMTP id k188so656697qke.3
for <=>; Fri, 06 Nov 2020 05:16:15 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:message-id
subject:from:to;
bh=lyCcG9jXlBgL/+5eFnJuIIYGY2qX5fvxhC3eXQBtbSU=;
b=QfagWK0rIF5Xx6WQzANtWXZtTIlRqhq8+l3DiNKYDu0TMwnWQQbVN8AX6Vy0oUTU2O
klfAXvxXyhH8w3XUIQ98AJzXLauSpCWLUnNRR9NtV0m6mndLAKQMKf8o3xa81+mM+uLW
odqCaaRv0obipSe9osGORPD08QLQRG4Y1DLMI3u/93FidNRlJ1LN10Y46cXQv0NMQT8v
Kr2T/XPVxsuf+WIYKy7Sx4vo+dD/aQ6h4m2gH7t5wLEhUmkbV8z305Th1IffsWWZoMnd
PTXA8r5/Fxy4SoyoCaXxvHjPKKp/GGk0w+afUxXpWGFdJkn5cT3scQxeaBZU6snmGu4p
nJuA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:message-idsubject
:from:to;
bh=lyCcG9jXlBgL/+5eFnJuIIYGY2qX5fvxhC3eXQBtbSU=;
b=Y/teTBys3qE+G/+MokJLnnlYgJRV0NStRsFKbTsOiQ4+WM/KLcJjKElH3QUdE8y4cM
iFjorqobJh47gkvxpVoipPhrSB/wGxhUXoucgiqJiUXjWChQsfVindWxapv9bt7/XLx4
LdEDHSAiCydyYCCq7vWXsok6104YdFV3gSqzGyNvLXWKWGCas04CuAc3ewXSTZEV/5Mo
bFZf90yORlqhmCw8zpW7/JeKMIrmezcSZ5xP8Oa/+c5lURvfA/GnjuvFb15pmvwRn8yX
9/LJYGWIUX/mw2PlNxKxtTIzrA/FeoMYFiitVuG8JQ1X/PFnJeGKc7yAUIbjWmrX+qMn
rT7Q==
X-Gm-Message-State: AOAM531rre2IvWA52csJihdyYQ2TUm9guNr8b0+sm9R5yiWvoTSfBTvZ
AUwXKo0wb/7kNHvnoeoDa8KV6Ph67pVjYsdh0PWu
MIME-Version: 1.0
X-Received: by 2002:ac8:584f:: with SMTP id h15mt1521003qth.159.1604668554900;
Fri, 06 Nov 2020 05:15:54 -0800 (PST)
Reply-To: [email protected]
X-No-Auto-Attachment: 1
Message-ID: <[email protected]>
Date: Fri, 06 Nov 2020 13:15:55 +0000
From: [email protected]
To:
Content-Type: multipart/alternative; boundary="00000000000037096905b3700307"
X-Spam-Status: Yes, score=11.1
X-Spam-Score: 111
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I've invited you to fill out the following form: Untitled
form To fill it out, visit: https://docs.google.com/forms/d/e/1FAIp ... _form_link
Content analysis details: (11.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[hjoe0745[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[hjoe0745[at]gmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** TRUTH ABOUT YOUR CONSIGNMENT
--00000000000037096905b3700307
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Attn: Sir/Madam
My Name is Mr.Stewart Douglas,I am the Director Inspection Unit,United Nations Inspection Agent. We are currently in John F. Kennedy International Airport New York City, United States for official inspection while i discovered an abandoned shipment from UK via Diplomat with your name/email tagged on it, when i personally scanned it, it revealed an undisclosed sum of money in a Metallic Trunk Boxes weighing approximately 110kg With Registration RBT-45C. On my assumption, the two truck boxes will contain more than $5M in each $10M only.
The consignment was abandoned because the Contents of the consignment was not properly declared by the consignee as "MONEY" rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for The INTERNATIONAL CONSIGNMENT MONEY MOVEMENT Charge fee which is $1,200USD. On my assumption the consignment is still left in our Storage House here at John F Kennedy Airport, NY till date.
On further investigation, i discovered that the consignment was abandoned due to wrong declaration of the content, also the Diplomat inability to pay for Non Inspection Fees, because he did not know the content of the boxes.
I will arrange for the boxes to be moved out of this Airport to your address, once we are through I will deploy the services of a secured shipping Company geared to provide the security it needs to your doorstep.
Now i want to strike a deal with you, in your acceptance i will proceed on this. I have the capacity to secure the release of your consignment with my status as an United Nations\Inspection Agent. You will give me 10% of the amount in the consignment and you take the remaining 90% when we cleared it,
If you are not in agreement with this proposal, please disregard it. But if you can meet with my condition, then we have a deal. I can get everything concluded within 24 to 48 hours and proceed to your address for delivery upon your acceptance.
Write me on this email: [email protected] if you accepts to work with me.Send me your cell phone number and your address and your full name.
You can as well call me on this number +1-917 810-1057 if you wish to speak with me but if you call and could not reach me on phone note that i am on the field for inspection, So leave your information so that i can reach you when i am back in the office.
Mr.Stewart Douglas
Delivered-To:
Received: from
by with LMTP
id VJARCrVMpV8XZQAAibB4EA
(envelope-from <3ikylXwgJCrsikpf1856hnbjm.dpnbcboojtufstipxcpbujj.dpn@trix.bounces.google.com>)
for <>; Fri, 06 Nov 2020 13:16:37 +0000
Return-path: <3ikylXwgJCrsikpf1856hnbjm.dpnbcboojtufstipxcpbujj.dpn@trix.bounces.google.com>
Envelope-to:
Delivery-date: Fri, 06 Nov 2020 13:16:37 +0000
Received: from mail-qk1-f197.google.com ([209.85.222.197]:36341)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <3ikylXwgJCrsikpf1856hnbjm.dpnbcboojtufstipxcpbujj.dpn@trix.bounces.google.com>)
id 1kb1bY-0006im-69
for ; Fri, 06 Nov 2020 13:16:37 +0000
Received: by mail-qk1-f197.google.com with SMTP id k188so656697qke.3
for <=>; Fri, 06 Nov 2020 05:16:15 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:message-id
subject:from:to;bh=lyCcG9jXlBgL/+5eFnJuIIYGY2qX5fvxhC3eXQBtbSU=;
b=QfagWK0rIF5Xx6WQzANtWXZtTIlRqhq8+l3DiNKYDu0TMwnWQQbVN8AX6Vy0oUTU2O
klfAXvxXyhH8w3XUIQ98AJzXLauSpCWLUnNRR9NtV0m6mndLAKQMKf8o3xa81+mM+uLW
odqCaaRv0obipSe9osGORPD08QLQRG4Y1DLMI3u/93FidNRlJ1LN10Y46cXQv0NMQT8v
Kr2T/XPVxsuf+WIYKy7Sx4vo+dD/aQ6h4m2gH7t5wLEhUmkbV8z305Th1IffsWWZoMnd
PTXA8r5/Fxy4SoyoCaXxvHjPKKp/GGk0w+afUxXpWGFdJkn5cT3scQxeaBZU6snmGu4p
nJuA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:message-id
subject:from:to;
bh=lyCcG9jXlBgL/+5eFnJuIIYGY2qX5fvxhC3eXQBtbSU=;
b=Y/teTBys3qE+G/+MokJLnnlYgJRV0NStRsFKbTsOiQ4+WM/KLcJjKElH3QUdE8y4cM
iFjorqobJh47gkvxpVoipPhrSB/wGxhUXoucgiqJiUXjWChQsfVindWxapv9bt7/XLx4
LdEDHSAiCydyYCCq7vWXsok6104YdFV3gSqzGyNvLXWKWGCas04CuAc3ewXSTZEV/5Mo
bFZf90yORlqhmCw8zpW7/JeKMIrmezcSZ5xP8Oa/+c5lURvfA/GnjuvFb15pmvwRn8yX
9/LJYGWIUX/mw2PlNxKxtTIzrA/FeoMYFiitVuG8JQ1X/PFnJeGKc7yAUIbjWmrX+qMn
rT7Q==
X-Gm-Message-State: AOAM531rre2IvWA52csJihdyYQ2TUm9guNr8b0+sm9R5yiWvoTSfBTvZ
AUwXKo0wb/7kNHvnoeoDa8KV6Ph67pVjYsdh0PWu
MIME-Version: 1.0
X-Received: by 2002:ac8:584f:: with SMTP id h15mt1521003qth.159.1604668554900;
Fri, 06 Nov 2020 05:15:54 -0800 (PST)
Reply-To: [email protected]
X-No-Auto-Attachment: 1
Message-ID: <[email protected]>
Date: Fri, 06 Nov 2020 13:15:55 +0000
From: [email protected]
To:
Content-Type: multipart/alternative; boundary="00000000000037096905b3700307"
X-Spam-Status: Yes, score=11.1
X-Spam-Score: 111
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I've invited you to fill out the following form: Untitled
form To fill it out, visit: https://docs.google.com/forms/d/e/1FAIp ... _form_link
Content analysis details: (11.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[hjoe0745[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[hjoe0745[at]gmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** TRUTH ABOUT YOUR CONSIGNMENT
--00000000000037096905b3700307
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Attn: Sir/Madam
My Name is Mr.Stewart Douglas,I am the Director Inspection Unit,United Nations Inspection Agent. We are currently in John F. Kennedy International Airport New York City, United States for official inspection while i discovered an abandoned shipment from UK via Diplomat with your name/email tagged on it, when i personally scanned it, it revealed an undisclosed sum of money in a Metallic Trunk Boxes weighing approximately 110kg With Registration RBT-45C. On my assumption, the two truck boxes will contain more than $5M in each $10M only.
The consignment was abandoned because the Contents of the consignment was not properly declared by the consignee as "MONEY" rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for The INTERNATIONAL CONSIGNMENT MONEY MOVEMENT Charge fee which is $1,200USD. On my assumption the consignment is still left in our Storage House here at John F Kennedy Airport, NY till date.
On further investigation, i discovered that the consignment was abandoned due to wrong declaration of the content, also the Diplomat inability to pay for Non Inspection Fees, because he did not know the content of the boxes.
I will arrange for the boxes to be moved out of this Airport to your address, once we are through I will deploy the services of a secured shipping Company geared to provide the security it needs to your doorstep.
Now i want to strike a deal with you, in your acceptance i will proceed on this. I have the capacity to secure the release of your consignment with my status as an United Nations\Inspection Agent. You will give me 10% of the amount in the consignment and you take the remaining 90% when we cleared it,
If you are not in agreement with this proposal, please disregard it. But if you can meet with my condition, then we have a deal. I can get everything concluded within 24 to 48 hours and proceed to your address for delivery upon your acceptance.
Write me on this email: [email protected] if you accepts to work with me.Send me your cell phone number and your address and your full name.
You can as well call me on this number +1-917 810-1057 if you wish to speak with me but if you call and could not reach me on phone note that i am on the field for inspection, So leave your information so that i can reach you when i am back in the office.
Mr.Stewart Douglas
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
