by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 23 Jun 2012 11:41:56 -0700
Received: from dhclient-91-190-18-4.flashcable.ch ([91.190.18.4]:54671 helo=chileweg21.ch)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SiVHN-0003ho-Aw
for ; Sat, 23 Jun 2012 11:41:56 -0700
Received: by chileweg21.ch (Postfix, from userid 783)
id 5F6C71D8D0F9; Sat, 23 Jun 2012 13:32:52 +0200 (CEST)
Received: from localhost by SuperNAS
with SpamAssassin (version 3.2.5);
Sat, 23 Jun 2012 13:32:51 +0200
From: "MR.MICHAEL PETERSON."<[email protected]>
To: undisclosed-recipients:;
Date: Sat, 23 Jun 2012 04:41:40 -0400
Message-Id: <[email protected]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on SuperNAS
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.9 required=5.0 tests=ALL_TRUSTED,AWL,
FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_MESSAGE,
MIME_HTML_ONLY,MSOE_MID_WRONG_CASE,SUBJ_ALL_CAPS autolearn=no version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4FE5A963.285372A1"
X-Spam-Status: Yes, score=17.5
X-Spam-Score: 175
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Spam detection software, running on the system "SuperNAS",
has identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see admin for details. [...]
Content analysis details: (17.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?91.190.18.4>]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[91.190.18.4 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[91.190.18.4 listed in psbl.surriel.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(michaelpeterson00002009[at]gmail.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (michaelpeterson00002009[at]gmail.com)
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
2.7 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
2.9 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
0.3 TO_NO_BRKTS_PCNT To: misformatted + percentage
0.0 MONEY_PERCENT X% of a lot of money for you
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.4 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** *****SPAM***** MY NAME IS MR. MICHAEL PETERSON; DIRECTOR AIRPORT INSPECTION OFFICER, PLEASE NOTE THAT I HAVE THE POWER TO RELEASE YOUR ABANDONED BOXES TO YOU. PLEASE GET BACK TO ME FOR MORE INFORMATION
This is a multi-part message in MIME format.
------------=_4FE5A963.285372A1
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Spam detection software, running on the system "SuperNAS", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
admin for details.
Content preview: MR.MICHAEL PETERSON. Director Airport Inspection Office=
r Hartsfield
Jackson Atlanta International Airport [...]=20
Content analysis details: (6.9 points, 5.0 required)
pts rule name description
---- ---------------------- ---------------------------------------------=
-----
-1.4 ALL_TRUSTED Passed through trusted hosts only via SMTP
1.8 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.7 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
-0.0 AWL AWL: From: address is in the auto white-list
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_4FE5A963.285372A1
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 7bit
Received: from User (unknown [63.117.181.205])
(Authenticated sender: backup)
by chileweg21.ch (Postfix) with ESMTPA id 528F21D8DCCC;
Sat, 23 Jun 2012 10:47:32 +0200 (CEST)
Reply-To: <[email protected]>
From: "MR.MICHAEL PETERSON."<[email protected]>
Subject: MY NAME IS MR. MICHAEL PETERSON; DIRECTOR AIRPORT INSPECTION OFFICER, PLEASE NOTE THAT I HAVE THE POWER TO RELEASE YOUR ABANDONED BOXES TO YOU. PLEASE GET BACK TO ME FOR MORE INFORMATION
Date: Sat, 23 Jun 2012 04:41:40 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
MR.MICHAEL PETERSON.
Director Airport Inspection Officer
Hartsfield Jackson Atlanta International Airport
574 Airport South Pkwy
Atlanta, GA 30349-8642.
Good day,
Please confirm if you are the owner of the above name and contact address as the address is what we have in the two consignment boxes here in Hartsfield Jackson Atlanta International Airport.
I’M MR. MICHAEL PETERSON. Director United Nations Inspection Agent in charge of Transportation Security Administration. Hartsfield International Airport Atlanta Georgia. During our investigation, I discovered an abandoned shipment from a Diplomat from United Kingdom under ship forwarder was transferred from JF Kennedy Airport to our facility here in Atlanta and when scanned, it revealed an undisclosed sum of money in a Metal Trunk Box weighing approximately 110kg each. The consignment was abandoned because the Content was not properly declared by the consignee as money rather it was declared as personal effect to avoid diversion by the Shipping Agent also the Diplomat inability to pay for Non Inspection Fees.
On my assumption, each of the boxes will contain more than $8.2m in each of the consignment boxes that is still left in the airport storage house till today. The Consignment are two metal box with weight of about 110kg each (Internal dimension: W61 x H156 x D73 (cm). Effective capacity: 680 L.) Approximately, the details of the consignment including your name and email address on the official documents from United Nation office in London where the shipment was tagged as personal effects.
As it stands now, you are to reconfirm your Phone Number, full address, to cross check if it corresponds with the address on the official document including the name of nearest Airport around you and other details. I want us to transact this business with you and share the money, since the shipper has abandoned it and disappeared. I will pay for the Non inspection fee and arrange for the boxes to be moved out of this airport to your address by myself. But I will share it 50% 50% with you.
All communication must be held extremely confidential. I can get every arrangement concluded within 4 to 6hours upon your acceptance, but it must be on the condition that you will compensate me with 50% of the amount contained in the boxes and I must get assurance from you concerning my 50% before I will proceed to deliver the shipment to any address of your choice, I want to use my position to have the consignment cleared, since the shipper has abandoned it and ran away. I will pay for the Non Inspection Fee and arrange for the boxes to be moved out of this Airport to any address of your choice, once we are through I will deploy the services of a secured shipping Company geared to provide the security it needs to your doorstep or I can bring it by myself to avoid any more trouble on the way. But I will need a written guarantee and a copy of any type of identification of you on my 50% compensation before I can do anything.
If you assure me of my 50% and agreed with my condition, you should contact me.
I wait to hear from you.
MR.MICHAEL PETERSON.
Director Airport Inspection Officer
Hartsfield Jackson Atlanta International Airport
574 Airport South Pkwy Atlanta, GA 30349-8642.
Envelope-to:
Delivery-date: Sat, 23 Jun 2012 11:41:56 -0700
Received: from dhclient-91-190-18-4.flashcable.ch ([91.190.18.4]:54671 helo=chileweg21.ch)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SiVHN-0003ho-Aw
for ; Sat, 23 Jun 2012 11:41:56 -0700
Received: by chileweg21.ch (Postfix, from userid 783)
id 5F6C71D8D0F9; Sat, 23 Jun 2012 13:32:52 +0200 (CEST)
Received: from localhost by SuperNAS
with SpamAssassin (version 3.2.5);
Sat, 23 Jun 2012 13:32:51 +0200
From: "MR.MICHAEL PETERSON."<[email protected]>
To: undisclosed-recipients:;
Date: Sat, 23 Jun 2012 04:41:40 -0400
Message-Id: <[email protected]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on SuperNAS
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.9 required=5.0 tests=ALL_TRUSTED,AWL,
FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_MESSAGE,
MIME_HTML_ONLY,MSOE_MID_WRONG_CASE,SUBJ_ALL_CAPS autolearn=no version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4FE5A963.285372A1"
X-Spam-Status: Yes, score=17.5
X-Spam-Score: 175
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Spam detection software, running on the system "SuperNAS",
has identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see admin for details. [...]
Content analysis details: (17.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?91.190.18.4>]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[91.190.18.4 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[91.190.18.4 listed in psbl.surriel.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(michaelpeterson00002009[at]gmail.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (michaelpeterson00002009[at]gmail.com)
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
2.7 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
2.9 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
0.3 TO_NO_BRKTS_PCNT To: misformatted + percentage
0.0 MONEY_PERCENT X% of a lot of money for you
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.4 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** *****SPAM***** MY NAME IS MR. MICHAEL PETERSON; DIRECTOR AIRPORT INSPECTION OFFICER, PLEASE NOTE THAT I HAVE THE POWER TO RELEASE YOUR ABANDONED BOXES TO YOU. PLEASE GET BACK TO ME FOR MORE INFORMATION
This is a multi-part message in MIME format.
------------=_4FE5A963.285372A1
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Spam detection software, running on the system "SuperNAS", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
admin for details.
Content preview: MR.MICHAEL PETERSON. Director Airport Inspection Office=
r Hartsfield
Jackson Atlanta International Airport [...]=20
Content analysis details: (6.9 points, 5.0 required)
pts rule name description
---- ---------------------- ---------------------------------------------=
-----
-1.4 ALL_TRUSTED Passed through trusted hosts only via SMTP
1.8 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.7 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
-0.0 AWL AWL: From: address is in the auto white-list
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_4FE5A963.285372A1
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 7bit
Received: from User (unknown [63.117.181.205])
(Authenticated sender: backup)
by chileweg21.ch (Postfix) with ESMTPA id 528F21D8DCCC;
Sat, 23 Jun 2012 10:47:32 +0200 (CEST)
Reply-To: <[email protected]>
From: "MR.MICHAEL PETERSON."<[email protected]>
Subject: MY NAME IS MR. MICHAEL PETERSON; DIRECTOR AIRPORT INSPECTION OFFICER, PLEASE NOTE THAT I HAVE THE POWER TO RELEASE YOUR ABANDONED BOXES TO YOU. PLEASE GET BACK TO ME FOR MORE INFORMATION
Date: Sat, 23 Jun 2012 04:41:40 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
MR.MICHAEL PETERSON.
Director Airport Inspection Officer
Hartsfield Jackson Atlanta International Airport
574 Airport South Pkwy
Atlanta, GA 30349-8642.
Good day,
Please confirm if you are the owner of the above name and contact address as the address is what we have in the two consignment boxes here in Hartsfield Jackson Atlanta International Airport.
I’M MR. MICHAEL PETERSON. Director United Nations Inspection Agent in charge of Transportation Security Administration. Hartsfield International Airport Atlanta Georgia. During our investigation, I discovered an abandoned shipment from a Diplomat from United Kingdom under ship forwarder was transferred from JF Kennedy Airport to our facility here in Atlanta and when scanned, it revealed an undisclosed sum of money in a Metal Trunk Box weighing approximately 110kg each. The consignment was abandoned because the Content was not properly declared by the consignee as money rather it was declared as personal effect to avoid diversion by the Shipping Agent also the Diplomat inability to pay for Non Inspection Fees.
On my assumption, each of the boxes will contain more than $8.2m in each of the consignment boxes that is still left in the airport storage house till today. The Consignment are two metal box with weight of about 110kg each (Internal dimension: W61 x H156 x D73 (cm). Effective capacity: 680 L.) Approximately, the details of the consignment including your name and email address on the official documents from United Nation office in London where the shipment was tagged as personal effects.
As it stands now, you are to reconfirm your Phone Number, full address, to cross check if it corresponds with the address on the official document including the name of nearest Airport around you and other details. I want us to transact this business with you and share the money, since the shipper has abandoned it and disappeared. I will pay for the Non inspection fee and arrange for the boxes to be moved out of this airport to your address by myself. But I will share it 50% 50% with you.
All communication must be held extremely confidential. I can get every arrangement concluded within 4 to 6hours upon your acceptance, but it must be on the condition that you will compensate me with 50% of the amount contained in the boxes and I must get assurance from you concerning my 50% before I will proceed to deliver the shipment to any address of your choice, I want to use my position to have the consignment cleared, since the shipper has abandoned it and ran away. I will pay for the Non Inspection Fee and arrange for the boxes to be moved out of this Airport to any address of your choice, once we are through I will deploy the services of a secured shipping Company geared to provide the security it needs to your doorstep or I can bring it by myself to avoid any more trouble on the way. But I will need a written guarantee and a copy of any type of identification of you on my 50% compensation before I can do anything.
If you assure me of my 50% and agreed with my condition, you should contact me.
I wait to hear from you.
MR.MICHAEL PETERSON.
Director Airport Inspection Officer
Hartsfield Jackson Atlanta International Airport
574 Airport South Pkwy Atlanta, GA 30349-8642.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
