by buried under 419s
Fri Oct 21, 2011 11:26 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 21 Oct 2011 19:31:31 -0700
Received: from linhost.indiatimeshostingpanel.com ([202.54.119.149])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1RHRMu-0004hv-9R
for ; Fri, 21 Oct 2011 19:31:31 -0700
Received: (qmail 28082 invoked by uid 48); 22 Oct 2011 07:19:37 +0530
Date: 22 Oct 2011 07:19:37 +0530
Message-ID: <[email protected]>
To:
Subject: US AMBASSADOR TO NIGERIA
From: US AMBASSADOR TO NIGERIA <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
X-Spam-Subject: ***SPAM*** US AMBASSADOR TO NIGERIA
X-Spam-Status: Yes, score=15.3
X-Spam-Score: 153
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: US AMBASSADOR TO NIGERIA 11 GARKI ROAD ABUJA ABUJA, NIGERIA
[...]
Content analysis details: (15.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ambassadorterencepambass[at]yahoo.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.54.119.149 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?202.54.119.149>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[202.54.119.149 listed in bl.score.senderscore.com]
1.2 RCVD_IN_NJABL_SPAM RBL: NJABL: sender is confirmed spam source
[202.54.119.149 listed in combined.njabl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6473]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[202.54.119.149 listed in zen.spamhaus.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[202.54.119.149 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
US AMBASSADOR TO NIGERIA
11 GARKI ROAD ABUJA
ABUJA, NIGERIA
ATTN:
I SHALL BE COMING TO YOUR COUNTRY FOR AN OFFICIAL MEETING ON MONDAY AND I WILL BE BRINGING YOUR FUNDS OF $3.5M ALONG WITH ME BUT THIS TIME I WILL NOT GO THROUGH CUSTOMS BECAUSE AS AN AMBASSADOR TO NIGERIA, I
AM A US GOVERNMENT AGENT AND I HAVE THE VETO POWER TO GO THROUGH
CUSTOMS. AS SOON AS I AM THROUGH WITH THE MEETING I SHALL THEN PROCEED
TO YOUR ADDRESS.
(SEND YOUR CELL PHONE NUMBER AND THE ADDRESS WHERE YOU WANT ME TO BRING THE PACKAGE). YOU HAVE REALLY PAID SO MUCH IN THIS DELIVERY THAT MAKES ME WONDER. YOU ARE A VERY LUCKY PERSON BECAUSE I SHALL BE BRINGING IT MYSELF AND THERE IS NOTHING ANYONE CAN DO ABOUT IT.
YOUR PACKAGE($3.5M) MUST BE REGISTERED AS AN AMBASSADORIAL PACKAGE FOR ME TO DEFEAT ALL ODDS AND THE COST OF REGISTERING IT IS $205.THE FEE
MUST BE PAID IN THE NEXT 50 HOURS VIA WESTERN UNION SO THAT ALL NECESSARY ARRANGEMENT CAN BE MADE BEFORE TIME WILL BE AGAINST US.
SEND THE FEE VIA MONEY GRAM OR WESTERN UNION MONEY TRANSFER.
RECEIVER'S NAME: CHIEDU OKEZE
ADDRESS: LAGOS, NIGERIA
TEXT QUESTION: WHO
ANSWER: GOD
AMOUNT:$205
AS SOON AS YOU SEND THE FEE MAKE SURE YOU SEND ME THE PAYMENT INFORMATION.
MY FLIGHT IS MONDAY AND I EXPECT YOU TO COMPLY BEFORE THEN SO THAT
THE DELIVERY CAN BE COMPLETED. IF YOU DO NOT COMPLY, THEN IT WILL NOT
BE MY FAULT IF YOU DO NOT RECEIVE YOUR PACKAGE.
AMBASSADOR TERENCE P. MCCULLEY
Envelope-to:
Delivery-date: Fri, 21 Oct 2011 19:31:31 -0700
Received: from linhost.indiatimeshostingpanel.com ([202.54.119.149])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1RHRMu-0004hv-9R
for ; Fri, 21 Oct 2011 19:31:31 -0700
Received: (qmail 28082 invoked by uid 48); 22 Oct 2011 07:19:37 +0530
Date: 22 Oct 2011 07:19:37 +0530
Message-ID: <[email protected]>
To:
Subject: US AMBASSADOR TO NIGERIA
From: US AMBASSADOR TO NIGERIA <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
X-Spam-Subject: ***SPAM*** US AMBASSADOR TO NIGERIA
X-Spam-Status: Yes, score=15.3
X-Spam-Score: 153
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: US AMBASSADOR TO NIGERIA 11 GARKI ROAD ABUJA ABUJA, NIGERIA
[...]
Content analysis details: (15.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ambassadorterencepambass[at]yahoo.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.54.119.149 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?202.54.119.149>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[202.54.119.149 listed in bl.score.senderscore.com]
1.2 RCVD_IN_NJABL_SPAM RBL: NJABL: sender is confirmed spam source
[202.54.119.149 listed in combined.njabl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6473]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[202.54.119.149 listed in zen.spamhaus.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[202.54.119.149 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
US AMBASSADOR TO NIGERIA
11 GARKI ROAD ABUJA
ABUJA, NIGERIA
ATTN:
I SHALL BE COMING TO YOUR COUNTRY FOR AN OFFICIAL MEETING ON MONDAY AND I WILL BE BRINGING YOUR FUNDS OF $3.5M ALONG WITH ME BUT THIS TIME I WILL NOT GO THROUGH CUSTOMS BECAUSE AS AN AMBASSADOR TO NIGERIA, I
AM A US GOVERNMENT AGENT AND I HAVE THE VETO POWER TO GO THROUGH
CUSTOMS. AS SOON AS I AM THROUGH WITH THE MEETING I SHALL THEN PROCEED
TO YOUR ADDRESS.
(SEND YOUR CELL PHONE NUMBER AND THE ADDRESS WHERE YOU WANT ME TO BRING THE PACKAGE). YOU HAVE REALLY PAID SO MUCH IN THIS DELIVERY THAT MAKES ME WONDER. YOU ARE A VERY LUCKY PERSON BECAUSE I SHALL BE BRINGING IT MYSELF AND THERE IS NOTHING ANYONE CAN DO ABOUT IT.
YOUR PACKAGE($3.5M) MUST BE REGISTERED AS AN AMBASSADORIAL PACKAGE FOR ME TO DEFEAT ALL ODDS AND THE COST OF REGISTERING IT IS $205.THE FEE
MUST BE PAID IN THE NEXT 50 HOURS VIA WESTERN UNION SO THAT ALL NECESSARY ARRANGEMENT CAN BE MADE BEFORE TIME WILL BE AGAINST US.
SEND THE FEE VIA MONEY GRAM OR WESTERN UNION MONEY TRANSFER.
RECEIVER'S NAME: CHIEDU OKEZE
ADDRESS: LAGOS, NIGERIA
TEXT QUESTION: WHO
ANSWER: GOD
AMOUNT:$205
AS SOON AS YOU SEND THE FEE MAKE SURE YOU SEND ME THE PAYMENT INFORMATION.
MY FLIGHT IS MONDAY AND I EXPECT YOU TO COMPLY BEFORE THEN SO THAT
THE DELIVERY CAN BE COMPLETED. IF YOU DO NOT COMPLY, THEN IT WILL NOT
BE MY FAULT IF YOU DO NOT RECEIVE YOUR PACKAGE.
AMBASSADOR TERENCE P. MCCULLEY
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces