SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! To contact us, click 'contact us' at the bottom


Scam email #230019 - Cancelled: New Event

Email info

The email was sent on 2017-06-21 20:41:09 and appeared to be from emmanuelsylvester24@yahoo.com.sg but this address could have been spoofed.
If you replied to this email, your reply would have been sent to emmanuelsylvester24@yahoo.com.sg which was the scammer's actual email address.
It was probably sent from 98.138.101.137 in Unknown, Benin

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

JUN
21
"New Event" has been
cancelled
When Wednesday, 21 June 2017
All Day
Where Please Your Urgent Attention Is Needed,
Message Please Your Urgent Attention Is Needed, We wish to inform you that the diplomatic agent conveying the consignment box valued the sum of $9.7 Million United States Dollars misplaced your address and he is currently stranded at the international airport right now. We required you reconfirm the following information below so that he can deliver your consignment box to you today, NAME: =============================ADDRESS: ===========================MOBILE NO: =========================NAME OF YOUR NEAREST AIRPORT: ======A COPY OF YOUR IDENTIFICATION: =====YOUR POST OFFICE ADDRESS;P.O BOX: ==OCCUPATION: ======================== Please do contact the diplomatic agent with the email below with the information required: Contact Person :Diplomat Patrick Lennox Email: {diplomat.patricklennox@yahoo.com} Cell Phone/(816) 905-5603 He is waiting to hear from you today with the information. For security reason read bellow: I did not let the delivery Agent knows that your consignment box contain the above mentioned amount of United States Dollars and on No circumstances should you let him know the content is $9.7 MILLION USD (CASH). The consignments was moved from here as family treasures, so never allow him to open the box until it get to your base. This is for security reason. Just supply the above requirement info and also use this CODE as a subject matter to him:-CONSIGNMENT CODE: CAF/XX/05. Thanks. Regards, Mr Jerry New Phone number: +229-61510149 Director of FedEx Courier Company Benin Republic
This Event invitation was sent from   Yahoo Calendar



Attachment content - invite.ics:

BEGIN:VCALENDAR PRODID://Yahoo//Calendar//EN VERSION:2.0 METHOD:CANCEL BEGIN:VEVENT SUMMARY:New Event DESCRIPTION:Please Your Urgent Attention Is Needed\,\n\nWe wish to inform y ou that the diplomatic agent conveying the consignment box valued the sum of $9.7 Million United States Dollars misplaced your address and he is cur rently stranded at the international airport right now. We required you re confirm the following information below so that he can deliver your consig nment box to you today\,\n\nNAME: ==============================\nADDRESS: ============================\nMOBILE NO: ==========================\nNAME OF YOUR NEAREST AIRPORT: =======\nA COPY OF YOUR IDENTIFICATION: ======\n YOUR POST OFFICE ADDRESS\;P.O BOX: ===\nOCCUPATION: ====================== ===\n\nPlease do contact the diplomatic agent with the email below with th e information required:\n\nContact Person :Diplomat Patrick Lennox\nEmail: {diplomat.patricklennox@yahoo.com}\nCell Phone/(816) 905-5603\n\nHe is wa iting to hear from you today with the information. For security reason rea d bellow:\n\nI did not let the delivery Agent knows that your consignment box contain the above mentioned amount of United States Dollars and on No circumstances should you let him know the content is $9.7 MILLION USD (CAS H). The consignments was moved from here as family treasures\, so never al low him to open the box until it get to your base. This is for security re ason.\n\nJust supply the above requirement info and also use this CODE as a subject matter to him:-CONSIGNMENT CODE: CAF/XX/05.\nThanks.\n\nRegards\ ,\nMr Jerry New\nPhone number: +229-61510149\nDirector of FedEx Courier Co mpany Benin Republic CLASS:PUBLIC DTSTART;VALUE=DATE:20170621 DTEND;VALUE=DATE:20170621 LOCATION:Please Your Urgent Attention Is Needed\, PRIORITY:0 SEQUENCE:3 STATUS:CONFIRMED UID:66460c99-468e-4515-8307-9d097951cb13 DTSTAMP:20170621T174059Z Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stan.bowers@techmarketprovid ers.com Censored Censored ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:standardbantransfer@hotmail. com Censored Censored Censored Censored Censored Censored Censored ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stark.industries.ppotts@gmai l.com Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored ay.co.uk Censored ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:gulfremitfinancgroupltd@gmai l.com ORGANIZER;CN=emmanue lsylvester;SENT-BY="mailto:emmanuelsylvester24@yahoo.c om.sg":mailto:emmanuelsylvester24@yahoo.com.sg X-YAHOO-YID:emmanuelsylvester24 TRANSP:OPAQUE STATUS:CONFIRMED X-YAHOO-USER-STATUS:BUSY X-YAHOO-EVENT-STATUS:BUSY END:VEVENT BEGIN:VTIMEZONE TZID:Asia/Shanghai TZURL:http://tzurl.org/zoneinfo/Asia/Shanghai X-LIC-LOCATION:Asia/Shanghai BEGIN:STANDARD TZOFFSETFROM:+080543 TZOFFSETTO:+0800 TZNAME:CST DTSTART:19010101T000000 RDATE:19010101T000000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:+0800 TZOFFSETTO:+0900 TZNAME:CDT DTSTART:19400603T000000 RDATE:19400603T000000 RDATE:19410316T000000 RDATE:19860504T000000 RDATE:19870412T000000 RDATE:19880410T000000 RDATE:19890416T000000 RDATE:19900415T000000 RDATE:19910414T000000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0900 TZOFFSETTO:+0800 TZNAME:CST DTSTART:19401001T000000 RDATE:19401001T000000 RDATE:19411001T000000 RDATE:19860914T000000 RDATE:19870913T000000 RDATE:19880911T000000 RDATE:19890917T000000 RDATE:19900916T000000 RDATE:19910915T000000 END:STANDARD BEGIN:STANDARD TZOFFSETFROM:+0800 TZOFFSETTO:+0800 TZNAME:CST DTSTART:19490101T000000 RDATE:19490101T000000 END:STANDARD END:VTIMEZONE END:VCALENDAR




Attachment content - invite.ics:

BEGIN:VCALENDAR
PRODID://Yahoo//Calendar//EN
VERSION:2.0
METHOD:CANCEL
BEGIN:VEVENT
SUMMARY:New Event
DESCRIPTION:Please Your Urgent Attention Is Needed\,\n\nWe wish to inform y
ou that the diplomatic agent conveying the consignment box valued the sum
of $9.7 Million United States Dollars misplaced your address and he is cur
rently stranded at the international airport right now. We required you re
confirm the following information below so that he can deliver your consig
nment box to you today\,\n\nNAME: ==============================\nADDRESS:
============================\nMOBILE NO: ==========================\nNAME
OF YOUR NEAREST AIRPORT: =======\nA COPY OF YOUR IDENTIFICATION: ======\n
YOUR POST OFFICE ADDRESS\;P.O BOX: ===\nOCCUPATION: ======================
===\n\nPlease do contact the diplomatic agent with the email below with th
e information required:\n\nContact Person :Diplomat Patrick Lennox\nEmail:
{diplomat.patricklennox@yahoo.com}\nCell Phone/(816) 905-5603\n\nHe is wa
iting to hear from you today with the information. For security reason rea
d bellow:\n\nI did not let the delivery Agent knows that your consignment
box contain the above mentioned amount of United States Dollars and on No
circumstances should you let him know the content is $9.7 MILLION USD (CAS
H). The consignments was moved from here as family treasures\, so never al
low him to open the box until it get to your base. This is for security re
ason.\n\nJust supply the above requirement info and also use this CODE as
a subject matter to him:-CONSIGNMENT CODE: CAF/XX/05.\nThanks.\n\nRegards\
,\nMr Jerry New\nPhone number: +229-61510149\nDirector of FedEx Courier Co
mpany Benin Republic
CLASS:PUBLIC
DTSTART;VALUE=DATE:20170621
DTEND;VALUE=DATE:20170621
LOCATION:Please Your Urgent Attention Is Needed\,
PRIORITY:0
SEQUENCE:3
STATUS:CONFIRMED
UID:66460c99-468e-4515-8307-9d097951cb13
DTSTAMP:20170621T174059Z
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stan.bowers@techmarketprovid
ers.com
Censored
Censored
ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:standardbantransfer@hotmail.
com
Censored
Censored
Censored

Censored

Censored
Censored
Censored
ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stark.industries.ppotts@gmai
l.com
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored

Censored

Censored
Censored
Censored
Censored
Censored
Censored
ay.co.uk
Censored
ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:gulfremitfinancgroupltd@gmai
l.com
ORGANIZER;CN=emmanue lsylvester;SENT-BY="mailto:emmanuelsylvester24@yahoo.c
om.sg":mailto:emmanuelsylvester24@yahoo.com.sg
X-YAHOO-YID:emmanuelsylvester24
TRANSP:OPAQUE
STATUS:CONFIRMED
X-YAHOO-USER-STATUS:BUSY
X-YAHOO-EVENT-STATUS:BUSY
END:VEVENT
BEGIN:VTIMEZONE
TZID:Asia/Shanghai
TZURL:http://tzurl.org/zoneinfo/Asia/Shanghai
X-LIC-LOCATION:Asia/Shanghai
BEGIN:STANDARD
TZOFFSETFROM:+080543
TZOFFSETTO:+0800
TZNAME:CST
DTSTART:19010101T000000
RDATE:19010101T000000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:+0800
TZOFFSETTO:+0900
TZNAME:CDT
DTSTART:19400603T000000
RDATE:19400603T000000
RDATE:19410316T000000
RDATE:19860504T000000
RDATE:19870412T000000
RDATE:19880410T000000
RDATE:19890416T000000
RDATE:19900415T000000
RDATE:19910414T000000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0900
TZOFFSETTO:+0800
TZNAME:CST
DTSTART:19401001T000000
RDATE:19401001T000000
RDATE:19411001T000000
RDATE:19860914T000000
RDATE:19870913T000000
RDATE:19880911T000000
RDATE:19890917T000000
RDATE:19900916T000000
RDATE:19910915T000000
END:STANDARD
BEGIN:STANDARD
TZOFFSETFROM:+0800
TZOFFSETTO:+0800
TZNAME:CST
DTSTART:19490101T000000
RDATE:19490101T000000
END:STANDARD
END:VTIMEZONE
END:VCALENDAR



SpamAssassin Report (spam score: 6.2)


 pts rule name               description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: tzurl.org]
0.9 MILLION_USD BODY: Talks about millions of dollars
0.0 TVD_RCVD_IP4 Message was received from an IPv4 address
0.0 TVD_RCVD_IP Message was received from an IP address
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.121.199 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(emmanuelsylvester24[at]yahoo.com.sg)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
("emmanue lsylvester"

)
0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and
body
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 MISSING_MID Missing Message-Id: header
0.5 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.0 MIME_NO_TEXT No (properly identifi

Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer