SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD


Scam email #230019 - Cancelled: New Event

Email info

The email was sent on 2017-06-21 20:41:09 and appeared to be from emmanuelsylvester24@yahoo.com.sg but this address could have been spoofed.
If you replied to this email, your reply would have been sent to emmanuelsylvester24@yahoo.com.sg which was the scammer's actual email address.
It was probably sent from 98.138.101.137 in Unknown, Benin

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

JUN
21
"New Event" has been
cancelled
When Wednesday, 21 June 2017
All Day
Where Please Your Urgent Attention Is Needed,
Message Please Your Urgent Attention Is Needed, We wish to inform you that the diplomatic agent conveying the consignment box valued the sum of $9.7 Million United States Dollars misplaced your address and he is currently stranded at the international airport right now. We required you reconfirm the following information below so that he can deliver your consignment box to you today, NAME: =============================ADDRESS: ===========================MOBILE NO: =========================NAME OF YOUR NEAREST AIRPORT: ======A COPY OF YOUR IDENTIFICATION: =====YOUR POST OFFICE ADDRESS;P.O BOX: ==OCCUPATION: ======================== Please do contact the diplomatic agent with the email below with the information required: Contact Person :Diplomat Patrick Lennox Email: {diplomat.patricklennox@yahoo.com} Cell Phone/(816) 905-5603 He is waiting to hear from you today with the information. For security reason read bellow: I did not let the delivery Agent knows that your consignment box contain the above mentioned amount of United States Dollars and on No circumstances should you let him know the content is $9.7 MILLION USD (CASH). The consignments was moved from here as family treasures, so never allow him to open the box until it get to your base. This is for security reason. Just supply the above requirement info and also use this CODE as a subject matter to him:-CONSIGNMENT CODE: CAF/XX/05. Thanks. Regards, Mr Jerry New Phone number: +229-61510149 Director of FedEx Courier Company Benin Republic
This Event invitation was sent from   Yahoo Calendar



Attachment content - invite.ics:

BEGIN:VCALENDAR PRODID://Yahoo//Calendar//EN VERSION:2.0 METHOD:CANCEL BEGIN:VEVENT SUMMARY:New Event DESCRIPTION:Please Your Urgent Attention Is Needed\,\n\nWe wish to inform y ou that the diplomatic agent conveying the consignment box valued the sum of $9.7 Million United States Dollars misplaced your address and he is cur rently stranded at the international airport right now. We required you re confirm the following information below so that he can deliver your consig nment box to you today\,\n\nNAME: ==============================\nADDRESS: ============================\nMOBILE NO: ==========================\nNAME OF YOUR NEAREST AIRPORT: =======\nA COPY OF YOUR IDENTIFICATION: ======\n YOUR POST OFFICE ADDRESS\;P.O BOX: ===\nOCCUPATION: ====================== ===\n\nPlease do contact the diplomatic agent with the email below with th e information required:\n\nContact Person :Diplomat Patrick Lennox\nEmail: {diplomat.patricklennox@yahoo.com}\nCell Phone/(816) 905-5603\n\nHe is wa iting to hear from you today with the information. For security reason rea d bellow:\n\nI did not let the delivery Agent knows that your consignment box contain the above mentioned amount of United States Dollars and on No circumstances should you let him know the content is $9.7 MILLION USD (CAS H). The consignments was moved from here as family treasures\, so never al low him to open the box until it get to your base. This is for security re ason.\n\nJust supply the above requirement info and also use this CODE as a subject matter to him:-CONSIGNMENT CODE: CAF/XX/05.\nThanks.\n\nRegards\ ,\nMr Jerry New\nPhone number: +229-61510149\nDirector of FedEx Courier Co mpany Benin Republic CLASS:PUBLIC DTSTART;VALUE=DATE:20170621 DTEND;VALUE=DATE:20170621 LOCATION:Please Your Urgent Attention Is Needed\, PRIORITY:0 SEQUENCE:3 STATUS:CONFIRMED UID:66460c99-468e-4515-8307-9d097951cb13 DTSTAMP:20170621T174059Z Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stan.bowers@techmarketprovid ers.com Censored Censored ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:standardbantransfer@hotmail. com Censored Censored Censored Censored Censored Censored Censored ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stark.industries.ppotts@gmai l.com Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored ay.co.uk Censored ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:gulfremitfinancgroupltd@gmai l.com ORGANIZER;CN=emmanue lsylvester;SENT-BY="mailto:emmanuelsylvester24@yahoo.c om.sg":mailto:emmanuelsylvester24@yahoo.com.sg X-YAHOO-YID:emmanuelsylvester24 TRANSP:OPAQUE STATUS:CONFIRMED X-YAHOO-USER-STATUS:BUSY X-YAHOO-EVENT-STATUS:BUSY END:VEVENT BEGIN:VTIMEZONE TZID:Asia/Shanghai TZURL:http://tzurl.org/zoneinfo/Asia/Shanghai X-LIC-LOCATION:Asia/Shanghai BEGIN:STANDARD TZOFFSETFROM:+080543 TZOFFSETTO:+0800 TZNAME:CST DTSTART:19010101T000000 RDATE:19010101T000000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:+0800 TZOFFSETTO:+0900 TZNAME:CDT DTSTART:19400603T000000 RDATE:19400603T000000 RDATE:19410316T000000 RDATE:19860504T000000 RDATE:19870412T000000 RDATE:19880410T000000 RDATE:19890416T000000 RDATE:19900415T000000 RDATE:19910414T000000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0900 TZOFFSETTO:+0800 TZNAME:CST DTSTART:19401001T000000 RDATE:19401001T000000 RDATE:19411001T000000 RDATE:19860914T000000 RDATE:19870913T000000 RDATE:19880911T000000 RDATE:19890917T000000 RDATE:19900916T000000 RDATE:19910915T000000 END:STANDARD BEGIN:STANDARD TZOFFSETFROM:+0800 TZOFFSETTO:+0800 TZNAME:CST DTSTART:19490101T000000 RDATE:19490101T000000 END:STANDARD END:VTIMEZONE END:VCALENDAR


SpamAssassin Report (spam score: 6.2)


 pts rule name               description
---- ---------------------- --------------------------------------------------
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: tzurl.org]
 0.9 MILLION_USD            BODY: Talks about millions of dollars
 0.0 TVD_RCVD_IP4           Message was received from an IPv4 address
 0.0 TVD_RCVD_IP            Message was received from an IP address
-0.7 RCVD_IN_DNSWL_LOW      RBL: Sender listed at http://www.dnswl.org/, low
                            trust
                            [98.138.121.199 listed in list.dnswl.org]
 0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                            (emmanuelsylvester24[at]yahoo.com.sg)
 0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                            CUSTOM_MED
-0.0 SPF_PASS               SPF: sender matches SPF record
 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                            ("emmanue lsylvester"
                            
)
 0.0 MISSING_MIME_HB_SEP    BODY: Missing blank line between MIME header and
                            body
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 0.1 MISSING_MID            Missing Message-Id: header
 0.5 REPTO_QUOTE_YAHOO      Yahoo! doesn't do quoting like this
 0.0 LOTS_OF_MONEY          Huge... sums of money
 0.0 T_DKIM_INVALID         DKIM-Signature header exists but is not valid
 1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing list
 1.0 MIME_NO_TEXT           No (properly identifi



Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer