SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD


Scam email #231204 - Cancelled: Congratulations. @ Sunday, 06 August 2017

Email info

The email was sent on 2017-08-06 03:58:55 and appeared to be from chineduchinedu86@yahoo.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to chineduchinedu86@yahoo.com which was the scammer's actual email address.
It was probably sent from 74.6.129.79 in California, Location found from phone number in email

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

AUG
06
"Congratulations." has been
cancelled
When Sunday, 06 August 2017
01:30 AM to 02:30 AM
(GMT) Greenwich Mean Time - Dublin / Edinburgh / Lisbon / London
Message Congratulations. Walmart Money Transfer Have transferred Your 5.5 million USD Today After We Noticed You Have Not Receive Your Money Since Then. The money We Transferred Will Be pickup by You At Our Agent Location Nearby This Is Reference Number # 680016752 To Receive Your Money Now. MTCN..#680016752 SENDER NAME.. JACK GREEN COUNTRY...USA AMOUNT... 5.5 MILLION Your Money Transfer is available to pick now Get Back To Us Now Call Me For More Info. +16572073508 Regards Jack Green
This Event invitation was sent from   Yahoo Calendar



Attachment content - invite.ics:

BEGIN:VCALENDAR PRODID://Yahoo//Calendar//EN VERSION:2.0 METHOD:CANCEL BEGIN:VEVENT SUMMARY:Congratulations. DESCRIPTION:Congratulations.\nWalmart Money Transfer Have transferred Your 5.5 million USD Today After We Noticed You Have Not Receive Your Money Sin ce Then.\nThe money We Transferred Will Be pickup by You At Our Agent Loca tion Nearby This Is Reference Number # 680016752 To Receive Your Money Now .\nMTCN..#680016752\nSENDER NAME.. JACK GREEN\nCOUNTRY...USA\n AMOUNT... 5 .5 MILLION\nYour Money Transfer is available to pick now\nGet Back To Us N ow\nCall Me For More Info. +16572073508\nRegards\nJack Green CLASS:PUBLIC DTSTART;TZID=Europe/London:20170806T023000 DTEND;TZID=Europe/London:20170806T033000 PRIORITY:0 SEQUENCE:47 STATUS:CONFIRMED UID:d0490a2a-6e5f-4f20-b51d-c65258e8f3f5 DTSTAMP:20170806T005850Z Censored Censored Censored Censored Censored Censored ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:ssloan@pickett-inc.com Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sstannard@css-eng.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sstearns@bsa-civil.com Censored Censored Censored Censored Censored Censored ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sstone@fort-dodge.k12.ia.us Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored ORGANIZER;CN=chinedu chinedu;SENT-BY="mailto:chineduchinedu86@yahoo.com":ma ilto:chineduchinedu86@yahoo.com X-YAHOO-YID:2bnxfij3aqscuxmi2w7ux653pu5fkdzu24vj3rpl TRANSP:OPAQUE STATUS:CONFIRMED X-YAHOO-USER-STATUS:BUSY X-YAHOO-EVENT-STATUS:BUSY BEGIN:VALARM ACTION:DISPLAY DESCRIPTION: TRIGGER;RELATED=START:-PT30M END:VALARM END:VEVENT BEGIN:VTIMEZONE TZID:Europe/London TZURL:http://tzurl.org/zoneinfo/Europe/London X-LIC-LOCATION:Europe/London BEGIN:DAYLIGHT TZOFFSETFROM:+0000 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19810329T010000 RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=-1SU END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0100 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:19961027T020000 RRULE:FREQ=YEARLY;BYMONTH=10;BYDAY=-1SU END:STANDARD BEGIN:STANDARD TZOFFSETFROM:-000115 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:18471201T000000 RDATE:18471201T000000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:+0000 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19160521T020000 RDATE:19160521T020000 RDATE:19170408T020000 RDATE:19180324T020000 RDATE:19190330T020000 RDATE:19200328T020000 RDATE:19210403T020000 RDATE:19220326T020000 RDATE:19230422T020000 RDATE:19240413T020000 RDATE:19250419T020000 RDATE:19260418T020000 RDATE:19270410T020000 RDATE:19280422T020000 RDATE:19290421T020000 RDATE:19300413T020000 RDATE:19310419T020000 RDATE:19320417T020000 RDATE:19330409T020000 RDATE:19340422T020000 RDATE:19350414T020000 RDATE:19360419T020000 RDATE:19370418T020000 RDATE:19380410T020000 RDATE:19390416T020000 RDATE:19400225T020000 RDATE:19460414T020000 RDATE:19470316T020000 RDATE:19480314T020000 RDATE:19490403T020000 RDATE:19500416T020000 RDATE:19510415T020000 RDATE:19520420T020000 RDATE:19530419T020000 RDATE:19540411T020000 RDATE:19550417T020000 RDATE:19560422T020000 RDATE:19570414T020000 RDATE:19580420T020000 RDATE:19590419T020000 RDATE:19600410T020000 RDATE:19610326T020000 RDATE:19620325T020000 RDATE:19630331T020000 RDATE:19640322T020000 RDATE:19650321T020000 RDATE:19660320T020000 RDATE:19670319T020000 RDATE:19680218T020000 RDATE:19720319T020000 RDATE:19730318T020000 RDATE:19740317T020000 RDATE:19750316T020000 RDATE:19760321T020000 RDATE:19770320T020000 RDATE:19780319T020000 RDATE:19790318T020000 RDATE:19800316T020000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0100 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:19161001T030000 RDATE:19161001T030000 RDATE:19170917T030000 RDATE:19180930T030000 RDATE:19190929T030000 RDATE:19201025T030000 RDATE:19211003T030000 RDATE:19221008T030000 RDATE:19230916T030000 RDATE:19240921T030000 RDATE:19251004T030000 RDATE:19261003T030000 RDATE:19271002T030000 RDATE:19281007T030000 RDATE:19291006T030000 RDATE:19301005T030000 RDATE:19311004T030000 RDATE:19321002T030000 RDATE:19331008T030000 RDATE:19341007T030000 RDATE:19351006T030000 RDATE:19361004T030000 RDATE:19371003T030000 RDATE:19381002T030000 RDATE:19391119T030000 RDATE:19451007T030000 RDATE:19461006T030000 RDATE:19471102T030000 RDATE:19481031T030000 RDATE:19491030T030000 RDATE:19501022T030000 RDATE:19511021T030000 RDATE:19521026T030000 RDATE:19531004T030000 RDATE:19541003T030000 RDATE:19551002T030000 RDATE:19561007T030000 RDATE:19571006T030000 RDATE:19581005T030000 RDATE:19591004T030000 RDATE:19601002T030000 RDATE:19611029T030000 RDATE:19621028T030000 RDATE:19631027T030000 RDATE:19641025T030000 RDATE:19651024T030000 RDATE:19661023T030000 RDATE:19671029T030000 RDATE:19711031T030000 RDATE:19721029T030000 RDATE:19731028T030000 RDATE:19741027T030000 RDATE:19751026T030000 RDATE:19761024T030000 RDATE:19771023T030000 RDATE:19781029T030000 RDATE:19791028T030000 RDATE:19801026T030000 RDATE:19811025T020000 RDATE:19821024T020000 RDATE:19831023T020000 RDATE:19841028T020000 RDATE:19851027T020000 RDATE:19861026T020000 RDATE:19871025T020000 RDATE:19881023T020000 RDATE:19891029T020000 RDATE:19901028T020000 RDATE:19911027T020000 RDATE:19921025T020000 RDATE:19931024T020000 RDATE:19941023T020000 RDATE:19951022T020000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:+0100 TZOFFSETTO:+0200 TZNAME:BDST DTSTART:19410504T020000 RDATE:19410504T020000 RDATE:19420405T020000 RDATE:19430404T020000 RDATE:19440402T020000 RDATE:19450402T020000 RDATE:19470413T020000 END:DAYLIGHT BEGIN:DAYLIGHT TZOFFSETFROM:+0200 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19410810T030000 RDATE:19410810T030000 RDATE:19420809T030000 RDATE:19430815T030000 RDATE:19440917T030000 RDATE:19450715T030000 RDATE:19470810T030000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0100 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19681027T000000 RDATE:19681027T000000 END:STANDARD BEGIN:STANDARD TZOFFSETFROM:+0000 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:19960101T000000 RDATE:19960101T000000 END:STANDARD END:VTIMEZONE END:VCALENDAR


SpamAssassin Report (spam score: 4.7)


 pts rule name               description
---- ---------------------- --------------------------------------------------
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: tzurl.org]
-0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at http://www.dnswl.org/, no
                            trust
                            [74.6.129.79 listed in list.dnswl.org]
 0.0 TVD_RCVD_IP4           Message was received from an IPv4 address
 0.0 TVD_RCVD_IP            Message was received from an IP address
 0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                            (do-not-reply[at]yahoo.com)
 0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                            CUSTOM_MED
-0.0 SPF_PASS               SPF: sender matches SPF record
 1.0 FORGED_YAHOO_RCVD      'From' yahoo.com does not match 'Received' headers
 0.0 MISSING_MIME_HB_SEP    BODY: Missing blank line between MIME header and
                            body
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 0.0 LOTS_OF_MONEY          Huge... sums of money
 0.0 T_DKIM_INVALID         DKIM-Signature header exists but is not valid
 1.4 MISSING_DATE           Missing Date: header
 1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing list
 1.0 MIME_NO_TEXT           No (properly identified) text body parts



Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer