You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Chris Santerre <cs...@MerchantsOverseas.com> on 2004/10/01 18:11:29 UTC

419 for school???

I don't get his one at all!!! WTH???

I'm CC'ing to SURBL because look at the MX for this domain!

uniprepacademy.com	 dns_mx:  	
neti-outblaze-com.mr.outblaze.com 
neti-outblaze-com-bk.mr.outblaze.com 

I know it didn't come form that domain, but the advertised part of this
email points to that domain. I'm guessing this is just an email to try to
harvest addresses from people who reply?

____________________________________________________________

Received: from hotmail.com (bay19-f20.bay19.hotmail.com [64.4.53.70])
	by moglobal.com (8.12.5/8.12.5) with ESMTP id i91FRj7K002969
	for <cs...@MERCHANTSOVERSEAS.COM>; Fri, 1 Oct 2004 11:27:49
-0400
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Fri, 1 Oct 2004 07:50:06 -0700
Received: from 216.139.176.61 by by19fd.bay19.hotmail.msn.com with HTTP;
	Fri, 01 Oct 2004 14:49:01 GMT
X-Originating-IP: [216.139.176.61]
X-Originating-Email: [estherekii17@hotmail.com]
X-Sender: estherekii17@hotmail.com
Reply-To: esthereki17@indiatimes.com
From: "Esther Eki" <es...@hotmail.com>
Bcc:
Subject: Greeting to you
Date: Fri, 01 Oct 2004 09:49:01 -0500
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
Message-ID: <BA...@hotmail.com>
X-OriginalArrivalTime: 01 Oct 2004 14:50:06.0052 (UTC)
FILETIME=[F09E5240:01C4A7C5]
X-Spam-Checker-Version: SpamAssassin 3.0.0 (2004-09-13) on mail
X-Spam-Level: ****
X-Spam-Status: No, score=4.3 required=5.0 tests=FROM_ENDS_IN_NUMS,
	RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SBL,SARE_TOCC_NONE,SARE_TOWRITE 
	autolearn=disabled version=3.0.0

Hello,
I am happy to write you this letter, to me it took a lot of time before I 
decided to write you,
I am just 17 years old and I lost both parents in a ghastly motor accident 
last year and since then, I have been staying with my Aunty, but of recent 
she has been persuading me to go into prostitution rather than going to 
school to further my education.
But I dissappointed her by refusing not to go into prostitution and that 
made her not to assist me in obtain my school's scholarship , I begged her 
for her assistance so I can resume school, but she refused and said that 
would be the punishment for me to disobey her, now I am in a situation for 
me to obey her but I don't want to, the only way for me to free my self from

this situation, is for me to be able to pay my school fees so that I will 
leave her house, and I am also applying for a scholarship that would help me

with my tuition, accomodation and all the expenses that I would need to pay 
while in school.
Because by the time I my school fees, I will move away from her house and 
resume school and start staying in the school's dormitory and that would 
keep her away from me, and I won't have to be persuaded to go into such bad 
thing, presently I am in my final year at University Preparatory Academy, 
Jos, Plateau State and all fees goes directly to the school.
But the problem I am having now is how do I get my school fees paid, and 
thats the reason I decided to write you for your assistance, someone that 
would take me as a sister and give me good advise and support in prayers and

I am also praying to God to bless me, and thats while I decided to write 
you, to know if you can contact the school on my behalf and also help me beg

them for the scholarship which I applied for, so I can resume school as soon

as possible, God bless you and your humble family.
Please if you want to contact the school, this is the address
The Principal
University Preparatory Academy
Jos
Pleateau State
principal@uniprepacademy.com
I hope to hear from you soon.
Yours
Esther Eki

Re: 419 for school???

Posted by David B Funk <db...@engineering.uiowa.edu>.
On Fri, 1 Oct 2004, Chris Santerre wrote:

> I don't get his one at all!!! WTH???
>
> I'm CC'ing to SURBL because look at the MX for this domain!
>
> uniprepacademy.com	 dns_mx:
> neti-outblaze-com.mr.outblaze.com
> neti-outblaze-com-bk.mr.outblaze.com
>
> I know it didn't come form that domain, but the advertised part of this
> email points to that domain. I'm guessing this is just an email to try to
> harvest addresses from people who reply?
>
> ____________________________________________________________
>
> Received: from hotmail.com (bay19-f20.bay19.hotmail.com [64.4.53.70])
> 	by moglobal.com (8.12.5/8.12.5) with ESMTP id i91FRj7K002969
> 	for <cs...@MERCHANTSOVERSEAS.COM>; Fri, 1 Oct 2004 11:27:49
> -0400
> Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
> 	 Fri, 1 Oct 2004 07:50:06 -0700
> Received: from 216.139.176.61 by by19fd.bay19.hotmail.msn.com with HTTP;
> 	Fri, 01 Oct 2004 14:49:01 GMT
> X-Originating-IP: [216.139.176.61]
> X-Originating-Email: [estherekii17@hotmail.com]
> X-Sender: estherekii17@hotmail.com
> Reply-To: esthereki17@indiatimes.com
> From: "Esther Eki" <es...@hotmail.com>
> Bcc:
> Subject: Greeting to you
> Date: Fri, 01 Oct 2004 09:49:01 -0500
> Mime-Version: 1.0
> Content-Type: text/plain; format=flowed
> Message-ID: <BA...@hotmail.com>
[snip..]

Look at the 'Reply-To:'. This scammer is probably depending upon their
victims to just hit the "Reply" button.

I'd say toss this one at Hotmail except they've been underwhemingly
responsive when I tried it in the past.


-- 
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{