You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Chris Santerre <cs...@MerchantsOverseas.com> on 2004/10/01 18:11:29 UTC
419 for school???
I don't get his one at all!!! WTH???
I'm CC'ing to SURBL because look at the MX for this domain!
uniprepacademy.com dns_mx:
neti-outblaze-com.mr.outblaze.com
neti-outblaze-com-bk.mr.outblaze.com
I know it didn't come form that domain, but the advertised part of this
email points to that domain. I'm guessing this is just an email to try to
harvest addresses from people who reply?
____________________________________________________________
Received: from hotmail.com (bay19-f20.bay19.hotmail.com [64.4.53.70])
by moglobal.com (8.12.5/8.12.5) with ESMTP id i91FRj7K002969
for <cs...@MERCHANTSOVERSEAS.COM>; Fri, 1 Oct 2004 11:27:49
-0400
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Fri, 1 Oct 2004 07:50:06 -0700
Received: from 216.139.176.61 by by19fd.bay19.hotmail.msn.com with HTTP;
Fri, 01 Oct 2004 14:49:01 GMT
X-Originating-IP: [216.139.176.61]
X-Originating-Email: [estherekii17@hotmail.com]
X-Sender: estherekii17@hotmail.com
Reply-To: esthereki17@indiatimes.com
From: "Esther Eki" <es...@hotmail.com>
Bcc:
Subject: Greeting to you
Date: Fri, 01 Oct 2004 09:49:01 -0500
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
Message-ID: <BA...@hotmail.com>
X-OriginalArrivalTime: 01 Oct 2004 14:50:06.0052 (UTC)
FILETIME=[F09E5240:01C4A7C5]
X-Spam-Checker-Version: SpamAssassin 3.0.0 (2004-09-13) on mail
X-Spam-Level: ****
X-Spam-Status: No, score=4.3 required=5.0 tests=FROM_ENDS_IN_NUMS,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SBL,SARE_TOCC_NONE,SARE_TOWRITE
autolearn=disabled version=3.0.0
Hello,
I am happy to write you this letter, to me it took a lot of time before I
decided to write you,
I am just 17 years old and I lost both parents in a ghastly motor accident
last year and since then, I have been staying with my Aunty, but of recent
she has been persuading me to go into prostitution rather than going to
school to further my education.
But I dissappointed her by refusing not to go into prostitution and that
made her not to assist me in obtain my school's scholarship , I begged her
for her assistance so I can resume school, but she refused and said that
would be the punishment for me to disobey her, now I am in a situation for
me to obey her but I don't want to, the only way for me to free my self from
this situation, is for me to be able to pay my school fees so that I will
leave her house, and I am also applying for a scholarship that would help me
with my tuition, accomodation and all the expenses that I would need to pay
while in school.
Because by the time I my school fees, I will move away from her house and
resume school and start staying in the school's dormitory and that would
keep her away from me, and I won't have to be persuaded to go into such bad
thing, presently I am in my final year at University Preparatory Academy,
Jos, Plateau State and all fees goes directly to the school.
But the problem I am having now is how do I get my school fees paid, and
thats the reason I decided to write you for your assistance, someone that
would take me as a sister and give me good advise and support in prayers and
I am also praying to God to bless me, and thats while I decided to write
you, to know if you can contact the school on my behalf and also help me beg
them for the scholarship which I applied for, so I can resume school as soon
as possible, God bless you and your humble family.
Please if you want to contact the school, this is the address
The Principal
University Preparatory Academy
Jos
Pleateau State
principal@uniprepacademy.com
I hope to hear from you soon.
Yours
Esther Eki
Re: 419 for school???
Posted by David B Funk <db...@engineering.uiowa.edu>.
On Fri, 1 Oct 2004, Chris Santerre wrote:
> I don't get his one at all!!! WTH???
>
> I'm CC'ing to SURBL because look at the MX for this domain!
>
> uniprepacademy.com dns_mx:
> neti-outblaze-com.mr.outblaze.com
> neti-outblaze-com-bk.mr.outblaze.com
>
> I know it didn't come form that domain, but the advertised part of this
> email points to that domain. I'm guessing this is just an email to try to
> harvest addresses from people who reply?
>
> ____________________________________________________________
>
> Received: from hotmail.com (bay19-f20.bay19.hotmail.com [64.4.53.70])
> by moglobal.com (8.12.5/8.12.5) with ESMTP id i91FRj7K002969
> for <cs...@MERCHANTSOVERSEAS.COM>; Fri, 1 Oct 2004 11:27:49
> -0400
> Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
> Fri, 1 Oct 2004 07:50:06 -0700
> Received: from 216.139.176.61 by by19fd.bay19.hotmail.msn.com with HTTP;
> Fri, 01 Oct 2004 14:49:01 GMT
> X-Originating-IP: [216.139.176.61]
> X-Originating-Email: [estherekii17@hotmail.com]
> X-Sender: estherekii17@hotmail.com
> Reply-To: esthereki17@indiatimes.com
> From: "Esther Eki" <es...@hotmail.com>
> Bcc:
> Subject: Greeting to you
> Date: Fri, 01 Oct 2004 09:49:01 -0500
> Mime-Version: 1.0
> Content-Type: text/plain; format=flowed
> Message-ID: <BA...@hotmail.com>
[snip..]
Look at the 'Reply-To:'. This scammer is probably depending upon their
victims to just hit the "Reply" button.
I'd say toss this one at Hotmail except they've been underwhemingly
responsive when I tried it in the past.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{