An
Email with the Subject "GOOD NEWS!!!" was
received in one of Scamdex's honeypot email accounts on Sat, 19 Dec 2015 03:00:19 -0800
and has been classified as a Generic Scam Email.
The sender shows as "AMBASSADOR JAMES F. ENTWISTLE".
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] => <>
[envelope-to:] => scam@scamdex.com
[delivery-date:] => Sat, 19 Dec 2015 03:00:19 -0800
[received:] => Array
(
[0] => from mail-am1hn0246.outbound.protection.outlook.com ([157.56.112.246]:57680 helo=emea01-am1-obe.outbound.protection.outlook.com)by bigcat.newsblaze.com with esmtps (TLSv1.2:AES256-SHA256:256)(Exim 4.86)id 1aAFFL-0007Zu-9xfor scam@scamdex.com; Sat, 19 Dec 2015 03:00:19 -0800
[1] => from npwwpc4.NPWW.local (66.76.76.110) byVI1PR09MB0464.eurprd09.prod.outlook.com (10.161.110.24) with Microsoft SMTPServer (TLS) id 15.1.361.13; Sat, 19 Dec 2015 10:59:33 +0000
)
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed;d=dennisjones.onmicrosoft.com; s=selector1-dennisjones-onmicrosoft-com;h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version;bh=CJE9kC0Bp5jPr4LeOMuy884wXMlOFDFYZ0BLXPozpno=;b=kTqf4dXDS9TflwlfjjCgEnhkNocaJ+anTk6sMwavCbPlsCIXxs9vJR2IBYNyeV3BJo/AfKqT8oa+fdpTBBP5Z0SyQzWpWYWlTQ/8iiPuVuvJ1wOZgwAXg+5xYW+chyZ4XaoVrNWoDm14ifzA1+zTaea2togdwHxY5VYOGA9OwFE=
[authentication-results:] => spf=none (sender IP is ) smtp.mailfrom=<>;
[content-type:] => text/plain; charset="iso-8859-1"
[mime-version:] => 1.0
[content-transfer-encoding:] => quoted-printable
[content-description:] => Mail message body
[subject:] => GOOD NEWS!!!
[to:] => Recipients
[from:] => "AMBASSADOR JAMES F. ENTWISTLE"
[date:] => Sat, 19 Dec 2015 04:55:43 -0600
[reply-to:] =>
[x-originating-ip:] => [66.76.76.110]
[x-clientproxiedby:] => SN1PR17CA0026.namprd17.prod.outlook.com (25.169.33.164) ToVI1PR09MB0464.eurprd09.prod.outlook.com (25.161.110.24)
[message-id:] =>
[x-microsoft-exchange-diagnostics:] => Array
(
[0] => 1;VI1PR09MB0464;2:iEHUu6Pe8NtOikF9CUwYJYSFyEv2bPQwJEZkNhV/UNfVfus9xBw7XqqZyXulJRzIodFhadrt4wRB5m3kFdMlBb9knezvkqBhY3rlNqKHCk5t196w08eARyne8j7gkzU5o7qsgBxnzO+GXRmvNEJAPw==;3:9qmZo2ePJW8Amlri0K8Qeryo66NLQhj0KxOPZPDq3QWa4/xXVNmlUJDLc5+Kc2+pgYU+pn4vWt+IkQ76mCtDDD88Tyxzhqzx2IzkPxJ3QHUb26spJ6k4W+XtCP3jgM/Q;25:9BD91o9j8pKlj01eO7c8tPBiAsGnciUgiUxFGQOSrOYddYRFowijMeF8kDrbCqAHPgpF/CoPEHOsrYj47dWKH+SDWTnh0sc4ZT2ouWjQpjjHUkqKKy/2dk9QUy19k+WdZg1Fo/DWXS80WSgOxoknHB0B4Tw5yloxQXyFfFpl1mTayidFJ6Nu0fJHMyzRg42ccveFiZ1Vq4LT97yocD/d3RsG98o2oIdKyggdH/4e46PSZ4bbhoilghDZFexnn5UH+kQ5m6tRG3s9ZcCThJMSbw==
[1] => 1;VI1PR09MB0464;4:IJCQ8nJMyG4pvIRIl4VwZvOR2+FuVEV0MEdlqzPl/24cKpJ2P0Sh8agAfddV/uUIT9IIrH1WxI1IjDj7kDidNC3UvajE3kQ771vIPa3PJly8Q3Q5u4o5kU5kvbXdz92eTbtfd2aLUOLkMT4XaBRIgn0x9Ba1ZaX5geYnnKHmEB189zDOEK3A/kMAWVpitb8CMF9BGUJcoMDv0fF8LtIDUBFUTP2M5GT+4+km43aoPcHGJXeRRvZnC2aBh6LYLinDKUJ8PR/YvBDBQjJp+94s7LNX+r2n+Wv2utfyPMvzvYeXS1MLGSngWgwLp8nLmW0SURf9etto4A0CUiZic1O4D/qDD0toDdZTbPB5koCiEgP11gQEYSgW9FzucMgIdRR+LUoxjNvVKwSBDV4WYVaKTeZEdJWgZz7mMQK0rQVsQaFCNP/Ahb3DcYZjTuV/E0fEA7k6zVj7BmRSUvpdwoMq/g==;23:PL9ezrxbWDDQM7qaCXipzbG8PNkO0r5Rc8gxAepkf8c1vJv9uyo1KJKokDoBABbaqXZ61nOQ1wcAdr6oXzLpBLqUAr30MOvVVpJqW3LxrSleb4AVblw2ee9MFcLaAZWCVfqRKMXO9aBehKHC9SLGejk+nU3zfl8UX5JSW178KjG1dqii2N3kNwJUW5SLhv/leXXkPp4KfXEXXPlz0/vadAvd99vsDpFNakiamiiAAlxRH835FQRCkLPi0Ky2DQCTPr3lEzhXNdxfEtJiYtrAWw==;5:zitHu0aEUIbjmiPMIYPhuiiZ0YMCMezxCgGCt1bJWXZdZzaUFnhec/eJu0/qh/8KQL+NVIA+6mTRgconKnrjG3fz+TeX6O4LwnDn35UTahj3hox6C+Za/qzbwqDOOr6EFQy02bvlvfE7niC8LSBvxA==
[2] => 1;VI1PR09MB0464;24:+zG43Y/g3SL25ICszwstu9BZzRXJ8Pa2A+K+JOaCLkBynuDZJGPjTMLabF1Z5kXftdYJIvubhYHNvzSO+Nov2Q==
)
[x-microsoft-antispam:] => UriScan:;BCL:0;PCL:0;RULEID:;SRVR:VI1PR09MB0464;
[x-microsoft-antispam-prvs:] =>
[x-exchange-antispam-report-test:] => UriScan:(201166117486090);
[x-exchange-antispam-report-cfa-test:] => BCL:0;PCL:0;RULEID:(601004)(2401047)(520078)(5005006)(8121501046)(3002001)(10201501046)(6009046)(6011046);SRVR:VI1PR09MB0464;BCL:0;PCL:0;RULEID:;SRVR:VI1PR09MB0464;
[x-forefront-prvs:] => 07954CC105
[x-forefront-antispam-report:] => SFV:SPM;SFS:(10009020)(6009001)(5005620100007);DIR:OUT;SFP:1501;SCL:9;SRVR:VI1PR09MB0464;H:npwwpc4.NPWW.local;FPR:;SPF:None;PTR:InfoNoRecords;LANG:en;
[received-spf:] => None (protection.outlook.com: npwwpc4.NPWW.local does notdesignate permitted sender hosts)
[spamdiagnosticoutput:] => 1:22
[spamdiagnosticmetadata:] => 00000000%2D0000%2D0000%2D0000%2D000000000000
[x-originatororg:] => dennisjones.onmicrosoft.com
[x-ms-exchange-crosstenant-originalarrivaltime:] => 19 Dec 2015 10:59:33.7776(UTC)
[x-ms-exchange-crosstenant-fromentityheader:] => Hosted
[x-ms-exchange-transport-crosstenantheadersstamped:] => VI1PR09MB0464
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
U.S AMBASSADOR TO NIGERIA
PLOT 1075 DIPLOMATIC DRIVE
CENTRAL DISTRICT AREA, ABUJA
Good day,
AFTER AN OFFICIAL MEETING HELD WITH THE PRESIDENT OF NIGERIA AND
MINISTER OF FINANCE CONCERNING UNPAID AND UNCLAIMED FUNDS TO FOREIGN
BENEFICIARIES,JUST LIKE YOU.
I FOUND OUT THAT DUE TO SOME CIRCUSTANCES YOU DID NOT RECEIVE YOUR FUNDS.
THAT IS WHY I DECIDED TO HELP YOU.I SHALL BE COMING TO YOUR
STATE AFTER THE UP COMING CRUCIAL MEETING TO BE HELD ON MONDAY
30TH OF NOVEMBER IF A PROPER ARRANGEMENT IS MADE, THEN I SHALL BE COMING
WITH AN AGENT WHOM WILL BRING TO YOU YOUR FUNDS OF $2.7million
USD ALONG THROUGH UNITED STATES DIPLOMATIC MISSION TO YOUR COUNTRY.
BUT THIS TIME HE WILL NOT GO THROUGH CUSTOMS BECAUSE AS A USA
AMBASSADOR TO NIGERIA, I AM A USA GOVERNMENT AGENT AND I HAVE THE VETO
POWER TO GO THROUGH CUSTOMS JUST LIKE I HELPED R. BLACKWALL IN BOWLING
GREEN, KY UNITED STATES, AND OTHERS RECEIVED THEIR FUNDS THROUGH FEDEX
DELIVERY SERVICE THIS YEAR 2015.
TRACK THE LINK BELOW AND SEE IT YOURSELF.
1.)FedEx.com
Tracking No: 628702131974
2.FedEx.com
Tracking No: 626836538338
3)FedEx.com
Tracking No: 618255167286
4.)FedEx.com
Tracking No: 805745115302
SEND TO ME THE REQUIRE INFORMATION AS LISTED BELOW:
1. YOUR FULL NAME
2. CELL PHONE NUMBER
3. CURRENT HOME ADDRESS WHERE YOU WANT PACKAGE DELIVERED.
YOU ARE A VERY LUCKY PERSON I WANT TO CONGRATULATE YOU ONCE
MORE BECAUSE I WILL MAKE SURE YOUR FUNDS GETS TO YOU AND THERE IS
NOTHING ANYONE CAN DO ABOUT IT.
YOUR PACKAGE ($2.7million USD,) MUST BE REGISTERED WITH THE FEE OF $195.
THE FEE MUST BE PAID IN THE NEXT 50 HOURS VIA WESTERN UNION SO THAT
ALL NECESSARY ARRANGEMENT CAN BE MADE.
SEND THE FEE VIA MONEY GRAM OR
WESTERN UNION MONEY TRANSFER AND THROUGH THE CASHIER MR NZEKWESI
OSITA.
1.RECEIVER'S NAME: NZEKWESI OSITA
2.ADDRESS: LAGOS / NIGERIA
3.TEXT QUESTION: IN GOD?
4.ANSWER:WE TRUST?
5.AMOUNT: $195
AS SOON AS YOU SEND THE FEE MAKE SURE YOU SEND THE PAYMENT
INFORMATION TO ME FOR CONFIRMATION. THEN I SHALL MOVE MY FLIGHT SCHEDULE TO YOU.
YOUR RESPONSE DETERMINES WHEN MY FLIGHT WILL BE FIXED,
SO I EXPECT YOU TO COMPLY SO THAT THE DELIVERY CAN BE COMPLETED.
REGARDS,
AMBASSADOR JAMES F. ENTWISTLE
Contact email: ambassadorjames43@yahoo.com
U.S AMBASSADOR TO NIGERIA
PLOT 1075 DIPLOMATIC DRIVE
CENTRAL DISTRICT AREA, ABUJA
Good day,
AFTER AN OFFICIAL MEETING HELD WITH THE PRESIDENT OF NIGERIA AND
MINISTER OF FINANCE CONCERNING UNPAID AND UNCLAIMED FUNDS TO FOREIGN
BENEFICIARIES,JUST LIKE YOU.
I FOUND OUT THAT DUE TO SOME CIRCUSTANCES YOU DID NOT RECEIVE YOUR FUNDS.
THAT IS WHY I DECIDED TO HELP YOU.I SHALL BE COMING TO YOUR
STATE AFTER THE UP COMING CRUCIAL MEETING TO BE HELD ON MONDAY
30TH OF NOVEMBER IF A PROPER ARRANGEMENT IS MADE, THEN I SHALL BE COMING
WITH AN AGENT WHOM WILL BRING TO YOU YOUR FUNDS OF $2.7million
USD ALONG THROUGH UNITED STATES DIPLOMATIC MISSION TO YOUR COUNTRY.
BUT THIS TIME HE WILL NOT GO THROUGH CUSTOMS BECAUSE AS A USA
AMBASSADOR TO NIGERIA, I AM A USA GOVERNMENT AGENT AND I HAVE THE VETO
POWER TO GO THROUGH CUSTOMS JUST LIKE I HELPED R. BLACKWALL IN BOWLING
GREEN, KY UNITED STATES, AND OTHERS RECEIVED THEIR FUNDS THROUGH FEDEX
DELIVERY SERVICE THIS YEAR 2015.
TRACK THE LINK BELOW AND SEE IT YOURSELF.
1.)FedEx.com
Tracking No: 628702131974
2.FedEx.com
Tracking No: 626836538338
3)FedEx.com
Tracking No: 618255167286
4.)FedEx.com
Tracking No: 805745115302
SEND TO ME THE REQUIRE INFORMATION AS LISTED BELOW:
1. YOUR FULL NAME
2. CELL PHONE NUMBER
3. CURRENT HOME ADDRESS WHERE YOU WANT PACKAGE DELIVERED.
YOU ARE A VERY LUCKY PERSON I WANT TO CONGRATULATE YOU ONCE
MORE BECAUSE I WILL MAKE SURE YOUR FUNDS GETS TO YOU AND THERE IS
NOTHING ANYONE CAN DO ABOUT IT.
YOUR PACKAGE ($2.7million USD,) MUST BE REGISTERED WITH THE FEE OF $195.
THE FEE MUST BE PAID IN THE NEXT 50 HOURS VIA WESTERN UNION SO THAT
ALL NECESSARY ARRANGEMENT CAN BE MADE.
SEND THE FEE VIA MONEY GRAM OR
WESTERN UNION MONEY TRANSFER AND THROUGH THE CASHIER MR NZEKWESI
OSITA.
1.RECEIVER'S NAME: NZEKWESI OSITA
2.ADDRESS: LAGOS / NIGERIA
3.TEXT QUESTION: IN GOD?
4.ANSWER:WE TRUST?
5.AMOUNT: $195
AS SOON AS YOU SEND THE FEE MAKE SURE YOU SEND THE PAYMENT
INFORMATION TO ME FOR CONFIRMATION. THEN I SHALL MOVE MY FLIGHT SCHEDULE TO YOU.
YOUR RESPONSE DETERMINES WHEN MY FLIGHT WILL BE FIXED,
SO I EXPECT YOU TO COMPLY SO THAT THE DELIVERY CAN BE COMPLETED.
REGARDS,
AMBASSADOR JAMES F. ENTWISTLE
Contact email: ambassadorjames43@yahoo.com