An
Email with the Subject "TOP URGENT PLEASE, FROM CAPTAIN GREG" was
received in one of Scamdex's honeypot email accounts on Thu, 09 Aug 2012 11:50:35 -0700
and has been classified as a Generic Scam Email.
The sender shows as "CAPTAIN GREG" <justask4valentine@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
assistance million diedsoldcontactsafejoyluckyfive millionserviceinterneturgentlegalsecuresentpackagesharedollaras a surprisemutualafghanistanrespectfullyjustask4valentine@yahoo.comdie will yahoo.comach(twenty five million uni...dear
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scamdex@o7e.net,paypal@o7e.net
[delivery-date:] => Thu, 09 Aug 2012 11:50:35 -0700
[received:] => Array
(
[0] => from mail.tamex.com.mx ([216.251.77.2]:61097)by lester.newsblaze.com with esmtp (Exim 4.77)(envelope-from )id 1SzXoV-0003vY-I0; Thu, 09 Aug 2012 11:50:35 -0700
[1] => by mail.tamex.com.mx (Postfix, from userid 80)id 68F613779F6; Thu, 9 Aug 2012 13:41:22 -0500 (CDT)
[2] => from 41.58.40.88 ([41.58.40.88]) by mail.tamex.com.mx (HordeFramework) with HTTP; Thu, 09 Aug 2012 13:41:18 -0500
)
[message-id:] => <20120809134118.66945r881zjb0c3y@mail.tamex.com.mx>
[date:] => Thu, 09 Aug 2012 13:41:18 -0500
[from:] => "CAPTAIN GREG"
[reply-to:] => captaingreg2@gmx.com
[to:] => undisclosed-recipients:;
[subject:] => TOP URGENT PLEASE, FROM CAPTAIN GREG
[mime-version:] => 1.0
[content-type:] => text/plain;charset=ISO-8859-1;DelSp="Yes";format="flowed"
[content-disposition:] => inline
[content-transfer-encoding:] => quoted-printable
[user-agent:] => Internet Messaging Program (IMP) H3 (4.2)
[x-imp-username:] => enrique
[x-originating-ip:] => 41.58.40.88
[x-spam-status:] => No, score=-3.0
[x-spam-score:] => -29
[x-spam-bar:] => ---
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Friend, Good day and compliments, I know this letter will definitely come to you as a surprise, but I implore you to take the time to go through it carefully as the decision you make will go off a long way to determine my future and continued existence.Please allow me to introduce myself.I am CAPTAIN GREG, in 4th Battalion, 64th Armored Regiment unit here that Patrols the helmand province, Afghanistan. I am desperately in need of assistance and I have summoned up courage to contact you. [...] Content analysis details: (-3.0 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 MILLION_USD BODY: Talks about millions of dollars 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (justask4valentine[at]yahoo.com)-0.0 SPF_HELO_PASS SPF: HELO matches SPF record-2.0 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (captaingreg2[at]gmx.com)-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419) 2.1 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases 1.7 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
you as a surprise, but I implore you to take the time to go through it
my future and continued existence.Please allow me to introduce
here that Patrols the helmand province, Afghanistan. I am desperately
an address journal. I am seeking your assistance to evacuate the sum
I can be assured that it will be safe in your care until I complete my
SOURCE OF MONEY:
location in helman province when we conducted a foot patrol and it was
might appear as an illegal thing to do but I tell you what? No
this hellhole.The above figure was given to me as my share and to
of a Canadian contact working with the UN here (his office enjoys some
entirely out of trouble spot. He does not know the real contents of
an air raid, who before giving up trusted me to hand over the package
Afghanistan for you to pick up. I do not know how long I will remain
Divine intervention. This and other reasons put into consideration
you then Endeavor to contact me immediately and we would work out the
mutually benefiting relationship.
Please reply to captaingreg2@gmx.com
Respectfully,
Captain Greg,
United States Soldier:Afghanistan
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
Dear Friend,
Good day and compliments, I know this letter will definitely come to
you as a surprise, but I implore you to take the time to go through it
carefully as the decision you make will go off a long way to determine
my future and continued existence.Please allow me to introduce
myself.I am CAPTAIN GREG, in 4th Battalion, 64th Armored Regiment unit
here that Patrols the helmand province, Afghanistan. I am desperately
in need of assistance and I have summoned up courage to contact you.
I am presently in Afghanistan and I found your contact particulars in
an address journal. I am seeking your assistance to evacuate the sum
of $25m (Twenty five Million United States Dollars) to you,as far as
I can be assured that it will be safe in your care until I complete my
service here. This is no stolen money and there are no dangers involved.
SOURCE OF MONEY:
Some money in US DOLLARS was discovered and concealed in barrels at a
location in helman province when we conducted a foot patrol and it was
agreed by all party present that the money be shared amongst us.This
might appear as an illegal thing to do but I tell you what? No
compensation can make up for the risks we have taken with our lives in
this hellhole.The above figure was given to me as my share and to
conceal this kind of money became a problem for me, so with the help
of a Canadian contact working with the UN here (his office enjoys some
immunity) I was able to get the package out to a safe location
entirely out of trouble spot. He does not know the real contents of
the package as he believes that it belongs to an American who died in
an air raid, who before giving up trusted me to hand over the package
to his close relative.
I have now found a secured way of getting the package out of
Afghanistan for you to pick up. I do not know how long I will remain
here, as I have been lucky to survive 2 suicide bomb attacks by Pure
Divine intervention. This and other reasons put into consideration
have prompted me to reach out for help. If it might be of interest to
you then Endeavor to contact me immediately and we would work out the
necessary formalities but I pray that you are discreet about this
mutually benefiting relationship.
Please reply to captaingreg2@gmx.com
Respectfully,
Captain Greg,
United States Soldier:Afghanistan
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
