An
Email with the Subject "FROM: THE OFFICE OF THE PRESIDENT REPUBLIC OF GHANA." was
received in one of Scamdex's honeypot email accounts on Sun, 19 May 2013 22:55:02 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as "pres.ghana" <pres.ghana@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
generalafrica atm boxpresidentdiplomaticcontactluckyresidentsecretaryprocesscustomurgentpaidmaildeliverypackagediplomaghana@gmail.comghana@live.comnelsonhammed@live.com will boxes(pres.ghana@live.com)(nelsonhammed@live.com)consignmentmy dear mr. nelson a. mohammedemail:
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => support@scamdex.com
[delivery-date:] => Sun, 19 May 2013 22:55:02 -0700
[received:] => Array
(
[0] => from mail-ee0-f42.google.com ([74.125.83.42]:49551)by lester.newsblaze.com with esmtps (TLSv1:RC4-SHA:128)(Exim 4.80)(envelope-from )id 1UeJ3l-0005kI-SRfor support@scamdex.com; Sun, 19 May 2013 22:55:02 -0700
[1] => by mail-ee0-f42.google.com with SMTP id c50so3848202eek.29 for ; Sun, 19 May 2013 22:55:00 -0700 (PDT)
[2] => by 10.15.56.9 with HTTP; Sun, 19 May 2013 22:55:00 -0700 (PDT)
)
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=/R5NTvyZDruM/diNz2/jYfN7v02RgdSdzXRG5qDvVho=; b=YguR/D+fty4Yx0pYPEQU6HhwEqi9jtPzj1LjVYMOgCLMQXlsV2wC2sKaxEsvEdGvUF 7XVAosyz2J4UqKdSGltbsRv1olLk1zn/w+2zRD+uGF2WcUBfrFMf8+TZQzCMSHdZNl1P 14fm2/LHAqTWnFxOkgoxIYilybkyUx9K69lt1ut8mLVtkuB5+RHFaOOTefJmQkpes5hK xjLUx0ZB/A69Cf/LswLUcv/QOeG9D3blvYe46dZ+0KAqie2YfiWtNUjgqkur1k2g/yCr djbuAXc6zLVBNvfgWncmBDb07tpsXueL6iKFum/jZABJjXT/Y8jHV0r6YPxODsG1iwVj OuSQ==
[mime-version:] => 1.0
[x-received:] => by 10.14.206.136 with SMTP id l8mr9433808eeo.26.1369029300352;Sun, 19 May 2013 22:55:00 -0700 (PDT)
[date:] => Sun, 19 May 2013 22:55:00 -0700
[message-id:] =>
[subject:] => FROM: THE OFFICE OF THE PRESIDENT REPUBLIC OF GHANA.
[from:] => "pres.ghana"
[to:] => undisclosed-recipients:;
[content-type:] => multipart/alternative; boundary=047d7b343dca22c15b04dd1ff9bb
[bcc:] => support@scamdex.com
[x-spam-status:] => No, score=-0.7
[x-spam-score:] => -6
[x-spam-bar:] => /
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: * FROM: THE OFFICE OF THE PRESIDENT REPUBLIC OF GHANA HIS EXCELLENCY HON. JOHN DRAMANI MAHAMA, EMAIL: (pres.ghana@live.com) DIRECT LINE: +233 264 948 880 REF: RG/OTP/001-01. * ATTN: MY DEAR FRIEND, COMPLEMENT OF THE SEASON, [...] Content analysis details: (-0.7 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (pres.ghana[at]gmail.com)-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: live.com] 0.0 HTML_MESSAGE BODY: HTML included in message-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid-1.0 UPPERCASE_75_100 message body is 75-100% uppercase 1.0 FREEMAIL_REPLY From and body contain different freemails 1.4 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I AM HIS EXCELLENCY HON. JOHN
DRAMANI MAHAMA, THE NEWLY APPOINTED PRESIDENT REPUBLIC OF GHANA WEST AFRICA. I
AM WRITING TO INFORM YOU THAT I WILL BE SENDING MY SECTARY (MR. BEBAAKO
MENSAH) FOR AN OFFICIAL MEETING WITH THE PRESIDENT OF YOUR COUNTRY AND
HE WILL BE BRINGING YOUR OUTSTANDING CONSIGNMENT BOXES, ATM
CARDS, UN
DIPLOMATIC PASSPORT AND ID CARD TO YOU, PLEASE YOU MOST BE
SURE HE WILL NOT GO THROUGH IMMIGRATION'S AND CUSTOMS PROBLEM AS HE IS THE
GENERAL SECTARY OF OUR COUNTRY REPUBLIC OF GHANA AND HE HAVE BEEN GIVEN
THE VETO POWER TO GO THROUGH IMMIGRATION'S AND CUSTOMS ROOT WITHOUT ANY
PROBLEM,
AS SOON AS HE IS THROUGH WITH
THE MEETING HE WILL THEN PROCEED TO YOUR ADDRESS FOR THE HAND OVER OF YOUR
PARCEL TO YOU, (PLEASE RE-CONFIRM YOUR CURRENT ADDRESS AND PHONE NUMBER) TO
AVOID MISTAKE IN PROCESS OF DELIVERY.
I HAVE TAKEN THIS
TASK UPON MYSELF BECAUSE I UNDERSTAND THAT YOU HAVE REALLY PAID SO MUCH ON
COST OF DELIVERY, BUT NOTHING WAS RECEIVED BY YOU. I MUST SAY THAT YOU ARE A
VERY LUCKY PERSON THIS TIME BECAUSE MY SECTARY WILL PERSONALLY BRING THE
PARCEL TO YOUR DOORSTEP AFTER HIS MEETING WITH THE PRESIDENT OF YOUR COUNTRY
AND THERE IS NOTHING ANY ONE IN THIS WORLD CAN DO ABOUT THIS, BECAUSE THE
UNITED NATION SECRETARY GENERAL AND YOUR PRESIDENT IS AWARE OF THIS
DELIVERY.
THE ONLY OBSTACLE HERE IS THAT THE PACKAGE HAVE TO BE REGISTERED AS A
PRESIDENTIAL PACKAGE FOR HIM TO DEFEAT ALL ODDS IN OUR AIRPORT. SO PLEASE
KINDLY CONTACT OUR REGISTRAR ON THE CONTACT DETAIL BELOW AND REGISTER YOUR
PARCEL THEN GET BACK TO US WITH THE REGISTRATION CERTIFICATE SO THAT HE CAN
COME ALONG WITH YOUR PARCEL.
I EXPECT YOU TO COMPLY AS SOON
AS POSSIBLE SO THAT THE DELIVERY REGISTRATION WILL BE COMPLETED. BUT IF YOU DO
NOT COMPLY, THEN IT WILL NOT BE MY FAULT IF YOU DO NOT RECEIVE YOUR PACKAGE
THIS TIME THAT YOU HAVE BEEN NOTIFIED BY MY GOVERNMENT.
FROM: THE OFFICE OF
THE PRESIDENT REPUBLIC OF GHANA HIS EXCELLENCY HON. JOHN DRAMANI MAHAMA,
EMAIL: (pres.ghana@live.com)
DIRECT LINE: +233 264 948
880 REF:
RG/OTP/001-01.
ATTN: MY DEAR
FRIEND,
COMPLEMENT OF THE
SEASON,
I AM HIS EXCELLENCY HON. JOHN
DRAMANI MAHAMA, THE NEWLY APPOINTED PRESIDENT REPUBLIC OF GHANA WEST AFRICA. I
AM WRITING TO INFORM YOU THAT I WILL BE SENDING MY SECTARY (MR. BEBAAKO
MENSAH) FOR AN OFFICIAL MEETING WITH THE PRESIDENT OF YOUR COUNTRY AND
HE WILL BE BRINGING YOUR OUTSTANDING CONSIGNMENT BOXES, ATM
CARDS, UN
DIPLOMATIC PASSPORT AND ID CARD TO YOU, PLEASE YOU MOST BE
SURE HE WILL NOT GO THROUGH IMMIGRATION'S AND CUSTOMS PROBLEM AS HE IS THE
GENERAL SECTARY OF OUR COUNTRY REPUBLIC OF GHANA AND HE HAVE BEEN GIVEN
THE VETO POWER TO GO THROUGH IMMIGRATION'S AND CUSTOMS ROOT WITHOUT ANY
PROBLEM,
AS SOON AS HE IS THROUGH WITH
THE MEETING HE WILL THEN PROCEED TO YOUR ADDRESS FOR THE HAND OVER OF YOUR
PARCEL TO YOU, (PLEASE RE-CONFIRM YOUR CURRENT ADDRESS AND PHONE NUMBER) TO
AVOID MISTAKE IN PROCESS OF DELIVERY.
I HAVE TAKEN THIS
TASK UPON MYSELF BECAUSE I UNDERSTAND THAT YOU HAVE REALLY PAID SO MUCH ON
COST OF DELIVERY, BUT NOTHING WAS RECEIVED BY YOU. I MUST SAY THAT YOU ARE A
VERY LUCKY PERSON THIS TIME BECAUSE MY SECTARY WILL PERSONALLY BRING THE
PARCEL TO YOUR DOORSTEP AFTER HIS MEETING WITH THE PRESIDENT OF YOUR COUNTRY
AND THERE IS NOTHING ANY ONE IN THIS WORLD CAN DO ABOUT THIS, BECAUSE THE
UNITED NATION SECRETARY GENERAL AND YOUR PRESIDENT IS AWARE OF THIS
DELIVERY.
THE ONLY OBSTACLE HERE IS THAT THE PACKAGE HAVE TO BE REGISTERED AS A
PRESIDENTIAL PACKAGE FOR HIM TO DEFEAT ALL ODDS IN OUR AIRPORT. SO PLEASE
KINDLY CONTACT OUR REGISTRAR ON THE CONTACT DETAIL BELOW AND REGISTER YOUR
PARCEL THEN GET BACK TO US WITH THE REGISTRATION CERTIFICATE SO THAT HE CAN
COME ALONG WITH YOUR PARCEL.
NAME OF REGISTRAR: MR. NELSON A. MOHAMMED
EMAIL:
(nelsonhammed@live.com)
TEL: +233 241 722 400.
I EXPECT YOU TO COMPLY AS SOON
AS POSSIBLE SO THAT THE DELIVERY REGISTRATION WILL BE COMPLETED. BUT IF YOU DO
NOT COMPLY, THEN IT WILL NOT BE MY FAULT IF YOU DO NOT RECEIVE YOUR PACKAGE
THIS TIME THAT YOU HAVE BEEN NOTIFIED BY MY GOVERNMENT.
WAITING YOUR URGENT
RESPOND,
BEST REGARDS,
YOURS FAITHFULLY,
HIS EXCELLENCY HON.
JOHN DRAMANI MAHAMA, PRESIDENT
REPUBLIC OF GHANA, DIRECT
LINE: +233 264 948
880.