2015-02-17 Phish of the Day

This is a good one.  Yes, I'm quite sure the US Ambassador to Nigeria is just going to contact random people to smuggle $15.5M.  I'm not even going to touch the capitalization of each word in the email.

===== Begin Phishing Email =====

Attn:

I Shall Be Coming To Your Country For An Official Meeting In Next Two Days And I Will Be Bringing Your Funds Of $15.5m Along With Me But This Time I Will Not Go Through Customs Because As An Ambassador To Nigeria, I Am A Us Government Agent And I Have The Veto Power To Go Through Customs. As Soon As I Am Through With The Meeting I Shall Then Proceed To Your Address. (Send Your Cell Phone Number And The Address Where You Want Me To Bring The Package).

You Have Really Paid So Much In This Delivery That Makes Me Wonder. You Are A Very Lucky Person Because I Shall Be Bringing It Myself And There Is Nothing Anyone Can Do About It. Check Here: Http://Nigeria.Usembassy.Gov/Biography.Html Your Package ($15.5m) Must Be Registered As An Ambassadorial Package For Me To Defeat All Odds And The Cost Of Registering It Is $120.

The Fee Must Be Paid In The Next 50 Hours Via Western Union So That All Necessary Arrangement Can Be Made Before Time Will Be Against Us. Contact My Secretary Immediately For The Registering Fee Which Is $120 Only.


Contact Person: Chuks Steve
Secretary To Us Ambassador To Nigeria.
Email:( Chukssteve62@Yahoo.Com)


As Soon As You Send The Fee Make Sure You Send Me The Payment Information. My Flight Is In Two Days Time And I Expect You To Comply Before Then So That The Delivery Can Be Completed. If You Do Not Comply, Then It Will Not Be My Fault If You Do Not Receive Your Package.

James F.Entwistle
Us Ambassador To Nigeria


===== Begin Phishing Email Header Info =====

Return-path: <"jamesf.e@"@yahoo.pt>
Received: from hnmp.info ([89.212.62.104]) by vms172097.mailsrvcs.net
 (Oracle Communications Messaging Server 7.0.5.34.0 64bit (built Oct 14 2014))
 with ESMTPS id <0NJ4002XRN8B8060@vms172097.mailsrvcs.net> for
 <recipient_address_omitted>; Sun, 01 Feb 2015 22:31:24 -0600 (CST)
Received: from User (unknown [80.67.12.244]) (Authenticated sender: user)
 by hnmp.info (Postfix) with ESMTPA id 3B9484342; Sat,
 31 Jan 2015 04:58:08 +0100 (CET)
Date: Sat, 31 Jan 2015 03:58:56 +0000
From: "James F.Entwistle"<jamesf.e@@yahoo.pt>
Subject: YOUR PACKAGE($15.5M)
X-Originating-IP: [89.212.62.104]
Reply-to: ambssadorjamesfgovement@gmail.com
Message-id: <0NJ4002YCN8C8060@vms172097.mailsrvcs.net>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
Content-type: text/plain; CHARSET=US-ASCII
Content-transfer-encoding: 7BIT
X-Priority: 3
X-MSMail-priority: Normal
X-Verizon-Spam: Yes
X-CMAE-Score: 100
X-CMAE-Analysis: v=2.1 cv=Z9hbx8VF c=1 sm=1 tr=0 p=R37xADQt0T8A:10
 a=YXt5PTSPTuTgTftK5scNTg==:117 a=YXt5PTSPTuTgTftK5scNTg==:17 a=9cW_t1CCXrUA:10
 a=Dyoqhi_TatcA:10 a=8EU9Q7FnrCoA:10 a=Cfj4BQAnxiAA:10 a=pGLkceISAAAA:8
 a=WLgZIfl7AAAA:8 a=oR5dmqMzAAAA:8 a=-9mUelKeXuEA:10 a=0HtSIViG9nkA:10
 a=RJON8cwBAAAA:8 a=CjxXgO3LAAAA:8 a=ueh_1s1oAo9RWQkNfPYA:9
 a=BQRJ-zTHs6G6aT8I:21 a=aZuGbJLP2Ciidb9i:21 a=Ft8UYL4EG9YA:10
 a=MqjJdTfnRPIA:10 a=mxmPv_g2Ox8A:10
Original-recipient: rfc822;<recipient_address_omitted>