Even scammers watch the news. And Iraq is big news. Now they'd like to take advantage of your Iraq-awareness to scam you. Apparently, they found some of Saddam Hussein's money in a bunch of old barrels (along with weapons and ammunition) and they supposedly want to share the wealth with you, a complete stranger.

If that's not bad enough, the sender poses as a Colonel, and claims that even if it's illegal, "no compensation can make up for the risks we have taken with our lives in this hell hole."

It's not a job scam, but we've seen these before. We find it particularly disgusting that the perpetrator of this scam would claim to have survived suicide bombs and that if not interested, you should delete the email, since "any leakage of this information will be detrimental to the US soldiers here in Iraq and especially to me."

Brian Kent turns into Brian Dennison when it comes to the reply address. And, according to the headers, this message originated from Nigeria. Someone needs to hunt this scammer down!

Message text:
From: Col. Brian Kent <col.briankent6 @ btinternet.com>
Subject: YOUR ATTENTION IS NEEDED IN IRAQ
To:
Date: Saturday, August 28, 2010, 6:35 AM

Hello,

Kindly see ATTACHMENT,

Regards.

Contents of text file attachment "brian_kent_new.txt":
Hello,

Good day and compliments, I know this letter will definitely come to you as a huge
surprise, but I implore you to take the time to go through it carefully as the
decision you make will go off a long way to determine my future and continued
existence. Please allow me to introduce myself. I am Col. Brian Dennison Kent, a US
Army serving in the 3rd Infantry Division in Iraq.

I am desperately in need of assistance and I have summoned up courage to contact
you, presently am in Iraq and I found your email in an address journal. I am seeking
your assistance to evacuate some funds which was stashed in a Trunk Box, to the
States or any safe country of your choice; as far as I can be assured that it will
be safe in your care until I complete my service here. This is no stolen money and
there are no dangers involved.

SOURCE OF MONEY:

Some money in various currencies was discovered and concealed in barrels with piles
of weapons and ammunition at a location near one of Saddam Hussein's old
Presidential Palaces in Tikrit Iraq, during a rescue operation, view the link below
for verification:

http :// news.bbc.co.uk/2/hi/middle_east/2988455.stm

It was agreed by all parties present that the money be shared amongst us. Although,
some were reported to be sent back.

This might appear as an illegal but I tell you what? No compensation can make up for
the risks we have taken with our lives in this hell hole. I have now found a secured
way of getting the package out of Iraq for you to pick up. I do not know for how
long I will remain here as I have been lucky to have survived 2 suicide bomb attacks
by Pure Divine intervention. This and other reasons put into consideration have
prompted me to reach out for help.

If it might be of interest to you then endeavor to contact me and we would work out
the necessary formalities but I pray that you are discreet about this mutually
benefiting relationship.

Should you have any reason to reject this offer, please and please delete this
message immediately, as any leakage of this information will be detrimental to the
US soldiers here in Iraq and especially to me.

Seriously, I want you to assist me. Get back to me for further details if interested.

Private and secured email: col.briandennison @ gmail.com

Waiting,
Brian Kent

Headers:
From Col. Brian Kent Sat Aug 28 13:35:32 2010
X-Apparently-To: [removed] via 209.191.125.36; Sat, 28 Aug 2010 06:35:41 -0700
Return-Path: <col.briankent6 @ btinternet.com>
Received-SPF: none (mta182.mail.sp2.yahoo.com: domain of col.briankent6 @ btinternet.com
does not designate permitted sender hosts)
X-Originating-IP: [217.12.12.246]
Authentication-Results: mta182.mail.sp2.yahoo.com from=btinternet.com; domainkeys=pass (ok);
from=btinternet.com; dkim=permerror (bad sig)
Received: from 127.0.0.1 (HELO smtp817.mail.ukl.yahoo.com) (217.12.12.246) by
mta182.mail.sp2.yahoo.com with SMTP; Sat, 28 Aug 2010 06:35:41 -0700
Received: (qmail 33437 invoked from network); 28 Aug 2010 13:35:40 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=btinternet.com;
h=Cc:DKIM-Signature:Message-ID:Received:X-Yahoo-SMTP:X-YMail-OSG:X-Yahoo-Newman-Property:
Reply-To:From:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:
X-MimeOLE;b=imnha29xZnKMk/G2WyHf5DWvUIW+XfDT5ZS+d0cv4fyPcSM+gVI6ghzNFdaBRGCBafb

vy5gmdKAvUiRhTRY5EtPM58GtK4Ll3KBa26HyqqXBr7aYeN2GZH88uoa82mcZNqZx3xOOc
grPOLPOttkWqcizD8KjLWOJPqMF036GBsk=;
Cc: recipient list not shown: ;
DKIM-Signature:
v=1; a=rsa-sha256; c=relaxed/relaxed; d=btinternet.com; s=s1024; t=1283002540;
bh=KQQXdAW77LytgMD0BqV4yYGDcNzafVZ8fbR35+Qh36A=;
h=Message-ID:Received:X-Yahoo-SMTP:X-YMail-OSG:X-Yahoo-Newman-Property:Reply-To:
From:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE;
b=5cvO+Ks/3SRhpnWdL+9+jdy5lv5GUGGmmBSZNdTO/Xv1EPFs1G5DdMdv1BeWltYfghCAUxoFJUlYePc8K3aO5YiMw
UuO/jFtqRv4BYlIv03ht9q+TcC/kWmvMvGXWVE8lG8eaOd0fN

SzWAwWTtIKpUiUvjvqKzUkjE9OyDGnzCs=
Message-ID: <81894.31244.qm @ smtp817.mail.ukl.yahoo.com>
Received: from User (col.briankent6 @ 82.128.59.95 with login) by smtp817.mail.ukl.yahoo.com
with SMTP; 28 Aug 2010 13:35:35 +0000 GMT
X-Yahoo-SMTP: aWIZ9gqswBABAsdkxUmw3gR.8a0pDG8uMcSJA8nMTyyvpVJ35l3hZ3M9
X-YMail-OSG: P6RfC40VM1kkX7wxi8uA.7QSgNhPqq43iXSSMUm5s__1bCM
Pw9P2f6Y03HSdcfcF6F9QEhmtLc5FOIjNXFOQwBhS33T8LUnPJeetMR7CVb6
aQ1oRo33B33qPP7O55Bqx5RD24f2mC.ob9lGcJJt_xyf340VlTAiLoWaBAW6
cplAw_J_Jp.2aVKGyty6nOT_SL_Inna4iD3fxW8wPkedYi1z20NKr89q8H0s zmr5pPGvfEqo-
X-Yahoo-Newman-Property: ymail-3
Reply-To: <briankent1970 @ live.com>
From: "Col. Brian Kent" <col.briankent6 @ btinternet.com> 
Subject: YOUR ATTENTION IS NEEDED IN IRAQ
Date: Sat, 28 Aug 2010 14:35:32 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_00D1_01C2A75B.2FA8A49A"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Content-Length: 3647

WHOIS 82.128.59.95:
(Courtesy: http://whois.domaintools.com/82.128.59.95)
IP Location:       Nigeria  Nigeria Cdma 1x/evdo Dial Up Pool
inetnum:      82.128.0.0 - 82.128.127.255
org:          ORG-AFNC1-RIPE
netname:      AFRINIC-NET-TRANSFERRED-20050223
descr:        This network has been transferred to AFRINIC
remarks:      These IP addresses are assigned in the AFRINIC region.
remarks:      Authoritative registration information for this network
remarks:      is available for query and modification in
remarks:      the AFRINIC whois database: whois.afrinic.net or
remarks:      web site: http://www.afrinic.net
remarks:      The routing registry information (route(6) objects)
remarks:      may be published in any Routing Registry, including
remarks:      RIPE Whois Database
country:      EU # country is really somewhere in African Region
admin-c:      AFRI-RIPE
tech-c:       AFRI-RIPE
status:       ALLOCATED PA
mnt-by:       RIPE-NCC-HM-MNT
mnt-routes:   RIPE-NCC-RPSL-MNT
source:       RIPE # Filtered
organisation: ORG-AFNC1-RIPE
org-name:     African Internet Numbers Registry
org-type:     RIR
address:      see http://www.afrinic.net
e-mail:       bitbucket @ ripe.net
admin-c:      AFRI-RIPE
tech-c:       AFRI-RIPE
remarks:      For more information on AFRINIC assigned blocks, use
remarks:      AFRINIC's whois database, whois.afrinic.net.
mnt-ref:      RIPE-NCC-HM-MNT
mnt-by:       RIPE-NCC-HM-MNT
source:       RIPE # Filtered

Comments

Add New Search RSS

The views expressed and the links provided on our comment pages are the personal views of individual contributors and do not necessarily reflect the views of PhishBucket.org.

3.26 Copyright (C) 2008 Compojoom.com / Copyright (C) 2007 Alain Georgette / Copyright (C) 2006 Frantisek Hliva. All rights reserved."

---

Tag it: