etee's Blog

It appears that the "Lads from Lagos" have a serious case of wanderlust. Or, they are beginning to feel the heat from the authorities -- both those who are not corrupt, and those who are PO'd because they haven't been cut in on the action. Whatever the cause, my "Nigeria 419" folder is looking more and more like a travelogue with every passing week. Seriously, this stuff is coming in from all over the world!

This particular specimen introduces us to yet another African nation where political stability does not necessarily reign supreme: the Republic of Togo (not to be confused with Togo's, which is a chain of sandwich stores and actually serves some pretty decent food.)

Anyhoo, without further ado...the spamm:

[More:]

Return-Path: []
Delivered-To: [the.me][AT].net
Received: (qmail 49336 invoked by uid 110); 17 Jun 2005 19:56:33 -0000
Delivered-To: webmaster[AT]bsatroop148.org
Received: (qmail 49283 invoked from network); 17 Jun 2005 19:56:27 -0000
Received: from exprod5mx5.postini.com (HELO psmtp.com) (64.18.0.145)
by technography.com with SMTP; 17 Jun 2005 19:56:27 -0000
Received: from source ([]) by exprod5mx5.postini.com ([64.18.4.10]) with SMTP;
Fri, 17 Jun 2005 14:56:26 CDT
Received: from [] (helo=ma18.eresmas.com)
by smtp13.eresmas.com with esmtp (Exim 4.30)
id 1DjL062o-0r; Fri, 17 Jun 2005 19:55:37 +0200
From: DAN nkanga nos []
To:
Message-ID: []
Date: Fri, 17 Jun 2005 17:55:38 GMT
X-Mailer: Netscape Webmail
MIME-Version: 1.0
Content-Language: en
Subject: I AM WAITING FOR YOUR RESPONSE
X-Accept-Language: en
Content-Type: text/html; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hoo boy, "erasmas.com". Where have I seen that before... on some other scammy spamms, maybe? So, let's look at the headers. The first Received: header shows an IP of , which is a "private" address according to RFC1918. Going back to the previous Received: header, we see , which belongs to Eresmas Interactiva, S.A., an Internet Service Provider out of Madrid, Spain. Guess that explains the Spanish footer at the bottom of the email. Output from DIG also shows this IP has the name of smtp13.erasmas.com, which means the header chain is good, so the headers likely aren't forged.

Why a Spanish ISP for Togo? Maybe Togo is too darn poor to have its own ISP, or maybe the sender is actually in, like, you know, Spain. Probably doesn't matter much, one way or the other. At least, this one isn't coming from Nigeria.

The X-Mailer: header shows the sender is using Netscape Webmail, so obviously we have a man of great wealth here.

Enough with the geeky technical stuff already, let's get down to the good stuff... the content!

From the Residence of the President of Togo Republic

ATTENTION SIR,

I am Nanaamah Koffi, a cook to the late Togolese President Gnassingbe Eyadema
who died recently.

STOP THE TAPE! A cook, named Nanaamah Koffi?!? Sounds like, when the dad was asked "What will you name this child", he heard "Do you want cream and sugar", and he replied "Not in my coffee". In fact, that is your new name, Sir... Nahtinmahcoffee. Anyway, to continue...

Before the death of His Excellency, Gnassingbe Eyadema, he used to give me saves to hide in the firewood store with the warning that I should watch over the safe carefully so that nobody tempers with them because they contains money. He advised me that if I can be confidential, then, in the end he would make me rich. So, time after time, he would give me the saves, when the Diplomats come,
he would instruct me to load them in their vehicles and they would go with the
saves. But this last batch, due to the complication that led to his sudden
death, the Diplomats have not come and the saves were still in the firewood
store not until I got frightened and loose confidence in the son who is now at
the throne. I loose confidence in the son because he has threatened to change me
as a cook because of what he regard as insecurity. The threat had really thrown
me into a state of confusion, frustration and hopelessness.

STOP THE TAPE! So, your former employer was sending out lots of $$$$MONEY$$$$$ via the diplomatic pouch, eh? And now, as his son has inherited the Presidential throne, you are afraid he is going to "change you as a cook"? Maybe you meant to say that he is going to "feed you to the hungry crocs". I can understand why the late President didn't hire you to be his personal secretary, though: you really need to quit depending on the grammar checker. Go get some English lessons or something.

As God would have it, one Wednesday morning, with the help of a domestic van Driver, I was able to removed the saves to a nearby Vault at the Togo/Aflao border region were they are being deposited in the moment. The vault authority did not know the real content of the luggage as I have declared that the luggage contained cutlery that we imported and found to be sub-standard, and therefore, awaiting return back to the manufacturer. Only the Van Driver and I know this secret under the sun.

STOP THE TAPE! As GOD would have it?!? Why do you think God gives a ratfink's rear about your petty little scam?!? Oh, and how very sharp of you, to declare the baggage as "cutlery". I am impressed with your rapier wit. I am truly on the edge of my seat. However, what is this about them being "deposited in the moment" -- is that some new form of Zen meditation I am not aware of?

PROPOSITION

Can you come down and claim the saves pretending to be the manufacturer of the
cutlery with a promise to replacing them with the standard quality expected? And
or, do you want to order the vault to cargo the saves and send them to you by
Air Courier on the same promise of replacing them? Or what method or idea can
you put forward? I shall be prepared to give you a contact of the vault
organization for onward negotiation on the issue.

STOP THE TAPE! Instead of my coming down and pretending to be someone I am not, how about I just come down and steal the safes? I can take all the $$$$MONEY$$$$$ for myself, and you and Mr. van Driver can just file an insurance claim. Fair 'nuf?

Note that upon claiming the saves, the Van Driver and I would like to go with you to your country to settle for a better living and invest as well. For your information, I have destroyed the original padlock and confirmed that each of
the saves contains £7.5 Million British Pounds. The saves are five in number.
Though I have replaced the padlocks with new ones, but I would not want the
saves to remain in the vault for too long as this could be dangerous. I am
ready to give you 15% of the total money if you endeavour to help me out. Please
if you wish to assist me, kindly reply me through my most exclusive e-mail
address:

Tomorrow, I will come back to this nearby café and see your opinion through your
reply.

Thank you. Goodbye.

Nanaamah Koffi

-----------------------------------------------------------------------
Encuentra tu casa rápida y cómodamente. Miles de viviendas te están esperando en

Wow... each safe is 7.5 MILLION pounds? I don't know what the difference between a pound in Britain and a pound everywhere else is (though I do know the difference between cuisine and British food), but 7.5 million of 'em ought to be really, really heavy, man.

You are offering me 15% of the take? How nice. But, other Lads have offered me up to 40%, so you are going to have to do better than that.

Your exclusive email address? BwahahahaHaHaHAHAHA!!! You dolt, email addresses are supposed to be exclusive! Besides, I checked MyWay, it looks like another Web Portal and web email service. Big deal.

And, as for your signoff: Mr. Nahtinmahcoffee, you are the weakest link... Goodbye.

Post details: spamm, Skewered: The "Lads from Lagos", Live from... Togo?

06/18/05

11:00:00 am spamm, Skewered: The "Lads from Lagos", Live from... Togo?

Trackback address for this post:

Comments, Trackbacks, Pingbacks:

Leave a comment: