This is a new one to me. Received the following (Full headers included for your amusement):
==================
Return-Path:
Received: from cabernet.rcbowen.com ([unix socket])
by buglet.rcbowen.com (Cyrus v2.3.9-Fedora-RPM-2.3.9-7.fc7) with LMTPA;
Mon, 17 Mar 2008 08:54:40 -0400
X-Sieve: CMU Sieve 2.3
Received: from redservicio.net (unknown [195.140.143.60])
by cabernet.rcbowen.com (Postfix) with ESMTP id A097F13280C9
for
Received: from localhost ([127.0.0.1] helo=195.140.143.60)
by redservicio.net with esmtpa (Exim 4.67)
(envelope-from
id 1JbLZt-0003Ei-Vr; Mon, 17 Mar 2008 21:05:13 +0100
Received: from 195.166.241.58
(SquirrelMail authenticated user blessed2)
by 195.140.143.60 with HTTP;
Mon, 17 Mar 2008 20:05:01 -0000 (GMT)
Message-ID: <1880.195.166.241.58.1205784301.squirrel@195.140.143.60>
Date: Mon, 17 Mar 2008 20:05:01 -0000 (GMT)
Subject:
From: “KILL”
Reply-To: deadlykillers2001@gmail.com
User-Agent: SquirrelMail/1.4.13
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
Attn,
I am very sorry for you, is a pity that this is how your life is going to
end as soon as you don’t comply. As you can see we are the members of the
Deadly Networks in the world, which is responsible for the bombing of twin
tower?s in America on Sept. 11th and the bombing of London transport
services on July 7th (AL-QUAEDA NETWORKS), I don’t have any business with
you, my duty as I am mailing you now is just to KILL you and I have to do
it as I have already been paid for that.
Someone whom you called your friend wants you dead by all means, and this
person have spent a lot of money in this venture …
(Remainder of message snipped. If you want to read the whole thing, Google for “KILL” and “AL-QUAEDA NETWORKS”.)
========================
So, I did a little poking around, and looked up the host from which the message was sent. It was, as you can see from the headers, a Squirrel-Mail installation at 195.166.241.58. That address is registered via AFRINIC, and, unsurprisingly, resolves to a registrant on Victoria Island, Nigeria. Victoria Island is a center for banking and commerce, and, now, apparently, phishing scams and spam.
The premise here is that someone has taken out a contract on my life, and for a mere $15,000, I can buy their disloyalty. I have to say, I’m a little insulted. $15k is all I’m worth, and they don’t even know my name? Come on, folks. You can do better than that.
I attempted to submit a report of this via the contact form on Linkserve.net, but got an ASP form error. I guess they don’t want to be contacted.
Presumably, however, someone is stupid enough to fall for this scam. So … don’t let it be you.
===================
Complete whois information, in case someone closer to the source can hunt down these people and show them the error of their ways:
inetnum: 195.166.224.0 – 195.166.255.255
org: ORG-LNL1-AFRINIC
netname: NG-LINKSERVE-971217
descr: Linkserve Nigeria Limited
descr: PROVIDER
country: NG
admin-c: CO445-AFRINIC
tech-c: OC5192-AFRINIC
status: ALLOCATED PA
mnt-by: AFRINIC-HM-MNT
mnt-lower: MNT-LKS-AS8770
mnt-domains: MNT-LKS-AS8770
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered
parent: 0.0.0.0 – 255.255.255.255
organisation: ORG-LNL1-AFRINIC
org-name: Linkserve Nigeria Limited
country: NG
org-type: LIR
address: Plot 308 Adeola Odeku Street
address: N/A
address: Victoria Island
address: Nigeria
phone: +234 1 2623900
phone: +234 1 2623901
fax-no: +234 1 2623906
e-mail: chima@linkserve.net
admin-c: CO445-AFRINIC
admin-c: OC5192-AFRINIC
mnt-ref: AS8770-MNT
mnt-ref: AFRINIC-HM-MNT
mnt-ref: MNT-LKS-AS8770
mnt-by: AFRINIC-HM-MNT
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered
person: chima onyekwere
address: Linkserve plot 308 adeola Odeku street, Victoria Island
phone: +234 1 262 3900
nic-hdl: co445-AFRINIC
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered
person: Obinna Chukwujekwu
address: 308 Adeola Odeku Street
phone: +234 1 2624802
nic-hdl: OC5192-AFRINIC
mnt-by: MNT-LKS-AS8770
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered
============================