This email with the subject
"TR: ECONBANK NIGERIA INTERNATIONAL PLC"
was received in one of Scamdex's honeypot email accounts on
Fri, 13 Jun 2008 13:49:21 -0700
and has been classified as a
Generic Scam.
The sender was
"Bernard Teyssou" <bernard.teyssou@orange.fr>,
although it may have been spoofed.
Scam Tag Cloud
nigeria1 2008061304 578921.6988206-1213330508159.1893bankwinnationalaccount transfermailbank econbanknigeria008@yahoo.despamyahoo.yahoo.comyahoo-yahoomyahoo!(smtp server)(localhost [127.0.0.1])(cest)[87.248.110.139])[217.146.182.177][87.248.110.119][127.0.0.1](qmail 20102 invoked by u...[78.138.8.2](gmt)(-140)(0000)(vps 080613-0, 13/06/2008)[mailto:econbanknigeria00...(bernard teyssou) mrs brenda williamsnmrs. brenda william
Scam Analysis
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate agencies.
return-path:
<bernard.teyssou@orange.fr>
envelope-to:
JS_SUBMISSIONS@HUN1P0T
delivery-date:
Fri, 13 Jun 2008 13:49:21 -0700
from:
"Bernard Teyssou" <bernard.teyssou@orange.fr>
to:
"Bernard Teyssou" <bernard.teyssou@orange.fr>
subject:
TR: ECONBANK NIGERIA INTERNATIONAL PLC
date:
Fri, 13 Jun 2008 22:49:17 +0200
mime-version:
1.0
content-type:
text/plain;charset="iso-8859-1"
content-transfer-encoding:
quoted-printable
thread-index:
AcjNCvAAjPWvcsBoSqC+K20/0eQGcQAi+hhA
message-id:
<SCX4ID@1213390161.H311150P2947.>
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If you see
email which you consider to have personally identifiable information (PII), or that is for a bona-fide business or person
or for some other reason, use this form to notify us.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via an unpublished 'Honeypot' email address.
Return-Path: <econbanknigeria008@yahoo.de>
Received: from mwinf2349.orange.fr (mwinf2349.orange.fr)
by mwinb0k01 (SMTP Server) with LMTP; Fri, 13 Jun 2008 06:07:04
+0200
X-Sieve: Server Sieve 2.2
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2349.orange.fr (SMTP Server) with ESMTP id CEE9D3400083
for <wfr60000116334815e70060a54f@back0k-mail01-01.me-wanadoo.net>;
Fri, 13 Jun 2008 06:07:04 +0200 (CEST)
Received: from n22.bullet.mail.ukl.yahoo.com (n22.bullet.mail.ukl.yahoo.com
[87.248.110.139])
by mwinf2349.orange.fr (SMTP Server) with SMTP id A65153400082
for <bernard.teyssou@orange.fr>; Fri, 13 Jun 2008 06:07:04 +0200
(CEST)
X-ME-UUID: 20080613040704681.A65153400082@mwinf2349.orange.fr
Received: from [217.146.182.177] by n22.bullet.mail.ukl.yahoo.com with
NNFMP; 13 Jun 2008 04:07:04 -0000
Received: from [87.248.110.119] by t3.bullet.ukl.yahoo.com with NNFMP; 13
Jun 2008 04:07:04 -0000
Received: from [127.0.0.1] by omp224.mail.ukl.yahoo.com with NNFMP; 13 Jun
2008 04:07:04 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 578921.69884.bm@omp224.mail.ukl.yahoo.com
Received: (qmail 20102 invoked by uid 60001); 13 Jun 2008 04:07:04 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.de;
h=Received:X-Mailer:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:C
ontent-Type:Message-ID;
b=509QS25ULsdKJo4fb96OXC+ECSYbCfZVcBKal7IolXyiu5eh5DJqXP7c7wz30reKNjIfPBPXOe
GmAskcw77mSWz/eNia7s3X3FJAm0ZT9pPDCjHh9+00XjtW0bWCJwjib52uK0s9c+aEix4tdqWgow
VD/NdD2uHCUUD4oCkn3jw=;
Received: from [78.138.8.2] by web28202.mail.ukl.yahoo.com via HTTP; Fri, 13
Jun 2008 04:07:04 GMT
X-Mailer: YahooMailWebService/0.7.199
Date: Fri, 13 Jun 2008 04:07:04 +0000 (GMT)
From: Mrs Brenda Williams <econbanknigeria008@yahoo.de>
Reply-To: econbanknigeria008@yahoo.de
Subject: ECONBANK NIGERIA INTERNATIONAL PLC
To: Bernard Teyssou <bernard.teyssou@orange.fr>
In-Reply-To: <038C3519129E43CD8AC78A6542DB3973@maisoncfe2676d>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="0-451035206-1213330024=:18932"
Message-ID: <508159.18932.qm@web28202.mail.ukl.yahoo.com>
X-me-spamlevel: not-spam
X-me-spamrating: 40.000000
X-me-spamcause: OK,
(-140)(0000)secvtfgvtghiphhivghnthhsucdlqddutddtmdenthhhrghnkhcuhihouhcuvhgv
rhihuchmuhgthhcufhhorhculddqvddtmdenhigrhhhoohcuihhnuchlihhnkhcufihorhgushcu
lddqvddtmd
X-Antivirus: avast! (VPS 080613-0, 13/06/2008), Inbound message
X-Antivirus-Status: Clean
________________________________________
De : Mrs Brenda Williams [mailto:econbanknigeria008@yahoo.de]
Envoyé : vendredi 13 juin 2008 06:07
À : Bernard Teyssou
Objet : ECONBANK NIGERIA INTERNATIONAL PLC
Dear (Bernard Teyssou)
thank you very much for your urgent reply? now you have to open account so
that we can transfer your money into your acount becuase will dont want to
deduct money from yourmoney open the account note you to pay sum amount
to open the account after made the payment befor that transfer can take
place that is the rules and regulation on this ECONBANK NIGERIA INTERNATION
PLC and the amount you are going to made is$250.70.
REMAIN BLESS.
Mrs. Brenda William
________________________________________
Gesendet von Yahoo! Mail.
Dem pfiffigeren Posteingang.
