An
Email with the Subject "FINAL NOTICE OF YOUR $1.8M" was
received in one of Scamdex's honeypot email accounts on Wed, 08 Feb 2017 16:34:44 -0500
and has been classified as a Generic Scam Email.
The sender shows as Mrs Vivian Douglas <info.office0009@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
bankwestern unionaccountnotificationtransactionpaymentopportunityprocessfund transferpaidmailbank usd for bank official bank payout banknmtcnoffice0009@gmail.com will god($55)nmrs vivian douglasfinancial
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] => Array
(
[0] =>
[1] =>
)
[delivered-to:] => o7enet@edie.newsblaze.com
[received:] => Array
(
[0] => from edie.newsblaze.comby edie.newsblaze.com (Dovecot) with LMTP id 17n5OfSOm1gIDAAApOa+twfor ; Wed, 08 Feb 2017 16:34:44 -0500
[1] => from ns502-vm4.bullet.mail.kks.yahoo.co.jp ([183.79.57.59]:24309)by edie.newsblaze.com with smtp (Exim 4.88)(envelope-from )id 1cbZso-0000bp-SFfor scamdex@o7e.net; Wed, 08 Feb 2017 16:34:44 -0500
[2] => from [183.79.100.141] by ns502.bullet.mail.kks.yahoo.co.jp with NNFMP; 08 Feb 2017 21:24:09 -0000
[3] => from [183.79.100.134] by t504.bullet.mail.kks.yahoo.co.jp with NNFMP; 08 Feb 2017 21:24:09 -0000
[4] => from [127.0.0.1] by omp503.mail.kks.yahoo.co.jp with NNFMP; 08 Feb 2017 21:24:09 -0000
[5] => (qmail 74684 invoked by uid 60001); 8 Feb 2017 21:24:09 -0000
[6] => from [41.138.91.237] by web101009.mail.kks.yahoo.co.jp via HTTP; Thu, 09 Feb 2017 06:24:08 JST
)
[envelope-to:] => scamdex@o7e.net
[delivery-date:] => Wed, 08 Feb 2017 16:34:44 -0500
[x-yahoo-newman-property:] => ymail-5
[x-yahoo-newman-id:] => 619717.6993.bm@omp503.mail.kks.yahoo.co.jp
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=yj20050223; d=yahoo.co.jp; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:X-YMail-JAS:Sender:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=K8FaFifWs5PluoAahEWizSEgiZGcX651tV0H1M9giK2WYwrJ+P0AgYAEIEuieBKBc3NhLAracthgjr05/JQ/LCMtgjikMtHqO+C0asyoszGnX2Nkz66EINDT2+5bjJ4c ;
[message-id:] => <165150.12414.qm@web101009.mail.kks.yahoo.co.jp>
[x-ymail-osg:] => OS8lZCcVM1kUE3inI6oRrsbnlbyFyYGyPt4_S24TC0_6RM.fxcRk5VaPyHn08e4V2F4hqoNkGGQoGOF7NnzR4aEY5Ehk5mvPUMOR8SBzgTRArDgggFnTPH9hecLlCUsrE8C.2wSpfr94xzO3cGnmd6m00uB8IYQc3EExYjYybFIpucTeWAow0UfvShyVMWr6aO6ROxEfjaaDDwUWedB6ngPNs8Xz4ih3fGJZXoPUANSGZepuhBUFhNQnGe1uzpPHCDoApc_L8qEZVpMJo.lI09nt722PRA2xCAuMy0jlKfnN5hqZGeC5mgCVi_bNa3AG8D9G3WRQfVPobstXnZhFFax4VJkZqy0Tis3ppTCmYNbIIy6tEYZGf3j8H_Ye7CECi.CcDVOYZbb0xhVXIV4zAWCt6KJ_lp4ch6GaD_qScOV3lo9DEdcuF.VKJVySfv72Ub3nI.PomKqkOTd8aqrA37pWk9UWTegMLivI.OiCfEucLIpekmtD1YV6OhNCeVKgosswF_.CW7hhNzZK5c2p4.Y3CB4Ih8y1JCc0K91AjvyVCeXEd_1D4qPjPjLTJ8VWYjrocQr64O2gx98y.MlgGivJVdh1j8NUq6jb.onUGc8Hml2LIMN3knakHYA5j2s5senwujidkfnj6zPpwS5uuuvpsQeiNpoh_rrGlIScI_gYPtGu0lPAICmHeP.5racDvAUpzgwX0yp0V6vrcGbtsaZZBx7zBZJboVtupBdd29OCZGxCfi_WTeAwVTubR0742.cumZLQBwz_tJhsyg8sgZTpCrI4n7XDIwOXs3Zxy54xevBYxoUIJyzlcOHVDVCS_Bw95vPqqD4J8nQG
[x-rocketymmf:] => hiraiyosuke33
[x-mailer:] => YahooMailWebService/0.8.111_70
[x-ymail-jas:] => CzsNxiUVM1nzVsA3L36joDc1SbalyDTBjIdEovG8VP9iRBMU5WyR568B.JOVIKke3oEs8N1BKNhxlCzKaI2FR6OEAZUA190rc6ataJUpSmfU0Of7tkUKYpLB2tJWPS0G8FW9
[sender:] => hiraiyosuke33@yahoo.co.jp
[date:] => Thu, 9 Feb 2017 06:24:08 +0900 (JST)
[from:] => Mrs Vivian Douglas
[reply-to:] => Mrs Vivian Douglas
[subject:] => FINAL NOTICE OF YOUR $1.8M
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-300700407-1486589048=:12414"
[x-spam-status:] => No, score=3.2
[x-spam-score:] => 32
[x-spam-bar:] => +++
[x-ham-report:] => Spam detection software, running on the system "edie.newsblaze.com",has NOT identified this incoming email as spam. The originalmessage has been attached to this so you can view it or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Attn, I have to inform you again, that we are not playing over this, I know my reason for the continuous sending of this notification to you, the fact is that you can't seem to trust any one again over this payment for what you have been in cantered in many months ago, but I want you to trust me, I cannot scam you for $55 it is for bank processing of your payment, the fees of $55 is clearly written to you before, I did not invent the bill to defraud you of $55 it is an official bank payment processing fee, and the good part of this, is that you will never, ever be disturbed again over any kind of payment, this is final, and the forms from there becomes effective once we submit your payment application processing fee and pay the form fee of $55 I don't want you to loose this fund this time,because you may never get another such good opportunity, the federal government is keen and very determined to pay your overdue debts, this is not a fluke, I would not want you to loose this fund out of ignorance, I will send you all the documents as soon as bank payment processing fee is paid, you have to trust me, you will get your fund, find a way to get $55 you will not loose it, instead it will bring your financial breakthrough, find the money and send it to our bursary. The reason why am sending you this is because I want you to receive your USD1.8M immediately we are trying to round up for this payment program. [...] Content analysis details: (3.2 points, 4.5 required) pts rule name description---- ---------------------- -------------------------------------------------- 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (info.office0009[at]gmail.com) 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (info.office0009[at]gmail.com)-2.0 SUBJ_ALL_CAPS Subject is all capitals 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (viviandouglas49[at]yahoo.com) 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.0 T_HK_NAME_FM_MR_MRS No description available. 1.0 KAM_SUBJECTNOTICE Spam notices 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I have to inform you again, that we are not playing over this, I know my reason for the continuous sending of this notification to you, the fact is that you can't seem to trust any one again over this payment for what you have been in cantered in many months ago, but I want you to trust me, I cannot scam you for $55 it is for bank processing of your payment, the fees of $55 is clearly written to you before, I did not invent the bill to defraud you of $55 it is an official bank payment processing fee, and the good part of this, is that you will never, ever be disturbed again over any kind of payment, this is final, and the forms from there becomes effective once we submit your payment
application processing fee and pay the form fee of $55 I don't want you to loose this fund this time,because you may never get another such good opportunity, the federal government is keen and very determined to pay your overdue debts, this is not a fluke, I would not want you to loose this fund out of ignorance, I will send you all the documents as soon as bank payment processing fee is paid, you have to trust me, you will get your fund, find a way to get $55 you will not loose it, instead it will bring your financial breakthrough, find the money and send it to our bursary. The reason why am sending you this is because I want you to receive your USD1.8M immediately we are trying to round up for this payment program.
The processing charges which was initially on the high price has been cut down by the payout bank
considering the poor economic situations that make it difficult for the middle class citizens to meet up with the processing charges $55 of their entitlement. Upon the confirmation of your processing charges you will get your $1.8M into your account within 15hrs.
Here is the payment information through western union money transfer only, finally my advice to you is not to abandon this transaction because of the requirement of ($55) send the fee through western union or money gram.
Receivers name:Onwa Idu
Location address:Cotonou Benin Republic
Text Question: To whom
Answer:
Idu
Amount required: $55
Sender's Name:
MTCN Number#:
Senderâs address:
Senderâs full banking details to avoid wrong transfer:
NAME AND ADDRESS OF BANK:
ACCOUNT NAME:
ACCOUNT NO:
As soon as the payment $55 is received today, you will receive your $1.8M the same today without any delay.
God Bless you.
Yours Faithfully,
Mrs Vivian Douglas
Attn, I have to inform you again, that we are not playing over this, I know my reason for the continuous sending of this notification to you, the fact is that you can't seem to trust any one again over this payment for what you have been in cantered in many months ago, but I want you to trust me, I cannot scam you for $55 it is for bank processing of your payment, the fees of $55 is clearly written to you before, I did not invent the bill to defraud you of $55 it is an official bank payment processing fee, and the good part of this, is that you will never, ever be disturbed again over any kind of payment, this is final, and the forms from there becomes effective once we submit your payment
application processing fee and pay the form fee of $55 I don't want you to loose this fund this time,because you may never get another such good opportunity, the federal government is keen and very determined to pay your overdue debts, this is not a fluke, I would not want you to loose this fund out of ignorance, I will send you all the documents as soon as bank payment processing fee is paid, you have to trust me, you will get your fund, find a way to get $55 you will not loose it, instead it will bring your financial breakthrough, find the money and send it to our bursary. The reason why am sending you this is because I want you to receive your USD1.8M immediately we are trying to round up for this payment program. The processing charges which was initially on the high price has been cut down by the payout bank
considering the poor economic situations that make it difficult for the middle class citizens to meet up with the processing charges $55 of their entitlement. Upon the confirmation of your processing charges you will get your $1.8M into your account within 15hrs. Here is the payment information through western union money transfer only, finally my advice to you is not to abandon this transaction because of the requirement of ($55) send the fee through western union or money gram. Receivers name:Onwa IduLocation address:Cotonou Benin RepublicText Question: To whomAnswer:
IduAmount required: $55 Sender's Name:MTCN Number#:Senderâs address: Senderâs full banking details to avoid wrong transfer:NAME AND ADDRESS OF BANK:ACCOUNT NAME:ACCOUNT NO: As soon as the payment $55 is received today, you will receive your $1.8M the same today without any delay. God Bless you. Yours Faithfully,Mrs Vivian Douglas