An
Email with the Subject "CONTACT DHL NOW" was
received in one of Scamdex's honeypot email accounts on Mon, 23 Aug 2010 10:48:06 -0700
and has been classified as a Generic Scam Email.
The sender shows as Frank <diplomaticagent@mail.ru>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Mon, 23 Aug 2010 10:48:06 -0700
[received:] => Array
(
[0] => from n22.bullet.mail.ukl.yahoo.com ([87.248.110.139])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1Onb7t-0003sU-Ayfor scams@scamdex.com; Mon, 23 Aug 2010 10:48:06 -0700
[1] => from [217.146.182.178] by n22.bullet.mail.ukl.yahoo.com with NNFMP; 23 Aug 2010 17:48:07 -0000
[2] => from [87.248.110.17] by t4.bullet.ukl.yahoo.com with NNFMP; 23 Aug 2010 17:48:07 -0000
[3] => from [127.0.0.1] by omp101.mail.ukl.yahoo.com with NNFMP; 23 Aug 2010 17:48:04 -0000
[4] => (qmail 69943 invoked by uid 60001); 23 Aug 2010 17:48:04 -0000
[5] => from [41.191.86.17] by web28606.mail.ukl.yahoo.com via HTTP; Mon, 23 Aug 2010 10:48:03 PDT
)
[x-yahoo-newman-property:] => ymail-3
[x-yahoo-newman-id:] => 277804.27117.bm@omp101.mail.ukl.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1282585684; bh=HIQNyYabl2dQ3gZhp/blrsGOI2YESMb+N+M78Kk2Q8E=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=E8+lGM46tvkRlrIYHGwPqh4UcMr4xjPxm6WaOCQYtnQEI8qJBCBLrxtsRaczuPDiFnGIu4r1IauiY6Y5JMk0fm6Yd6nEeAo7f9Wznnw9gGBqq1dwD2uYFwsOA4bmvqDpDPR4uBu+p/EfDbZNd/TLNLRzJWUg5YhYQV35GUwio70=
[message-id:] => <38753.69278.qm@web28606.mail.ukl.yahoo.com>
[x-ymail-osg:] => GzLc9DMVM1n39VwJN2sncno2mGhpe2cOrrpoNSr9z2oxY2Yn9ifZ8UHe
[x-rocketymmf:] => johnzik55
[x-mailer:] => YahooMailClassic/11.3.2 YahooMailWebService/0.8.105.279950
[date:] => Mon, 23 Aug 2010 10:48:03 -0700 (PDT)
[from:] => Frank
[reply-to:] => diplomaticagent@mail.ru
[subject:] => CONTACT DHL NOW
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1382874357-1282585683=:69278"
[x-spam-status:] => No, score=-6.3
[x-spam-score:] => -62
[x-spam-bar:] => ------
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
TELFAX (+229)98428845
E-mail: dhl-servicebj@live.fr or dhl-servicebj@live.fr
Dear Beneficiary Owner: ,
Attention: Customer, I am writing to confirm the fact if you are (DEAD) or (ALIVE) and failure to reply back in the next 24hrs simply means what Rev Jude Betsy said was right that you are dead. Rev Jude Betsy has agreed to pay the needed charge fee valued of $69.00dollars required for the Bond Stamp Duty Fee of your consignment box , but we have not gotten the money from him yet as we want to find out if you are DEAD or not, so if you are still (ALIVE) you are advice in your own best interest to reply back,
The only money you will pay to our office here is just $69.00 for the paper works, Take note of this now, so we can stop further communication with Rev Jude Betsy and deliver the (Consignment Box) to your door step being the original benefactor of the $2.5 Million US Dollars.
BELOW IS THE PAYMENT INFOMATION YOU WILL USE TO SEND THE $69.00 TO OUR CASHIER NAME THROUGH WESTERN UNION. CONTACT EMAIL ( dhl-servicebj@live.fr
Receivers Name===== MR. ANTHONY NNALUE.
Address:==========12/1 Midombo Expway Cotonou-Benin
Country============Benin Republic City===============Cotonou Text question=======Best Colour? Text answers======= Yellow Amount============$69.00usd MTCN Number=======? You must send us the details provided
by Western Union immediately you made the payment of $69.00usd.