An
Email with the Subject "Fw: Greetings!" was
received in one of Scamdex's honeypot email accounts on Fri, 20 Mar 2009 17:12:19 -0700
and has been classified as a Generic Scam Email.
The sender shows as Arthur Carter <apaulc36@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
lagosnigeriaafrica0smithbankwestern unionchequecontactwindepositedcourierpaymentrepresentativeservice transfersentpaidpackagemaildeliverybank dollar confirmable bank apaulc36@yahoo.commarksonsmith@gmail.comtel... will securitylordyahoo.com($100.00 us)(m.t.c.n) mr michael igho mr michael igho
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => Scams@scamdex.com
[delivery-date:] => Fri, 20 Mar 2009 17:12:20 -0700
[received:] => Array
(
[0] => from web54602.mail.re2.yahoo.com ([206.190.49.172])by fire.newsblaze.com with smtp (Exim 4.69)(envelope-from )id 1Lkoox-00047E-Mcfor Scams@scamdex.com; Fri, 20 Mar 2009 17:12:19 -0700
[1] => (qmail 42012 invoked by uid 60001); 21 Mar 2009 00:12:20 -0000
[2] => from [71.252.251.17] by web54602.mail.re2.yahoo.com via HTTP; Fri, 20 Mar 2009 17:12:19 PDT
)
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1237594340; bh=0XD06mV1BcPxw59/X50f6uIso4Eb/xi+4v640AC85rs=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=6KtvBFn2maE4ey1MWLA3SMRtDrWht3q7F/qSDf5XxWc1SjLV5KvS5qnkIK44MqjAxe3XE0UgOmWwqOYF59bEMT5YKGv5OAooSqep3dtYXytTbo2AmuLFN7WHVphwubTi9ngvJcr+YjL3CE15ldEOJFVw8P+599iCygPjDfd0FMI=
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=axoL1m6A+Fv0iXS28QZxnLynAE769/FI8KOIr55S8tuwEgh0Aa3Ua+3pFMPUwXg+xmS6W1pomoHA4TuIh49G57F45OGnec/ZihL2W2e3AwWYaAfG4wy+n4mLIoj/Fce9+YU/2hTCwXCt0Kbqa4obB4sxIGFTpFnYkN2iH8S/oeo=;
[date:] => Array
(
[0] => :Message-ID: <32520.37157.qm@web54602.mail.re2.yahoo.com>
[1] => Fri, 20 Mar 2009 17:12:19 -0700 (PDT)
)
[x-ymail-osg:] => vCExtnsVM1kGS48bSsA0e_3YczJMQTOA57Nzg.5wdsTFN0BoS_K_LnPoxZS96ia8m4e2e4Hce.cRKiiAdx4CDPOlZ9HCWAvWIkPED_Z0cqWcgiC5VAgZ7fuvclfTcfIkIcRr7tJGJVbtn_730_ufdjXlWg_xq0XmXGySYG67fhCGUQ.cMFZM6BEjvSsSl05UHMqEmhCQ5MprmyzLzWxEr72xFGoP.4MZDW4wNuusWHZIlQ.6JbbjL7ByGHnwM9RapaaENycuMszKKtauj9g-
[x-mailer:] => YahooMailWebService/0.7.289.1
[from:] => Arthur Carter
[subject:] => Fw: Greetings!
[to:] => Spoof Scam , Spam , phish spoof
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-980072549-1237594339=:37157"
[x-spam-status:] => No, score=-2.2
[x-spam-score:] => -21
[x-spam-bar:] => --
[x-spam-flag:] => NO
[message-id:] =>
[x-scamdex-scores:] => S:59 P:51 A:56 L:51 E:59 G:49
[x-scamdex-classtype:] => E
[x-scamdex-classscore:] => 59
[x-scamdex-totscore:] => 325
[x-scamdex-kw:] => africa,bank,contact,courier,dollars,inc.,lagos,nigeria,package,paid,payment,representative,sent,service,smith,union,united states dollar,western
[x-scamdex-em:] => marksonsmith@gmail.com,marksonsmith@gmail.comT,sonsmith@gmail.com,stmhadfield@optusnet.com.au
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1237594340.H24210P15847
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
--- On Sat, 3/21/09, MRS.Elizabeth Gate <stmhadfield@optusnet.com.au> wrote:
--- On Sat, 3/21/09, MRS.Elizabeth Gate <stmhadfield@optusnet.com.au> wrote:
From: MRS.Elizabeth Gate <stmhadfield@optusnet.com.au> Subject: Greetings! To: Date: Saturday, March 21, 2009, 12:43 AM
Greetings!
I have been waiting for you to contact me for your Confirmable Bank Draft of $800.000.00 United States Dollars, but I did not hear from you since that time. Then I went and deposited the Draft with FEDEX COURIER SERVICE, West Africa, I travelled out of the country for a 3 Months Course and I will not come back till end of May. What you have to do now is to contact the FEDEX COURIER SERVICE as soon as possible to know when they will deliver your package to you because
of the expiring date.
For your information, I have paid for the delivering Charge, Insurance premium and Clearance Certificate Fee of the Cheque showing that it is not a Drug Money or meant to sponsor Terrorist attack in your Country.
Contact Person:Mr markson smith Email Address:marksonsmith@gmail.com Telephone: +2348055216902
The only money you will send to the FEDEX COURIER SERVICE to deliver your Draft direct to your postal Address in your country is ($100.00 US) Dollars only being Security Keeping Fee of the Courier Company so far. Again, don't be deceived by anybody to pay any other money except $100.00US Dollars. I would have paid that but they said no because they don't know when you will contact them and in case of demurrage.
You are to make the payment to the information below by western union or money gram.
Receiver Name: Mr michael Igho Receiver Address: #10 Old Obasanjo Road Lagos, Nigeria 234-01.
Once you forward the necessary details to the Representative Mr michael Igho and once your payment is been confirmed by them they will issued your Tracking Number.
Sender's Name:......................... .................. Sender's Address:...................... .................... Amount To be Sent:$100 Text Question to be used: WHO CAN HELP US? Text Answer: OUR LORD ONLY. Money Transfer Control Number (M.T.C.N).
Finally, make sure that you reconfirm your Postal address() and Direct telephone number to them again to avoid any mistake on the Delivery and ask them to give you the tracking number to enable you track your package over there and know when it will get to your address. Let me repeat again, try to contact them as soon as you receive this mail to avoid any further delay and remember to pay
them their Security Keeping fee of $100.00 US Dollars for their immediate action. You should also let me know through email as soon as you receive your Draft.