An
Email with the Subject "Fw: Alert:shipment information" was
received in one of Scamdex's honeypot email accounts on Sat, 21 Mar 2009 20:57:32 -0700
and has been classified as a Generic Scam Email.
The sender shows as Arthur Carter <apaulc36@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
nigeriabankcontactclaimresidentcourierpaymentprojectcustomerservicecommissioncustomfundcertifypaidonlinepackageshippingmaildeliverybank usd the bank confidentialapaulc36@yahoo.comcourier1_@live.comphone will securityyahoo.comach(nigeria national petrole...(24 hours)(cod)(daf)(fedex delivery post)consigndear
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => Scams@scamdex.com
[delivery-date:] => Sat, 21 Mar 2009 20:57:32 -0700
[received:] => Array
(
[0] => from web54607.mail.re2.yahoo.com ([206.190.49.177])by fire.newsblaze.com with smtp (Exim 4.69)(envelope-from )id 1LlEoR-0008OW-PPfor Scams@scamdex.com; Sat, 21 Mar 2009 20:57:32 -0700
[1] => (qmail 46528 invoked by uid 60001); 22 Mar 2009 03:57:33 -0000
[2] => from [71.170.235.210] by web54607.mail.re2.yahoo.com via HTTP; Sat, 21 Mar 2009 20:57:33 PDT
)
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1237694253; bh=CwC1RTfV/ZNZ+sDOtApxOMGJPQTtZJuCvzvfTpG5tzI=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=EZH7xVMPxaCFEDbkamUCcWk8fiKXshjG08R2GhsmWb4rTu66GgRnVoQbtE6bP4zEte32kQ8nGC6HH4MD9oBUayfi7q3z2KzfgopKQsxoEBaARLsdZ+bKWIsZJe0SyFkpvCgNlaZ+51LGXwMenRN0lmRn6QX0MguRVME0kReq3+Q=
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=w1mo7Jbl6qmtmy/Q5wrWmbwXN/QMedFE0WFSEZ9I8PhTvoerFpPXq5ba/Tyrt8VLzum3TmMjvqPa2HBdop7XOfazfIfHdsKeqy4I/08q7aqBKid7MBal0bmH/c2N15SfpbraR2I0D1HvjfVvGcyBC9DuJaL/+jANZXDebnLlZik=;
[x-mailer:] => Array
(
[0] => :Message-ID: <632178.46423.qm@web54607.mail.re2.yahoo.com>
[1] => YahooMailWebService/0.7.289.1
)
[x-ymail-osg:] => O2aYH2QVM1mXn.HLXM18_iUhH8iX5oA7HOyndmLi0XdI8t5CXULV5vOgA8kjj525152jQZmibWNTRlDXzQSPta22n.Z23flxFCNjIGHAqxv.OWnldk3nBy2fuChdkXfmpoNPQIozhrStLy_Du2omOkhfrGfzK7yASDAanF02_v2H9CqdMgUt4eYSVmfGkHfHiXbKEgTl083Uu39sv9SRpoucFjfH
[date:] => Sat, 21 Mar 2009 20:57:33 -0700 (PDT)
[from:] => Arthur Carter
[subject:] => Fw: Alert:shipment information
[to:] => Spoof Scam , Spam , phish spoof
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1994345384-1237694253=:46423"
[x-spam-status:] => No, score=-5.7
[x-spam-score:] => -56
[x-spam-bar:] => -----
[x-spam-flag:] => NO
[message-id:] =>
[x-scamdex-scores:] => S:61 P:50 A:57 L:58 E:65 G:50
[x-scamdex-classtype:] => E
[x-scamdex-classscore:] => 65
[x-scamdex-totscore:] => 341
[x-scamdex-kw:] => africa,bank,claim,commission,contact,courier,customer,fund,inc.,national,nigeria,numbers,package,paid,payment,project,resident,service,won
[x-scamdex-em:] => courier1_@live.com,courier1_@live.comp,ier1_@live.com,info@fedex.com
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1237694252.H118845P32322
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
--- On Sat, 3/21/09, FedEX <info@fedex.com> wrote:
--- On Sat, 3/21/09, FedEX <info@fedex.com> wrote:
From: FedEX <info@fedex.com> Subject: Alert:shipment information To: Date: Saturday, March 21, 2009, 9:30 PM
Dear Customer,
We have been waiting for you to contact us for your Confirmable Package that is registered with us for shipping to your residential location. We had thought that your sender gave you our contact details. However, we cannot quote its content to you via email for privacy reasons. We understand that the registered invoice's content of your package document itself is Bank Draft worth of $320,000 USD and other important document, The package is registered with us for mailing by your
colleague as claimed. He explained, he is from the United States but he is here in Nigeria for a three (3) months Surveying Project with NNPC(Nigeria National Petroleum Corporation) in Niger Delta,Nigeria West Africa.
We are sending you this email because your package is been registered on a Special Order. You are to contact our Delivery Department for immediate dispatch of your package to your residential address. Note that as soon as our Delivery Team confirms your information, it will take only one working day (24 hours)for your package to arrive it designated destination. For your information, the VAT and (COD) Shipping charges as well as Insurance fees have been paid by your colleague before your package was registered. Note: The payment that is made on the Insurance, Premium & Clearance Certificates, are to certify that the Bank Draft is not a Drug Affiliated Fund (DAF) neither is it funds
to sponsor Terrorism in your country. This will help you avoid any form of query from the Monetary Authority of your country. However, you will have to pay a sum $210 USD to the FedEx Delivery department being full payment for Security Keeping Fee of the FedEx company as stated in our privacy terms & condition page.
Also be informed that your colleague wished to pay for the Security Keeping charges, but we do not accept such payment considering the facts that all items & packages that is registered with us have a time limitation and we cannot accept payment having known not when you will be picking up the package or even responding to us. So we cannot take the risk to have accepted such payment incase of any possible demurrage. Kindly note that your colleague did not leave us with any further information. We hope that you respond to us as soon as possible because if you fail to respond until the
expiry date of the foremost package, we may refer the package to the British Commission for Welfare as the package do not have a return address. Kindly contact the delivery department (FedEx Delivery Post) with the details given below: Contact Person: Richard Raynor Email: fedex.courier1_@live.com phone number +234-7062266794 Kindly complete the below Claimant Information form and send it to the email address given above. This is mandatory to reconfirm your Postal address and telephone Numbers. Recipients / Consigneeâs Name / Contact_______________
Company: ______________________________________
Address: _______________________________________
City: __________________________________________
State / Province:__________________________________
ZIP / Postal
Code:_______________________________
Phone: ________________________________________
Fax___________________________________________
Country:________________________________________
As soon as they confirm your payment receipt of $210USD, they will not hesitate to dispatch your package as well as the attached letter to your residence. It usually takes 24 hours being an over night delivery service. Note that we were not instructed to email you, but due to the high priority of your package we had to inform you as your sender did not leave us with his phone number because he stated that he just arrived from USA and he hasn't fix any phone yet. We indeed personally sealed your Bank Draft and we found your email contact in the attached letter as the recipient of the foremost package. NOTE: ensure to contact the delivery department with the email address given above and ensure to fill the above
form as well to enable a successful reconfirmation. Have A Wonderful Day. Yours Faithfully, Mr Richard Raynor. FedEx Online Team Management.
All rights reserved. Â 1995-2008 FedEx. ---------------------------------------------------------------------------
This e-mail is only for the above addressees. It may contain confidential or privileged information. If you are not an addressee you must not copy, distribute, disclose or use any of the information in it or any attachments.