An
Email with the Subject "Fw: ***SPAM*** International Certified Bank Draft" was
received in one of Scamdex's honeypot email accounts on Wed, 02 Jul 2008 13:03:57 -0700
and has been classified as a Generic Scam Email.
The sender shows as "ppowell" <ppowell@wideband.net.au>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
africashelloilbankchequecheckcontactwinnationalclaimsclaimagentdepositedcourierservicesentpaidmaildeliverypackagebank dollarusd certified bank mrjohnamah009@live.com will spamsecurity($270 usd)(p.r.o) mr. john amahnmrs. cheryl maria
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => Submissions@scamdex.com
[delivery-date:] => Wed, 02 Jul 2008 13:03:57 -0700
[received:] => Array
(
[0] => from mail.wide.net.au ([202.142.142.230])by gogol.o7e.net with esmtp (Exim 4.69)(envelope-from )id 1KE8YU-0006pS-N4for Submissions@scamdex.com; Wed, 02 Jul 2008 13:03:57 -0700
[1] => from localhost (localhost.wide.net.au [127.0.0.1])by mail.wide.net.au (Postfix) with ESMTP id 68F9312A44for ; Thu, 3 Jul 2008 06:03:55 +1000 (EST)
[2] => from mail.wide.net.au ([127.0.0.1])by localhost (mail.wide.net.au [127.0.0.1]) (amavisd-new, port 10024)with LMTP id ursC2RPFgWJb for ;Thu, 3 Jul 2008 06:03:55 +1000 (EST)
[3] => from patrickx56q7q9 (121-200-9-7.cust.wide.net.au [121.200.9.7])by mail.wide.net.au (Postfix) with SMTP id 75B8112A12for ; Thu, 3 Jul 2008 06:03:50 +1000 (EST)
)
[x-virus-scanned:] => amavisd-new at wide.net.au
[message-id:] => Array
(
[0] => <6DB9D8073CC94E7B970C2A4039B59109@patrickx56q7q9>
[1] => REIDs3x1239839798.M966026P32690V-S3X
)
[from:] => "ppowell"
[to:] => "scams"
[subject:] => Fw: ***SPAM*** International Certified Bank Draft
[date:] => Thu, 3 Jul 2008 06:03:47 +1000
[mime-version:] => 1.0
[content-type:] => text/plain;format=flowed;charset="Windows-1251";reply-type=original
[content-transfer-encoding:] => 7bit
[x-priority:] => 3
[x-msmail-priority:] => Normal
[x-mailer:] => Microsoft Outlook Express 6.00.2900.5512
[x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2900.5512
[x-spam-status:] => No, score=3.2
[x-spam-score:] => 32
[x-spam-bar:] => +++
[x-spam-flag:] => NO
[x-scamdex-scores:] => S:61 P:53 A:59 L:60 E:59 G:53
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 61
[x-scamdex-totscore:] => 345
[x-scamdex-kw:] => africa,agent,bank,certified,check,claim,claims,contact,courier,dollars,inc.,national,package,paid,sent,service,shell,won
[x-scamdex-em:] => mrjohnamah009@live.com
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1239839798.M966026P32690V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
To: <undisclosed-recipients:>
Sent: Thursday, July 03, 2008 2:19 AM
Subject: ***SPAM*** International Certified Bank Draft
--------------------------------------------------------------------------------
No virus found in this incoming message.
Checked by AVG.
7:23 PM
----- Original Message -----
From: "Mrs. CheryL Maria" <cheryl@sacbeemail.com>
To: <undisclosed-recipients:>
Sent: Thursday, July 03, 2008 2:19 AM
Subject: ***SPAM*** International Certified Bank Draft
Greetings {$800,000.00}
Shell Home Office.
How are you today? We Hope all is well with you and your family? I hope
this mail meets you in a perfect condition.
We have been waiting for you to contact us for your Confirmable
International Certified Bank Draft of $800,000.00 United States
Dollars,Won at the Shell Promo Dec. 2007 but we did not hear from you
since then for claims.
Then we went and deposited the Draft with FEDEX COURIER SERVICE, West
Africa, What you have to do now is to contact the FEDEX
COURIER SERVICE as soon as possible to know when they will deliver your
draft to you because of the expiring date.
For your information, We have paid for the delivering Charge, Insurance
premium and Clearance Certificate Fee of the Cheque showing that
it is not a Drug Money or meant to sponsor Terrorist attack in your
Country.
The only money you will send to the FEDEX COURIER SERVICE to deliver your
Draft direct to your postal Address in your country is ($270 USD) Dollars
only being Security Keeping Fee of the Courier Company so far. Again,
don't be deceived by anybody to pay any other money except $270US Dollars.
Our company would have paid that but they said no because they don't know
when you will contact them and in case of demurrage.
You have to contact the FEDEX COURIER SERVICE now for the delivery of your
Draft with this information below:
Contact Agent: Mr. John Amah
Email Address: mrjohnamah009@live.com
Telephone: +234-80698-17643
Finally, make sure that you reconfirm your Postal address() and Direct
telephone number to them again to avoid any mistake on the Delivery and
ask them to give you the tracking number to enable you track your package
over there and know when it will get to your address.
Your Full Name:
Delivery Address:
Telephone:
Let us repeat again, try to contact them as soon as you receive this mail
to avoid any further delay and remember to pay them their Security
Keeping fee of $270 US Dollars for their immediate action.
You should also let us know through email as soon as you receive your
Draft.
Yours Faithfully,
Mrs. CheryL Maria
Shell Oil and Petroleum Africa.
Public Relations Officer. (P.R.O)
--------------------------------------------------------------------------------
No virus found in this incoming message.
Checked by AVG.
Version: 8.0.101 / Virus Database: 270.4.3/1529 - Release Date: 7/1/2008
7:23 PM
