An
Email with the Subject "Fw: ATTN: Beneficiary." was
received in one of Scamdex's honeypot email accounts on Thu, 19 Feb 2009 05:59:48 -0800
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Pearson Patsy <patsyjop@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
beneficiary 808 160 8935boxmobilsmithexpresscontactsafeglobaldepositedcourierpaymentsentpaiddeliverymailpackagedollarusdpatsyjop@yahoo.com will willnsecuritygodyahoo.com( $ 750,000.00 )( fedex courier express c...($ 750,000.00 )( delivery department man...(mr_larrymoore@sbcglobal.net)(gl-14160)consignmentmy dearnmr thomas smith.
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submissions@scamdex.com
[delivery-date:] => Thu, 19 Feb 2009 05:59:48 -0800
[received:] => Array
(
[0] => from web80401.mail.mud.yahoo.com ([209.191.72.37])by fire.newsblaze.com with smtp (Exim 4.69)(envelope-from )id 1La9RL-0003iT-Vefor submissions@scamdex.com; Thu, 19 Feb 2009 05:59:48 -0800
[1] => (qmail 95380 invoked by uid 60001); 19 Feb 2009 13:59:46 -0000
[2] => from [64.219.31.44] by web80401.mail.mud.yahoo.com via HTTP; Thu, 19 Feb 2009 05:59:45 PST
)
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID; b=nVd4YInqFzq1Jtb98tjPkzYGw8lr5eNDzG+sB1zrEZOoSbqbil/+W3WJTrDJO+l1SyzCx1WcgZjint4HSnfsLkxEWKGvG++LA1IYplCSIhOyUJVit3olu9GEJA9g2XalMIzyyb/NWZPeIYyD6u9r9Pj9qYoP65l/8dePM62m1us=;
[x-ymail-osg:] => 26sx7_QVM1m6M7WAR6YWr9YWDnQQKsydA8oom2z5q8zI0j3vtCJOod9Ywk.ygX5YUoE_JVdCuoEJE.Opg.3y4hnuODZpVehJlNtajo03RzbG9c.wv0WJCRCIXZIoKkvFekHwNhXd7pfjZ3IdyuTMrKx6gklUVWiXfYBig6lNblz3E9LvxST9nppI9CSSmoCSbgCQ1XcEvAnhIzl5k84AKKxY9gkWCM98Jw--
[x-mailer:] => YahooMailWebService/0.7.260.1
[date:] => Thu, 19 Feb 2009 05:59:45 -0800 (PST)
[from:] => Pearson Patsy
[subject:] => Fw: ATTN: Beneficiary.
[to:] => scamdex
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-233621165-1235051985=:93963"
[message-id:] => <36638.93963.qm@web80401.mail.mud.yahoo.com>
[x-spam-status:] => No, score=0.0
[x-spam-score:] => 0
[x-spam-bar:] => /
[x-spam-flag:] => NO
[x-scamdex-scores:] => S:57 P:43 A:45 L:47 E:48 G:41
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 57
[x-scamdex-totscore:] => 281
[x-scamdex-kw:] => God,beneficiary,box,contact,courier,dollars,global,mobil,package,paid,payment,plc,safe,sent,service,smith
[x-scamdex-em:] => mr_larrymoore@sbcglobal.net
[x-scamdex-dir:] => C
[x-scamdex-id:] => C1235051988.H613283P14311
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
--- On Wed, 2/18/09, Mr.Larry Moore <mr_larrymoore@sbcglobal.net> wrote:
--- On Wed, 2/18/09, Mr.Larry Moore <mr_larrymoore@sbcglobal.net> wrote:
From: Mr.Larry Moore <mr_larrymoore@sbcglobal.net> Subject: ATTN: Beneficiary. To: Date: Wednesday, February 18, 2009, 6:47 PM
ATTN: Beneficiary.
Courage my dear, I know you will be waiting for the arrival of your Consignment
containing the total amount of your ( $ 750,000.00 ) cash payment compensation
which was sent to you and later returned back due to wrong address provided, I
think there is a mistake in the address giving to me and that has cost me a lot
of
strength,thank God that it returned back safely. The only thing left for you to
do
now is to contact ( FedEx Courier Express Company) this is the company in
charge of
delivering your consignment box containing the ($ 750,000.00 ) Again let me
repeat.
Contact Person: Mr.Larry Moore
( Delivery Department Managing Director )
E-mail :(mr_larrymoore@sbcglobal.net)
Telephone Number: +234 808 160 8935.
For the purpose of clarification, It is advised that the entire fee has been
paid for
the delivery so all that you will have to pay is only $220 dollar that you will
have to
send to their security office as charges for the safe keeping fee of your
returning
box.Please do not be deceived by anyone and be advised to reconfirm.
YOUR COUNTRY................
YOUR FULL NAME..............
HOME ADDRESS.................
MOBILE PHONE NUMBER...........
OFFICE NUMBER........................
HOME NUMBER........
AGE...........
SEX...........
In addition to what I said earlier,please do not dispose the content of the box
to
them to avoid delay and finally endeavor to indicate this CODE N°(GL-14160)
This is
the box code and it shows that you are the rightful owner of the box deposited
in
their company,you will use it as your subject when contacting them.
After sending the security keeping fee ask them to give you the tracking number
to
enable you track your package over there and know when it will get to your
address.
Let me repeat again,Try to contact them as soon as you receive this mail and
ask them
how you will make the security fee of $220 usd to them to avoid any further
delay
and remember to pay them their Security Keeping fee of $220.00 US Dollars for
their immediate action.
Best Regards
Mr Thomas Smith.
