An
Email with the Subject "REPORTING: ID THEFT ATTEMPT - WIRE FRAUD - ATTEMPTED BANK FRAUD - PHISHING SPAM" was
received in one of Scamdex's honeypot email accounts on Sun, 30 Mar 2008 13:32:23 -0700
and has been classified as a Generic Scam Email.
The sender shows as RR41NJ@aol.com.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
bankcheckselectronicagentpaymentjobclientcommission7%10%12% transferlegalsentpaidmailbank bank transfereurodollar weekvia bank webmailhimahe@yahoo.cohhhimage06@yahoo.comthanks will yahoo.coyahoo.comach(10% from $7000)(rly-mc04.mail.aol.com [1...(v121.4)[213.5.41.18]) by rly-mc0...(qmail 3745 invoked by ui...(phhq-hq-he200-i-w-01.sta...(imp)
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Sun, 30 Mar 2008 13:32:53 -0700
[received:] => Array
(
[0] => from imr-m06.mx.aol.com ([64.12.138.200])by bartok.o7e.net with esmtp (Exim 4.68)(envelope-from )id 1Jg4CK-0002Kp-Fhfor scams@scamdex.com; Sun, 30 Mar 2008 13:32:23 -0700
[1] => from imo-m24.mx.aol.com (imo-m24.mail.aol.com [172.20.107.70]) by imr-m06.mx.aol.com (v107.10) with ESMTP id RELAYIN9-a47eff60e228; Sun, 30 Mar 2008 16:20:30 -0400
[2] => from RR41NJ@aol.comby imo-m24.mx.aol.com (mail_out_v38_r9.3.) id i.c95.295d5df3 (39955);Sun, 30 Mar 2008 16:01:33 -0400 (EDT)
)
[from:] => RR41NJ@aol.com
[date:] => Sun, 30 Mar 2008 16:01:33 EDT
[subject:] => REPORTING: ID THEFT ATTEMPT - WIRE FRAUD - ATTEMPTED BANK FRAUD - PHISHING SPAM
[to:] => ruthlatsis27@hotmail.com, himahe@yahoo.co.uk, report_spam@hotmail.com, abuse@yahoo.com, abuse@yahoo.co.uk, reportphishing@antiphishing.org, enforcement@sec.gov, phishing-report@us-cert.gov, scams@scamdex.com, pirt@castlecops.com, reports@banksafeonline.org.uk, spam@uce.gov
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="-----------------------------1206907293"
[x-mailer:] => Unknown sub 34
[x-spam-flag:] => Array
(
[0] => NO
[1] => NO
)
[x-aol-ip:] => 172.20.107.70
[x-spam-status:] => No, score=0.9
[x-spam-score:] => 9
[x-spam-bar:] => /
[message-id:] => REIDs3x1207081681.M370334P639V-S3X
[x-scamdex-scores:] => S:97 P:88 A:99 L:94 E:104 G:86
[x-scamdex-classtype:] => E
[x-scamdex-classscore:] => 104
[x-scamdex-totscore:] => 568
[x-scamdex-kw:] => transfer,000.000,10%,\%,agent,bank,bank transfer,card,check,commission,contact,coordinat,credit,electronic,inc.,internet,job,legal,ltd,national,paid,payment,process,report,representative,response,safe,sent,smith
[x-scamdex-em:] => 47edf8a217fee@webmail.alte,RR41NJ@aol.com,_ruthlatsis27@hotmail.com,abuse@yahoo.co.uk,abuse@yahoo.com,edf8a217fee@webmail.alte,enforcement@sec.gov,hhhimage06@yahoo.com,hhhimage06@yahoo.comT,himahe@yahoo.co.uk,lakitira@altecnet.gr,phishing-report@us-cert.gov,pirt@castlecops.com,report_spam@hotmail.com,reportphishing@antiphishing.org,reports@banksafeonline.org.uk,ruthlatsis27@hotmail.com,ruthlatsis27@hotmail.comS,spam@uce.gov
[x-scamdex-dir:] => E
[x-scamdex-id:] => E1207081681.M370334P639V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
In a message dated 3/30/2008 3:57:03 A.M. Eastern Daylight Time,
himahe@yahoo.co.uk writes:
HimageHolding Ltd wants to know if you will like to work online
from home and get paid weekly without leaving or affecting your present
job.
Himage Holding Ltd., Kowloon, Hong Kong is an electronics firm
here in Kowloon, Hong Kong and we need someone to work for the
company as a representative in the UK,United States, Canada and the rest
of Europe countries.
Our company produces and deals in all kinds of
electronics here in Kowloon, Hong Kong which we have clients we supply
weekly all around the globe in the UK, United states, Canada and rest of
Europe countries, our clients make payments for our supplies every
week via Bank Transfer or Check payment.
WHAT YOU NEED TO DO FOR
US:
The international money transfer tax for legal entities (companies)
in is 25%, whereas for the individual it is only 7%.
We had rather
use individuals.
That's why we need you, We need agents to receive
payment for us ( in money orders,check ,credit card or Bank wire transfers)
and to send the money to us as directed.
This way we will save more
money by decreasing amount paid on taxes. JOB
DESCRIPTION:
Representativces are expected to; 1. Recieve payment
from Clients 2. Cash Payments at your Bank 3. Deduct 10% which will be
your renumeration/pay on Payment processed. 4. Send balance sum after
deduction of your 10%renumeration and cost of transfer.
HOW
MUCH WILL YOU EARN?
10% renumeration from each operation!
For
instance: you receive 7000 US Dollar via checks or money orders on our
behalf. You will cash the money and keep $700 (10% from $7000) for
yourself! At the beginning your commission will equal 10%, though later it
may increase up to 12%!
ADVANTAGES:
1.You do not have to
quit your present job. 2.You can earn up to $3000-4000 weekly . 3.You
can resign your appointment at any time.
If you are interested in our
offer, please contact our marketing coordinator:
Thanks
for your anticipated response,we hope to hear back from you.
Warm
Regards, Reuben Smith Himage Holdings.
Return-Path: <himahe@yahoo.co.uk> Received: from
rly-mc04.mail.aol.com (rly-mc04.mail.aol.com [172.20.118.146]) by
air-mc02.mail.aol.com (v121.4) with ESMTP id MAILINMC21-12247ef47ca3d5; Sun,
30 Mar 2008 03:57:03 -0400 Received: from iridium9.acn.gr (iridium9.acn.gr
[213.5.41.18]) by rly-mc04.mail.aol.com (v121.4) with ESMTP id
MAILRELAYINMC410-12247ef47ca3d5; Sun, 30 Mar 2008 03:56:58 -0400 Received:
(qmail 3745 invoked by uid 99); 29 Mar 2008 08:06:59 -0000 Cc: recipient
list not shown: ; Received: from PHHQ-HQ-HE200-I-W-01.starcomms.net
(PHHQ-HQ-HE200-I-W-01.starcomms.net [196.3.61.4]) by
webmail.altecnet.gr (IMP) with HTTP for <lakitira@altecnet.gr@localhost>;
Sat, 29 Mar 2008 10:06:58 +0200 Message-ID: <1206778018.47edf8a217fee@webmail.altecnet.gr> Date:
Sat, 29 Mar 2008 10:06:58 +0200 From: HIMAGE HOLDINGS <himahe@yahoo.co.uk> Reply-to: ruthlatsis27@hotmail.com Subject:
REPRESENT US MIME-Version: 1.0 Content-Type: text/plain;
charset=ISO-8859-7 Content-Transfer-Encoding: 8bit User-Agent: Internet
Messaging Program (IMP) 3.2.4 X-Originating-IP: 196.3.61.4 X-AOL-IP:
213.5.41.18 X-AOL-SCOLL-SCORE:
0:2:129412200:9395240 X-AOL-SCOLL-URL_COUNT:
X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_helo :
n X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_822_from :
n
Create a Home Theater Like the Pros. Watch the video on AOL Home.