An
Email with the Subject "Pls. get back to me within 24hours*" was
received in one of Scamdex's honeypot email accounts on Thu, 09 Dec 2010 09:47:32 -0800
and has been classified as a Generic Scam Email.
The sender shows as "Mr. Steven McAnthony" <steven.tony@att.net>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
5millionforeignbankaccountpaymentprocessfund transferonlinebank accountbank bank offic chase bank nother bank sincerely[cell]cooperationnmr. steven mcanthonydirectorfinancial
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submissions@scamdex.com
[delivery-date:] => Thu, 09 Dec 2010 09:47:32 -0800
[received:] => Array
(
[0] => from nm13-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.245])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1PQkaO-0004Ng-KEfor submissions@scamdex.com; Thu, 09 Dec 2010 09:47:32 -0800
[1] => from [98.139.91.67] by nm13.bullet.mail.sp2.yahoo.com with NNFMP; 09 Dec 2010 17:47:20 -0000
[2] => from [98.139.91.45] by tm7.bullet.mail.sp2.yahoo.com with NNFMP; 09 Dec 2010 17:47:20 -0000
[3] => from [127.0.0.1] by omp1045.mail.sp2.yahoo.com with NNFMP; 09 Dec 2010 17:47:20 -0000
[4] => (qmail 73886 invoked by uid 60001); 9 Dec 2010 17:47:20 -0000
[5] => from [41.222.192.82] by web83812.mail.sp1.yahoo.com via HTTP; Thu, 09 Dec 2010 09:47:20 PST
)
[x-yahoo-newman-property:] => ymail-5
[x-yahoo-newman-id:] => 452099.36415.bm@omp1045.mail.sp2.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1291916840; bh=ggKbhrreMK8VmrRWbeIM7GLi4g3F5+mshGrs7WiX1Ek=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=3862txkmQ/ubOGmIxnzPBHYz1m6mh32aX2iyxDDuzFQH74UUoba2+T4Y/ih/xy3zzAMfJHsWltN/pM/Nkd9RAKpT/QBSJHcZGSvryR4JnjnzOZGf2J6Xci2S9ru85ZOUwl28OJo/3t8H/m10Pj9ODDUtEl824iTe4msjJkwAVrU=
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=mb3BS2+UGvjZC+ezqubf0ICXJ5tYx6DM9vJq7U5HlAzOVaC//9Wu+FhidyMmg886/TnhvtPjXm8Q3CXPgl2wKK956klGtBLcryX9nJ0JjiYakGRx+vidalseMX6bRg+6v+ex20kQEdydPRidQXTr0Kkvvi2lA1vzCUzvYOFhc4w=;
[message-id:] => <169591.59160.qm@web83812.mail.sp1.yahoo.com>
[x-ymail-osg:] => 3wyZ9yoVM1mYTyz0n7ho0RSkpIR.K0qwOwctwfclbSbByxO4LZNAgGUitFxiaMbQwCs_1l9WpbAw_DyOcvW32V7LQXIRcYaVcf0lXbcXD0etIOmUhQhXniobTuXupxYa6rAoDUSDjkQp1p6ua5wj1ePia70yo800cHrcmt.2rubFcTRB2T.1seYpa_HRJgsiW.MZuJctThNV6H_dTOA7GNARNC7I8Ka6ySnmExPs.sik9.J2k72e6Z9vrLlvEFpW7nuDy6TTx3sRiXHtdN_f011zoufplVB9_0TkxdQIIGHMW3ytNOiuLtrmVSVRk.nhSNk0yns2EST8Q43tYu1ny_.oHmHib9ZoPtSnKqWuHce5IBwBpP9psTgAzcaLR0aLdd6xWzA.7piSLZihAa_3bwcyxWOkRdDEukqSeC97i76PAF4sdjubs4MEOlFTo_rnPhoN8C6yQZHqXGTB1dIuSvfviaerdeXA1JlDKoJ9hsCZOPCtzJC.Hy8_m3Ghr0bMuJbuYKqlOdMcZRDP98AMvH.aqlzVJnTTELdIji4scotyyYeeR.dsJHpV3Cv4B6TdXINLxNPWNSuztb1FnUoH2HFv0198v_b4Jjur.ipEli8uujy_WDoqUPAxtj0Uzfj9LKgAcTKd.fWtoaNO6r_.87ccj._ZStSOSJ6wlY9fX81X0anOnQNH47xWMSqNjL4-
[x-rocketymmf:] => tayl0rth0mps0n@att.net
[x-mailer:] => YahooMailRC/553 YahooMailWebService/0.8.107.285259
[date:] => Thu, 9 Dec 2010 09:47:20 -0800 (PST)
[from:] => "Mr. Steven McAnthony"
[reply-to:] => "Mr. Steven McAnthony"
[subject:] => Pls. get back to me within 24hours*
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-106771251-1291916840=:59160"
[x-spam-status:] => No, score=3.6
[x-spam-score:] => 36
[x-spam-bar:] => +++
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I have finish tracking your funds worth US$4.5Million. I want to assure
you that I am going to assist you to pay all the fees for the transfer
process till completion. All I need you to do on your own part is to
send me your CHASE BANK ACCOUNT if you do not have any, get one
immediately and send it to me. This request for a Chase Bank account is
as a result of my inability to send the amount for the fees to you
except through my quick pay account online. I am still an official of
this financial institution and due to policy reason I am not suppose to
make the payment to my bank directly to avoid raising of eye brow from
other bank officials.
YOUR FULL NAMES, YOUR ADDRESS, COUNTRY WHERE YOU LIVE, TELEPHONE [CELL], DATE OF BIRTH SEX, COPY OF YOU IDENTIFICATION. You must get back to me with the above mentioned within 24hours. Awaiting your immediate cooperation Yours Sincerely Mr. Steven McAnthony Director of Foreign Currency Operation
I have finish tracking your funds worth US$4.5Million. I want to assure
you that I am going to assist you to pay all the fees for the transfer
process till completion. All I need you to do on your own part is to
send me your CHASE BANK ACCOUNT if you do not have any, get one
immediately and send it to me. This request for a Chase Bank account is
as a result of my inability to send the amount for the fees to you
except through my quick pay account online. I am still an official of
this financial institution and due to policy reason I am not suppose to
make the payment to my bank directly to avoid raising of eye brow from
other bank officials.
YOUR FULL NAMES, YOUR ADDRESS, COUNTRY WHERE YOU LIVE, TELEPHONE [CELL], DATE OF BIRTH SEX, COPY OF YOU IDENTIFICATION. You must get back to me with the above mentioned within 24hours.
Awaiting your immediate cooperation Yours Sincerely
Mr. Steven McAnthony Director of Foreign Currency Operation
