An
Email with the Subject "I AWAIT YOUR URGENT REPLY" was
received in one of Scamdex's honeypot email accounts on Fri, 11 Feb 2011 17:31:31 -0800
and has been classified as a Generic Scam Email.
The sender shows as Mr Andry Paul <andrypaul522@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
million hundred thousand dollars7 million dollarslawyerdiednext of kinbankcontactnumbersjoyclaimsclaimthree millionseven hundred thousanddepositedprocessurgent transfersentmailbank dollar our bank the bank crashsincerelyandrypaul522@gmail.com will yahoo!plane crash(us$3.7 m)(and love to hate)dearnmr andry paul mrs joyce lakenmr. andry paul
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submitted@scamdex.com
[delivery-date:] => Fri, 11 Feb 2011 17:31:31 -0800
[received:] => Array
(
[0] => from nm25-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.229])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1Po4Kg-00080p-IDfor submitted@scamdex.com; Fri, 11 Feb 2011 17:31:31 -0800
[1] => from [98.139.91.68] by nm25.bullet.mail.sp2.yahoo.com with NNFMP; 12 Feb 2011 01:31:35 -0000
[2] => from [98.139.91.12] by tm8.bullet.mail.sp2.yahoo.com with NNFMP; 12 Feb 2011 01:31:35 -0000
[3] => from [127.0.0.1] by omp1012.mail.sp2.yahoo.com with NNFMP; 12 Feb 2011 01:31:35 -0000
[4] => (qmail 21068 invoked by uid 60001); 12 Feb 2011 01:31:34 -0000
[5] => from [41.203.227.91] by web180203.mail.gq1.yahoo.com via HTTP; Fri, 11 Feb 2011 17:31:34 PST
)
[x-yahoo-newman-property:] => ymail-5
[x-yahoo-newman-id:] => 290420.61543.bm@omp1012.mail.sp2.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1297474294; bh=eC72Hl+8bs6l+GfHifUFZ+8Jtm0hsOxGvZ6NH/0EfuI=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=B6kbk6GN3G+WtvlnpGRjXqbMZ3VV3XEhhXBVhbjfjbfPwfHnMnxPWjMuNaw6Dq3NFnFaE4MxXQftMrf3G59q17Hm/YvCUFUPLWPGLO3Ukj8KD/NR2CwasU6jfei1H/nxPUmogvr198JaHThOA/I8o2h1K3NFRLPvpuYIxlbtEwU=
[message-id:] => <713060.20109.qm@web180203.mail.gq1.yahoo.com>
[x-ymail-osg:] => ql9WKwcVM1kMCkfbxrVbosyUWrmYjKmqQHUlHuBwwUjYgvuMYKgpbcjqnhd4seob6fXf5Z8.KUN9FsxuYyEj_RnYljRUxCyelWHaApNpIuQgxBsqemgJQiwh3sJd0To5sLSei43BHwZtk3JdXyJzBCn_JzmSaRYjDIlaymUEA2jiDFoYDlq_sVD3swUFvHobndUZw.KaQWDruZgUjn9_6MEPQRA6RWe_xCnQ20rNANpqyV4L5VkHS.8j57.s5_eTuisWIUJQGV4cITxgtFv7yXCe0oC_P5h86gYOBZarrMoDXEsZiyzX.YMFZJJMiutJwX.C3xjpzN9IdyiYU5_CXtO_vhCYWTe7vVnWk6O9tifxdz7YbmE2DKgiDgqiYaNdpNhbuKYIQT7tunivHC3leqJkrOmZNlgwTDcO9AaLYdp32KbeBxlvQ8dtfeJO5dEaOetIljhjlk3t5RgtbiNlmX.32JweaV9c5jmOKw8U3Ca6s6L5v52MEgKNhh5SVeAeWbfGImBL6Ibauw38vxrnSjpKSa1Zhq2Q.BLvJzPyYqfr4ZfO0t1Jubae2a8cMbsfbN_zJvJBKg9qoQC6zhsIozAe5YG0.hvtVsqyOb1shuDAffDToCYtmWPxRGQPxk_g8fpoYmmam4sfkq4NAh.Pfq8OjomGFipGIZOzLXuxj2Dg2N6ZDiFvlej..pkfgCDZM4uqG86Y7aCwwLS9g5xpEDH17qlZ5blwpwAw..QO.TWJ0HeRz5eDOGo71NSDHiL.Ka4v2HgO9daFDSXdxcMTWfqj9ZzZOlPGv5r.4PBUre8gLvqQI9Rd99kbz2xE7kdElCYXF_KhAMXo3lTqefPoETGScI9DFMai0PZqThvmApHJKzUZ5u.bkWcTLFITWF0gLjl4Np.PjtZOL.icq3m_dUk55Ap80yrzH6cZ
[x-rocketymmf:] => hannah_brkthrgh22
[x-mailer:] => YahooMailClassic/11.4.20 YahooMailWebService/0.8.108.291010
[date:] => Fri, 11 Feb 2011 17:31:34 -0800 (PST)
[from:] => Mr Andry Paul
[reply-to:] => andrypaul521@gmail.com
[subject:] => I AWAIT YOUR URGENT REPLY
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1968983623-1297474294=:20109"
[x-spam-subject:] => ***SPAM*** I AWAIT YOUR URGENT REPLY
[x-spam-status:] => Yes, score=4.3
[x-spam-score:] => 43
[x-spam-bar:] => ++++
[x-spam-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: HELLO DEAR, COULD YOU PLEASE CONSIDER TO HELP ME TO RELOCATETHIS SUM OF THREE MILLION,SEVEN HUNDRED THOUSAND DOLLARS(US$3.7 m) TO YOURCOUNTRY FOR ESTABLISHING A MEDIUM SIZE INDUSTRY IN YOUR COUNTRY. [...] Content analysis details: (4.3 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net[Blocked - see ]-3.0 URG_BIZ BODY: Contains urgent matter-2.0 NA_DOLLARS BODY: Talks about a million North American dollars-3.0 BILLION_DOLLARS BODY: Talks about lots of money0.0 HK_SCAM_N2 BODY: HK_SCAM_N20.0 FREEMAIL_FROM Sender email is freemail (andrypaul522[at]gmail.com)0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)-2.0 SUBJ_ALL_CAPS Subject is all capitals2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (andrypaul522[at]gmail.com)-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, lowtrust[98.139.91.229 listed in list.dnswl.org]0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money-1.0 UPPERCASE_75_100 message body is 75-100% uppercase0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS0.0 DECEASED_NO_ML Dead not via mailing list2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases0.5 FORM_FRAUD_5 Fill a form and many fraud phrases0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
[x-spam-flag:] => YES
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
COULD YOU PLEASE CONSIDER TO HELP ME TO RELOCATE THIS SUM OF THREE MILLION,SEVEN HUNDRED THOUSAND DOLLARS(US$3.7 m) TO YOUR COUNTRY FOR ESTABLISHING A MEDIUM SIZE INDUSTRY IN YOUR COUNTRY.
THE SAID $3.7 MILLION DOLLARS WAS DEPOSITED IN OUR BANK BY MRS JOYCE LAKE AN AMERICA CITIZEN WHO DIED IN A PLANE CRASH IN 2000.WE HAVE TRIED TO CONTACT HER IMMEDIATE FAMILY TO COME FORWARD FOR CLAIMS BUT COULD NOT SUCCEED.
WE DISCORVERED THAT THE LATE AMERICAN DIED ALONG SIDE WITH HER HUSBAND AND CHILDREN WHO ARE SUPPOSED TO BE HER NEXT OF KIN.
I WILL GIVE YOU ALL VITAL INFORMATION CONCERNING THE AMERICAN AND THE
$ 3.7 MILLION DOLLARS IN OUR CUSTODY SO THAT YOU WILL CONTACT MY BANK FOR THEM TO RELEASE THE MONEY TO YOU.
YOU CAN COME HERE IN PERSON OR YOU CAN REQUEST THE BANK TO GIVE YOU THE CONTACT OF THE BANK LAWYER'S WHO CAN REPRESENT YOUR INTREST IN THE TRANSFER PROCESS.I AM ONE OF THE BANK DIRECTORS, I WILL PLAY A ROLE TO MAKE SURE THAT THE $ 3.7 MILLION DOLLARS IS RELEASED TO YOU.
AS SOON AS I RECIEVE YOUR REPLY, I WILL GIVE YOU AN INSTRUCTION ON WHAT YOU SHOULD DO.
REPLY AND LET ME KNOW YOUR FULL NAME,AGE,ADDRESS,OCCUPATION,AND YOUR TELEPHONE NUMBERS IF AVALIABLE.
COULD YOU PLEASE CONSIDER TO HELP ME TO RELOCATE THIS SUM OF THREE MILLION,SEVEN HUNDRED THOUSAND DOLLARS(US$3.7 m) TO YOUR COUNTRY FOR ESTABLISHING A MEDIUM SIZE INDUSTRY IN YOUR COUNTRY.
THE SAID $3.7 MILLION DOLLARS WAS DEPOSITED IN OUR BANK BY MRS JOYCE LAKE AN AMERICA CITIZEN WHO DIED IN A PLANE CRASH IN 2000.WE HAVE TRIED TO CONTACT HER IMMEDIATE FAMILY TO COME FORWARD FOR CLAIMS BUT COULD NOT SUCCEED.
WE DISCORVERED THAT THE LATE AMERICAN DIED ALONG SIDE WITH HER HUSBAND AND CHILDREN WHO ARE SUPPOSED TO BE HER NEXT OF KIN.
I WILL GIVE YOU ALL VITAL INFORMATION CONCERNING THE AMERICAN AND THE
$ 3.7 MILLION DOLLARS IN OUR CUSTODY SO THAT YOU WILL CONTACT MY BANK FOR THEM TO RELEASE THE MONEY TO YOU.
YOU CAN COME HERE IN PERSON OR YOU CAN REQUEST THE BANK TO GIVE YOU THE CONTACT OF THE BANK LAWYER'S WHO CAN REPRESENT YOUR INTREST IN THE TRANSFER PROCESS.I AM ONE OF THE BANK DIRECTORS, I WILL PLAY A ROLE TO MAKE SURE THAT THE $ 3.7 MILLION DOLLARS IS RELEASED TO YOU.
AS SOON AS I RECIEVE YOUR REPLY, I WILL GIVE YOU AN INSTRUCTION ON WHAT YOU SHOULD DO.
REPLY AND LET ME KNOW YOUR FULL NAME,AGE,ADDRESS,OCCUPATION,AND YOUR TELEPHONE NUMBERS IF AVALIABLE.
YOUR SINCERELY,
MR. ANDRY PAUL
We won't tell. Get more on shows you hate to love (and love to hate): Yahoo! TV's Guilty Pleasures list.