An
Email with the Subject "Re: Confirm Reciept" was
received in one of Scamdex's honeypot email accounts on Mon, 25 Mar 2013 05:40:49 -0700
and has been classified as a Generic Scam Email.
The sender shows as The Master <arisspaul@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
beneficiaryplatinumbankverificationnationaltransactionpaymentresponseon behalf ofaccessprocessbusinessfund transferinvestigationmailbank international bank categoryrespectarisspaul@gmail.com willn will ach master <arisspaul@gma...financial
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => jssubmissions@scamdex.com
[delivery-date:] => Mon, 25 Mar 2013 05:40:49 -0700
[received:] => Array
(
[0] => from mail-ia0-f179.google.com ([209.85.210.179]:59883)by lester.newsblaze.com with esmtps (TLSv1:RC4-SHA:128)(Exim 4.80)(envelope-from )id 1UK6hk-00014k-Stfor jssubmissions@scamdex.com; Mon, 25 Mar 2013 05:40:49 -0700
[1] => by mail-ia0-f179.google.com with SMTP id x24so5386534iak.38 for ; Mon, 25 Mar 2013 05:40:48 -0700 (PDT)
[2] => from [192.168.0.2] ([184.151.61.64]) by mx.google.com with ESMTPS id px9sm22555122igc.0.2013.03.25.05.40.41 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 25 Mar 2013 05:40:47 -0700 (PDT)
)
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:subject :references:in-reply-to:content-type; bh=kzh4Zi0eIuqku+NwQdtJOVSv7TXruPk6iHsYVVE1Fd4=; b=GClBcVi8ULqYaSIdQTY0kuwduogUqNOgYiDBSeOsIaw8JLCBhMSkSq7ycK02V4fs54 B+af7bVNYLYIFfD7HG26KNC5cahcPymbADvdcp7MIu/nL1T+fWcoRkMU5F07E3RgQ0X7 TVnipgj0AdSKS0cYl9mdtDl4R7MbAIeMiwbTvYe4cloyDs2sJBFwwVvtBwVx3mOwDoWP R1EYBvLXnRci4In382QpdwNWmYGvHxCJ7KJk1juF0AU/JBLMBldrZ0K6tJOZfQGSr0y6 DN/qWcgM0/hsKF7k84D+QAGGARKx7zk0QcJV7qGkztz+IzLuip48rVNBeECyoA9UrOtT 3e7A==
[x-received:] => by 10.50.47.168 with SMTP id e8mr8049188ign.50.1364215248151; Mon, 25 Mar 2013 05:40:48 -0700 (PDT)
[message-id:] => <515045BE.7080607@gmail.com>
[date:] => Mon, 25 Mar 2013 08:40:30 -0400
[from:] => The Master
[user-agent:] => Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130307 Thunderbird/17.0.4
[mime-version:] => 1.0
[to:] => "UK Debt Management Office." , fraud.alert@met.police.uk, Fraud Watch International ,Anti Fraud Centre , SCAM MAIL AUTHORITIY ,SCAM REPORTS , SCAM , INTERNET SCAM CRIME REPORTING <"js submissions"@scamdex.com>,Internet Crime Complaint Center SCAM
[subject:] => Re: Confirm Reciept
[references:] => <1364213378.60136.YahooMailNeo@web126106.mail.ne1.yahoo.com>
[in-reply-to:] => <1364213378.60136.YahooMailNeo@web126106.mail.ne1.yahoo.com>
[content-type:] => multipart/alternative;boundary="------------020603010507020000000408"
[x-spam-status:] => No, score=0.0
[x-spam-score:] => 0
[x-spam-bar:] => /
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: On 25/03/2013 8:09 AM, UK Debt Management Office. wrote: Thanks! To help me decide,your mail is forwarded for verification. Have a nice day! > In compliance with the part payment authorization from U.N > International Financial Investigation Unit and Association of Better > Business Bureau, be informed that we have officially received your > email response as advised. By the powers entrusted on us, we have > commenced effective payment process hence all paper works in respect > of this transaction have been certified and based on our obligation / > mandate to settle all outstanding payments owed to Category 'A' > beneficiaries,you must receive your approved funds within the shortest > possible time frame under any of the newly enshrined payment modes > stated herein. > > Listed below are the three (3) available options, so you are required > to indicate your preferred choice of reception as the fund beneficiary. > > 1.Certified International Bank Draft. > 2. Platinum Card that can be accessible at any interswitch cash > machine worldwide. > 3. K.T.T wire transfer. > > Be that as it may; you have been acquainted on how you will receive > your approved funds without further delays hence all necessary > measures that is required to ensure that Category 'A' beneficiaries > receive their payments within the shortest possible time frame have > been adopted. Upon receipt of this message, kindly reaffirm to us your > preferred choice of reception. > > We shall advise you accordingly once we hear from you, it is > imperative for you to note that powers to pay orcancel payments as > such have been vested on us > and subsequent dealings with any other office, person, group or apart > from us will be at your own detriment and will be considered unlawful. > > For more oral clarifications call me on my direct tel: +44 703 193 6432 > > Looking forward to your enthusiastic and prompt response. > > For and on behalf of, > UK Debt Management Office. > > Ronnie McDowell > Senior Policy Advisor. > > [...] Content analysis details: (0.0 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (arisspaul[at]gmail.com)-0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
On 25/03/2013 8:09 AM, UK Debt
Management Office. wrote:
Thanks!
To help me decide,your mail is forwarded for verification.
Have a nice day!
In compliance with the part payment authorization from U.N
International Financial Investigation Unit and Association of
Better Business Bureau, be informed that we have officially
received your email response as advised. By the powers
entrusted on us, we have commenced effective payment process
hence all paper works in respect of this transaction have been
certified and based on our obligation / mandate to settle all
outstanding payments owed to Category 'A' beneficiaries,you
must receive your approved funds within the shortest possible
time frame under any of the newly enshrined payment modes
stated herein.
Listed below are the three (3) available options, so you are
required to indicate your preferred choice of reception as the
fund beneficiary.
1.Certified International Bank Draft.
2. Platinum Card that can be accessible at any interswitch
cash machine worldwide.
3. K.T.T wire transfer.
Be that as it may; you have been acquainted on how you will
receive your approved funds without further delays hence all
necessary measures that is required to ensure that Category
'A' beneficiaries receive their payments within the shortest
possible time frame have been adopted. Upon receipt of this
message, kindly reaffirm to us your preferred choice of
reception.
We shall advise you accordingly once we hear from you, it is
imperative for you to note that powers to pay orcancel
payments as such have been vested on us
and subsequent dealings with any other office, person, group
or apart from us will be at your own detriment and will be
considered unlawful.
For more oral clarifications call me on my direct tel: +44 703
193 6432
Looking forward to your enthusiastic and prompt response.