An
Email with the Subject "RE: Your $15,000,000 Contact Dubai Bank urgently." was
received in one of Scamdex's honeypot email accounts on 06 Jul 2020 04:28:32 -0000
and has been classified as a Generic Scam Email.
The sender shows as office file <ofificefile@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
beneficiary million bankcontactsaferecords millionglobalminderreliablepaymentresponseserviceurgentfund transfersecuresentpaidmailbank bank officdollar dubai bank secure bank reliable bank the bank paying bank uae bank authorized bank nbd bank respectofificefile@yahoo.comsecurityyahoo.comtreasurydearco-operation
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[delivered-to:] => Array
(
[0] => unknown
[1] => scamdex@gmail.com
)
[received:] => Array
(
[0] => from imap.gmail.com (74.125.195.108:993) by mail.scamalot.com with IMAP4-SSL; 06 Jul 2020 04:28:32 -0000
[1] => by 2002:a05:6638:24f:0:0:0:0 with SMTP id w15csp154041jaq; Tue, 9 Jun 2020 22:42:01 -0700 (PDT)
[2] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id g134sor13834569oib.137.2020.06.09.22.42.01 for (Google Transport Security); Tue, 09 Jun 2020 22:42:01 -0700 (PDT)
[3] => from sonic311-25.consmr.mail.ne1.yahoo.com (sonic311-25.consmr.mail.ne1.yahoo.com. [66.163.188.206]) by gmr-mx.google.com with ESMTPS id k69si1230439oih.3.2020.06.09.22.42.00 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 09 Jun 2020 22:42:00 -0700 (PDT)
[4] => from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.ne1.yahoo.com with HTTP; Wed, 10 Jun 2020 05:42:00 +0000
)
[x-received:] => Array
(
[0] => by 2002:aca:efc1:: with SMTP id n184mr1320051oih.133.1591767721072; Tue, 09 Jun 2020 22:42:01 -0700 (PDT)
[1] => by 2002:a05:6808:8d9:: with SMTP id k25mr1291818oij.179.1591767720827; Tue, 09 Jun 2020 22:42:00 -0700 (PDT)
)
[arc-seal:] => Array
(
[0] => i=2; a=rsa-sha256; t=1591767721; cv=pass; d=google.com; s=arc-20160816; b=IkyEHIQB4572uUoJk2VePv7AXZsCOE2oqm9fcTqpCfOWVuGvRVXxK5y4/FJ8OfPZH7 rpp5pTSkD7YcSJayzEgHKRn7xgFZ9HxGlEqsM6mHLczQbjdfGLM3TFjrmw+f3lzGhkGm qW9SWU05t7AUUsis9nEtAUOtg5AK5BvdG4gfMwvpvya0c/ys8RjpaccfrKWRezW4e7FH MHInEZEw2XjpMkA2I5kByg2xLoz3ADVX3zVounZYx6JfgT/I2u6mfs0pQ7tp/RHJf6mX 5YbhoB93Y+wuR5MRqrmzhPcOLMr1ZBbMrjv/kIavVQGRFVyjGCqBFDRCt0xOAwHH82ux O19w==
[1] => i=1; a=rsa-sha256; t=1591767720; cv=none; d=google.com; s=arc-20160816; b=anqRwg5Sp09fSvcR0EXhhHWL/c17oEBWodyd0KV/2ZbuRmMh+nlg6vB7yYJcE7Pu+H 5IUVzTKshCeWzLFzuJtitikFL8dWJK7ksI62imvq+qkGqwY7+sRXbNFKcdqH8psAbt8T CDZ81z/HNXYN4Z0lCkZkyeHcemHBcX+IhOo6mCtKLoNJSX2W7cuZ26QysPlIRV26AMMW hkAV7TtnfcFKsg4R4bLxvOW9/UXTDNTZMVs/Y61xIKUL1xJgOLTooOznmKBDq4cJnPXV 3HFhvuAKzr2zbLJOpeLRRKC5kmMX3o4KZN2t7XUHcz1znJIOa9Dh5V3+Tz1VCVqVFLp7 P79A==
)
[arc-message-signature:] => Array
(
[0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=references:mime-version:subject:message-id:from:date:dkim-signature; bh=2jrn1DF6XkfqCbavMxdlwUf0q5Mk8mNAS52o+2bGCYs=; b=WbPiEePD7oshmXtYAkLCATJtac6z7IZWwLwhoJSNm8qNYxIyvByCvEIKJP6DKf9DWa jexmgCu5UhXj/ii8V+2ygAga5piz90ecbDQZOwDu3bCuPb1fprH5TYVNPiVfENToLE58 T5yH3C/bGEk0N2aGaqNWe4wlJEP3xxXSL0yzZuCSR1fBWkw1fC8wJSEPMya214wSMDXH 2064DS5eyLn5u24ZTa1C54vm5gBmjWUnC0NsTD/5/G2iQRVyodNck62Ag10KXMC6WSwe TU1UQ1vCSt37qQNEWEh1NBmM2gD5d8e+uKBALZu9eU1vnLV3VANH4/OCi7UWHr+1oJGP 3Crw==
[1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=references:mime-version:subject:message-id:from:date:dkim-signature; bh=2jrn1DF6XkfqCbavMxdlwUf0q5Mk8mNAS52o+2bGCYs=; b=DXBE8MiP1lFnzTo9r1w2A50PqUhTOXhbVgI19b6lcNzbvwlGuPHAvlg0V21kZiQ8aH aQwr4/ShdZhmn8O0z3qxs/gFY+vL8WFfN+KaKP1VO6/dq9IYthr4XjQaN4qt04HfH2wp 7GOdvWvm//rzTTCs6fuQFydJ/78KB93PeG2rO+cukf/JcbWrM8BZBl2siqndnYEt5tRn 9dUVCXwp4cqgPpqd0dac7+sQgY2ygbTPKHERCka+WWFaCT9Eq7E4OW7Wo1qljojIplpO N5r9dGEmD0oHNBup0BYau3qe9bCw1VXiK+9OxolLipv7b4ccvyG661n37ZRZJNgFMzQQ 95lA==
)
[arc-authentication-results:] => Array
(
[0] => i=2; mx.google.com; dkim=pass header.i=@yahoo.com header.s=s2048 header.b=nCVggcC6; arc=pass (i=1 spf=pass spfdomain=yahoo.com dkim=pass dkdomain=yahoo.com dmarc=pass fromdomain=yahoo.com); spf=neutral (google.com: 209.85.220.41 is neither permitted nor denied by domain of ofificefile@yahoo.com) smtp.mailfrom=ofificefile@yahoo.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=yahoo.com
[1] => i=1; gmr-mx.google.com; dkim=pass header.i=@yahoo.com header.s=s2048 header.b=nCVggcC6; spf=pass (google.com: domain of ofificefile@yahoo.com designates 66.163.188.206 as permitted sender) smtp.mailfrom=ofificefile@yahoo.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=yahoo.com
)
[received-spf:] => Array
(
[0] => neutral (google.com: 209.85.220.41 is neither permitted nor denied by domain of ofificefile@yahoo.com) client-ip=209.85.220.41;
[1] => pass (google.com: domain of ofificefile@yahoo.com designates 66.163.188.206 as permitted sender) client-ip=66.163.188.206;
)
[authentication-results:] => mx.google.com; dkim=pass header.i=@yahoo.com header.s=s2048 header.b=nCVggcC6; arc=pass (i=1 spf=pass spfdomain=yahoo.com dkim=pass dkdomain=yahoo.com dmarc=pass fromdomain=yahoo.com); spf=neutral (google.com: 209.85.220.41 is neither permitted nor denied by domain of ofificefile@yahoo.com) smtp.mailfrom=ofificefile@yahoo.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=yahoo.com
[x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:dkim-signature:date:from:message-id:subject :mime-version:references; bh=2jrn1DF6XkfqCbavMxdlwUf0q5Mk8mNAS52o+2bGCYs=; b=lBvh/WWqnProfAEse2GhafJmZha4Je2+jupe8gcyB1mOLOyjihCfVNr+/4wXcKlhVC NXDEt7ezLpi8kSEjJ8qH7473ARwdZuA1RI4aMrRczVms4fB7IbTZDXW5NqwcE2guA+AZ Izrrg/YanmPPldg7ZwRBlQS1v6nuiRaSt2T0nSLnjmIjnIUd+obMErPRKdu4FhVmhOg3 CuWMhKiBA12CLHJg5iegkM9qS7NOZqroRE8WgsgNvp4Xyn9ESey6Fz8tUuGJp9B7u/gM PKPDwl3gPnC/4S6NAO+Q2CxfRQpA1lJ3Cl1fJcPNzrQTdjDd85afpmhaJqc/4TASCfnf 9vmQ==
[x-gm-message-state:] => AOAM533P8TfUVBIToGKgFlH+hP0Ua6n+hTUV+M5q/8YJ86lyhtz9PgXD 4LVmGckCVfpharoNvhVaC8CAbVyndBaym8mSjQ==
[x-google-smtp-source:] => ABdhPJz1zCu3mwdhXcF9/gvc1MODw2jZm54nGUtdH10S4eBfh+j5g9/nu92cx0jGkn6nyCtVsWePvz8Jv+kKGXtZX8xb5rV0zTs=
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1591767720; bh=2jrn1DF6XkfqCbavMxdlwUf0q5Mk8mNAS52o+2bGCYs=; h=Date:From:Subject:References:From:Subject; b=nCVggcC65OP+OKQkVWKRum2Jq1UhmRFCejDgGywXrgx+XlNCWVqJgkqYGyIxpwervMBJDNhmykJgkshgx5yBGsyCVd76cmJIRy5r+wiOtBp3pYVFC4rl1I48aH05lDBARwcDvC1e6v4aBXPoVNla3AHtLyfgIssRvWMkpfttrsWevU03odr/RRLhS+/6j3AwRsh7IYg+s9bp9pHRmrvZP8ayW7aCIa1M5R6olyvvPMaM3b7tjWqikuzvoE97QHBsJHidzaBky3dZIrMLy46fCBVRgklL3SV0iA8pbTrvAsDNrBhQRBhPbXrgWCBbXy2iKcumLkKGANzVLgN488Uybg==
[x-ymail-osg:] => vG3kvcUVM1kRwqJ85B6G2gSv6Bpa3k6p44xy9jbCIATQyTbb4MzJcGCLotMEwRT L6eBxkKxfQK6s5m0l_GRwrzGwhB0RqPsLK7wsYkl9RxAXtdQlJfIkuAkVuYWJv6I89L.WEFK6s4G 4zyEVnjsvhayotoSCxvLmI7wY_9sKBpWc5w3TdHTjMqQyYeUu6XdRZeP0mXB2iWG1IkfXEIl0Qte in4k3XDcItb2dtMfZo.oH_QPjq8kd30AxAEymRqlXX.Rv0BDuRpo5udIQRwn3ir.JgTdxJBhcbba OVg.nFbMx2nDyuWlTb_KZQFYJQwboR4O_g9Z_9JTK0C3P4eeGunqQSNEmn.DA1tBpJt1YsjAbon1 Dry7YHYNgtJ5v3p.FRfE85rUos7nYD4Ujm4Zg13.SKXXEUEimnJDokx5Gm06AilLRCTG85dUxaRf noM0mM1OgeKZiPeSIl18tfNlBatm3Hf4CBvIU.eCD1QQL2YII7DLRkUMY.4n26Az2SkTR5TsqlZi sgaCB7sET_4hJb7UIowDr3QSqLdhO5m5i30.6Nh0IfqU0s14baTb.lpBEoa6x5LaGTbBfp.NwKEq 06zUogl5nu2NCurLPDjSZ1IiQgVT.MkaGEl9nwnfTd9h4sAgxHZj4MC5w04RY0pKPDixOfxU1m0J CyqzJXAO2.tKc1HYRI.OANRjuLA_p4t.yDSR.EBr.WYwH6FEPqrYxnzWjbtPlVQeWxR4j8e.r1Qu 9cwrd0iaIGlyMLPaiAEGSS9jzXc9wmY9huP9GZJ9zQc_9XK4Gi2wxfd7F4nu.sAFjfAQyYDEENqY iPc.AAn9nsDqveDYDmU5n6YHu.fzFDDUaH.FS4Bw90tZBSWZFXdti755nOksIuXxenuDgAaHj.6t 73gMmmwg7w3Ap._rYemfSVMkupJokSx5L7iy5vU42CNKtI.PMQ8AJKKgkUmJfaKTFAHeV5XAAl5_ 6GzplOMu0C99f6EQtljyCob6E4IgphOcFTxdxaEerBO1YTNxyqo1BDmJgWOc7gkZMoCpq6K9L23Q _UIreNBMdQ2UCiT14O8WKxEuDVPkPJlz07bmKhsOtg4gMUHlJ8eJAz4uz3HlRF7MeXKeo0q7c0FJ UBxkg0TUfmqfpX._Q.SQLXBVGX.ywuufQcbtk6X6_QCJf759MyvHkIbvPJAqKsi0dCQ0eM7oinRN 8AZE2dUwE77KhPbz_ggKo2nFAlhQnObcpBMc0Sz9dTBAb5Kz9Pjp4Y.b3WGusKnar_31tUmyMCtd GY3VCQanpPQ3scdW74635fzuzkgJbhvUSnox9VYHZOaQMe1_DdZYtQ6_uggXZSiuW3bO9.mcNQeY xktYalWZUjxinG4MFndbxUWQ-
[date:] => Wed, 10 Jun 2020 05:41:58 +0000 (UTC)
[from:] => office file
[message-id:] => <1131331026.1993410.1591767718469@mail.yahoo.com>
[subject:] => RE: Your $15,000,000 Contact Dubai Bank urgently.
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="----=_Part_1993409_1190400196.1591767718467"
[references:] => <1131331026.1993410.1591767718469.ref@mail.yahoo.com>
[x-mailer:] => WebService/1.1.16072 YMailNorrin Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0
[content-length:] => 5201
[x-getmail-retrieved-from-mailbox:] => =?utf-8?q?=5BGmail=5D/Spam?=
[x-gmail-thrid:] => =?utf-8?q?1669089429971186600?=
[x-gmail-msgid:] => =?utf-8?q?1669089429971186600?=
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
How are you doing today? hope you are doing good. This is an official reminder from the Federal Treasury Department concerning your payment valued $15, 000, 000.00 {Fifteen million United State dollars} only, We hope that you have commenced communication with the authorized payment center, if not we encourage you to contact our director for immediate release of your approved funds as the appropriate beneficiary, as we have acquired all the necessary paperwork for onward the release of your funds.
We wish to inform you through this medium that we are working hard to arrest all the hoodlums and sue the unauthorized officials who attempted to divert your approved funds and that have been extorting money from the innocent individuals globally and ruining our reputation meanwhile a private secure bank in United Arab Emirate in City of Dubai have been officially assigned to secretly handle your payment and ensure that you receive your fund without any delay.
Our office is determined to complete your fund transfer in accordance with the payment policy through a reliable bank in DUBAI UAE We decided to assign the bank in UAE Dubai to handle your payment for security reasons as UAE Dubai has the best banking systems and its one of the safest country without scam records. This important letter is based on the email we sent to you yesterday June 09, 2020 which we did not get any response from you stating or confirming if you have contacted the paying bank officials in UAE Dubai, We observed that you are yet to contact our payment center in DUBAI UAE Bank with your personal information based on our instructions.
We urge you to contact our authorized bank payment official director directly with your personal information for rectification of your payment file in our office for you to be paid immediately.
Contact person:Mr.Shayne Nelson Bank Name:Emirates NBD Bank Contact email: officefiile@barid.com Contact:Tele number:+971-582-68-473
Thanks for your understanding and co-operations remember your payment have been approved globally to be paid to you without delay.
Respective in services, Mr. David Lipton. Information officer.
Hello dear.
How are you doing today? hope you are doing good. This is an official reminder from the Federal Treasury Department concerning your payment valued $15, 000, 000.00 {Fifteen million United State dollars} only, We hope that you have commenced communication with the authorized payment center, if not we encourage you to contact our director for immediate release of your approved funds as the appropriate beneficiary, as we have acquired all the necessary paperwork for onward the release of your funds.
We wish to inform you through this medium that we are working hard to arrest all the hoodlums and sue the unauthorized officials who attempted to divert your approved funds and that have been extorting money from the innocent individuals globally and ruining our reputation meanwhile a private secure bank in United Arab Emirate in City of Dubai have been officially assigned to secretly handle your payment and ensure that you receive your fund without any delay.
Our office is determined to complete your fund transfer in accordance with the payment policy through a reliable bank in DUBAI UAE We decided to assign the bank in UAE Dubai to handle your payment for security reasons as UAE Dubai has the best banking systems and its one of the safest country without scam records. This important letter is based on the email we sent to you yesterday June 09, 2020 which we did not get any response from you stating or confirming if you have contacted the paying bank officials in UAE Dubai, We observed that you are yet to contact our payment center in DUBAI UAE Bank with your personal information based on our instructions.
We urge you to contact our authorized bank payment official director directly with your personal information for rectification of your payment file in our office for you to be paid immediately.
Contact person:Mr.Shayne Nelson Bank Name:Emirates NBD Bank Contact email: officefiile@barid.com Contact:Tele number:+971-582-68-473
Thanks for your understanding and co-operations remember your payment have been approved globally to be paid to you without delay.
Respective in services, Mr. David Lipton. Information officer.