An
Email with the Subject "Fw: THIS IS THE (F.B.I)" was
received in one of Scamdex's honeypot email accounts on Tue, 03 Mar 2009 17:03:11 -0800
and has been classified as a Generic Scam Email.
The sender shows as barney pierce <barneysyl@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submitted@scamdex.com
[delivery-date:] => Tue, 03 Mar 2009 17:03:11 -0800
[received:] => Array
(
[0] => from web53201.mail.re2.yahoo.com ([206.190.49.71])by fire.newsblaze.com with smtp (Exim 4.69)(envelope-from )id 1LefVt-0007Cv-9ifor submitted@scamdex.com; Tue, 03 Mar 2009 17:03:11 -0800
[1] => (qmail 69923 invoked by uid 60001); 4 Mar 2009 01:03:13 -0000
[2] => from [216.110.206.253] by web53201.mail.re2.yahoo.com via HTTP; Tue, 03 Mar 2009 17:03:13 PST
)
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID; b=paMmnh3cvF0EiC45np/JQXNJdM4TBra6Vj6Ip0AL04hlIcDhHXmszB1WOg3RLwh2XX6XKOUbJDoAaKdJWBKo/gNgC0egvzODA7LIBYPTga+lzblTo1Zpf7Dx9X92ulI+HuPkg669cXo4AkOIwREkAOd9+9inFwNkDK1/7RXeqVI=;
[x-ymail-osg:] => RTmepr4VM1nTaNwqJPH6rDGgXJ658ldyFO7Uv_9WAXT50afKpJVNt7jNfPPCSKHCCe5ue4LKqqcwHibJq5_RMR3afjvfg7T8xqPI9SGtlcpjry2A9Q9GzyWVps0ZbH1FHhFGFPVXATw4HwU6MlZhbaAGocKqiBvDan2x8zUDwA1LmFiE2brSTdl4nO0Waz2tBPvq5DVRFXD0lstS.EYOb51EC6w-
[x-mailer:] => YahooMailWebService/0.7.289.1
[date:] => Tue, 3 Mar 2009 17:03:13 -0800 (PST)
[from:] => barney pierce
[subject:] => Fw: THIS IS THE (F.B.I)
[to:] => submitted@scamdex.com
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-686020094-1236128593=:66782"
[message-id:] => <338702.66782.qm@web53201.mail.re2.yahoo.com>
[x-spam-status:] => No, score=-2.2
[x-spam-score:] => -21
[x-spam-bar:] => --
[x-spam-flag:] => NO
[x-scamdex-scores:] => S:67 P:61 A:68 L:58 E:68 G:57
[x-scamdex-classtype:] => A
[x-scamdex-classscore:] => 68
[x-scamdex-totscore:] => 379
[x-scamdex-kw:] => bank,barney,beneficiary,check,citi,courier,diploma,diplomatic,dollars,executive,fund,internet,investigation,nigeria,paid,payment,process,sent,service,transaction,union,washington,western
[x-scamdex-em:] => kevinbacon6451@yahoo.com
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1236128591.H543493P28025
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
--- On Tue, 3/3/09, F.B.I <kevinbacon6451@yahoo.com> wrote:
Barney
--- On Tue, 3/3/09, F.B.I <kevinbacon6451@yahoo.com> wrote:
From: F.B.I <kevinbacon6451@yahoo.com> Subject: THIS IS THE (F.B.I) To: Date: Tuesday, March 3, 2009, 10:57 AM
THIS IS THE (F.B.I)
http://www.fbi.gov Robert S. Mueller Executive Director Fbi
FEDERAL BUREAU OF INVESTIGATION SEEKING TO WIRETAP THE INTERNET
DEAR BENEFICIARY,
HAVE YOU RECEIVED YOUR BANK DRAFT CHECK FROM THE FEDEX COURIER SERVICE NIGERIA? WE HAVE BEEN WATCHING EVERY SINGLE TRANSACTION YOU MADE FROM LAST YEAR 2008 UNTILL THIS TIME 2009 AND YOU HAVE TO KNOW THAT WE ARE ALSO WORKING TO MAKE SURE YOUR CHECK WHICH IS SUPPOSE TO BE DELIVERED TO YOU 4 DAYS BACK.
THE FEDERAL BUREAU OF INVESTIGATION DOES NOT WANT ANY OF OUR CITIZENS TO LOOSE THEIR FUND AND THAT IS WHY WE'VE BEEN WORKING 24 HOURS ON THE CYBER WATCH.
WE ARE AWARE OF EVERY PAYMENT YOU HAVE PAID IN THIS TRANSACTION TO MAKE
IT SORCCED, YET THE FUND IS STILL HOLD DOWN BY THE DRUG LAW AGENCY AND THE IMMIGRAITION OFFICER AT THE AIRPORT.
WE WANT YOU TO TAKE NOTE THAT OUR SPECIAL INVESTIGATION SERVICE DIPLOMATIC MEN ARE THE ONE TO DELIVER YOUR BANK DRAFT CHECK TO YOUR DOORSTEP WITHOUT ANY FORM OF ROADBLOCK AGENCY.
THE DIPLOMATIC DELIVERY MEN ARE IN THE NIGERIAN INTERNATION AIRPORT NOW, AS SOON AS YOU GET BACK TO THIS EMAIL BY APPLYING TO THE INSTRUCTION THAT IS SENT TO YOU, THEN THE DELIVERY WILL TAKE PLACE TO YOUR DOORSTEP.
THE PAYMENT YOU ARE TO MAKE NOW SO THAT YOUR CHECK CAN FINALY GET TO YOUR DOORSTEP IS $400 USA DOLLARS AND AS SOON AS THIS HAVE BEEN SENT DOWN VIA WESTERN UNION, THE DELIVERY WILL COMMENCE IMMEDIATELY.
YOU HAVE TO TRY AS MUCH AS YOU CAN AND MAKE THIS PAYMENT SO THAT YOUR CHECK CAN BE DELIVERED IMMEDIATELY TO YOUR DESTINATION.
YOU HAVE TO STOP EVERY TRANSACTION YOU ARE COMMUNICATING WITH OTHER ORGANIZATION TO AVOID DELAY ON
THE PROCESSING OF YOUR CHECK.
GET BACK A.S.P. YOU RECEIVED THIS EMAIL.
THANKS FOR YOUR CO-OPERATION.
Robert S. Mueller,
Federal Bureau of Investigation J. Edgar Hoover Building 935 Pennsylvania Avenue, NW Washington, D.C. 20535-0001, USA
