An
Email with the Subject "TR: Your Atm Card" was
received in one of Scamdex's honeypot email accounts on Thu, 08 May 2008 15:06:15 -0700
and has been classified as a Generic Scam Email.
The sender shows as "Bernard Teyssou" <bernard.teyssou@orange.fr>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
nigerialagosinheritance 20080508111 atm thousand dollarspresidentwindrawresidentfive thousandpaymentfundreportmailusddollarrespectoffice02@yahoo.com will spamyahoo.comach(mwinf2802.orange.fr)(smtp server)(localhost [127.0.0.1])(cest)(unknown [64.185.237.143])(exim 4.68)(envelope-from <nobody...[99 99] / [47 12][mailto:info@atm.org.ng](resolution panel on cont...(gcfr) mr. npresident,nmr ken odey.nmr. ellias green.fs
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => JS_SUBMISSIONS@scamdex.com
[delivery-date:] => Thu, 08 May 2008 15:06:25 -0700
[received:] => Array
(
[0] => from smtp28.orange.fr ([80.12.242.101])by gogol.o7e.net with esmtp (Exim 4.68)(envelope-from )id 1JuEFb-0001bO-5afor JS_SUBMISSIONS@scamdex.com; Thu, 08 May 2008 15:06:15 -0700
[1] => from me-wanadoo.net (localhost [127.0.0.1])by mwinf2824.orange.fr (SMTP Server) with ESMTP id 5547B7000089;Fri, 9 May 2008 00:06:05 +0200 (CEST)
[2] => from maisoncfe2676d (APoitiers-157-1-147-9.w86-213.abo.wanadoo.fr [86.213.50.9])by mwinf2824.orange.fr (SMTP Server) with ESMTP id 9C69B7000082;Fri, 9 May 2008 00:06:03 +0200 (CEST)
)
[x-me-uuid:] => 20080508220603640.9C69B7000082@mwinf2824.orange.fr
[from:] => "Bernard Teyssou"
[to:] => "Bernard Teyssou"
[subject:] => TR: Your Atm Card
[date:] => Fri, 9 May 2008 00:06:04 +0200
[x-mailer:] => Array
(
[0] => <004301c8b157$b678f2b0$0a01a8c0@maisoncfe2676d>
[1] => Microsoft Office Outlook 11
)
[mime-version:] => 1.0
[content-type:] => text/plain;charset="iso-8859-1"
[content-transfer-encoding:] => quoted-printable
[x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2900.3198
[thread-index:] => AcixAgThwd99Jnm0Ry6BinmI+tkUKQAVZaAA
[x-spam-status:] => No, score=1.9
[x-spam-score:] => 19
[x-spam-bar:] => +
[x-spam-flag:] => NO
[x-o7e-flag:] => J-3509981-042508::smtp28.orange.fr [80.12.242.101]
[message-id:] => REIDs3x1239839787.M74112P32690V-S3X
[x-scamdex-scores:] => S:44 P:33 A:36 L:38 E:39 G:35
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 44
[x-scamdex-totscore:] => 225
[x-scamdex-kw:] => card,contact,dollars,foreign,fund,inc.,lagos,million,national,nigeria,payment,report,resident
[x-scamdex-em:] => 9C69B7000082@mwinf2824.oran,EF59D300008B@mwinf2802.oran,atm_payout02@hotmail.com,info@atm.org.ng,office02@yahoo.com.hk,teyssou@orange.fr
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1239839787.M74112P32690V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Return-Path: <nobody@new.server1.kazix.com>
Received: from mwinf2802.orange.fr (mwinf2802.orange.fr)
by mwinb0k01 (SMTP Server) with LMTP; Thu, 08 May 2008 13:52:41
+0200
X-Sieve: Server Sieve 2.2
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2802.orange.fr (SMTP Server) with ESMTP id 24CB3300008C
for <wfr60000116334815e70060a54f@back0k-mail01-01.me-wanadoo.net>;
Thu, 8 May 2008 13:52:41 +0200 (CEST)
Received: from new.server1.kazix.com (unknown [64.185.237.143])
by mwinf2802.orange.fr (SMTP Server) with ESMTP id EF59D300008B
for <bernard.teyssou@orange.fr>; Thu, 8 May 2008 13:52:40 +0200
(CEST)
X-ME-UUID: 20080508115240980.EF59D300008B@mwinf2802.orange.fr
Received: from nobody by new.server1.kazix.com with local (Exim 4.68)
(envelope-from <nobody@new.server1.kazix.com>)
id 1Ju4fs-0000YW-Di
for bernard.teyssou@orange.fr; Thu, 08 May 2008 07:52:36 -0400
To: bernard.teyssou@orange.fr
Subject: Your Atm Card
From: OFFICE OF THE SENATE HOUSE <info@atm.org.ng>
Reply-To: atm.office02@yahoo.com.hk
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <E1Ju4fs-0000YW-Di@new.server1.kazix.com>
Date: Thu, 08 May 2008 07:52:36 -0400
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname - new.server1.kazix.com
X-AntiAbuse: Original Domain - orange.fr
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - new.server1.kazix.com
X-me-spamlevel: not-spam
X-me-spamrating: 59.905515
-----Message d'origine-----
De : OFFICE OF THE SENATE HOUSE [mailto:info@atm.org.ng]
Envoyé : jeudi 8 mai 2008 13:53
À : bernard.teyssou@orange.fr
Objet : Your Atm Card
OFFICE OF THE SENATE HOUSE
FEDERAL REPUBLIC OF NIGERIA
COMMITTEE ON FOREIGN PAYMENT
(RESOLUTION PANEL ON CONTRACT PAYMENT)
IKOYI-LAGOS NIGERIA
Our Ref: FGN /SNT/STB
Your Ref.
THIS IS TO OFFICIALLY INFORM YOU THAT WE HAVE VERIFIED YOUR
INHERITANCE FILE AND FOUND OUT THAT WHY YOU HAVE NOT RECEIVED YOUR
PAYMENT IS BECAUSE YOU HAVE NOT FULFILLED THE OBLIGATIONS GIVEN TO
YOU IN RESPECT OF YOUR CONTRACT/INHERITANCE PAYMENT.
RIGHT NOW WE HAVE ARRANGED YOUR PAYMENT THROUGH OUR SWIFT CARD
PAYMENT CENTER ASIA PACIFIC THAT IS THE LATEST INSTRUCTION FROM MR.
PRESIDENT, UMARU YAR'ADUA (GCFR) FEDERAL REPUBLIC OF NIGERIA AND FBI.
THIS CARD CENTER WILL SEND YOU AN ATM CARD VALUED AT{USD 6.8 MILLION}
WHICH YOU WILL USE TO WITHDRAW YOUR MONEY IN ANY ATM MACHINE IN ANY
PART OF THE WORLD, BUT THE MAXIMUM IS FIVE THOUSAND DOLLARS PER
DAY, SO IF YOU LIKE TO RECEIVE YOUR FUND THIS WAY PLEASE LET US KNOW
BY CONTACTING THE INTERNATIONAL MONETARY FUNDS DEPARTMENT CARD
PAYMENT CENTER.
MR KEN ODEY.
EMAIL ADDRESS;atm.office02@yahoo.com.hkatm_payout02@hotmail.com
PHONENUMBER; +2348039175283.
AND ALSO SEND THE FOLLOWING INFORMATION:
1. YOUR FULL NAME
2. PHONE AND FAX NUMBER
3. ADDRESS WERE YOU WANT THEM TO SEND HE ATM CARD
4. YOUR AGE AND CURRENT OCCUPATION
KINDEST REGARDS,
MR. Ellias Green.
SENATE PRESIDENT.
Return-Path: <nobody@new.server1.kazix.com>
Received: from mwinf2802.orange.fr (mwinf2802.orange.fr)
by mwinb0k01 (SMTP Server) with LMTP; Thu, 08 May 2008 13:52:41
+0200
X-Sieve: Server Sieve 2.2
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2802.orange.fr (SMTP Server) with ESMTP id 24CB3300008C
for <wfr60000116334815e70060a54f@back0k-mail01-01.me-wanadoo.net>;
Thu, 8 May 2008 13:52:41 +0200 (CEST)
Received: from new.server1.kazix.com (unknown [64.185.237.143])
by mwinf2802.orange.fr (SMTP Server) with ESMTP id EF59D300008B
for <bernard.teyssou@orange.fr>; Thu, 8 May 2008 13:52:40 +0200
(CEST)
X-ME-UUID: 20080508115240980.EF59D300008B@mwinf2802.orange.fr
Received: from nobody by new.server1.kazix.com with local (Exim 4.68)
(envelope-from <nobody@new.server1.kazix.com>)
id 1Ju4fs-0000YW-Di
for bernard.teyssou@orange.fr; Thu, 08 May 2008 07:52:36 -0400
To: bernard.teyssou@orange.fr
Subject: Your Atm Card
From: OFFICE OF THE SENATE HOUSE <info@atm.org.ng>
Reply-To: atm.office02@yahoo.com.hk
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <E1Ju4fs-0000YW-Di@new.server1.kazix.com>
Date: Thu, 08 May 2008 07:52:36 -0400
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname - new.server1.kazix.com
X-AntiAbuse: Original Domain - orange.fr
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - new.server1.kazix.com
X-me-spamlevel: not-spam
X-me-spamrating: 59.905515
-----Message d'origine-----
De : OFFICE OF THE SENATE HOUSE [mailto:info@atm.org.ng]
Envoyé : jeudi 8 mai 2008 13:53
À : bernard.teyssou@orange.fr
Objet : Your Atm Card
OFFICE OF THE SENATE HOUSE
FEDERAL REPUBLIC OF NIGERIA
COMMITTEE ON FOREIGN PAYMENT
(RESOLUTION PANEL ON CONTRACT PAYMENT)
IKOYI-LAGOS NIGERIA
Our Ref: FGN /SNT/STB
Your Ref.
THIS IS TO OFFICIALLY INFORM YOU THAT WE HAVE VERIFIED YOUR
INHERITANCE FILE AND FOUND OUT THAT WHY YOU HAVE NOT RECEIVED YOUR
PAYMENT IS BECAUSE YOU HAVE NOT FULFILLED THE OBLIGATIONS GIVEN TO
YOU IN RESPECT OF YOUR CONTRACT/INHERITANCE PAYMENT.
RIGHT NOW WE HAVE ARRANGED YOUR PAYMENT THROUGH OUR SWIFT CARD
PAYMENT CENTER ASIA PACIFIC THAT IS THE LATEST INSTRUCTION FROM MR.
PRESIDENT, UMARU YAR'ADUA (GCFR) FEDERAL REPUBLIC OF NIGERIA AND FBI.
THIS CARD CENTER WILL SEND YOU AN ATM CARD VALUED AT{USD 6.8 MILLION}
WHICH YOU WILL USE TO WITHDRAW YOUR MONEY IN ANY ATM MACHINE IN ANY
PART OF THE WORLD, BUT THE MAXIMUM IS FIVE THOUSAND DOLLARS PER
DAY, SO IF YOU LIKE TO RECEIVE YOUR FUND THIS WAY PLEASE LET US KNOW
BY CONTACTING THE INTERNATIONAL MONETARY FUNDS DEPARTMENT CARD
PAYMENT CENTER.
MR KEN ODEY.
EMAIL ADDRESS;atm.office02@yahoo.com.hk
atm_payout02@hotmail.com
PHONENUMBER; +2348039175283.
AND ALSO SEND THE FOLLOWING INFORMATION:
1. YOUR FULL NAME
2. PHONE AND FAX NUMBER
3. ADDRESS WERE YOU WANT THEM TO SEND HE ATM CARD
4. YOUR AGE AND CURRENT OCCUPATION
KINDEST REGARDS,
MR. Ellias Green.
SENATE PRESIDENT.