An
Email with the Subject "Regarding Your Package" was
received in one of Scamdex's honeypot email accounts on Wed, 25 Jun 2008 07:18:18 -0400
and has been classified as a Generic Scam Email.
The sender shows as Online Update <xpresscourier55@hotmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
africabpbankexpresscontactdepositedcourierpaymentservicepaidonlinepackagemaildeliverybank gbppound will security(45pounds) mr. james evansnmr. terry peterson
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[received:] => Array
(
[0] => from rly-ma05.mx.aol.com (rly-ma05.mail.aol.com [172.20.116.49]) by air-ma08.mail.aol.com (v121.5) with ESMTP id MAILINMA081-8ab486229712cd; Wed, 25 Jun 2008 07:18:18 -0400
[1] => from relay01.ispone.net.au (relay01.ispone.net.au [124.254.72.68]) by rly-ma05.mx.aol.com (v121.5) with ESMTP id MAILRELAYINMA055-8ab486229712cd; Wed, 25 Jun 2008 07:18:11 -0400
[2] => from extras01.ispone.net.au (extras01.ispone.net.au [124.254.72.71])by relay01.ispone.net.au (8.13.6/8.13.6/Debian-1) with ESMTP id m5PBGcUj007808;Wed, 25 Jun 2008 21:16:39 +1000
[3] => by extras01.ispone.net.au (Postfix, from userid 33)id D12ABE80ED; Wed, 25 Jun 2008 20:17:14 +1000 (EST)
[4] => from 192.168.1.4 (192.168.1.4 [192.168.1.4]) bywebmail.tadaust.org.au (Horde MIME library) with HTTP; Wed, 25 Jun 200820:17:11 +1000
)
[message-id:] => <20080625201711.s44eik4rg4is4w80@webmail.tadaust.org.au>
[date:] => Wed, 25 Jun 2008 20:17:11 +1000
[from:] => Online Update
[reply-to:] => fedexpress23@hotmail.com
[to:] => undisclosed-recipients: ;
[subject:] => Regarding Your Package
[mime-version:] => 1.0
[content-type:] => text/plain;charset=ISO-8859-1;DelSp="Yes";format="flowed"
[content-disposition:] => inline
[content-transfer-encoding:] => quoted-printable
[user-agent:] => Internet Messaging Program (IMP) H3 (4.1.6)
[x-webmail-userip:] => 81.199.176.207
[x-webmail-userlogin:] => ronwood@tadaust.org.au
[x-webmail-userbrowser:] => Opera/9.25 (Windows NT 5.1; U; en)
[x-aol-ip:] => 124.254.72.68
[x-aol-scoll-authentication:] => Array
(
[0] => listenair ; SPF_helo : n
[1] => listenair ; SPF_822_from : ~
)
[x-mailer:] => Unknown (No Version)
[x-scamdex-scores:] => S:50 P:53 A:55 L:45 E:53 G:42
[x-scamdex-classtype:] => A
[x-scamdex-classscore:] => 55
[x-scamdex-totscore:] => 298
[x-scamdex-kw:] => africa,agent,bank,contact,courier,inc.,internet,login,package,paid,payment,service,user
[x-scamdex-em:] => fedexpress23@hotmail.com,ronwood@tadaust.org.au
[x-scamdex-dir:] => C
[x-scamdex-id:] => C1232241481.M412155P20438V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Bank Draft of 500.000.00 GBP, but I did not hear from you since that
I traveled out of the country for a 1 Month Course and I will not come
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:::::
What you have to do now is to contact the FedEx Delivery as soon as possible
expiring date. For your information, I have paid for the delivery
deliver your Draft direct to your postalAddress in your country is
of the Delivery Company so far.Again, don't be deceived by anybody to
able to contact me for the payment.You have to contact the FedEx
information below;
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Contact Person: Mr. James Evans
E-mail:fedexpress23@hotmail.com
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Finally, make sure that you reconfirm your Postal address()
Delivery and ask them to give you the tracking number to enable you
address.Let me repeat again, try to contact them as soon as you
their security keeping fee of 45pounds for their immediate action.Note
that the package will be released and the tracking number would be
Do have a nice day.
Yours Faithfully,
Mr. Terry Peterson
Greetings!
I have been waiting for you since to contact me for your Confirmable
Bank Draft of 500.000.00 GBP, but I did not hear from you since that
time.
Then I went and deposited the Draft with FedEx Delivery, West Africa,
I traveled out of the country for a 1 Month Course and I will not come
back till end of july.
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:::::
What you have to do now is to contact the FedEx Delivery as soon as possible
to know when they will deliver your package to you because of the
expiring date. For your information, I have paid for the delivery
charges,the money you willsend to the FedEx Delivery courier to
deliver your Draft direct to your postalAddress in your country is
(45pounds) only being Security Keeping Fee
of the Delivery Company so far.Again, don't be deceived by anybody to
pay money except 45pounds.I am on a course in which they will not be
able to contact me for the payment.You have to contact the FedEx
Delivery service now for the delivery of your Draft with this
information below;
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Contact Person: Mr. James Evans
E-mail:fedexpress23@hotmail.com
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Finally, make sure that you reconfirm your Postal address()
and Direct telephone number to them again to avoid any mistake on the
Delivery and ask them to give you the tracking number to enable you
track your package When it arrive, and know when it will get to your
address.Let me repeat again, try to contact them as soon as you
receive this mail to avoid any further delay and remember to pay them
their security keeping fee of 45pounds for their immediate action.Note
that it is when you must have pay the 45pounds for the security fee
that the package will be released and the tracking number would be
given to you.
Do have a nice day.
Yours Faithfully,
Mr. Terry Peterson
