An
Email with the Subject "Fwd: WORLD BANK GROUP AND UNITED NATIONS APPROVAL PAYMENT VALUED $8.3M." was
received in one of Scamdex's honeypot email accounts on Sat, 15 Nov 2008 16:11:56 -0800
and has been classified as a Generic Scam Email.
The sender shows as RICROE@aol.com.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
-700-593-1404-762-419-8268 870 288 7323 870 288 7101foreignbankexpressmicrosoftcontactwinnationalawardaccountclaimpaymentswift transfermailbank bank account world bank nworld bank nominated bank address5) bank and bank nationstreasurydept1@gmai...nationstreasurydept1@gmai...wolleycitibank0997@gmail.comwolleycitibank0997@gmail....remmittanceremitttreasury(v121_r4.4)(mail02.syd.optusnet.com....[41.211.227.51] (may be f...(authenticated sender sap...(8.13.1/8.13.1)(if any) position and add...(511) mr andrew wolley
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Sat, 15 Nov 2008 16:11:56 -0800
[received:] => Array
(
[0] => from imo-m24.mx.aol.com ([64.12.137.5])by gogol.o7e.net with esmtp (Exim 4.69)(envelope-from )id 1L1VF5-0003Rg-HIfor scams@scamdex.com; Sat, 15 Nov 2008 16:11:56 -0800
[1] => from RICROE@aol.comby imo-m24.mx.aol.com (mail_out_v39.1.) id j.cbd.315f5d1f (29673);Sat, 15 Nov 2008 19:11:55 -0500 (EST)
)
[from:] => RICROE@aol.com
[x-mailer:] => Array
(
[0] =>
[1] => AOL 9.1 sub 5000
)
[date:] => Sat, 15 Nov 2008 19:11:55 EST
[subject:] => Fwd: WORLD BANK GROUP AND UNITED NATIONS APPROVAL PAYMENT VALUED $8.3M.
[to:] => abuse@un.org, abuse@gmail.com, reportphishing@antiphishing.org, enforcement@sec.gov, phishing-report@us-cert.gov, scams@scamdex.com, pirt@castlecops.com
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="-----------------------------1226794315"
[x-spam-flag:] => Array
(
[0] => NO
[1] => NO
)
[x-spam-status:] => No, score=3.6
[x-spam-score:] => 36
[x-spam-bar:] => +++
[message-id:] => REIDs3x1239839810.M590920P32690V-S3X
[x-scamdex-scores:] => S:69 P:64 A:67 L:67 E:65 G:60
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 69
[x-scamdex-totscore:] => 392
[x-scamdex-kw:] => 000.000,account,award,bank,citi,citibank,claim,contact,foreign,fund,mobil,national,password,payment,report,sent,winn
[x-scamdex-em:] => RICROE@aol.com,_sapphire_1_05@optusnet.com.au,abuse@gmail.com,abuse@un.org,dept1@gmail.com,enforcement@sec.gov,mAG06vsK006899@mail02.syd.optu,nationstreasurydept1@gmail.com,nationstreasurydept1@gmail.comS,phishing-report@us-cert.gov,pirt@castlecops.com,reportphishing@antiphishing.org,sapphire_1_05@optusnet.com.au,unitednationspayment@un.org,unitednationspayment@un.orgR,wolleycitibank0997@gmail.com,wolleycitibank0997@gmail.comS
[x-scamdex-dir:] => C
[x-scamdex-id:] => C1239839810.M590920P32690V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Return-Path: <unitednationspayment@un.org> Received:
from rly-mf08.mx.aol.com (rly-mf08.mail.aol.com [172.20.29.178]) by
air-mf04.mail.aol.com (v121_r4.4) with ESMTP id MAILINMF041-974491f6502157; Sat,
15 Nov 2008 19:11:06 -0500 Received: from mail02.syd.optusnet.com.au
(mail02.syd.optusnet.com.au [211.29.132.183]) by rly-mf08.mx.aol.com (v121_r4.4)
with ESMTP id MAILRELAYINMF082-974491f6502157; Sat, 15 Nov 2008 19:10:45
-0500 Received: from User (51.227.211.41.client51.directonpc.com
[41.211.227.51] (may be forged)) (authenticated sender sapphire_1_05@optusnet.com.au) by
mail02.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id
mAG06vsK006899; Sun, 16 Nov 2008 11:07:16 +1100 Message-Id: <200811160007.mAG06vsK006899@mail02.syd.optusnet.com.au> Reply-To:
<united.nationstreasurydept1@gmail.com> From:
"SIR FRANK PETERSON"<unitednationspayment@un.org> Subject:
WORLD BANK GROUP AND UNITED NATIONS APPROVAL PAYMENT VALUED $8.3M. Date: Sat,
15 Nov 2008 16:10:23 -0800 MIME-Version: 1.0 Content-Type:
text/plain; charset="Windows-1251" Content-Transfer-Encoding:
7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft
Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2600.0000 X-AOL-IP:
211.29.132.183 X-AOL-SCOLL-SCORE:0:5:73531632:93952408 X-AOL-SCOLL-URL_COUNT:0
Return-Path: <unitednationspayment@un.org> Received:
from rly-mf08.mx.aol.com (rly-mf08.mail.aol.com [172.20.29.178]) by
air-mf04.mail.aol.com (v121_r4.4) with ESMTP id MAILINMF041-974491f6502157; Sat,
15 Nov 2008 19:11:06 -0500 Received: from mail02.syd.optusnet.com.au
(mail02.syd.optusnet.com.au [211.29.132.183]) by rly-mf08.mx.aol.com (v121_r4.4)
with ESMTP id MAILRELAYINMF082-974491f6502157; Sat, 15 Nov 2008 19:10:45
-0500 Received: from User (51.227.211.41.client51.directonpc.com
[41.211.227.51] (may be forged)) (authenticated sender sapphire_1_05@optusnet.com.au) by
mail02.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id
mAG06vsK006899; Sun, 16 Nov 2008 11:07:16 +1100 Message-Id: <200811160007.mAG06vsK006899@mail02.syd.optusnet.com.au> Reply-To:
<united.nationstreasurydept1@gmail.com> From:
"SIR FRANK PETERSON"<unitednationspayment@un.org> Subject:
WORLD BANK GROUP AND UNITED NATIONS APPROVAL PAYMENT VALUED $8.3M. Date: Sat,
15 Nov 2008 16:10:23 -0800 MIME-Version: 1.0 Content-Type:
text/plain; charset="Windows-1251" Content-Transfer-Encoding:
7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft
Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2600.0000 X-AOL-IP:
211.29.132.183 X-AOL-SCOLL-SCORE:0:5:73531632:93952408 X-AOL-SCOLL-URL_COUNT:0
From: unitednationspayment@un.org Reply-to:
united.nationstreasurydept1@gmail.com Sent: 11/15/2008 7:11:09 P.M. Eastern
Standard Time Subj: WORLD BANK GROUP AND UNITED NATIONS APPROVAL PAYMENT
VALUED $8.3M.
Our Ref: CITI/BKL/STB Your
Ref: ============================================================================================== WORLD
BANK GROUP AND UNITED NATIONS ORGANIZATION do hereby give this irrevocable
approval order with Release Code: GNC/3480/02/00 in your favor for your
contract entitlement/award winning payment with the UNITED NATIONS to your
nominated bank account. Now your new Payment,United nation Approval
No;UN5685P,White House Approved No:WH44CV, Reference No.-35460021, Allocation
No: 674632 Password No: 339331 , Pin Code No: 55674 and your Certificate of
Merit Payment No : 103 , Released Code No: 0763; Immediate Citibank Telex
confirmation No: -1114433 ; Secret Code No: XXTN013, Having received these
vital payment number , therefore You are qualified now to received and confirm
Your payment with the United Nations immediately within the next
72hrs.
As a matter of fact, you are required to Deal and Communicate
only with MR ANDREW WOLLEY, DIRECTOR INTERNATIONAL REMMITTANCE CITIBANK OF
UNITED KINGDOM, with the help and monitory team from the CITIBANK OF NEW YORK
which is our official remitting bank, Committee On Foreign Payment Matters in
United Nations, has look up to make sure you receive your fund valued $8.3m.
So contact: MR ANDREW WOLLEY on his contact information,Direct Telephone
Number: +44-700-593-1404, +44-762-419-8268 Fax Number:+44 870 288 7323,
Email: andrew.wolleycitibank0997@gmail.com for immediate release
of your contract/inheritance/Award Winning claim Be informed that you are not
allowed to correspond with any person or office anymore, You are required to
send bellow information for your transfer.
1) YOUR FULL NAME: 2)
ADDRESS,CITY,STATE AND COUNTRY. 3) PHONE,FAX AND MOBILE 4) COMPANY
NAME(IF ANY) POSITION AND ADDRESS 5) BANK DETAILS,ACCOUNT NO,ROUTING
NO,/SWIFT CODE AND BANK ADDRESS. 6) PROFESSION,AGE AND MARITAL STATUS 7)
COPY OF YOUR INT'L PASSPORT/DRIVERS LICENSE
NOTE: YOUR PERSONAL
CONTACT/COMMUNICATION CODE WITH CITIBANK IS(511),YOU ARE ARE ADVICE TO SEND
YOU FULL BANKING INFORMATION TO THE CITIBANK OF LONDON INTERNATIONAL
REMMITTANCE DIRECTOR HEADED BY MR ANDREW WOLLEY AND MAKE SURE YOU SPEAK WITH
HIM, WITH YOUR NEW PAYMENT CODE FOR RELEASE OF YOUR PAYMENT AND SEND HIM ALL
YOUR BANKING INFORMATION NOW. CONTACT CODE(511).