An
Email with the Subject "Fw: HELLO." was
received in one of Scamdex's honeypot email accounts on Wed, 17 Jun 2009 15:29:01 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Arthur Luna <aluna831@sbcglobal.net>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
nigeriabankchequecontactnumbersaccountglobalpaymentfund transfercertifypaidmailbank central bank will security mr. williams anyaoku,years old
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Wed, 17 Jun 2009 15:29:01 -0700
[received:] => Array
(
[0] => from web82801.mail.mud.yahoo.com ([68.142.201.94])by fire.newsblaze.com with smtp (Exim 4.69)(envelope-from )id 1MH3cl-00083a-1Gfor scams@scamdex.com; Wed, 17 Jun 2009 15:29:01 -0700
[1] => (qmail 96318 invoked by uid 60001); 17 Jun 2009 22:28:38 -0000
[2] => from [76.213.207.245] by web82801.mail.mud.yahoo.com via HTTP; Wed, 17 Jun 2009 15:28:38 PDT
)
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=sbcglobal.net; s=s1024; t=1245277718; bh=lzHZMo49WksjHV0pYLJS+GEEfm4kaSD+IUH/1mfJTgY=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=a6RGn+GApDWmXyZvI3/KzED1gYAcbzRVHsBH88CY3GI6ZCpajdM3PjZz8EIcC/DMsZ35ZAW5+bJiP7u6fTwZy5Qq4T4RZ6HAXi6+ysJCRLnFeh3Ly7HYbILAYBvQavcCqd1zkhIWp60CQ0wseUQzCPOezWt6rm5WZhQukkPbTjM=
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=sbcglobal.net; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=L4XgBvhqyWX5P/roQWRtGBpOXP/7wAMWhrrYCQnZ78QodZLioNTJoldIrp8dXtuh72froQUmfUSyhCbKeRwICiEU0xjHko02Zn9L/Qm9oLj8B/jRzF5Hq8rBC8+YcbaMuehpfApm68bNi9KQ4KACJr6Y/6RFfbMBTdK51E8U5A4=;
[message-id:] => <707491.96294.qm@web82801.mail.mud.yahoo.com>
[x-ymail-osg:] => BO11EGgVM1nSYR1osh93yhwW6V_lwDHyTcOhnvvnKWpJxTDosg.QwNLBSZRwDV1UFGC.xarHwZgxQ4w0ZwlSaeCBEk3QnSJoT22klHSGsY9g7KzSBzS9Rmetfw6j.7CF3mJq2LmHmEpwPLjX3X5vwuXkby1adAAr_5fBvSHUe1iBNnUkLtqqZKtAZftxanOAYHyp.9CXKmLGp6a.bqLrLPhw_PKhVAbAgBdmDDCdDEandGLGdXv3J8Lv3HwJpzKiLIh1dszW0t0_oExy4dmM6H5vUfqo86UzqEpxv1SC83YBbxHhz8HsS.v1Dg92je5kcQFutjhc1059a1EwVe5VaO2C_B_fCA--
[x-mailer:] => YahooMailClassic/5.4.12 YahooMailWebService/0.7.289.10
[date:] => Wed, 17 Jun 2009 15:28:38 -0700 (PDT)
[from:] => Arthur Luna
[subject:] => Fw: HELLO.
[to:] => spam@uce.gov, fraud@yvcu.org, scams@scamdex.com, reportphishing@antiphishing.org
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1970914748-1245277718=:96294"
[x-spam-status:] => No, score=-3.2
[x-spam-score:] => -31
[x-spam-bar:] => ---
[x-spam-flag:] => NO
[x-scamdex-scores:] => S:43 P:37 A:42 L:42 E:39 G:35
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 43
[x-scamdex-totscore:] => 238
[x-scamdex-kw:] => transfer,account,bank,contact,fund,global,nigeria,numbers,paid,payment,report,service,won
[x-scamdex-em:] => fraud@yvcu.org,office018009@aim.com,reportphishing@antiphishing.org,spam@uce.gov
[x-scamdex-dir:] => D
[x-scamdex-id:] => D1245277741.H224262P31200
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
--- On Wed, 6/17/09, ATTENTION <office018009@aim.com> wrote:
--- On Wed, 6/17/09, ATTENTION <office018009@aim.com> wrote:
From: ATTENTION <office018009@aim.com> Subject: HELLO. To: Date: Wednesday, June 17, 2009, 5:58 PM
ATTENTIONâââ.
I am Mr. Williams Anyaoku, a computer scientist with Central Bank of Nigeria. I am 47 years old, just started work with the C.B.N. I came across your payment file which is marked X and your released disk painted RED. I took time to study it and found out that you have paid VIRTUALLY all fees and certificates but the fund has not yet been transferred to you.
The most annoying thing is that, they cannot tell you the truths that on no account will they ever release the fund to you; instead they let you spend more money unnecessary. I do not intend to work here all the days of my life, I can release this fund if you can certify me of my security, and how I can run away from Nigeria because if I make this transfer and stay here, I will be seriously in trouble and my life will be in danger.
Please this is like a mafia setting in Nigeria; you may not understand it because you are not a
Nigerian. The only thing I will use to transfer this fund is a special HARD DISK, we call it HD80.1.i GIG USB. I will need two of it, I will use one to recopy your cheque/draft informationâs, destroy the previous one, punch the computer to reflect in your account within 24 banking hours.
I will clean up the tracer and destroy your file so that no one will trace how I did the transfer, after which I will run away from Nigeria to meet you. If you are interested, do get in touch with me on my Email: You should send to me your contact Tel/Fax numbers for easy communication and also re-confirm to me your informationâs and address details. So that there won't be any mistake.