An
Email with the Subject "REPORT FOR 07-11-2007-09" was
received in one of Scamdex's honeypot email accounts on Wed, 11 Jul 2007 10:47:13 -0700
and has been classified as a Generic Scam Email.
The sender shows as "John Fitchpatrick" <fitch19461@verizon.net>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
nigerialagosmusa07071110314350678.1184 atm million dollarsmillion foreigndiplomaticbankgooglecontactwinone millioncourierpayment transfermaildeliverycontractorbank sharediplomadollar central bank apex bank spamgoogle.comyahoo.com(s) or office(s)[64.233.162.181](bad syntax)(ehlo vms169127pub.verizo...([64.233.162.181])(built apr 3 2006))(orcpt fitch19461@verizon...(cdt)(pdt)(pdt)date: wed, 11 jul 20...[spam]
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submissions@scamdex.com
[delivery-date:] => Wed, 11 Jul 2007 10:47:13 -0700
[received:] => Array
(
[0] => from [209.73.179.141] (helo=smtp103.vzn.mail.dcn.yahoo.com)by bartok.o7e.net with smtp (Exim 4.63)(envelope-from )id 1I8gHR-0008I0-Ocfor submissions@scamdex.com; Wed, 11 Jul 2007 10:47:13 -0700
[1] => (qmail 60730 invoked from network); 11 Jul 2007 17:47:11 -0000
[2] => from unknown (HELO fitchd7qfmyei1) (fitch19461@verizon.net@71.127.133.70 with login) by smtp103.vzn.mail.dcn.yahoo.com with SMTP; 11 Jul 2007 17:47:09 -0000
)
[x-ymail-osg:] => .qz7.0gVM1nkfdNudQ.FZN8.gVbAuR7UpIPJLD715VFn5dG16SuHWDbddV9KAU4hSocCrptWnWDTMfPI_0TSjDWa3z3N1jbvxGxtoWIRdGzD5MQQ3FwWXYNqHLLScVk-
[x-mailer:] => Array
(
[0] => <015901c7c3e3$81f4b900$2f01a8c0@fitchd7qfmyei1>
[1] => Microsoft Outlook Express 6.00.2900.3138
)
[from:] => "John Fitchpatrick"
[to:] => "abuse - G-MAIL for AOL - GOOGLE SCAMS" ,"abuse NIGERIAN SCAMS"
[cc:] => "SUBMIT@ SCAMDEX" ,"SPAM@ UCE.GOV" ,"INFO@FCC.gov" ,"hostmaster @ARIN.NET" ,"FEDERAL FRAUD WATCH" ,
[subject:] => REPORT FOR 07-11-2007-09
[date:] => Wed, 11 Jul 2007 13:47:04 -0400
[mime-version:] => 1.0
[content-type:] => multipart/alternative;boundary="----=_NextPart_000_0156_01C7C3C1.FA48D4D0"
[x-priority:] => 3
[x-msmail-priority:] => Normal
[x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2900.3138
[message-id:] => REIDs3x1206928123.M845104P594V-S3X
[x-scamdex-scores:] => S:92 P:73 A:79 L:78 E:80 G:71
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 92
[x-scamdex-totscore:] => 473
[x-scamdex-kw:] => 000.000,account,bank,beneficiary,buy,card,contact,contractor,courier,diploma,diplomatic,dollars,finance,foreign,fund,general,lagos,login,million,national,nigeria,notification,paid,payment,report,sent,serial number,service,share
[x-scamdex-em:] => 0JL0002XEZD8GVJ4@vms169127.mail,INFO@FCC.gov,fa63427a070711103148589e86@mail.goog,fitch19461@verizon.net,fitch19461@verizon.netR,picasawebalbums-noreply@google.com,y@google.com
[x-scamdex-dir:] => E
[x-scamdex-id:] => E1206928123.M845104P594V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
X-Apparently-To: fitch19461@verizon.net via
216.252.111.10; Wed, 11 Jul 2007 10:32:10 -0700 X-Originating-IP: [64.233.162.181] Authentication-Results:
mta101.vzn.mail.mud.yahoo.com from=google.com; domainkeys=fail (bad syntax) Received: from
216.21.216.124 (EHLO vms169127pub.verizon.net) (206.46.169.127)
by mta101.vzn.mail.mud.yahoo.com with SMTP; Wed, 11 Jul 2007 10:32:09
-0700 Received: from nz-out-1112.google.com
([64.233.162.181]) by
vms169127.mailsrvcs.net (Sun Java System Messaging Server
6.2-6.01 (built Apr 3 2006)) with ESMTP id <0JL0002XEZD8GVJ4@vms169127.mailsrvcs.net>
for fitch19461@verizon.net
(ORCPT fitch19461@verizon.net);
Wed, 11 Jul 2007 12:31:56 -0500 (CDT) Received: by nz-out-1112.google.com with SMTP id 26so4778544nzz
for <fitch19461@verizon.net>; Wed, 11 Jul
2007 10:31:56 -0700 (PDT) Received: by 10.35.58.8 with SMTP id
l8mr3486498pyk.1184175116288; Wed, 11 Jul 2007 10:31:56 -0700
(PDT) Date: Wed, 11 Jul 2007 10:31:55 -0700 (PDT) From: Picasa Web Albums <picasawebalbums-noreply@google.com> Subject:
[SPAM]ATM CARD PAYMENT X-Originating-IP: [64.233.162.181] To: fitch19461@verizon.net Reply-to:
musa <musamurano@operamail.com> Message-id: <fa63427a070711103148589e86@mail.google.com> MIME-version:
1.0 Content-type:
multipart/related; boundary="----=_Part_18261_19350678.1184175115204" DKIM-Signature:
a=rsa-sha1; c=relaxed/relaxed;
d=google.com;
s=beta; h=domainkey-signature:received:message-id:date:from:reply-to:to:subject:mime-version:content-type; b=FhhaPYeRxhAevC2fF6QMSgqA7VVo5tF8kof4J2VtTu/Wsqt0+RXoRHcvhPDHALn1h2WnigrJUenMT8F4DPBFNw== DomainKey-Signature:
a=rsa-sha1; c=nofws; d=google.com;
s=beta; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type; b=rIYavt6bUmUiH2tSJUqjiLCcC78+sZEYwlDrV+5JDMMlWi2vzwh0ZuEao0j6ovi7niBUYAS6hi/xqpNsBnMA4g== X-MSKTag:
[SPAM] X-MSK: SF=0x20
View musa's Gallery
Message
from musa:
FROM
THE DESK OF DR MUSA MURANO, ATM PAYMENT DEPARTMENT CENTRAL BANK OF
NIGERIA TINUBU SQUARE LAGOS NIGERIA.
CBN/C/
REF:U/K9420X2/68 BATCH:074/05ZY369 UNDER SERIAL
NUMBER:2550
ATTN:BENEFICIARY,
THIS IS TO OFFICIALLY
INFORM YOU THAT THE FEDERAL GOVERNMENT OF NIGERIA HAS FINALISED WITH THE
CENTRAL BANK OF NIGERIA ( CBN ) TO PAY YOUR OVERDUE CONTRACT FUND THROUGH(
A T M) CARD.
THIS ATM CARD WHICH YOU WILL USE TO WITHDRAW YOUR
MONEY IN ANY ATM MACHINE IN ANY PART OF THE WORLD, BUT THE MAXIMUM IS ONE
THOUSAND DOLLARS PER DAY.
BASE ON THIS DEVELOPMENT YOU ARE URGED BY
THE AUTHORITY OF THIS OFFICE TO RECONFIRM THE FOLLOWING INFORMATION TO
US.
1.YOUR NAME 2.YOUR PRIVATE PHONE NUMBER 3.CONTRACT
AMOUNT AND 4.YOUR CORRECT MAILLING ADDRESS. 5.CONTACT ADDRESS,WITH
CITY,STATE AND COUNTRY.
NOTE THAT LOCAL BANKS OVER HERE WAS NOT
ALLOWED TO TRANSFER ANY MONEY ABOVE ONE MILLION DOLLARS( $ 1, 000.000: 00
) YOUR MONEY SHOULD BE PAID VIA CENTRAL BANK OF NIGERIA NOT FROM ANY OTHER
LOCAL BANK THE FINANCE MINISTRY HAS MADE EVERY NECESSARY ARRANGEMENT
CONCERNING THIS PAYMENT AND PAYMENT ADVICE HAS BEEN SENT TO THIS OFFICE TO
DISCHARGE DUTIES EFFECTIVELY.
DUE TO SOME SERIES OF COMPLAIN WE
GATHERED FROM FOREIGN CONTRACTORS ALL OVER THE WORLD REGARDING THE FOREIGN
PAYMENT,MANY FAKE GOVERNMENT OFFICERS ARE IMPERSONATING THE APEX BANK (CBN
) OFFICALS BY USING SUCH OFFICES,LIKE THE OFFICE OF THE GOVERNOR,OFFICE OF
THE PRESIDENCY, PAYMASTER GENERAL OF FEDERATION,SENATE COMMITTEE, DEBT
RECONCELLATION COMMITTEE, INTERNATIONAL REMITTANCE DEPT,FOREIGN OPERATION
DEPT ETC, CREATING AVENUE OF PAYMENT BY CASH DELIVERY THROUGH DIPLOMATIC
MEANS WHICH IS PROHIBITED WORLD WIDE BY UNITED NATIONS AS MONEY LAUNDRY.
THEY EVEN WENT TO THE EXTENT OF COLLECTING ALL SORT OF CHARGES
FROM FOREIGN CONTRACTORS ESPECIALLY THE DESPERATE ONES AND THEREBY
TARNISHING THE IMAGE OF OUR COUNTRY OVERSEAS THAT IS WHY MY COUNTRY WAS
RATED 2ND CURRUPT COUNTRY IN THE WORLD.
WE HAVE BEEN MANDATED TO
ISSUE OUT $15.MILLION AS PART PAYMENT FOR THIS FISCAL YEAR 2007.ALSO FOR
YOUR INFORMATION YOU HAVE TO STOP ANY FURTHER COMMINUCATION WITH ANY OTHER
PERSON(S) OR OFFICE(s).THIS IS TO AVOID ANY HITCHES IN FINALIZING YOUR
PAYMENT. CONDTIONS FOR THE DESPATCH OF THE A T M CARD:
(1) YOU
ARE TO PAY FOR THE COST OF DISPATCH WHICH IS U.S$550. (2) DISPATCH
THROUGH OUR GOVERNMENTAL DIPLOMATIC COURIER SERVICES ONLY.
FINALLY,IF THE ABOVE TWO CONDITIONS ARE ACCEPTABLE BY YOU, DO NOT
HESITATE TO CONTACT THIS OFFICE WITH YOUR REQUIRED INFORMATION STATED
ABOVE AND ALSO FOR MORE DETAILS CONCERNING YOUR ATM CARD DISPATCH
PAYMENT.
BEST REGARDS,
DR MUSA MURANO, ATM PAYMENT
DIRECTOR.
If
you are having problems viewing this email, copy and paste the following
into your browser: http://picasaweb.google.com/musamurano
To share
your photos or receive notification when your friends share photos, get your own free Picasa Web Albums
account.
BELOW IS THE ORIGINAL
EMAIL HEADER INFORMATION:
X-Apparently-To: fitch19461@verizon.net via
216.252.111.10; Wed, 11 Jul 2007 10:32:10 -0700 X-Originating-IP: [64.233.162.181] Authentication-Results:
mta101.vzn.mail.mud.yahoo.com from=google.com; domainkeys=fail (bad syntax) Received: from
216.21.216.124 (EHLO vms169127pub.verizon.net) (206.46.169.127)
by mta101.vzn.mail.mud.yahoo.com with SMTP; Wed, 11 Jul 2007 10:32:09
-0700 Received: from nz-out-1112.google.com
([64.233.162.181]) by
vms169127.mailsrvcs.net (Sun Java System Messaging Server
6.2-6.01 (built Apr 3 2006)) with ESMTP id <0JL0002XEZD8GVJ4@vms169127.mailsrvcs.net>
for fitch19461@verizon.net
(ORCPT fitch19461@verizon.net);
Wed, 11 Jul 2007 12:31:56 -0500 (CDT) Received: by nz-out-1112.google.com with SMTP id 26so4778544nzz
for <fitch19461@verizon.net>; Wed, 11 Jul
2007 10:31:56 -0700 (PDT) Received: by 10.35.58.8 with SMTP id
l8mr3486498pyk.1184175116288; Wed, 11 Jul 2007 10:31:56 -0700
(PDT) Date: Wed, 11 Jul 2007 10:31:55 -0700 (PDT) From: Picasa Web Albums <picasawebalbums-noreply@google.com> Subject:
[SPAM]ATM CARD PAYMENT X-Originating-IP: [64.233.162.181] To: fitch19461@verizon.net Reply-to:
musa <musamurano@operamail.com> Message-id: <fa63427a070711103148589e86@mail.google.com> MIME-version:
1.0 Content-type:
multipart/related; boundary="----=_Part_18261_19350678.1184175115204" DKIM-Signature:
a=rsa-sha1; c=relaxed/relaxed;
d=google.com;
s=beta; h=domainkey-signature:received:message-id:date:from:reply-to:to:subject:mime-version:content-type; b=FhhaPYeRxhAevC2fF6QMSgqA7VVo5tF8kof4J2VtTu/Wsqt0+RXoRHcvhPDHALn1h2WnigrJUenMT8F4DPBFNw== DomainKey-Signature:
a=rsa-sha1; c=nofws; d=google.com;
s=beta; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type; b=rIYavt6bUmUiH2tSJUqjiLCcC78+sZEYwlDrV+5JDMMlWi2vzwh0ZuEao0j6ovi7niBUYAS6hi/xqpNsBnMA4g== X-MSKTag:
[SPAM] X-MSK: SF=0x20