An
Email with the Subject "Fwd: Confirmable Bank Draft of $800.000.00" was
received in one of Scamdex's honeypot email accounts on Tue, 12 Feb 2008 08:12:58 -0800
and has been classified as a Generic Scam Email.
The sender shows as RICROE@aol.com.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
belloafrica 802 056 8429bankchequecontactwinnationalawardsdepositedcourierservice artsentpaidmailpackagedeliverybank dollar confirmable bank webmailricroe@aol.combdonna200@yahoo.co will securityyahoo.cobeloved($350.00 u.sdollars only)(234)dear
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Tue, 12 Feb 2008 08:12:59 -0800
[received:] => Array
(
[0] => from imo-d21.mx.aol.com ([205.188.144.207])by bartok.o7e.net with esmtp (Exim 4.68)(envelope-from )id 1JOxka-0007l6-DOfor scams@scamdex.com; Tue, 12 Feb 2008 08:12:58 -0800
[1] => from RICROE@aol.comby imo-d21.mx.aol.com (mail_out_v38_r9.3.) id f.c66.291010bf (41812);Tue, 12 Feb 2008 11:12:07 -0500 (EST)
)
[from:] => RICROE@aol.com
[date:] => Tue, 12 Feb 2008 11:12:07 EST
[subject:] => Fwd: Confirmable Bank Draft of $800.000.00
[to:] => reportphishing@antiphishing.org, enforcement@sec.gov, phishing-report@us-cert.gov, scams@scamdex.com, reports@banksafeonline.org.uk, pirt@castlecops.com, spam@uce.gov
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="-----------------------------1202832727"
[x-mailer:] => Unknown sub 34
[x-spam-flag:] => Array
(
[0] => NO
[1] => NO
)
[x-spam-status:] => No, score=1.5
[x-spam-score:] => 15
[x-spam-bar:] => +
[message-id:] => REIDs3x1206928129.M620664P594V-S3X
[x-scamdex-scores:] => S:63 P:54 A:60 L:59 E:61 G:53
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 63
[x-scamdex-totscore:] => 350
[x-scamdex-kw:] => 000.000,africa,artist,award,bank,contact,courier,dollars,inc.,national,package,paid,report,safe,sent,service,united states dollar
[x-scamdex-em:] => RICROE@aol.com,bdonna200@yahoo.co.uk,bdonna200@yahoo.co.ukRe,enforcement@sec.gov,fedexserv2@webmail.co.za,fedexserv2@webmail.co.zaSe,fedexserv2@webmail.co.zaTe,phishing-report@us-cert.gov,pirt@castlecops.com,reportphishing@antiphishing.org,reports@banksafeonline.org.uk,spam@uce.gov
[x-scamdex-dir:] => E
[x-scamdex-id:] => E1206928129.M620664P594V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
From: bdonna200@yahoo.co.uk Reply-to: fedexserv2@webmail.co.za Sent:
2/11/2008 11:35:18 P.M. Eastern Standard Time Subj: Confirmable Bank Draft
of $800.000.00
Dear Beloved,
I have been waiting for
you since to contact me for your Confirmable Bank Draft of $800.000.00
United States Dollars, but I did not hear from you since that time. Then I
went and deposited the Draft with FEDEX COURIER SERVICE, West Africa, I
travelled out of the country for a 3 Months Course and I will not come back
till end of April. What you have to do now is to contact the FEDEX COURIER
SERVICE as soon as possible to know when they will deliver your package to
you because of the expiring date. For your information, I have paid for the
delivering Charge, Insurance premium and Clearance Certificate Fees of the
Cheque showing that it is not a Drug Money or meant to sponsor Terrorist
attack in your Country.
The only money you will send to the FEDEX
COURIER SERVICE to deliver your Draft direct to your postal Address in your
country is ($350.00 U.S Dollars only) being Security Keeping Fee of the
Courier Company so far. Again, don't be deceived by anybody to pay any
other money except $350.00US Dollars.
I would have paid that but
they said no because they don't know when you will contact them and in case
of demurrage.You have to contact the FEDEX COURIER SERVICE now for the
delivery of your Draft with this information bellow;
Finally, make
sure that you reconfirm your Postal address and Direct telephone number to
them again to avoid any mistake on the Delivery and ask them to give you
the tracking number to enable you track your package over there and know
when it will get to your address.
Let me repeat again, try to contact them as soon as you receive
this mail to avoid any further delay and remember to pay them their
Security Keeping fee of $350.00 US Dollars for their immediate action. You
should also let me know through email as soon as you receive your
Draft.
Yours Faithfully, Mr. Donna
Brown
The year's hottest artists on the red carpet at the Grammy Awards. AOL Music takes you there.
