An
Email with the Subject "Your Payment Ref: Shell/003/3RD/NWB/10-09" was
received in one of Scamdex's honeypot email accounts on Wed, 02 Dec 2009 01:55:30 -0800
and has been classified as a Generic Scam Email.
The sender shows as Sunil Hariyani <sunil.hariyani@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
(51791234560 atm 8 million usdshellexpresscreditcontactwinclaimsclaim millioncourierpaymentmaildeliveryusdhariyani@gmail.competercollins@live.com(atm card number;(5179123...(rev.petercollins@live.com)(private number:+23481319...
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Wed, 02 Dec 2009 01:55:30 -0800
[received:] => Array
(
[0] => from mail-pw0-f81.google.com ([209.85.160.81])by fire.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1NFlvh-00077B-PGfor scams@scamdex.com; Wed, 02 Dec 2009 01:55:30 -0800
[1] => by pwi1 with SMTP id 1so3474pwi.0 for ; Wed, 02 Dec 2009 01:55:22 -0800 (PST)
[2] => by 10.141.51.5 with SMTP id d5mr471479rvk.172.1259747719651; Wed, 02 Dec 2009 01:55:19 -0800 (PST)
)
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type; bh=jNN9OL4ufrqhpWLi036BRN4XGAvlfsyet7iveeJHTDg=; b=cXIk5+h04SlQQBTuvmzYMy8QPJbq/a1U8bl9ifqiPdEkSXG/eLO61TbvuD5pPahD/X V1c11jd88OGBAJe+IQfliF1YhGphmbrT9i+CPNejIqv91dQInqPUcVkzLqoFnNjGDb7A Xjr0PzlFQWtA4srf2qXhx4Abp4JLS4ef4p1dI=
[domainkey-signature:] => a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=gQ/Q2YTE21BTg+GxmJ5y7R9Pnf29HYDsuTJ6vxY++G+0S7oQ8Rs+/SzerE4q/gZqyT 7J0mGbfaNv4yihdLUQxR04gdwrS1u5KEEjQNzyF0pqCApaw6cTxmrV7jXMtuLIZzqf5O W1z1jsqBhl6+IdR4t0n8Ys1ffQN6EALtiFFI0=
[mime-version:] => 1.0
[in-reply-to:] => <25441044.41291259666280517.JavaMail.root@smtp>
[references:] => <25441044.41291259666280517.JavaMail.root@smtp>
[date:] => Wed, 2 Dec 2009 15:25:19 +0530
[message-id:] =>
[subject:] => Your Payment Ref: Shell/003/3RD/NWB/10-09
[from:] => Sunil Hariyani
[to:] => scams
[content-type:] => multipart/alternative; boundary=000e0cd1512656214c0479bbdfdb
[x-spam-status:] => No, score=-3.3
[x-spam-score:] => -32
[x-spam-bar:] => ---
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
---------- Forwarded message ---------- From: Senator David Mark<redegoias@seplan.go.gov.br>
Date: 2009/12/1 Subject: Your Payment Ref: Shell/003/3RD/NWB/10-09 To:
-- REF:FRN/ATM/882 YOUR REF:CLAIMS/ATM/882
This is to officially inform you that(ATM Card Number;(5179123456789120) has been accredited in
your favor.Your Personal Identification Number is 882.The ATM Card Value is $6.8 MILLION USD.You are advice to contact Rev.Peter Collins via Email (rev.petercollins@live.com) with the following
information's;
Full Name: Delivery Address: Phone Number: Country: OCCUPATION: SEX: Age:
Please Note that you are to pay the sum of $85 USD for the delivery of your ATM Card by Firstflight
Courier Express.
Best Regards, Senator David Mark. (Private Number:+2348131953690)
-- Sunil
---------- Forwarded message ---------- From: Senator David Mark <redegoias@seplan.go.gov.br>
Date: 2009/12/1 Subject: Your Payment Ref: Shell/003/3RD/NWB/10-09 To:
-- REF:FRN/ATM/882 YOUR REF:CLAIMS/ATM/882
This is to officially inform you that(ATM Card Number;(5179123456789120) has been accredited in
your favor.Your Personal Identification Number is 882.The ATM Card Value is $6.8 MILLION USD.You are advice to contact Rev.Peter Collins via Email (rev.petercollins@live.com) with the following
information's;
Full Name: Delivery Address: Phone Number: Country: OCCUPATION: SEX: Age:
Please Note that you are to pay the sum of $85 USD for the delivery of your ATM Card by Firstflight
Courier Express.
Best Regards, Senator David Mark. (Private Number:+2348131953690)