Scam Email: GOOD TO CONTACT YOU THIS DAY I AM THE NEWLY ELECTED CENTRAL BANK REMITTANCEOFFICER THAT TRANSFERRED YOUR FUND LAST NIGHT AND ON ASSUMPTION TO THISOFFICE I HAVE SEEN YOUR UNTREATED TRANSACTION FILE AND ALSO SEEN THERECORDS OF ALL YOUR PAYMENT MADE IN THE from Lamido [date added: 2016-07-20 20:04:36]

The Scamdex Scam Email Archive

Subject: GOOD TO CONTACT YOU THIS DAY I AM THE NEWLY ELECTED CENTRAL BANK REMITTANCEOFFICER THAT TRANSFERRED YOUR FUND LAST NIGHT AND ON ASSUMPTION TO THISOFFICE I HAVE SEEN YOUR UNTREATED TRANSACTION FILE AND ALSO SEEN THERECORDS OF ALL YOUR PAYMENT MADE IN THE

From: "Lamido" <dstumpy85@aol.com>

Date: Sat, 06 Jul 2013 06:01:19 -0700

Category: Generic

Date Added: 2016-07-20 20:04:36

An Email with the Subject "GOOD TO CONTACT YOU THIS DAY I AM THE NEWLY ELECTED CENTRAL BANK REMITTANCEOFFICER THAT TRANSFERRED YOUR FUND LAST NIGHT AND ON ASSUMPTION TO THISOFFICE I HAVE SEEN YOUR UNTREATED TRANSACTION FILE AND ALSO SEEN THERECORDS OF ALL YOUR PAYMENT MADE IN THE " was received in one of Scamdex's honeypot email accounts on Sat, 06 Jul 2013 06:01:19 -0700 and has been classified as a Generic Scam Email. The sender shows as "Lamido" <dstumpy85@aol.com>.

The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be added to their email address lists for spam purposes.

Scam TagCloud

bello bank credit union credit western contact account records transaction payment transfer fund mail bank bank account share central bank this bank centralbankofnigtelexwird... dstumpy85@aol.com yahoo.com remittance

NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scams@scamdex.com [delivery-date:] => Sat, 06 Jul 2013 06:01:19 -0700 [received:] => Array ( [0] => from oms-dc04.r1000.mx.aol.com ([205.188.167.69]:46270)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1UvS71-0004CQ-Jmfor scams@scamdex.com; Sat, 06 Jul 2013 06:01:19 -0700 [1] => from mtaout-da06.r1000.mx.aol.com (mtaout-da06.r1000.mx.aol.com [172.29.51.134])by oms-dc04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id EEB57380003F2;Sat, 6 Jul 2013 09:01:14 -0400 (EDT) [2] => from POCA-DC1.TivSchools.com (unknown [158.123.153.210])(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))(No client certificate requested)by mtaout-da06.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPSA id 3D347E00009B;Sat, 6 Jul 2013 09:01:14 -0400 (EDT) ) [content-type:] => multipart/alternative; boundary="===============0262525074==" [mime-version:] => 1.0 [subject:] => GOOD TO CONTACT YOU THIS DAY I AM THE NEWLY ELECTED CENTRAL BANK REMITTANCEOFFICER THAT TRANSFERRED YOUR FUND LAST NIGHT AND ON ASSUMPTION TO THISOFFICE I HAVE SEEN YOUR UNTREATED TRANSACTION FILE AND ALSO SEEN THERECORDS OF ALL YOUR PAYMENT MADE IN THE PAST AND ALSO HAVE A COMPLETE FILESOF YOURS HERE WITH ME UNTREATED, SO,I WRITE TO CONFIRM THE SUCCESSFUL OF THE WIRE TRANSFER MADE LAST NIGHT INTOTHIS BANK ACCOUNT FIND BELLOW.SOUTHWESTERN FEDERAL CREDIT UNION,WESCORP 924 OVERLAND COURT SAN DIMAS,CA 91772. USA.ACCOUNT NUMBER: 322079133, ABA/ROUTING NUMBER: 1220-41-21-9,SHARETYPE NO.: 25, FINAL CREDIT HABIB FENZI ANDCO.EMAIL:centralbankofnigtelexwirdep@yahoo.com.hk [to:] => Recipients [from:] => "Lamido" [date:] => Sat, 06 Jul 2013 09:02:32 -0400 [reply-to:] => Almngu@aol.com [x-aol-global-disposition:] => S [x-spam-flag:] => Array ( [0] => YES [1] => NO ) [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;s=20121107; t=1373115674;bh=7ukq4CAzYkoOAf4yk9KaMG0Qs4PPelqAZy+BlbuB3dg=;h=From:To:Subject:Date:MIME-Version:Content-Type;b=cu8JYP/JeOAwASkx6gFigWpjxvxYefw904eu8iw/tvMyqjL35IgC7/ePC5R1evwt1 bHYF/sxck+i5g+BFkDBwYfT0y7TqyMGpBz4LPYr1ITWvfCkslpLupgjJUPH7kMT477 g8JhDnsUnxHkH5XYxdhXZ3hOY1jh0grAv5ok9fPM= [x-aol-scoll-score:] => 0:2:218457328:93952408 [x-aol-scoll-url_count:] => 0 [x-aol-reroute:] => YES [x-aol-sid:] => 3039ac1d338651d8151a70fb [x-aol-ip:] => 158.123.153.210 [x-spam-status:] => No, score=1.0 [x-spam-score:] => 10 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: [...] Content analysis details: (1.0 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yahoo.com.hk] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dstumpy85[at]aol.com) 0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)-1.3 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (dstumpy85[at]aol.com) 0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2) 0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME 0.0 HTML_MESSAGE BODY: HTML included in message-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.1 MISSING_MID Missing Message-Id: header-1.0 UPPERCASE_75_100 message body is 75-100% uppercase 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails )

Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.

Scam Email Removal Request

Please remove the email referenced by the url

https://www.scamdex.com/email-scam-database/N/html/1373494144.M733383P14646V

The reason is: .

Give more detail or explain what you mean by 'Some Other Reason'.

Read about Email Copyright | Removal Policy | Privacy Policy

TEXT ONLY EQUIVALENT

Previous: Good Day Fresh Scams Next: URGENT

The Scamdex Scam Email Archive

Scam TagCloud

Scam Email Headers

Community Action - SPAM/non-Scam Report

Scam Email Removal Request

Scamdex Scam Resources and Archive