An
Email with the Subject "Fwd: Your payment notification" was
received in one of Scamdex's honeypot email accounts on Sun, 08 Feb 2009 10:23:46 -0800
and has been classified as a Generic Scam Email.
The sender shows as joescor1@aol.com.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
beneficiary-702-409-8987 hundred thousand thousand western unionchequewinlotterynationalluckyclaimnotificationagenteight hundred thousandthree thousandcourierpaymentserviceprocesssentpaidshippingdeliverymailpackagebank dollarpound cashier bank mtcnrandomlyjoescor1@aol.com will (eight hundred thousand u...(3000)(eight hundred thousand u...(one hundred & fifty ...british pounds mr. donald blakenmr. david b. peters
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com,Submissions@scamdex.com
[delivery-date:] => Sun, 08 Feb 2009 10:23:46 -0800
[received:] => Array
(
[0] => from imo-d22.mx.aol.com ([205.188.144.208])by fire.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1LWEJm-00048u-Cy; Sun, 08 Feb 2009 10:23:46 -0800
[1] => from Joescor1@aol.comby imo-d22.mx.aol.com (mail_out_v39.1.) id 1.c42.44d6b54f (34929);Sun, 8 Feb 2009 13:23:43 -0500 (EST)
[2] => from smtprly-ma01.mx.aol.com (smtprly-ma01.mx.aol.com [64.12.207.140]) by cia-da04.mx.aol.com (v121_r5.5) with ESMTP id MAILCIADA042-5c4a498f23285d; Sun, 08 Feb 2009 13:23:40 -0500
[3] => from MBLK-M04 (mblk-m04.mblk.aol.com [64.12.136.37]) by smtprly-ma01.mx.aol.com (v121_r5.5) with ESMTP id MAILSMTPRLYMA018-5c4a498f23285d; Sun, 08 Feb 2009 13:23:36 -0500
[4] => from 68.163.14.12 by MBLK-M04.sysops.aol.com (64.12.136.37) with HTTP (WebMailUI); Sun, 08 Feb 2009 13:23:35 -0500
)
[references:] =>
[to:] => spam@uce.gov, Submissions@scamdex.com, tosreports@aol.com, scams@scamdex.com
[subject:] => Fwd: Your payment notification
[date:] => Array
(
[0] => Sun, 08 Feb 2009 13:23:36 -0500
[1] => : <8CB58317D9D22C7-76C-63C@MBLK-M04.sysops.aol.com>
)
[x-aol-ip:] => 68.163.14.12
[in-reply-to:] =>
[x-mb-message-source:] => WebUI
[mime-version:] => 1.0
[from:] => joescor1@aol.com
[x-mb-message-type:] => User
[content-type:] => multipart/alternative; boundary="--------MB_8CB58317DA1E773_76C_D1F_MBLK-M04.sysops.aol.com"
[x-mailer:] => AOL Webmail 41095-STANDARD
[x-spam-flag:] => Array
(
[0] => NO
[1] => NO
)
[x-spam-status:] => No, score=-0.7
[x-spam-score:] => -6
[x-spam-bar:] => /
[message-id:] => REIDs3x1239839816.M796328P32690V-S3X
[x-scamdex-scores:] => S:93 P:84 A:96 L:101 E:93 G:81
[x-scamdex-classtype:] => L
[x-scamdex-classscore:] => 101
[x-scamdex-totscore:] => 548
[x-scamdex-kw:] => \%,agent,award,bank,beneficiary,claim,contact,courier,credit,dollars,fiduciary,hundred thousand,inc.,lottery,lucky,national,notification,package,paid,payment,process,report,resident,sent,service,union,user,western,winn
[x-scamdex-em:] => Joescor1@aol.com,fedexdept13@poczta.onet.pl,joescor1@aol.com,parcel@fedextropic-courier,spam@uce.gov,tosreports@aol.com
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1239839816.M796328P32690V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
-----Original Message-----
From: FedEx Shipment Notification <fedexdept13@poczta.onet.pl>
Sent: Mon, 9 Feb 2009 4:09 am
Subject: Your payment notification
FedExÂ
UK
Tel: +44-702-409-8987
Attention: Beneficiary
Your Payment Notification.
This is to notify you that your parcel is still in the possession of our
shipping department in UK under our subsidiary "World-Tropic Courier Services".
This parcel contains an International Cashier Bank Draft/Cheque worth the sum of
U.S$800.000.00 (Eight Hundred Thousand U.S Dollars) only and it is ready for
delivery to your door step. Meanwhile, before the delivery or shipment will take
place, you are advice to send to them the following details below for
reconfirmation.
Fill this Form:
Name:
Address:
City:
State:
Postal Code:
Country:
Contact Phone Number:
The above requested information will enable them deliver your parcel correctly
without any mistake or delivering your parcel to a wrong person. Furthermore,
you might be asking yourself how come this email, cheque or draft. Anyway, your
cheque was brought to the processing delivery office by the National Lottery
Fiduciary Agent/Claim, signifying that you are a rightful winner to=2
0their
Lottery Award selected randomly from three thousand (3000) lucky email addresses
which your email address is among the lucky email addresses.
FedEx Courier Service Company is mailing you as per your parcel that was brought
to our subsidiary courier company "World-Tropic Courier Services" to be
delivered to you.
We are obliged to inform you once again that your parcel, which contains your
payment (the sum of U.S$800.000.00 (Eight Hundred Thousand U.S Dollars)) is
among the 24 parcelâs listed which is now in our office in UK and also with your
email address as the receiver.
You are to send the above details to:
NAME: Mr. Donald Blake
EMAIL ADDRESS: delivery.parcel@fedextropic-courier. com
PHONE NUMBER: +44-702-409-8987
Due to the risk of Identity theft and interception, which almost crippled the
National Lottery Program of 2007. All parcel containing beneficiary's payment
must be insured for risk of Identity Theft and unkown interception. You are to
pay for just the insurance of your parcel which is containing your payment via
western union and Money Gram so that your parcel can be delivered to your
residential address before it accumulate a demurrage/delay charges. This will
happen if stays more than after one week after this notice to you.
You are to make the payment of the Ð150 (One Hundred & Fifty British Pounds) to
the details below through Western Union or Mo
ney Gram.
Payment Information:
Receivers Name------ Mike Connor
Receiver's Address: 24 Tooting Road
Receiver's City: London
Receiver's Zip Code: Bnq 7n4
Receivers Country----United Kingdom
Amount To Be Paid---------Ð150 (One Hundred & Fifty British Pounds)
Please as soon as you send the money, you are to email us back the full payment
information including the MTCN Number so that your confirmation can be made and
your delivery proceeded asap.
FedEx and World-Tropic International is one of the world's great success
stories, the start-up that revolutionized the delivery of packages and
information. In the past 30 years, we've grown up and grown into a diverse
family of companies -a FedEx that's bigger, stronger, better than ever.
Mr. David B. Peters
For: FedEx - World-Tropic Courier Services International
Processing/Notification Officer
A Good Credit Score is 700 or Above. See yours in just 2 easy steps!