An
Email with the Subject "YOUR ATM CARD" was
received in one of Scamdex's honeypot email accounts on Wed, 23 Jul 2014 06:32:33 -0700 (PDT)
and has been classified as a Generic Scam Email.
The sender shows as "Mr. Mark Stuvyesant" <mrmarks3@hot.ee>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
atm mobilbankactivitycontactwinclaimpaymentfundmailbank dollar world bank audit will remitdearnmr. mark stuvyesant
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[delivered-to:] => scamdex@gmail.com
[received:] => Array
(
[0] => by 10.224.98.6 with SMTP id o6csp19964qan; Wed, 23 Jul 2014 06:32:33 -0700 (PDT)
[1] => from portal-smtp-out.hot.ee (portal-smtp-out.hot.ee. [194.126.101.101]) by mx.google.com with ESMTP id uj9si4898780wjc.132.2014.07.23.06.32.27 for ; Wed, 23 Jul 2014 06:32:28 -0700 (PDT)
[2] => from localhost (localhost [127.0.0.1])by vm-hot-relay10.estpak.ee (Postfix) with ESMTP id 09E6FC5E;Wed, 23 Jul 2014 16:32:27 +0300 (EEST)
[3] => from portal-smtp-out.hot.ee ([127.0.0.1])by localhost (vm-hot-relay10.estpak.ee [127.0.0.1]) (amavisd-new, port 10024)with ESMTP id h82KiaGwM-uc; Wed, 23 Jul 2014 16:32:21 +0300 (EEST)
[4] => from dog1.mgmt.hot.ee (hotdog1.mgmt.hot.ee [213.168.11.103])by vm-hot-relay10.estpak.ee (Postfix) with ESMTP id 732ACBFF;Wed, 23 Jul 2014 16:32:21 +0300 (EEST)
[5] => from dog1.mgmt.hot.ee (hotdog1.mgmt.hot.ee [213.168.11.103])by dog1.mgmt.hot.ee (Postfix) with ESMTP id 5EEBE349BC;Wed, 23 Jul 2014 16:32:21 +0300 (EEST)
)
[x-received:] => by 10.180.99.65 with SMTP id eo1mr3479374wib.12.1406122353013; Wed, 23 Jul 2014 06:32:33 -0700 (PDT)
[return-path:] =>
[received-spf:] => pass (google.com: domain of mrmarks3@hot.ee designates 194.126.101.101 as permitted sender) client-ip=194.126.101.101;
[authentication-results:] => mx.google.com; spf=pass (google.com: domain of mrmarks3@hot.ee designates 194.126.101.101 as permitted sender) smtp.mail=mrmarks3@hot.ee
[x-virus-scanned:] => Debian amavisd-new at vm-hot-relay10.estpak.ee
[x-mailer:] => Elion hot.ee Webmail (http://www.hot.ee)
[from:] => "Mr. Mark Stuvyesant"
[date:] => Wed, 23 Jul 2014 16:32:18 +0300
[to:] => info@usa.com
[cc:] =>
[subject:] => YOUR ATM CARD
[reply-to:] => barrmarkstuvyesant@gmail.com
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="--------=BoundaryPyDog1406122338.99------"
[message-id:] => <20140723133221.5EEBE349BC@dog1.mgmt.hot.ee>
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Dear Subscriber, In the
Conclusion of the annual audit of Planned and documented activity
performed by the World Bank and Swiss Reconciliation Committee, it might
interest you to know that we have Received a Mandate and instruction to
REMIT your unclaimed overdue funds of $ 950,000.00 (Nine Hundred and
Fifty United States Dollars only) Which has been delayed due to
unforeseen Circumstances and events. Your funds has been
loaded and Fragmented Into An ATM Card Which will be posted to you once
you reconfirm The Following informations below,
Full Names / Age / Sex / Contact Mobile
Number / Country / Receiver 's Address.
You are expected to Respond to this email
within The seven working days to Avoid closing your payment file and
tagging it as unclaimed. Regards,
MR. Mark Stuvyesant
Dear Subscriber, In the
Conclusion of the annual audit of Planned and documented activity
performed by the World Bank and Swiss Reconciliation Committee, it might
interest you to know that we have Received a Mandate and instruction to
REMIT your unclaimed overdue funds of $ 950,000.00 (Nine Hundred and
Fifty United States Dollars only) Which has been delayed due to
unforeseen Circumstances and events. Your funds has been
loaded and Fragmented Into An ATM Card Which will be posted to you once
you reconfirm The Following informations below,
Full Names / Age / Sex / Contact Mobile
Number / Country / Receiver 's Address.
You are expected to Respond to this email
within The seven working days to Avoid closing your payment file and
tagging it as unclaimed. Regards,
MR. Mark Stuvyesant
