An
Email with the Subject "Can you help me!!!" was
received in one of Scamdex's honeypot email accounts on Tue, 8 Dec 2015 04:00:51 -0800 (PST)
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Elizabeth Johnson <ej5547382@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
assistancefinance7 million million hundred thousand united ...percentgoldnext of kinnationalaccountclaimthree millionseven hundred thousanddepositdepositedtransactionresponsefundbusiness transferinvestmentmaildollarconfidentialej5547382@gmail.com will god(22 years)dearest
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[delivered-to:] => scamdex@gmail.com
[received:] => Array
(
[0] => by 10.50.51.168 with SMTP id l8csp18672igo; Tue, 8 Dec 2015 04:00:51 -0800 (PST)
[1] => from web101209.mail.kks.yahoo.co.jp (web101209.mail.kks.yahoo.co.jp. [183.79.100.213]) by mx.google.com with SMTP id 5si4873017ioc.165.2015.12.08.04.00.50 for ; Tue, 08 Dec 2015 04:00:51 -0800 (PST)
[2] => (qmail 14525 invoked by uid 60001); 8 Dec 2015 12:00:49 -0000
[3] => from [108.59.8.217] by web101209.mail.kks.yahoo.co.jp via HTTP; Tue, 08 Dec 2015 21:00:49 JST
)
[x-received:] => by 10.107.166.15 with SMTP id p15mr3144700ioe.38.1449576051785; Tue, 08 Dec 2015 04:00:51 -0800 (PST)
[return-path:] =>
[received-spf:] => softfail (google.com: domain of transitioning ej5547382@gmail.com does not designate 183.79.100.213 as permitted sender) client-ip=183.79.100.213;
[authentication-results:] => mx.google.com; spf=softfail (google.com: domain of transitioning ej5547382@gmail.com does not designate 183.79.100.213 as permitted sender) smtp.mailfrom=ej5547382@gmail.com; dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=yj20050223; d=yahoo.co.jp; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:X-YMail-JAS:Sender:References:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=T482x+MYcTAcm4puWDTvTL66iIHggCsZhbpdynCiIP+NEpUs1u+UrsuyV7IIGiHLpOP6Bvv3oVCj3/jny7CLwP+QsvuIc6GMX5JoeMWMPc4XHx2/NKA3P3SuFiJ0zkQN ;
[message-id:] => <612604.2505.qm@web101209.mail.kks.yahoo.co.jp>
[x-ymail-osg:] => .Wis4e4VM1nFPs352iqRj6veoFZ.zwX7QZXKBIAY.fj7mzzX59dbGKw2qlvpXn88Id2iB3QThg5UJRySIxakpUIrQtvZfypXvqh630ZVTRuLIAqnRUEhv8YLmIyysdo3F0VdwRhGFxj.8QHUJMWd_VrodS0CgocfkEU6cLC5vI4uXY3UIcVsd.A9fKLwOWApyRojrYq5UH0c0qmnh0TQXHO9KmVf5Vn5RoNVL6AsEWunP8yZ2KfD6DR7GnS57KkzfZC2SpJO_38vm.NAcJcX7zU7tqmmRtnRNQe2zSBuI1SNbdIEPvZ9j4UDLiXrZXwWingMBduvI2BUIwkNy7sagWx2ixc36Yri4qlXj4SQa69.p.xdcL705PwtjPmr4CZ1cpZ0ijiwtjuPBkvU8GdPgtCSsxcqP207PVX5DeNTPcchFJ_Psvsj6ta0JWDJUZp_.IeGYGmbBO29..RW3L7u.srg4EXzwNlAsEnb5RY.Slu.At2BcvSlGQobE6rU5u7x.UFCaVfrIig_WduOc3w09ZFDApFLgvFrA5iGGI_H_zfra0qkNufG7L8at4OvRvQFYM5dy_Yx2Dc7_VDATaB22pKGrBLC6yzQs5TBlkofSYwJZXChocgpwcsX6prTNoViUOTkfLGfGVdbzSOqtLJA_KiXisflVgYOXFHJaj8LhS1ypEw6vnxNylQgRhNAcpHko1GwzJz7gHl7GA--
[x-rocketymmf:] => mssyug12
[x-mailer:] => YahooMailWebService/0.8.111_67
[x-ymail-jas:] => VA8j7KEVM1mbUJZhNRUvN64qVZm0pIa._OiOyVWBnQ17zF7a1v2cwXKmkOZYPyRfzcOEerwrvd0qUTwVjHs4ZEf4lZWLUjxRnYOEwQVm..ecZAWandfSiLoIkIa3bFDcVHB.
[sender:] => mssyug12@yahoo.co.jp
[references:] =>
[date:] => Tue, 8 Dec 2015 21:00:49 +0900 (JST)
[from:] => Elizabeth Johnson
[reply-to:] => Elizabeth Johnson
[subject:] => Can you help me!!!
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1881616652-1449576049=:2505"
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I am
Elizabeth Johnson (22 years) the only surviving daughter of late Orah Johnson. I am in possession of some documents covering the deposit of US$3.7 Million (Three million, Seven hundred thousand United States
dollars) that my late father deposited in a Finance Firm here which I am the next of kin. I have verified the transaction with the Firm Company here and its
authenticity is clear. This fund is of no criminal origin as it was realized from sales of the alluvial gold dust.
I am soliciting for your kind assistance in retrieving and claiming this fund from the Finance Company here as my father's business associate and have it transferred to your account in your country for investment. You will also serve as the guardian to this fund as Iâm not at all knowledgeable in the international business world. I will give you further details as soon as I hear from you and we will discuss terms and percentage subsequently but you must treat highly confidential.
Hoping to hearing from you soon. May God bless you as you extend your helping hand to the needy.
I wait for your
response.
Thanks
Miss Elizabeth Johnson.
Dearest one, I am
Elizabeth Johnson (22 years) the only surviving daughter of late Orah Johnson. I am in possession of some documents covering the deposit of US$3.7 Million (Three million, Seven hundred thousand United States
dollars) that my late father deposited in a Finance Firm here which I am the next of kin. I have verified the transaction with the Firm Company here and its
authenticity is clear. This fund is of no criminal origin as it was realized from sales of the alluvial gold dust. I am soliciting for your kind assistance in retrieving and claiming this fund from the Finance Company here as my father's business associate and have it transferred to your account in your country for investment. You will also serve as the guardian to this fund as Iâm not at all knowledgeable in the international business world. I will give you further details as soon as I hear from you and we will discuss terms and percentage subsequently but you must treat highly confidential. Hoping to hearing from you soon. May God bless you as you extend your helping hand to the needy.I wait for your
response. Thanks Miss Elizabeth Johnson.
