An
Email with the Subject "Fwd: From MARIE Louise Clothide" was
received in one of Scamdex's honeypot email accounts on Thu, 15 May 2008 10:52:03 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as David Cherbonnier <dlc_engineering@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
death million8 millionforeignbankbusiness transferfundinvestmentmailbank the bank webmailengineerdlc_engineering@yahoo.comlouiseclothidemarie@yahoo.frlouiseclothidemarie@yahoo...8528dlc_engineering@yahoo.com will yahoo.comyahoo.(no sig)(ehlo plesklinux6.dns26.c...(qmail 21349 invoked by u...(host-41-207-0-163.afnet....(horde mime library)(highest)(imp) h3 (4.1.6)(us$3.8 million)
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Thu, 15 May 2008 10:52:03 -0700
[received:] => Array
(
[0] => from web32208.mail.mud.yahoo.com ([68.142.207.139])by gogol.o7e.net with smtp (Exim 4.68)(envelope-from )id 1Jwhc5-0003DC-31for scams@scamdex.com; Thu, 15 May 2008 10:52:03 -0700
[1] => (qmail 63426 invoked by uid 60001); 15 May 2008 17:51:28 -0000
[2] => from [202.156.8.9] by web32208.mail.mud.yahoo.com via HTTP; Thu, 15 May 2008 10:51:28 PDT
)
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; b=AsHWPVaXhlnOcpgqoWVtzr7IobmdLy+HJhyOXxoWRbaNf7LseoKeAaFhlp2sE2l6dDLHRGtg2EznYMk3INAUTPBzh2eMo9yWfHN9WpsTszXNEr6fQy5h0v6bcvBcDFJr70GgCYX5HRa9gn3/T4M87gN75LJdGwCEZiqB+umupfs=;
[x-ymail-osg:] => V2mk8CkVM1mPYdWlSpHKd7uMasNEngEOOSCzovw6QFWzq9u__ajnYYvonIE9Tyh6DcY.cPFrMG04CmTpTOsn6IZqv9ufWAmgRcCgKhzAJLtvMPb2yv2hK9QFnA--
[date:] => Thu, 15 May 2008 10:51:28 -0700 (PDT)
[from:] => David Cherbonnier
[subject:] => Fwd: From MARIE Louise Clothide
[to:] => Phish , phish
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-620136475-1210873888=:62823"
[content-transfer-encoding:] => 8bit
[x-spam-status:] => No, score=3.0
[x-spam-score:] => 30
[x-spam-bar:] => +++
[x-spam-flag:] => NO
[x-o7e-flag:] => J-3509981-042508::web32208.mail.mud.yahoo.com [68.142.207.139]
[message-id:] => REIDs3x1239839788.M33667P32690V-S3X
[x-scamdex-scores:] => S:67 P:53 A:57 L:58 E:61 G:51
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 67
[x-scamdex-totscore:] => 347
[x-scamdex-kw:] => 10%,God,\%,account,agent,assistance,bank,business,citi,contact,death,die,dollars,foreign,fund,internet,million,partner,response,transaction,trust
[x-scamdex-em:] => 8528dlc_engineering@yahoo.com,c06gtlmbc44okgoo@webmail.cabi,dlc_engineering@yahoo.com,louiseclothidemarie@yahoo.fr,louiseclothidemarie@yahoo.frSu
[x-scamdex-dir:] => C
[x-scamdex-id:] => C1240615308.M163918P8072V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
MARIE LOUISE CLOTHIDE <louiseclothidemarie@yahoo.fr> wrote: X-Apparently-To: dlc_engineering@yahoo.com via 68.142.207.136; Thu, 15 May 2008 09:47:51 -0700 X-Originating-IP: [84.246.225.182] Return-Path: <louiseclothidemarie@yahoo.fr> Authentication-Results: mta472.mail.re4.yahoo.com from=yahoo.fr; domainkeys=neutral (no sig) Received: from 84.246.225.182 (EHLO plesklinux6.dns26.com) (84.246.225.182) by mta472.mail.re4.yahoo.com with SMTP; Thu, 15 May 2008 09:47:51 -0700 Received: (qmail 21349 invoked by uid 48); 15 May 2008 18:40:56 +0200 Received: from host-41-207-0-163.afnet.net (host-41-207-0-163.afnet.net [41.207.0.163]) by webmail.cabinetdakobi.com (Horde MIME library) with HTTP; Thu, 15 May 2008 18:40:51 +0200 Message-ID:
<20080515184051.c06gtlmbc44okgoo@webmail.cabinetdakobi.com> X-Priority: 1 (Highest) Date: Thu, 15 May 2008 18:40:51 +0200 From: MARIE LOUISE CLOTHIDE <louiseclothidemarie@yahoo.fr> To: louiseclothidemarie@yahoo.fr Subject: From MARIE Louise Clothide MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=_70s902jlui04" Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) H3 (4.1.6) Content-Length: 5953
Dearest One, It is my pleasure to write you trusting God that this well timed contact will bring us into one family. I am Miss
MARIE Louise Clothide the daughter of late Dr. ALEXIS CLAUDE from Liberia. But residing in the capital City of Cote d'Ivoire My father was a Cocoa merchant in Bouake before his untimely death last year, after his business trip to France, to negotiate on a cocoa business. He was poisoned by his business associates. My
mother died during the out break of civil war here. Before the death of my father he informed me that he deposited the sum of Three Million, Eight Hundred United State Dollars (US$3.8 Million) in a prime bank oversea. He also explained to me that it was because of this wealth that made his business associates to poisoned him. He asked me to seek for a foreign partner outside our country where I will transfer this money and invest it wisely and also see that I complete my education. I am soliciting for your kind assistance as my foreign guardian in releasing of this fund from the bank and have it transfer into your account
for investment. And you help me to come to your country immediately as my late father advised me I will be willing to give you 10% of the total sum as compensation for your efforts in helping me in this transaction. And you will take me as a member of your family as I am only 20yrs. I wait for your
quick response. Yours, Marie
