An
Email with the Subject "Fw: RE' PLEASE CONFIRM THIS MAIL IF YOU ARE STILL ALIVE..THIS IS VERY VERY IMPORTANT NOW..." was
received in one of Scamdex's honeypot email accounts on Thu, 14 May 2009 06:07:42 -0700
and has been classified as a Generic Scam Email.
The sender shows as "Bill Browne Sr" <bgbrow1@cox.net>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
deathforeigngooglecheckwinaccountclaimsclaimresidentresponserepresentativeprocessfund transferurgentcertifysentmailltunde090@gmail.comgooglem mr. david jones,
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submissions@scamdex.com
[delivery-date:] => Thu, 14 May 2009 06:07:42 -0700
[received:] => Array
(
[0] => from fed1rmmtao105.cox.net ([68.230.241.41])by fire.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1M4aew-000825-T8for submissions@scamdex.com; Thu, 14 May 2009 06:07:42 -0700
[1] => from fed1rmimpo03.cox.net ([70.169.32.75]) by fed1rmmtao105.cox.net (InterMail vM.7.08.02.01 201-2186-121-102-20070209) with ESMTP id <20090514130737.IWBN20430.fed1rmmtao105.cox.net@fed1rmimpo03.cox.net>; Thu, 14 May 2009 09:07:37 -0400
[2] => from williamb ([68.99.251.45])by fed1rmimpo03.cox.net with bizsmtpid rR7d1b0010zXXaU04R7dSn; Thu, 14 May 2009 09:07:37 -0400
)
[x-authority-analysis:] => v=1.0 c=1 a=2y2gt9WSFvIA:10 a=dp2Axzt2eEoA:10a=mK_AVkanAAAA:8 a=pGLkceISAAAA:8 a=oCcaPWc0AAAA:8 a=m_wf-W-ugw0TvvcdodUA:9a=Bm2VnxpMul7YapET4wwA:7 a=qEcpxaJxvG1uCKGulvmqIFJl3GEA:4 a=Dd7OFYBf468A:10a=M6Up2vMjusUA:10 a=9xyTavCNlvEA:10 a=MSl-tDqOz04A:10 a=HmMDcmDa7X5cQdAy:21a=fLiPHp74N1hX1wCK:21
[x-cm-score:] => 0.00
[message-id:] => <0EE3B9CABCAC482CA39F0142915E1BFF@williamb>
[from:] => "Bill Browne Sr"
[to:] => "Scams" ,"Fraud watch" ,"419 scams" <419@419scam.org>
[subject:] => Fw: RE' PLEASE CONFIRM THIS MAIL IF YOU ARE STILL ALIVE..THIS IS VERY VERY IMPORTANT NOW...
[date:] => Thu, 14 May 2009 06:07:38 -0700
[mime-version:] => 1.0
[content-type:] => text/plain;format=flowed;charset="iso-8859-1";reply-type=original
[content-transfer-encoding:] => 7bit
[x-priority:] => 3
[x-msmail-priority:] => Normal
[x-mailer:] => Microsoft Outlook Express 6.00.2900.5512
[x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2900.5579
[x-spam-status:] => No, score=0.6
[x-spam-score:] => 6
[x-spam-bar:] => /
[x-spam-flag:] => NO
[x-scamdex-scores:] => S:48 P:37 A:41 L:40 E:43 G:35
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 48
[x-scamdex-totscore:] => 244
[x-scamdex-kw:] => transfer,account,check,claim,claims,death,foreign,fund,inc.,process,representative,resident,response,sent,urgent
[x-scamdex-em:] => ltunde090@gmail.com
[x-scamdex-dir:] => D
[x-scamdex-id:] => D1244503496.M299502P27415V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
--------------------------------------------------------------------------------
No virus found in this incoming message.
Checked by AVG - www.avg.com
18:04:00
----- Original Message -----
From: "Sule Ibrahim" <sule.ibrahim7@googlemail.com>
To: <sule.ibrahim7@googlemail.com>
Sent: Thursday, May 14, 2009 4:21 AM
Subject: RE' PLEASE CONFIRM THIS MAIL IF YOU ARE STILL ALIVE..THIS IS VERY
VERY IMPORTANT NOW...
From the desk of,
SULE IBRAHIM
Director Foreign Operation Dept.
E-mail: ltunde090@gmail.com
Attn: Sir/Madam,
We are obliged to inform you that after we have completed the process
of releasing your funds to you, we now received a Death Certificate,
certifying that you were death according to one Mr. David Jones, who
claims to be your representative, and he now requested that your funds
should be transferred to a Swiss account he provided.
But however, due to the suspicious nature of his claims, we therefore
decided to write you to know if really you were dead as said by the so
called Mr. David Jones, who claims to be your representative.
So please if you were still alive, you should provide the following
information for us to be sure.
1) Your full name
2) Your residential address
3) Your telephone number
4) Your occupation
Be notified that if we do not hear from you within the next 7 days, we
shall assume you were dead as claimed by your representative, and we
would then transfer the funds to his Swiss account as he desire.
All the obligations have been met and the funds are ready for transfer
to the account now.
Awaiting your urgent response to this effect
Yours faithfully.
SULE IBRAHIM.
--------------------------------------------------------------------------------
No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.0.238 / Virus Database: 270.12.28/2113 - Release Date: 05/13/09
18:04:00
