An
Email with the Subject "Urgent response !!! From: Mr Fahad Adongo" was
received in one of Scamdex's honeypot email accounts on Thu, 17 Feb 2011 06:09:00 -0800
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Fahad Adongo <fahadadongo100@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
africa hundred thousand dollarsforeigndemisenext of kinbankcontactnationalaccountclaimsclaimtransactionstaffresponseclient50%urgentbusinessfund transfermailrisk freebank sharedollarusd development bank auditconfidentialrespectfahadadongo100@gmail.com will ouagadougoublessed(a d b)(usd 10,500,000.00)dear mr fahad adongofs
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submissions@scamdex.com
[delivery-date:] => Thu, 17 Feb 2011 06:09:00 -0800
[received:] => Array
(
[0] => from nm2.bullet.mail.kr3.yahoo.com ([111.67.240.249])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1Pq4XS-0005dx-Defor submissions@scamdex.com; Thu, 17 Feb 2011 06:09:00 -0800
[1] => from [111.67.240.250] by nm2.bullet.mail.kr3.yahoo.com with NNFMP; 17 Feb 2011 14:08:56 -0000
[2] => from [111.67.240.252] by tm1.bullet.mail.kr3.yahoo.com with NNFMP; 17 Feb 2011 14:08:56 -0000
[3] => from [127.0.0.1] by omp1001.mail.kr3.yahoo.com with NNFMP; 17 Feb 2011 14:08:56 -0000
[4] => (qmail 59672 invoked by uid 60001); 17 Feb 2011 14:08:55 -0000
[5] => from [212.52.153.27] by web70708.mail.kr3.yahoo.com via HTTP; Thu, 17 Feb 2011 23:08:55 KST
)
[x-yahoo-newman-property:] => ymail-3
[x-yahoo-newman-id:] => 178856.56560.bm@omp1001.mail.kr3.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1297951735; bh=wrh5LTDrpcK5BweJIXOjHeoyd2pSWZTGyNa37C9qi8g=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=sAfoFkFE9AXyRLfHvIubMv4GzDQ7RDlKyas8Twwd1FQmCeiIuVhB/cpGLsImHLIYNcbnyhO3/DTX7w2D1IIhBypFYftaTJ+hwpTRDbX5NB1XdiORszABAFnMnSKeVLd1ik4W6gbeQKNyY0PHmxdJiIhEauwnIwhOF66x3OAtzaM=
[message-id:] => <638729.55744.qm@web70708.mail.kr3.yahoo.com>
[x-ymail-osg:] => KrKDdKsVM1kB50IjaOQ22ibVVwtG9nzPlTgZSvVM.Ho3tnLXAoDFW6KXV8AeYhYqgOhL0brYJMGkWaZDP4pCeVSsBuBhkS5WOf1YLQhFBtfAyyzSKngFRAkQufrF.HWcgbmBzjQpc0UIx6mRluYNWGsyQjh1uMFVNnnZQci4f2ueFDzjzQyVPHOLSA2Xl90pfhKdTm9AJnzpt._yOFo9BijTTr3OqqqbjBdOk5eLRm7paHzgbZbeAdecXv1e84TGc20vJk2BS6.RScTH99Z.TZVVUaBeEN8hUfQHFbBhU2MphdZH1m.18L2hunHiP.JFR_wiUCEpegHnojv9CiOvzQ1zB9cmngGPFXi0FEDDRDKFGz6FnLJ5iWGXEKJy0cMpwMFwaT1tX6PgWmgLaAJBvgza94TwsipjE.gLNu29QUtm3Dkz4VLzgSMoYpuk1dUL7Yj2lPSGovhUzHIlD2fZcBrHacMRq4lGRUg.mmyFoiy567Pc7YEiFVR_dRN1Phs3.VurlnxYphcpBtCK7bng11rPlkmme1uuDmaXqF6Sdam9l79UnnVOYamoYPPi6twtoxe6kvgZeDDA2yGuOl581nzPeyJfrj1RJtav_N_B9h2ZQlVv8sNUxNJ0b0PMpDyceIB0OM2Qrxb_U.1dHhPimZLOvr6XflhRWQ0eU4aSKg5LXb4lFhZIQuDdft_WB3ijdca.Chegc2.JEAohaWHhkG.2y4BZ2jBOaqcbMfmwlR7vt6LjNyn7ImxKbKr_R.O56hBsSFsFkR7KL5TcDZvmcv5J7E8fWa_Qlgw9RcNHXbnkBJWq6ZTcjr5EMIbHzufalUCVs26cK4XKKJFSUu5PlB0Pf7o8VEr9DLIGaADgqeUQg_NmJj8uxinNYMCHYsMrL0d5c3OnbBbP2J56B9Q_SycJIiWkW1P8gbaVV0toIcbafRaMxGzsJa93djaD4h6MWPXv5SMe8Wa.m3gDGNj.SFYROzOk2RYEM0fvmtz2YgDfwxmY.2nN6XBHNPFBLWgdjmT4QKF2GsGRuSkHvxKXzSK0.CKJ.8TwnkTHNev17c.pvDFcvtulP7OO6bHccF95D16v4K8Dell3y59Ub8SpvLT.Djdok3oHHt.JtrmiBPEAvx9I.oIRjuW8njZrXCgzPLRRt7bHUOFo2UNganEM.eY0pul9wWJS9tiZDw.ssSIlCdcS7x8zgsTX3jqfWRQ7P5dl02dEk_lVBJ2ptS9eXATWUD.jRQmxd5lYuhCQQ44O.I0oB36S2dIJsir.1kjn99B9vQVptCBTaravpuR2Hxnr2o8ukioD4y9OmHY4ImE9Fg9YcgOZUl1K6y8y5TxZs_qcbPR9Nt5Sqh0sLTFemA5qXjJ7L0TVIKwaTXXSszbFZ9d2jtyMeAs4SOk70wPMPmGdj96Bm7EK0g4RQenIpJN4.EGEMJUC_JdZGTcRkaqfds9KcBctdoM4OQtI7cWnsq9oRbPGQWr7WnUo
[x-mailer:] => YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
[date:] => Thu, 17 Feb 2011 23:08:46 +0900 (KST)
[from:] => Fahad Adongo
[reply-to:] => fahadadongo2010@gmail.com
[subject:] => Urgent response !!! From: Mr Fahad Adongo
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1058679352-1297951735=:55744"
[x-spam-subject:] => ***SPAM*** Urgent response !!! From: Mr Fahad Adongo
[x-spam-status:] => Yes, score=4.9
[x-spam-score:] => 49
[x-spam-bar:] => ++++
[x-spam-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear friend, I am Mr.Fahad Adongo, the director of the accounts& auditing dept .at the African Development Bank Ouagadougou-west Africa. (A D B).With due respect, I have decided to contact you on a business transactionthat will be beneficial to both of us. [...] Content analysis details: (4.9 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 URG_BIZ BODY: Contains urgent matter0.0 HK_SCAM_N2 BODY: HK_SCAM_N2-3.0 MILLION_USD BODY: Talks about millions of dollars-1.0 TVD_PH_SUBJ_URGENT TVD_PH_SUBJ_URGENT0.0 FREEMAIL_FROM Sender email is freemail (fahadadongo100[at]gmail.com)-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, lowtrust[111.67.240.249 listed in list.dnswl.org]0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (fahadadongo100[at]gmail.com)-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear!0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 DECEASED_NO_ML Dead not via mailing list3.1 RISK_FREE No risk2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL0.0 T_MONEY_PERCENT X% of a lot of money for you0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
[x-spam-flag:] => YES
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I
am Mr.Fahad Adongo, the director of the accounts & auditing dept .at the
African Development Bank Ouagadougou-west Africa . (A D B).With due respect, I
have decided to contact you on a business transaction that will be beneficial to
both of us.
At the bank's last accounts/auditing evaluations, my staffs
came across an old account which was being maintained by a foreign client who we
learnt was among the deceased passengers on November. 2003. Since his demise,
even the members of his family haven't applied for claims over this fund and it
has been in the safe deposit account until I discovered that it cannot be
claimed since our client is a foreign national and we are sure that he has no
next of kin here to file claims over the money. As the director of the
department, this discovery was brought to my office so as to decide what
is to be done. I decided to seek ways through which to transfer
this money out of the bank.
The total amount in the account is Ten
million five hundred thousand dollars (USD 10,500,000.00).with my positions as
staffs of the bank, I am handicapped because I cannot operate foreign accounts
and cannot lay bonafide claim over this money. The client was a foreign national
and you will only be asked to act as his next of kin and I will supply you with
all the necessary information needed this fund. The total sum will be shared
as follows: 50% for me, 50% for you and expenses incidental occur during the
transfer will be incur by both of us. The transfer is risk free on both sides
hence you are going to follow my instruction till the fund transfer to your
account.
I will wish you to keep this transaction secret and
confidential, please for further information and enquires feel free to contact
for more explanation and better understanding Thanks and remain
blessed. Mr Fahad
Adongo