An
Email with the Subject "MOST URGENT" was
received in one of Scamdex's honeypot email accounts on Tue, 22 Feb 2011 20:24:16 -0800
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as jose mora <jose.mora@sify.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
foreignnext of kindeceasedbankcontactaccountclaimforeignercustomer50 %custombusinessproposalfund transferbank dollar the bank burkinaburkina faso will willnremittanceexchangetreasure( twenty million us dollars)http://news.bbc.co.uk/1/h... mr john adams,bill
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => mxw@scamdex.com
[delivery-date:] => Tue, 22 Feb 2011 20:24:16 -0800
[received:] => Array
(
[0] => from nm6.bullet.mail.sp2.yahoo.com ([98.139.91.76])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1Ps6Gt-0005i3-G7for mxw@scamdex.com; Tue, 22 Feb 2011 20:24:16 -0800
[1] => from [98.139.91.66] by nm6.bullet.mail.sp2.yahoo.com with NNFMP; 23 Feb 2011 04:24:20 -0000
[2] => from [98.139.91.25] by tm6.bullet.mail.sp2.yahoo.com with NNFMP; 23 Feb 2011 04:24:20 -0000
[3] => from [127.0.0.1] by omp1025.mail.sp2.yahoo.com with NNFMP; 23 Feb 2011 04:24:20 -0000
[4] => (qmail 38211 invoked by uid 60001); 23 Feb 2011 04:24:20 -0000
[5] => from [213.255.200.102] by web114412.mail.gq1.yahoo.com via HTTP; Tue, 22 Feb 2011 20:24:19 PST
)
[x-yahoo-newman-property:] => ymail-3
[x-yahoo-newman-id:] => 442341.28532.bm@omp1025.mail.sp2.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1298435060; bh=s/W7qIz0GLZaML3aEvZWa7PSrwPzglBHNDPxPw5wsRg=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=g6XggDriDCjsxFeDbI0hoo6tP2rc7Wg40JbRRymZQwyIWxo/C6HeDR+7DZkyA7tFH3icxAxLUsqqnoCrXqTbCntj/47JGN8xPUXnH46MTRCC91rmXrR7PTWxHWPRzh+AISz5d573ZkJqrWgJQW6cVzq/FWsklYA2XBpBQQnLew0=
[message-id:] => <879261.37841.qm@web114412.mail.gq1.yahoo.com>
[x-ymail-osg:] => 1FexYbMVM1lJYBnhzhk7xKNT4UaTWxk6asW4rSmkoXqaUYrdjdiPvm5Y9zVMbEBuH.5Od8FS8MsgC6eDqPvQfxAJUWFxIiJI4z8khc2mYmxMIt1cbMFMnxC58LyE8_ZWXtVQHr1WmR_TyOC_Au1Vxy73STtgE6OsEU9PqoH9kknb_DFfjX5yoFEa0kTKg.TMPCgwNSywzbQ4vP93Hy16Fd_.Gm0SfCtg74Eo4_od4IA_sYgOB9advML5C7Iy4UcicBdZFCbvSzELngWrRLA0RKOWanG_qcCaYDOVXCoJxVGYD1r63uixqIXORB7.xOVbfo2zOZR1fDm0Jg.6iri0_T_i3OQiqrFONqB2vrO3T_ghs1vfhtmhg6QP_5CbKOUNH9AWavFRm8FPUgOmalkPB0WKHZP3tzr5Z7Hmq2OY38bmV1_.zM8oMG3PlbYQn0Po66.WKCtg1R3zkDA8gUDyqafkvtELcet0UXSuAFOkflwuagtxBriX4pJLiGqlHQDKBwJuX5EIVtlvU8AZhU7SshghX8Bvt9XjnhDvGN4ctIBDn.r2m_THWsRWSsGXkahjDvpivJR3xvWuOmAXrXY8ApURkGHR8Teg6yt5RfMlBgeINAgT9JtZ00UWXOU2Nnbfqqy7A9TkQ7ILpYqC0K6O3WXPPwmjFlNX5YjBKCH7xo3a8QC0kXD6eKTvKJt2tRkryvFpXqAFJzcUxwnZX6dd3VKPWiiDCDBOgk32vtQgY_0ZoEpNhk_tdkDGey_FuO.ZJRRg.QScqNfspb6Y2YYMEeVljeyCy49EoQ9Uz21o5mMX9b8S2WPX74YKKWr3YfdcbmEfm7KpI4unU1cbORmoktT8lwMzwt1ZxC7ttEoA71UPuM5271RTONVZOKCbZjLDGBvs8QQMkazAeIfaZvT5HcPLxaGr63Nb9U4LHlybNebpo3m1SUF3vZKhJ67ROQx7_f5vd5sFIB7XIXl0DrPkllWvDnQ6syhRrh9nzRo15sJEv04k1MsKy39p
[x-rocketymmf:] => admas_k11
[x-mailer:] => YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
[date:] => Tue, 22 Feb 2011 20:24:19 -0800 (PST)
[from:] => jose mora
[reply-to:] => adams2000@ibibo.com
[subject:] => MOST URGENT
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-114939919-1298435059=:37841"
[x-spam-status:] => No, score=3.4
[x-spam-score:] => 34
[x-spam-bar:] => +++
[x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: FROM THE DESK OF MR JOHN ADAMS,BILL AND EXCHANGE MANAGER,BANQUECOMMERCIALE DU BURKINA (BCB) BURKINA-FASO. I am the manager of bill and exchangeat the foreign remittance departmentOf Bank BCB Burkina, I got your contactthrough Burkina Faso information network online services, I know that thismessage will be a surprise to you and it is coming to you with good intentionwhich will be of mutual benefit for both of us.In my department we discoveredan abandoned sum of $ 20m US dollars ( Twenty million US dollars). In anaccount that belongs to one of our foreign customer who died along with hisentire family on July 25th 2000, Mr. Andreas Schranner, his wife Maria, theirdaughter Eich and husband Christian and two children perished in the airFrance Concorde New York bound flight; please click herehttp://news.bbc.co.uk/1/hi/world/europe/859479.stmSince we got information about his death, there is nobody to stand as hisnext of kin to come over and claim his money because the bank cannot releaseit unless somebody applies for it as next of kin or relation to the deceasedas indicated in our banking guidelines. It is therefore upon this discoverythat I now decided to make this business proposal to you and release themoney to you as the next of kin or relation to the deceased for safety andSubsequent disbursement since nobody is coming for it and I don't want thismoney to go into the Bank treasury as unclaimed Bill and it will not be augurwell for the fund to be unclaimed.The Banking law and guideline here stipulatesthat if such money Remained unclaimed after five years, the money will betransferred into the Bank treasure as unclaimed fund.The request of foreigneras next of kin in this business is occasioned bythe fact that the customerwas a foreigner and a Burkinabe cannot standas next of kin to a foreigner.50 % of this money will be for you as Foreign partner, in respect to theprovision of a foreign account, 50 % would be for me. There after I will visityour country for disbursement according to the [...] Content analysis details: (3.4 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net[Blocked - see ]0.0 T_LOTTO_DEPT BODY: Claims Department-3.0 UNCLAIMED_MONEY BODY: People just leave money laying around-2.0 NA_DOLLARS BODY: Talks about a million North American dollars0.0 HK_SCAM_N2 BODY: HK_SCAM_N20.0 FREEMAIL_FROM Sender email is freemail (jose.mora[at]sify.com)-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, lowtrust[98.139.91.76 listed in list.dnswl.org]1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)-2.0 SUBJ_ALL_CAPS Subject is all capitals0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain0.0 DECEASED_NO_ML Dead not via mailing list1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)0.0 MONEY_LOTTERY Lots of money from a lottery2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL0.0 T_MONEY_PERCENT X% of a lot of money for you0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
FROM THE DESK OF MR JOHN ADAMS,BILL AND EXCHANGE MANAGER,BANQUE COMMERCIALE DU BURKINA (BCB) BURKINA-FASO. I am the manager of bill and exchange at the foreign remittance departmentOf Bank BCB Burkina, I got your contact through Burkina Faso information network online services, I know that this message will be a surprise to you and it is coming to you with good intention which will be of mutual benefit for both of us.In my department we discovered an abandoned sum of $ 20m US dollars ( Twenty million US dollars). In an account that belongs to one of our foreign customer who died along with his entire family on July 25th 2000,
Mr. Andreas
Schranner, his wife Maria, their daughter Eich and husband Christian and two children perished in the air France Concorde New York bound flight; please click herehttp://news.bbc.co.uk/1/hi/world/europe/859479.stm Since we got information about his death, there is nobody to stand as his next of kin to come over and claim his money because the bank cannot release it unless somebody applies for it as next of kin or relation to the deceased as indicated in our banking guidelines. It is therefore upon this discovery that I now decided to make this business proposal to you and release the money to you as the next of kin or relation to the deceased for safety and Subsequent disbursement since nobody is coming for it and I don't want this money to go into the Bank treasury as unclaimed Bill and it will not be augur well for the fund to be
unclaimed.The Banking law and guideline here stipulates that if such money Remained unclaimed after five years, the money will be transferred into the Bank treasure as unclaimed fund.The request of foreigner as next of kin in this business is occasioned bythe fact that the customer was a foreigner and a Burkinabe cannot standas next of kin to a foreigner. 50 % of this money will be for you as Foreign partner, in respect to the provision of a foreign account, 50 % would be for me. There after I will visit your country for disbursement according to the percentages indicated. Therefore to enable the immediate transfer of this fund to you as arranged, you must apply first to the bank as relations or next of kin of the deceased. Upon receipt of your reply, I will send to you by fax or email the textof the application which you will
fill and send to the office of the Director Foreign Remittance Department, I will not fail to bring to your notice that this transaction is hitch free and that you should not entertain any atom of fear as all required arrangements and information's are on my desk. You should contact me immediately as soon as you receive this letter Trusting to hear from you immediately. Yours faithfully, Mr John Adams.