An
Email with the Subject "A message" was
received in one of Scamdex's honeypot email accounts on Thu, 23 Dec 2010 12:40:14 -0800
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Astrid <handy.astrid01@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
africa hundred thousand million dollarsgoldboxforeignoilbanknationalaccountclaimrecordsten millionfive hundred thousand milliontransactionopportunityescrow60%40%businessfund transfersecuremailbank sharedollar international bank our bank the bank burkina fasoconfidentialastrid01@gmail.com will ($10.5m)dear mr. handy astrid
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => mxw@scamdex.com
[delivery-date:] => Thu, 23 Dec 2010 12:40:14 -0800
[received:] => Array
(
[0] => from nm4-vm1.bullet.mail.in.yahoo.com ([121.101.151.209])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1PVrxN-00054X-CEfor mxw@scamdex.com; Thu, 23 Dec 2010 12:40:14 -0800
[1] => from [121.101.151.236] by nm4.bullet.mail.in.yahoo.com with NNFMP; 23 Dec 2010 20:40:23 -0000
[2] => from [121.101.151.235] by tm1.bullet.mail.in.yahoo.com with NNFMP; 23 Dec 2010 20:40:18 -0000
[3] => from [127.0.0.1] by omp1004.mail.in.yahoo.com with NNFMP; 23 Dec 2010 20:40:41 -0000
[4] => (qmail 14374 invoked by uid 60001); 23 Dec 2010 20:40:14 -0000
[5] => from [41.203.235.12] by web95611.mail.in.yahoo.com via HTTP; Fri, 24 Dec 2010 02:10:14 IST
)
[x-yahoo-newman-property:] => ymail-5
[x-yahoo-newman-id:] => 36367.79183.bm@omp1004.mail.in.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1293136814; bh=BFF6re3KIXliNX2dYZv6uv7owDnh+IqR2NpfwIrXz3I=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=h0uObgFY4ERJNFbS3JmYek+Amz3Dg01ehql9iyFoHRXbnsGIyE1NpfKEgqvAj90EwEtLOkJ2Rvp+8CmPABkPV9m11zMm8oWeI6hY+Xt18e2dQRFe87fve+ikzy8bNBFwUjk0vBKvqLe2NnZRnrlp6HkmHI/qLylY34dpu+aOh/g=
[message-id:] => <124071.7502.qm@web95611.mail.in.yahoo.com>
[x-ymail-osg:] => oaSo3jQVM1lS124K7g9D3qYlAF.LxFYGPkn4J7QJqbPpfdDTxexW4bHFsHrkjtmuyAdsKRAmVQu6vAkXXfWR0lwiNuXagUytzrlyfQVtjvwsQqZTpbuwRWe8kWE_osYAdMpdjEzoUd7uOPOI_k1MYOERRfFdCMB5yIPp3aiW99CO5lsTcgO2hSU3APUCAq.B48PesYKHOADVCtYgdmTF63hK2pr5qK4g7ieHjHBueWOTDSM2fE_AgTAWKrZHAz_SuisvGPsOFJfk1AlAAFPOXAgBOdNjqYiyevcyE8CNYKd_r6kOR5Y1MUC5OxA6weKKV.zvZqMzREUgOwvIdIfoyvaR45Yp5pTJjcSlbSv4zMVCnYsfRwq_78w9FNQlbxl_K957GnbFaCavkw6GDliLE.t.pvxrYeP6NdbSsJea1DqfHJyecgnyv223euKHarQwHXhFholtrRtsg8TJX2U6F.KRvebpDjBlt7dMAEjPPooRSu1_N7JP5EfldhgPS6RpksmkF4rXQPyS3DYWzQ6TBV7rR_J29bHycCxbp9j6fxYtQ.btZK3a1AZuptkYB_RVjzK1qdorkC3Yib.TcGPWr5pF3vk2jYRub_zA8apIvzr7T8TsmPzO9mYMReD_SDY_rABfGJ2lNOpYZZhMHY_47OANdcZCSpUsgUBgMgQd_lWa.iLsjhaLIdN4Ubv2f6jId5SOjmOpLvFPE8JAfVjwCDsVngA7tuiyQl4N93HSu4eisLYr4KuxZLUUSYsqYBw1OuevD9dk8S5oqldXsmm.J25a.mNGjFJ5dpXc7NLIX7FM0fsHaJm_idn93paFVYJsaUd7FbZ.TESyZHLK9D.fWD.dnzP4AFSUaS2Oq8nJbm8D_RbjlJi3O7_jm9kSUx1JfVs6wZ.8DAl_fzG1dko-
[x-rocketymmf:] => yuma.arina
[x-mailer:] => YahooMailClassic/11.4.20 YahooMailWebService/0.8.107.285259
[date:] => Fri, 24 Dec 2010 02:10:14 +0530 (IST)
[from:] => Astrid
[reply-to:] => handy.astrid01@gmail.com
[subject:] => A message
[to:] => handy.astrid01@gmail.com
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1913957308-1293136814=:7502"
[x-spam-status:] => No, score=-13.8
[x-spam-score:] => -137
[x-spam-bar:] => -------------
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I am Mr. Handy Astrid I work as the Foreign Operations Manager with one of the
international bank here in Burkina Faso. Although the world is very small place and hard place to meet people because you don't know who to trust or believe, but as I have developed the trust in you after my fasting and praying, i made up my mind to confide this confidential business suggestion to you.
Be rest assure that everything will be handled confidentially because, this is a great opportunity we cannot afford to miss, as it will make our family profit alot.
It has been 7 years ago, that most of the greedy African Politicians used our bank to Launder money overseas through the help of their Political advisers.
Most of the funds which they transferred out of the shores of Africa was gold and oil money that was supposed to have been used to develop the continent.
The Political advisers always inflated the amounts before transfer to foreign accounts so I also used the opportunity to divert part of the funds hence I am
aware that there is no official trace of how much was transferred as all the accounts used for such transfers were being closed after transfer.
I acted as the Account Officer to most of the politicians and when i discovered that they were using me to succeed in their greedy act, I also cleaned some of their banking records from the Bank files and no body cares to ask me because the money was too much for them to control.
As o am sending this message to you, I was able to divert Ten Million five Hundred thousand United State Dollars ($10.5M) to an escrow account belonging to no one in the bank.
Now the bank is very anxious to know who is the real beneficiary of the funds because they have made a lot of profits with the funds. It has been more than five years now and most of the politicians are no longer using our bank to transfer funds overseas, majority of them don't have the power again, because their tenure has expired. The $10.5
Million Dollars has been lying in the bank as unclaimed fund.
I will soon retire from the bank and without wasting time i will like the fund to be release into your account. So that i will come to your country for the sharing of the fund, The money will be shared 60% for me and 40% for you .There's no one that is going to ask you any question about the funds because everything is well secured by me. If you are interested in this transaction, do not fail to reply me back, but if you are not interested delete my message from your box ok.