An
Email with the Subject "My Dearest Friend" was
received in one of Scamdex's honeypot email accounts on Wed, 18 Jan 2017 13:28:06 -0500
and has been classified as a Generic Scam Email.
The sender shows as Mark Williams <jerryessen@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
million thousand usdchequecontacthappyjoyone million thousandsecretarypartnerprojectfund transferinvestmentmailshareusdjerryessen@yahoo.comyahoo.com($1,950,000.00)my dearest mr james attaemail: mr mark williams
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] => Array
(
[0] =>
[1] =>
)
[delivered-to:] => newblood@scamdex.com
[received:] => Array
(
[0] => from edie.newsblaze.comby edie.newsblaze.com (Dovecot) with LMTP id ieZmObazf1gaOQAApOa+twfor ; Wed, 18 Jan 2017 13:28:06 -0500
[1] => from nm5-vm8.bullet.mail.ir2.yahoo.com ([212.82.96.115]:42738)by edie.newsblaze.com with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)(Exim 4.87)(envelope-from )id 1cTuxp-0003XL-S5for scams@scamdex.com; Wed, 18 Jan 2017 13:28:06 -0500
[2] => from [212.82.98.53] by nm5.bullet.mail.ir2.yahoo.com with NNFMP; 18 Jan 2017 18:30:11 -0000
[3] => from [212.82.98.84] by tm6.bullet.mail.ir2.yahoo.com with NNFMP; 18 Jan 2017 18:30:09 -0000
[4] => from [127.0.0.1] by omp1021.mail.ir2.yahoo.com with NNFMP; 18 Jan 2017 18:30:00 -0000
[5] => from jws700022.mail.ir2.yahoo.com by sendmailws108.mail.ir2.yahoo.com; Wed, 18 Jan 2017 18:29:59 +0000; 1484764199.598
)
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Wed, 18 Jan 2017 13:28:06 -0500
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1484764211; bh=f22CyyoBPxv3UKQrfY6XcUurv7raFFN14cgjWk4eTRQ=; h=Date:From:Reply-To:Subject:References:From:Subject; b=YKcWLZsT4uw0GcS92eQ5Ww7jn0QUmqrK50oWawoV6cUAJuuqG1u5K35ar4WMODOVfwu55f1QmtKAE8e+j2F9bBSx0ii+e6iOZmobrat0a0WKS9X/NQ1N8lQQJXsyLjyDR556szMU+VBP+YAYItqVFR+a0sDIekLTH/m87AwX9fUgMWmAjk7s2ayl8/sSV9rO1yga8x5gaOyoQhywPGGuzKs65a86pKqZg7AyJADd6h0Rcl/+/hvgQdh9oHptL8RtkkeJpDJudXg+HKUsaBj/4AA74QAjpY8pIbZ0n/wwuMAA8NRWMJ7F9Jhcc7mF3m3Eo7dT6k9mqzY5ODX5B5Hz1A==
[x-yahoo-newman-property:] => ymail-4
[x-yahoo-newman-id:] => 23716.80894.bm@omp1021.mail.ir2.yahoo.com
[x-ymail-osg:] => kYCVwmIVM1niLHh1PHczGsjeAk6HWWiBeckkvdbP5FkdvE3tjpaH.EvIH1vTWlBLDzkbUzfjbSGz4sHEX5QNQDwWDmVeGdltlU_h8BJhuk48f0TK2VJjGG5.5ALE_.eOXJvlurl0yd0gPi5M8_Dexs2GP1FWjnCqEWyjLooiM5I5TJmRec4KxTcKMR0Xeyt6whSSQFezGwcQ9KZ7RfFANqs0RB9m_JlIY1Do7sUwzRyOkD60GLblSGfAVOmZWh68Fdaukm_qna91hhuDitGUfnA2bjjK1N0effMx2dDJD4LJEuWA3lG4AQCBAiuj2mV5w_EttVLHkvp_1DSyJ0QwzDFBeK8Roqk4uK5wrOA5_ysMVnke9_wv4u0DaIPnfxre5grjjN5BKG_BEfyBF0AzgQRGPbm1C.zoQ00LGRLzDlGTq4GbFCQ8c_gzfbBoSWHegj3aCgpkRj9fd6J39CR9gHYulEfavenhTXMhc39jSZQXWppIat9cLcECT546dt_u9wEZMQUR9vmu_z_VeyQCkOvgW41YJpcjyb5b111yR0q0nTAm_kE9uYtrjA--
[date:] => Wed, 18 Jan 2017 18:29:59 +0000 (UTC)
[from:] => Mark Williams
[reply-to:] => Mark Williams
[message-id:] => <41685630.13663602.1484764199331@mail.yahoo.com>
[subject:] => My Dearest Friend
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="----=_Part_13663601_1803981376.1484764199330"
[references:] => <41685630.13663602.1484764199331.ref@mail.yahoo.com>
[content-length:] => 2923
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I am very happy to inform you about my success in getting that fund transferred, Now I want you to contact my secretary on the information below:
NAME: Mr James Atta EMAIL: attajames206@yandex.com
Ask him to send you the total sum of ($1,950,000.00) One Million Nine Hundred and fifty Thousand usd Cashier's Cheque, which I kept for your compensation because of your past effort in trying to assist me in transferring the fund which later fail both of us before I find a partner from London who assisted me and transferred the fund meanwhile you can contact my secretary on this Email: attajames206@yandex.com and Also Forward Your Name,Current Address and Your Direct Phone number To him.
Please do let me know immediately you receive the Cashier's Cheque so that we can share the joy after all the suffering at that time. In the moment,I am very busy here in London because of the investment projects which me and my new partner are having at hand.
Yours faithfully. Mr Mark Williams
My Dearest Friend
I am very happy to inform you about my success in getting that fund transferred, Now I want you to contact my secretary on the information below:
NAME: Mr James Atta EMAIL: attajames206@yandex.com
Ask him to send you the total sum of ($1,950,000.00) One Million Nine Hundred and fifty Thousand usd Cashier's Cheque, which I kept for your compensation because of your past effort in trying to assist me in transferring the fund which later fail both of us before I find a partner from London who assisted me and transferred the fund meanwhile you can contact my secretary on this Email: attajames206@yandex.com and Also Forward Your Name,Current Address and Your Direct Phone number To him.
Please do let me know immediately you receive the Cashier's Cheque so that we can share the joy after all the suffering at that time. In the moment,I am very busy here in London because of the investment projects which me and my new partner are having at hand.
