An
Email with the Subject "Hello" was
received in one of Scamdex's honeypot email accounts on Sat, 09 Sep 2017 13:54:10 -0400
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as "Attorney Micheal Denton" <copiadoracz8@prevenciondrogas.gob.ec>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
8 million poundsattorneygasdiednext of kinbankclaim milliondepositclient100%fund transfersentmailrisk freebank poundsolicitor(heart attack)
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] => Array
(
[0] =>
[1] =>
)
[delivered-to:] => newblood@scamdex.com
[received:] => Array
(
[0] => from edie.newsblaze.comby edie.newsblaze.com with LMTP id 6NpOL8IqtFkMAwAApOa+twfor ; Sat, 09 Sep 2017 13:54:10 -0400
[1] => from srv20613.emailfirewall.spamina.com ([92.54.22.204]:37107 helo=srv20613.emailfirewall.priv)by edie.newsblaze.com with esmtps (TLSv1.2:DHE-RSA-AES128-SHA:128)(Exim 4.89)(envelope-from )id 1dqjxK-0008TB-KZfor scams@scamdex.com; Sat, 09 Sep 2017 13:54:10 -0400
[2] => from [192.168.200.68] (helo=srv20359.emailfirewall.spamina.com)by srv20613.emailfirewall.priv with esmtpsa (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128)(Exim 4.80)(envelope-from )id 1dqjvL-0001dV-Re; Sat, 09 Sep 2017 19:52:09 +0200
[3] => from [200.125.209.12] (helo=prevenciondrogas.gob.ec)by srv20359.emailfirewall.spamina.com with esmtpsa (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256)(Exim 4.80)(envelope-from )id 1dqjvJ-0003CM-4f; Sat, 09 Sep 2017 19:52:05 +0200
[4] => from localhost (localhost [127.0.0.1])by prevenciondrogas.gob.ec (Postfix) with ESMTP id AEDD161F786AE;Sat, 9 Sep 2017 12:53:07 -0500 (-05)
[5] => from prevenciondrogas.gob.ec ([127.0.0.1])by localhost (prevenciondrogas.gob.ec [127.0.0.1]) (amavisd-new, port 10032)with ESMTP id TUwtATP8hxSE; Sat, 9 Sep 2017 12:53:05 -0500 (-05)
[6] => from localhost (localhost [127.0.0.1])by prevenciondrogas.gob.ec (Postfix) with ESMTP id 6264E61EF0E32;Sat, 9 Sep 2017 12:50:32 -0500 (-05)
[7] => from prevenciondrogas.gob.ec ([127.0.0.1])by localhost (prevenciondrogas.gob.ec [127.0.0.1]) (amavisd-new, port 10026)with ESMTP id 7qlYxwQrkZe1; Sat, 9 Sep 2017 12:50:31 -0500 (-05)
[8] => from [10.199.239.93] (199-7-157-86.eng.wind.ca [199.7.157.86])by prevenciondrogas.gob.ec (Postfix) with ESMTPSA id B60F461F786AA;Sat, 9 Sep 2017 12:46:14 -0500 (-05)
)
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Sat, 09 Sep 2017 13:54:10 -0400
[x-envelope-from:] => copiadoracz8@prevenciondrogas.gob.ec
[x-virus-scanned:] => amavisd-new at prevenciondrogas.gob.ec
[content-type:] => multipart/alternative; boundary="===============0556481751=="
[mime-version:] => 1.0
[subject:] => Hello
[to:] => Recipients
[from:] => "Attorney Micheal Denton"
[date:] => Sat, 09 Sep 2017 10:43:33 -0700
[reply-to:] => esq.michealdenton@outlook.com
[message-id:] => <20170909174614.B60F461F786AA@prevenciondrogas.gob.ec>
[x-ctch-ipclass:] => T3
[x-spf-received:] => 2
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I am Attorney Micheal Denton, a solicitor to a client who died due to a brief illness (Heart Attack)in 2007 and left a fixed deposit of 14.8 Million Pounds in a Bank here in the United Kingdom without leaving no next of Kin.Am writing you to seek your consent to present you as his next of kin as you both have the same last name.
What i am proposing is 100% risk free i guarantee and you stand to make a lot of money for yourself.I have all documents to back my claim and have these funds transferred to you in less than 2 weeks and we can both split the proceeds.Kindly get back to me in receipt of this email.
I am Attorney Micheal Denton, a solicitor to a client who died due to a brief illness (Heart Attack)in 2007 and left a fixed deposit of 14.8 Million Pounds in a Bank here in the United Kingdom without leaving no next of Kin.Am writing you to seek your consent to present you as his next of kin as you both have the same last name.
What i am proposing is 100% risk free i guarantee and you stand to make a lot of money for yourself.I have all documents to back my claim and have these funds transferred to you in less than 2 weeks and we can both split the proceeds.Kindly get back to me in receipt of this email.
