An
Email with the Subject "Fwd: Mis.Rose" was
received in one of Scamdex's honeypot email accounts on Mon, 12 May 2008 19:51:06 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as David Cherbonnier <dlc_engineering@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
assistance300709-1210safeopportunityinvestmentsentmailliberiaengineerdlc_engineering@yahoo.comulrose@yahoo.comroses4@yahoo.frsubject8528dlc_engineering@yahoo.com will yahoo.comyahoo-yahoo.yahoo!(helo n3a.bullet.mail.ac4...[76.13.13.25][68.142.194.244][209.191.90.56][127.0.0.1](qmail 51722 invoked by u...[41.208.135.74](cst)(us$ 8,400.000.00)
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Mon, 12 May 2008 19:51:06 -0700
[received:] => Array
(
[0] => from web32203.mail.mud.yahoo.com ([68.142.207.134])by gogol.o7e.net with smtp (Exim 4.68)(envelope-from )id 1JvkbT-00033y-Scfor scams@scamdex.com; Mon, 12 May 2008 19:51:06 -0700
[1] => (qmail 70168 invoked by uid 60001); 13 May 2008 02:51:07 -0000
[2] => from [202.156.8.11] by web32203.mail.mud.yahoo.com via HTTP; Mon, 12 May 2008 19:51:06 PDT
)
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; b=DOduP3Dvhs1FUphyvqBELKwcxEn3FusBdu3iS0nHnUGPvnC1i+21PYip2Ja/Y8VVqFh7XRgA+3L7lglBxo+DJ3b4sBreHO5YJ5U3JhfYJOqSGhALz4zafvtRrfI6MyQwLD+5q7r78JhvMdm4nvnM39IW0E26zgtcxJnn1rByB7c=;
[x-ymail-osg:] => 9dDV1QEVM1mEEqn7jUk1ZrqQQgjiHcMhlofR49DHKAB9uSP6FAAJhEOUZ5lwvZDBKBEtVoZxiQJljYe9Mnx0dspmW8pKoQK3nUl4KDZ6iR.2.MkWrvAREt1fCg--
[date:] => Mon, 12 May 2008 19:51:06 -0700 (PDT)
[from:] => David Cherbonnier
[subject:] => Fwd: Mis.Rose
[to:] => Phish , phish
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1383692917-1210647066=:69935"
[content-transfer-encoding:] => 8bit
[x-mailer:] => <938308.69935.qm@web32203.mail.mud.yahoo.com>
[x-spam-status:] => No, score=5.2
[x-spam-score:] => 52
[x-spam-bar:] => +++++
[x-spam-flag:] => NO
[x-o7e-flag:] => J-3509981-042508::web32203.mail.mud.yahoo.com [68.142.207.134]
[message-id:] => REIDs3x1239839787.M644101P32690V-S3X
[x-scamdex-scores:] => S:50 P:39 A:41 L:42 E:42 G:38
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 50
[x-scamdex-totscore:] => 252
[x-scamdex-kw:] => assistance,claim,contact,dollars,finance,hundred thousand,inc.,mobil,opportunity,proposal,resident,response,safe,sent,share,taylor
[x-scamdex-em:] => Roses4@yahoo.fr,Roses4@yahoo.frSu,bm@omp109.mail.mud.yaho,dlc_engineering@yahoo.com,qm@web76010.mail.sg,ulrose@yahoo.com.sg,ulrose@yahoo.com.sgMI
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1239839787.M644101P32690V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now.
"Mis.Rose Paul" <ulrose@yahoo.com.sg> wrote: X-Apparently-To: dlc_engineering@yahoo.com via 68.142.207.135; Mon, 12 May 2008 09:03:12 -0700 X-Originating-IP: [76.13.13.66] Return-Path: <ulrose@yahoo.com.sg> Authentication-Results: mta189.mail.re2.yahoo.com from=yahoo.com.sg; domainkeys=pass (ok) Received: from 76.13.13.66 (HELO n3a.bullet.mail.ac4.yahoo.com) (76.13.13.66) by mta189.mail.re2.yahoo.com with SMTP; Mon, 12 May 2008 09:03:10 -0700 Received: from [76.13.13.25] by n3.bullet.mail.ac4.yahoo.com with NNFMP; 12 May 2008 07:58:20 -0000 Received: from [68.142.194.244] by t4.bullet.mail.ac4.yahoo.com with NNFMP; 12 May 2008 16:02:55 -0000 Received: from [209.191.90.56] by t2.bullet.mud.yahoo.com with NNFMP; 12 May 2008 16:02:55 -0000 Received: from [127.0.0.1] by omp109.mail.mud.yahoo.com with
NNFMP; 12 May 2008 16:02:54 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: 984913.80542.bm@omp109.mail.mud.yahoo.com Received: (qmail 51722 invoked by uid 60001); 12 May 2008 16:02:53 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.sg; h=X-YMail-OSG:Received:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; b=3SDDfaAoxVsRdptjiFupnLjs69I58NHcU3P79gwnBt6nDkZr6VdERF4dRlttClNIF03APDpRDAHLHP1gOMBTCpdIvc8+gWiXhXI5KZHi6YvElVypxhR0+zBgctWNmrIn8MdKconK14W76xBrO6YY8FzBr7RsVbTi9y/O0Vff7S4=; X-YMail-OSG: Sa7LMOMVM1kn0V5gpIVBaCBjgYIw7BzNaFJ4UCwD Received: from [41.208.135.74] by web76010.mail.sg1.yahoo.com via HTTP; Tue, 13 May 2008 00:02:52 CST Date: Tue, 13 May 2008 00:02:52 +0800 (CST) From: "Mis.Rose Paul" <ulrose@yahoo.com.sg> Reply-to: Mis.Roses4@yahoo.fr Subject: Mis.Rose To: ulrose@yahoo.com.sg MIME-Version: 1.0 Content-Type:
multipart/alternative; boundary="0-1846300709-1210608172=:45265" Content-Transfer-Encoding: 8bit Message-ID: <40827.45265.qm@web76010.mail.sg1.yahoo.com> Content-Length: 3577
Good day My Dear. I do not know to what extent you are familiar with events and fragile political situation in my country Liberia , but it has formed consistent headlines in the CNN, BBC news bulletins. I will be very glad if you can accept to lead me to the right channel by means of your assistance to my situation now.I will make my proposal well known if I am given the opportunity. I would like to use this opportunity to introduce myself to you. I am Mis.Rose Paul from Liberia i am 27 yrs old, the daughter of Late Mr Paul Bamar Chief Financial Officer for Budget under the leadership of president Charles Taylor who went for excile and presently facing trial on a case of genocide as for the killing of
innocent souls.I am presently under asylum in Senegal. The main reason am contacting you now is to seek your assistance in the area of our better future living and investment of huge sum eight millon four hundred thousand dollars (US$ 8,400.000.00) my late father deposited for safe keeping under Finance company here in Dakar -Senegal for safe keeping with my name as the only next of kin, I want you to help me claim the money for retransfer to your country on my behalf. As I have mention earlier I will give you more details on this issue on your acceptance to help me. Thanks,while waiting for your response. Sincerely yours, Mis.Rose Paul. Real people. Real questions. Real answers. Share what you know.
