A Scam Email with the Subject "TR: CONFIDENTIAL IS THE ANSWER PLS." was received in one of Scamdex's honeypot email accounts on Mon, 14 Jul 2008 13:57:46 -0700 and has been classified as a Advance Fee Fraud/419 Scam. The sender was "Bernard Teyssou" <firstname.lastname@example.org>, although it may have been spoofed.
Return-Path: <email@example.com> Received: from mwinf2f20.orange.fr (mwinf2f20.orange.fr) by mwinb0k01 (SMTP Server) with LMTP; Thu, 10 Jul 2008 13:31:04 +0200 X-Sieve: Server Sieve 2.2 Received: from smtp2f.orange.fr (mwinf2f26 [10.232.18.126]) by mwinf2f20.orange.fr (SMTP Server) with ESMTP id 29478700008D for <firstname.lastname@example.org>; Thu, 10 Jul 2008 13:31:04 +0200 (CEST) Received: from me-wanadoo.net (localhost [127.0.0.1]) by mwinf2f26.orange.fr (SMTP Server) with ESMTP id 17080240008D for <email@example.com>; Thu, 10 Jul 2008 13:31:04 +0200 (CEST) Received: from qb-out-0506.google.com (qb-out-0506.google.com [18.104.22.168]) by mwinf2f26.orange.fr (SMTP Server) with ESMTP id 64BF52400084 for <firstname.lastname@example.org>; Thu, 10 Jul 2008 13:31:03 +0200 (CEST) X-ME-UUID: 20080710113103412.64BF52400084@mwinf2f26.orange.fr Received: by qb-out-0506.google.com with SMTP id e7so6483363qbe.31 for <email@example.com>; Thu, 10 Jul 2008 04:31:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:subject :mime-version:content-type; bh=3+NBMfHNGzWCg5joKIEzr8wf6Rrh/LaAaN2OrJOpS4U=; b=Ib5Or0edpg49Dh/0fanjDiZZbjKR+/YGEEUH3lYf9G8T6fDT+ESnFOxYg2b/zfEwEt 4q56AcFDm3MmOMSKcfzu+L7/DpZR2FASp6cM7wpjZqGJF7i2KKOZHPAzaZzAVmdBX79b CHKaSVr4GdI9j4ifUK/9/ooBc/L3ik6Zuyy8s= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:subject:mime-version:content-type; b=SxVpJBZ83rxWCtqAks8xYvSI+zZ616yJRCZ/RvAme7LFX/hfw8eYpaG0bPtSOBE272 EHEf8cdLF52pW6cOw6C0Nxc2mOtrbcXiOZ/NrVTcnEBZsA1XXbqVeshzCA5SCd+7eNWt M1MfZDHZvHAMtODTA2CWG5YU/66FZTPTlZxoI= Received: by 10.103.244.19 with SMTP id w19mr4751620mur.68.1215689408345; Thu, 10 Jul 2008 04:30:08 -0700 (PDT) Received: by 10.103.233.1 with HTTP; Thu, 10 Jul 2008 04:30:07 -0700 (PDT) Message-ID: <firstname.lastname@example.org> Date: Thu, 10 Jul 2008 13:30:07 +0200 From: "Pius Odogwu" <email@example.com> Subject: CONFIDENTIAL IS THE ANSWER PLS. MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_5100_19096833.1215689408344" To: undisclosed-recipients: ; X-me-spamlevel: not spam user X-me-spamrating: 94.000000 X-me-spamcause: OK, (400)(1000)nddoufevtefoucdlgedttddm X-Antivirus: avast! (VPS 080714-0, 14/07/2008), Inbound message X-Antivirus-Status: Clean -----Message d'origine----- De : Pius Odogwu [mailto:firstname.lastname@example.org] Envoyé : jeudi 10 juillet 2008 13:30 À : undisclosed-recipients: Objet : CONFIDENTIAL IS THE ANSWER PLS. <http://images.google.com.ng/imgres?imgurl=http://www.iucn.org/en/news/archi ve/2001_2005/pictures/worldbank.jpg&imgrefurl=http://www.iucn.org/en/news/ar chive/2002/newdecember02.htm&h=130&w=130&sz=4&hl=en&start=73&tbnid=OTtf9uln1 x9btM:&tbnh=91&tbnw=91&prev=/images%3Fq%3DSWITZERLAND%2BWORLD%2BBANK%2BPRESI DENT%26start%3D72%26gbv%3D2%26ndsp%3D18%26svnum%3D10%26hl%3Den%26sa%3DN> WORLD BANK GROUP <http://www.cigm.qc.ca/intranet/photo.aspx?code=88889>
This message might meet you in utmost surprise, however, it's just my Urgent need for foreign partner that made me to contact you for this transaction.=20 =20 I am a banker by profession from Lome Togo in West Africa and currently holding the post of director Auditing and accounting unit of the bank. I have the opportunity of transferring the left over Funds ($15 million = Usd) of one of my bank clients who died Along with his entire family on = (Monday 31st July 2000) in a plane crash. =20 Hence,you have the same surname with him i am inviting you for a = business deal where This money can be shared between us in the ratio of 50/40 = while 10% Will be mapped out for expenses. I will like to inform you that = this transaction is 100% risk free, WHILE Further details of the transfer = will be forwarded to you as soon as I Receive your return mail. =20 Meanwhile the World Bank Group has mandated the FIRST CITY MONUMENT = BANK LOME TOGO to release this unclaimed fund immediately the next of kin = is discovered with due application. =20 This payment will be effected through Swift Telegraphic Transfer incunjunction with the Backing of the world bank. Your Urgent response is needed for immidiate transfer of this fund to = you. =20 ( DIRECTORS-General ) FIRST CITY MONUMEN BANK LOME TOGO.=20 =20 <http://images.google.com/imgres?imgurl=3Dhttp://www.iisd.ca/climate/cop1= 1/enb ots/photos/3dec/IMG_9819.jpg&imgrefurl=3Dhttp://www.iisd.ca/climate/cop11= /enbo ts/enbots1706e.html&h=3D2304&w=3D3456&sz=3D6139&hl=3Den&start=3D24&tbnid=3D= DCZaLejHV3nqt M:&tbnh=3D100&tbnw=3D150&prev=3D/images%3Fq%3Dafrica%2Bdevelopment%2Bbank= %2Blogo%2 6start%3D18%26gbv%3D2%26ndsp%3D18%26svnum%3D10%26hl%3Den%26sa%3DN> <http://images.google.com.ng/imgres?imgurl=3Dhttp://www.ruf.rice.edu/~mod= elun/ modelun.jpg&imgrefurl=3Dhttp://www.ruf.rice.edu/~modelun/Committee/bank.h= tm&h=3D 700&w=3D850&sz=3D117&hl=3Den&start=3D16&tbnid=3DDTUBryn7BmEgAM:&tbnh=3D11= 9&tbnw=3D145&prev =3D/images%3Fq%3DWORLD%2BBANK%26gbv%3D2%26svnum%3D10%26hl%3Den> =20 =20 (FILL THIS FORM BELLOW PLEASE AND RESEND IT TO ME). =20 1) Your Full Name............................. 2) Your Age....................................... 3) Marital Status................................ 4) Your Cell Phone Number=85=85=85=85..=20 5) Your Country=85=85=85=85=85=85.............. 6) Your Occupation............................ 7) Sex................................................ =20 =20 THANKS AND GOD BLESS YOU. DR PIUS ODOGWU. =20