A Scam Email with the Subject "TR: Dear respectful," was received in one of Scamdex's honeypot email accounts on Thu, 19 Jun 2008 15:05:10 -0700 and has been classified as a Advance Fee Fraud/419 Scam. The sender was "Bernard Teyssou" <firstname.lastname@example.org>, although it may have been spoofed.
Return-Path: <email@example.com> Received: from mwinf2335.orange.fr (mwinf2335.orange.fr) by mwinb0k01 (SMTP Server) with LMTP; Thu, 19 Jun 2008 16:13:06 +0200 X-Sieve: Server Sieve 2.2 Received: from smtp23.orange.fr (mwinf2349 [10.232.4.149]) by mwinf2335.orange.fr (SMTP Server) with ESMTP id 908961C00332 for <firstname.lastname@example.org>; Thu, 19 Jun 2008 16:13:06 +0200 (CEST) Received: from me-wanadoo.net (localhost [127.0.0.1]) by mwinf2349.orange.fr (SMTP Server) with ESMTP id 7CAF534001F5 for <email@example.com>; Thu, 19 Jun 2008 16:13:06 +0200 (CEST) Received: from qb-out-1314.google.com (qb-out-1314.google.com [188.8.131.52]) by mwinf2349.orange.fr (SMTP Server) with ESMTP id ED63B3400119 for <firstname.lastname@example.org>; Thu, 19 Jun 2008 16:13:05 +0200 (CEST) X-ME-UUID: 20080619141305972.ED63B3400119@mwinf2349.orange.fr Received: by qb-out-1314.google.com with SMTP id f13so3325233qba.28 for <email@example.com>; Thu, 19 Jun 2008 07:13:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:subject :mime-version:content-type; bh=laSb5kfLWy4ThdIQ735ZBSAaqxrpoABXsIiKdjPsvFA=; b=BscaDNzgFNGe/yoKezXRpRDjobL5tFHBJGc/+eYIUG9F2kryy6PurCbBUcOIPZS48u LuDiSxlwj2PhOOgE6RrLULX+TUwaGMWZpSNKKiMMT8FjLEE76gyBsUC0m1WVuGNWCHow XWcHw7Zfo7ancqOex2WbVWhizpdsQyMorYb34= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:subject:mime-version:content-type; b=lIGhz8ba8syIXY/EgBSWfLTFMuePhOzpCBMOsfd/olQbMBhQ9mE8CAZtBYRROLO7Ih y0igUJISykyZ/x5GT8XmUxqr4oyXS7C8Qkf6hcJrMPa1bzyI5YRiTYyuoYVeaSnkkI+z vHqIARSfR7lRWJ88LK6e8yrvrQ6ylvktFpcko= Received: by 10.125.99.1 with SMTP id b1mr131751mkm.151.1213884730926; Thu, 19 Jun 2008 07:12:10 -0700 (PDT) Received: by 10.125.161.4 with HTTP; Thu, 19 Jun 2008 07:12:10 -0700 (PDT) Message-ID: <firstname.lastname@example.org> Date: Thu, 19 Jun 2008 15:12:10 +0100 From: "Miss. Rubi Johan" <email@example.com> Subject: Dear respectful, MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_1514_6565992.1213884730906" To: undisclosed-recipients: ; X-me-spamlevel: not spam user X-me-spamrating: 94.000000 X-me-spamcause: OK, (400)(1000)nddoufevtefoucdlgedttddm X-Antivirus: avast! (VPS 080619-0, 19/06/2008), Inbound message X-Antivirus-Status: Clean -----Message d'origine----- De : Miss. Rubi Johan [mailto:firstname.lastname@example.org] Envoyé : jeudi 19 juin 2008 16:12 À : undisclosed-recipients: Objet : Dear respectful, Dear respectful, Rubi Johan: email@example.com without any doubt i know that this mail may come to you as a surprise but it is borne out of genuine need for urgent assistance. I am miss rubi johan, the daughter of former finance director of sierra leone gold and diamond corporation mr marcus johan who was assassinated by the rebel forces loyal to mr forday sankoh during the peak of the civil war in our country sierra leone. Before my father died, he gave our mother a deposit certificate of deposit meant for a secret deposit for the sum of usd15,000,000.00 million. My mother who later died of hypertension six months after the death of my father, on her sick bed told me to collect the documents and present them to the firm if she eventually dies and ensure that i source for a trusted and reliable foreigner partner to assist us retrieve the money from bank to his or her country abroad after which i and my younger brother norman will join the person for the investment of the money in good business and for my younger brother to continue his education. This was the intention of my father before he died. I have presented the documents to the firm and they are waiting for the foreign partner of our late father details address. This is also in line with the agreement my late father entered into with the bank at the time of deposit that the deposit will be transferred to address of the beneficiary whose name he did not disclose to the financial firm. You are required to provide an contact details where so we will submit it to them bank. You will also be in custody of the money pending when i and my brother norman will join for the investment in good business and for norman to continue his education. You will have 10% of the total amount and also 40% share of the business will be your own. Please do not expose this transaction as there are a lot of bad things happening in the world now. We trust and hope that you will not sieze our money when it is transferred to your country before we join you in your country. Please if you are interested to assist us do reply through our private email alternative for furthur informations. (firstname.lastname@example.org) God will bless you for assisting us. Best regards, Rubi and Norman Johan