An
Email with the Subject "PLEASE GET BACK TO ME THANKS." was
received in one of Scamdex's honeypot email accounts on Fri, 12 Jun 2009 07:29:05 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as kk.proxy01@rocketmail.com.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
beneficiaryassistancebankcontactnationalaccountglobaldepositresponse30%70% transferfundreportmailbank bank accountbank transfer commercial bank last bank your bank will dear mr. kelvin kwame ma...financial
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Fri, 12 Jun 2009 07:29:05 -0700
[received:] => Array
(
[0] => from n60a.bullet.mail.sp1.yahoo.com ([98.136.45.7])by fire.newsblaze.com with smtp (Exim 4.69)(envelope-from )id 1MF7kT-0004Gl-10for scams@scamdex.com; Fri, 12 Jun 2009 07:29:05 -0700
[1] => from [69.147.84.144] by n60.bullet.mail.sp1.yahoo.com with NNFMP; 12 Jun 2009 14:28:43 -0000
[2] => from [69.147.65.158] by t6.bullet.mail.sp1.yahoo.com with NNFMP; 12 Jun 2009 14:28:43 -0000
[3] => from [127.0.0.1] by omp406.mail.sp1.yahoo.com with NNFMP; 12 Jun 2009 14:28:43 -0000
[4] => (qmail 61597 invoked by uid 60001); 12 Jun 2009 14:28:43 -0000
[5] => from [41.210.17.102] by web43509.mail.sp1.yahoo.com via HTTP; Fri, 12 Jun 2009 07:28:43 PDT
)
[x-yahoo-newman-property:] => ymail-5
[x-yahoo-newman-id:] => 694244.98152.bm@omp406.mail.sp1.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=rocketmail.com; s=s1024; t=1244816923; bh=A9tDDrtIGTEKfYqCb+SGYYNXImEA7p7DPOF1brZFOUc=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=2qiHQgAogA9mm7etPJG2YrLGmb0w0m6ad1LtVMyEiOZliao6ye6MnE2zMc6RHCX+UmVzMdz54tiYVpkYvpjuZYOfBmXMDlcHWTJGgkGdfCAwWFqnEANgMAwxcymbII2Yx8bQ7OiTDPuXGNUeMsd/to2uLhyW+6nRQJ+yFg6hf2o=
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=rocketmail.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ntPjzfXqXVewpn1rmUBP2BdW3wDzH9Aq/Ehwmf4t35tLt7H6ShUQSBVsluwjQPqhIb4c/CHFLe8JVohCWfWr1BKSFmZ85VcZE5SsYr6DeJ+uyi7fC+L3buuj0HKQaLmrLmsWu7ogahDDDBIEGlLCxN6N1E/+VFGdrbef0QIYHNc=;
[message-id:] => <421274.55254.qm@web43509.mail.sp1.yahoo.com>
[x-ymail-osg:] => PFtwuekVM1nhbzw6HqyTAu60WfXFtq5vH7y1.OwfOPbXsjOvZbWN_erHG495NOOue13RqT6kZNK8aSq9jDzkX2DeQSW6rsAFzRnupvvqlZ3YrMrxknEIM5pre02dPhM24P0Wu4Ln9RDnY5eesYSRHYM3LZ8HKOcKVFKEhrkixrInxm8PvA_7bybOZ9YLmvd8jQWNZTCwOUBVYLBTF3Tqg_.IFYt0EA_QTXtypyZ3P0tAGr2Sf9YKL6qNCORvNnHH3FGlMyUUb1GHp.n_1A--
[x-mailer:] => YahooMailClassic/5.4.12 YahooMailWebService/0.7.289.15
[date:] => Fri, 12 Jun 2009 07:28:43 -0700 (PDT)
[from:] => kk.proxy01@rocketmail.com
[reply-to:] => kk.proxy01@rocketmail.com
[subject:] => PLEASE GET BACK TO ME THANKS.
[to:] => kk.proxy01@rocketmail.com
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1829856691-1244816923=:55254"
[x-spam-status:] => No, score=-8.2
[x-spam-score:] => -81
[x-spam-bar:] => --------
[x-spam-flag:] => NO
[x-scamdex-scores:] => S:54 P:42 A:47 L:42 E:44 G:40
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 54
[x-scamdex-totscore:] => 269
[x-scamdex-kw:] => transfer,\%,account,assistance,bank,bank transfer,beneficiary,contact,first,fund,global,inc.,national,report,response,service,trust
[x-scamdex-em:] => bm@omp406.mail.sp,proxy01@rocketmail.com
[x-scamdex-dir:] => D
[x-scamdex-id:] => D1244816945.H330953P16658
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
From: Mr. Kelvin Kwame Manager International Commercial Bank Ghana , First Light, Kaneshi Branch. Dear Friend, Please I got your contact from my bank global email addresses catalogue for 2008 and I believed you are an honest person and also trust worthy to entrust this transfer with.. My name is Kelvin Kwame, I am the manager of the International Commercial Bank Ghana , First Light, Kaneshi Branch. I am a Ghanaian, married with two kids. I am writing to solicit your assistance in
the transfer of US $18,550.000.00. This fund is the excess profit of what my branch in which I am the manager made as profit
during the last bank financial year. I have already submitted an approved end of the year financial report for the year 2007 to my Head office here in Accra and they will never know of this excess. I have since then, placed this fund on a suspense Account Without a beneficiary. As An officer of the bank, I cannot be directly connected to this money thus impelled to request for your assistance to receive this money into your bank Account. I intend to part 30% of this fund to you while 70% shall be for me. I do need to stress that there are practically no risk involved in this. It's going to be a bank-to-bank transfer. All I need from you is to stand as the original depositor of this fund. If you accept this offer, please I will appreciate your timely response. Thank you. With regards, Mr. Kelvin
Kwame