An
Email with the Subject "COMPASENTION FOR YOUR PAST EFFORT" was
received in one of Scamdex's honeypot email accounts on Fri, 03 Jun 2011 23:33:55 -0700
and has been classified as a Generic Scam Email.
The sender shows as Wedraogo <kaborewedraogo@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
bankchequecontactsecretarytransactionfundinvestmenturgentsentmailbank the bank kaborewedraogo@gmail.comahmedabdul1000@gmail.com will nwill god(ahmedabdul1000@gmail.com)my dear mr ahmed abdul
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => beh@scamdex.com
[delivery-date:] => Fri, 03 Jun 2011 23:33:56 -0700
[received:] => Array
(
[0] => from nm1-vm0.bullet.mail.hk2.yahoo.com ([124.108.111.136])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1QSkQj-0006Oa-Befor beh@scamdex.com; Fri, 03 Jun 2011 23:33:55 -0700
[1] => from [124.108.111.129] by nm1.bullet.mail.hk2.yahoo.com with NNFMP; 04 Jun 2011 06:33:59 -0000
[2] => from [124.108.111.127] by tm2.bullet.mail.hk2.yahoo.com with NNFMP; 04 Jun 2011 06:33:59 -0000
[3] => from [127.0.0.1] by omp1002.mail.hk2.yahoo.com with NNFMP; 04 Jun 2011 06:33:59 -0000
[4] => (qmail 56010 invoked by uid 60001); 4 Jun 2011 06:33:58 -0000
[5] => from [212.52.152.114] by web19202.mail.hk2.yahoo.com via HTTP; Sat, 04 Jun 2011 14:33:57 HKT
)
[x-yahoo-newman-property:] => ymail-3
[x-yahoo-newman-id:] => 326570.65426.bm@omp1002.mail.hk2.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1307169238; bh=3VkbonjxVR6MArdPQHSMDD6WX6E9HBIQxBPR0DIiPRc=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=guD6RyHXVs0BtId6NdslPKeSyj77BnZeR6jqNBA0jfshYXPapv9VAS8wEvfLh5JOlxEyLENdhqcfAJ9BhlvFfnqk/oAT0Weh2OjHtTGwHoww4ckvik/D98TPk9hAOhI7vGC5LXM4LU+WHf1c+rLSs8enND+8rm4+Vv0zT3C7vXo=
[message-id:] => <266245.54148.qm@web19202.mail.hk2.yahoo.com>
[x-ymail-osg:] => v_.jnxUVM1lg17stcnemB3j1VEruGNOpKcURf3Mtb8Mu6tyn_ufCgpNmnZH5b_BLhbbRUIqV6ZDbHGekbjYdGQRdaEbsElTOVYHXvSdmQ9C68KGUWxPT1OeeCcx1X_9SHCTU0XZIB9oFWxsl0nDczdsJJiIsEePaK63sC3buV9G4wwCBWPVHQS0ufeZRKRLVueowYqGGN__eY1atHUgtGLsNvZgZ3m_m1PNT6A.QQVrNZsbgbqRWP_qFltf2jrRELzgLEDzA8mUCvw5bqlUfyzd8JXzAwO4IblwRI1vqLQplecCAyc8jQEus.jtwJvm7gEBeL7wFuxqQAedtNIhoCJnsItmIVn._9N6LsVR_Pzkic73RXDZD.oH4s1fdBrPdKlS2A8Rcykzrlshl8vhDQ_u7EJwmv5KNm5JsaDE5a7gMnyt0qDj4SUD.YRM8hyHIdN5wg80xvuy9lB02lXp6p2OjD5ZX3avxIPDcYiqOjuMDKChN6PWr5m9ZnpRAekicU3IryM3ujuPtzjXax8vteaIijlKiiNq6waOYnEAKNZscjAN6QDeHGkIyaZCKgKRWPg2IVI0s0y8_VEX4kQJTUST2oPz8z5eJqxqK1hoOREOaDVPuqeyVhYCpc4k1bSA2TnWEd0ZZqeF7h.nSDccDSyU4pwtQK9yTiw4WNly2JpQAWDnTdNye8VRFgoKFTurZtXyefu8YXcMiuffoQ4MhNwLkO5TFBDe8EKtvyDSkQeZeCeaTWOEhpRwxBlZ1KkehG8wofWmf2VEgWUtoVX0hUsdeU38R8nj1VLG7cbxDnUJuupECQMvaV57.VTtJs_ii56NyiWxWr1Vzv6UExsguMqFAfDNWq.RZrJbNX7GQUG_ZUsJrR0M41Dv9mIzus0Ae8RWdVjF5KxRf8Dbt.6.vNNWn2slzeupQ70hUXZfBz4m.gE5SQGL_cjiibQ1k9w4Rx2yuDObZ5Su7jIY5KzrsbJqkCa7wgiTD7oLCVhlE2faE1aWXWwLlE1gGE2pRvgNUKFsg5tOEGauPuyg3_wMyfdZcD4Hs8od5WtPQgWGGkE7ya2N_KEp5oAanyUplWuYvK_SD5kzrtaDxAENgOvDqtUE28A8.buO._pOLYI0teZBNoUFtyOYMD7Ovgd.WWspYDKXd2PTQ_lmNyRqAMf3vEShX3iEn9SEdvE.id7Y.F79howjkpPxgNKdU518tow1YslArsD.QBHAIN0H40Ka4o5C_yRSCuyQSkCVncjtf6mc1QX9rZDAmJ0CTdzWrwfl7GLie
[x-rocketymmf:] => homanjohn014
[x-mailer:] => YahooMailClassic/14.0.1 YahooMailWebService/0.8.111.304355
[date:] => Sat, 4 Jun 2011 14:33:57 +0800 (HKT)
[from:] => Wedraogo
[reply-to:] => kaborewedraogo1@gmail.com
[subject:] => COMPASENTION FOR YOUR PAST EFFORT
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-982984294-1307169237=:54148"
[x-spam-status:] => No, score=3.0
[x-spam-score:] => 30
[x-spam-bar:] => +++
[x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: My dear How are you doing all this while! Hope fine? I wantto inform you that I left a cheque of $3,000.000.00 for you through a secretaryof mine, if I may ask, have he contacted you? Please I don't want you tofeel bad of having any bad feeings in your mind concerning me but I did whatI did just to have my way and to enable me make a good and better home formy family and for my self. Listen,I have final succeeded in our transaction,I contacted another new person from london whom came on your behalf as toassist me get this fund from the bank and with his fully support we bothtry as much as we could as to make this transaction happen. I am now in londondoing my personal things with this friend of mine ,we both are into one investmenthere in london but I did not left you behind since we both started this transactionfrom the beginning ,we decided to keep the sum of $3,000.000.00 for you througha cheque bearing your name and instructed by personal secretary to releaseit to you once he get accross to you. Please kindly notify me if he havecontacted you concerning to this cheque,if not you should go ahead and contacthim and let him know that you are directed to contact by Mr.Kabore Wedraogo.and arrange with him on how the cheque will be sent to you urgently. I amvery much busy over here and I will get back to you by next week ending,ifI have chance to do so ,may the good God keep you and your nice family overthere. Thanks Mr Kabore Wedraogo Now contact my secretary, his name is AhmedAbdul and his Email Address secretary email:(ahmedabdul1000@gmail.com) askhim to send you the total $3,000.000.00 which i kept for your compensationfor all the past efforts and attempts to assist me in this matter. I appreciatedyour efforts at that time very much. so feel free and get in touched withmy secretary Mr Ahmed Abdul and instruct him to deliver the cheque to youimmediately in your country. . Notify me once you receive the cheque fromhim ok. [...] Content analysis details: (3.0 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net[Blocked - see ]0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server[212.52.152.114 listed in dnsbl.sorbs.net]1.2 HK_SCAM_N8 BODY: HK_SCAM_N80.0 FREEMAIL_FROM Sender email is freemail (kaborewedraogo[at]gmail.com)0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)-2.0 SUBJ_ALL_CAPS Subject is all capitals-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
How are you doing all this while! Hope fine? I want to inform you that I
left a cheque of $3,000.000.00 for you through a secretary of mine, if I may
ask, have he contacted you? Please I don't want you to feel bad of having any
bad feeings in your mind concerning me but I did what I did just to have my way
and to enable me make a good and better home for my family and for my self.
Listen,I have final succeeded in our transaction, I contacted another new person
from london whom came on your behalf as to assist me get this fund from the bank
and with his fully support we both try as much as we could as to make this
transaction happen.
I am now in london doing my personal things with
this friend of mine ,we both are into one investment here in london but I did
not left you behind since we both started this transaction from the beginning
,we decided to keep the sum of $3,000.000.00 for you through a cheque bearing
your name and instructed by personal secretary to release it to you once he get
accross to you. Please kindly notify me if he have contacted you concerning to
this cheque,if not you should go ahead and contact him and let him know that you
are directed to contact by Mr.Kabore Wedraogo. and arrange with him on how the
cheque will be sent to you urgently.
I am very much busy over here and I
will get back to you by next week ending,if I have chance to do so ,may the
good God keep you and your nice family over there.
Thanks Mr
Kabore Wedraogo Now contact my secretary, his name is Ahmed Abdul and his
Email Address secretary email:(ahmedabdul1000@gmail.com) ask him to send you
the total $3,000.000.00 which i kept for your compensation for all
the past efforts and attempts to assist me in this matter. I
appreciated your efforts at that time very much. so feel free and get in
touched with my secretary Mr Ahmed Abdul and instruct him to deliver the
cheque to you immediately in your country. . Notify me once you receive
the cheque from him
ok.