An
Email with the Subject "Fwd: HELP PLEASE" was
received in one of Scamdex's honeypot email accounts on Thu, 03 Apr 2008 19:08:21 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as David Cherbonnier <dlc_engineering@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
assistance234965-1207446119.1868escapedaccount transferfundinvestmentbusinessurgentmaildollarliberiaengineerdlc_engineering@yahoo.comrobertfleming005@yahoo.co8528dlc_engineering@yahoo.com will yahoo.comyahoo.coyahoofyahoo-(helo n3a.bullet.mail.kr1...(203.212.170.74)[203.212.168.61][203.104.18.44][127.0.0.1](qmail 18983 invoked by u...[196.207.243.28](bst)(late)(unhcr)
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Robert Fleming <robertfleming005@yahoo.co.in> wrote: X-Apparently-To: dlc_engineering@yahoo.com via 68.142.207.138; Thu, 03 Apr 2008 16:37:29 -0700 X-YahooFilteredBulk: 203.212.170.74 X-Originating-IP: [203.212.170.74] Return-Path: <robertfleming005@yahoo.co.in> Authentication-Results: mta202.mail.re3.yahoo.com from=yahoo.co.in; domainkeys=pass (ok) Received: from 203.212.170.74 (HELO n3a.bullet.mail.kr1.yahoo.com) (203.212.170.74) by mta202.mail.re3.yahoo.com with SMTP; Thu, 03 Apr 2008 16:37:29 -0700 Received: from [203.212.168.61] by n3.bullet.kr1.yahoo.com with NNFMP; 03 Apr 2008 23:37:28 -0000 Received: from [203.104.18.44] by t2.bullet.kr1.yahoo.com with NNFMP; 03 Apr 2008 23:37:27 -0000 Received: from [127.0.0.1] by omp108.mail.in2.yahoo.com with NNFMP; 03 Apr 2008 23:37:26
-0000 X-Yahoo-Newman-Property: ymail-5 X-Yahoo-Newman-Id: 776687.55046.bm@omp108.mail.in2.yahoo.com Received: (qmail 18983 invoked by uid 60001); 3 Apr 2008 23:37:26 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.in; h=X-YMail-OSG:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; b=rNF25OuPcqYhkWw0wuvbRyi/nSlZOI+nJcyqi1iS/gS2kJ85w8avZo60MgcPJO4tK8DDRSE7/Wku2Hb1v+2zidlWpXkcSp33cEkdDcTh7KFDOOo1+VGW9baFzFZrEArFIC5lpdXsaEEcovI8Yj4yhRYi9Y7k4n6OTd/461YNnyo=; X-YMail-OSG: 4gpWUo0VM1l5u31sVF2_96NrF4QBmCjF0_UsUT4Q_Qsxkb0hJ.PfeC.2rtNEbV9wVgh7Exap4k.6UaH9JMqptNHBzi4ggsQjgHeE Received: from [196.207.243.28] by web94105.mail.in2.yahoo.com via HTTP; Fri, 04 Apr 2008 00:37:26 BST Date: Fri, 4 Apr 2008 00:37:26 +0100 (BST) From: Robert Fleming <robertfleming005@yahoo.co.in> Subject: HELP PLEASE To: robertfleming005@yahoo.co.in MIME-Version: 1.0 Content-Type:
multipart/alternative; boundary="0-378234965-1207265846=:18680" Content-Transfer-Encoding: 8bit Message-ID: <446119.18680.qm@web94105.mail.in2.yahoo.com> Content-Length: 4409
FROM MR. ROBERT FLEMING LIBERIA WEST AFRICA DEAREST ONE, I AM MR. ROBERT FLEMING 29 YEARS OLD FROM LIBERIA, AND I AM CONTACTING YOU BECAUSE I NEED YOUR HELP TO TRANSFER A SUM OF MONEY THAT MY DEAD FATHER LEFT FOR ME BEFORE HE DIED.THIS MONEY IS USD 7.5 MILLION AMERICAN DOLLARS AND THE MONEY IS LEFT IN FIXED/SUSPENSE ESCROW ACCONT OF A FINANCIAL COMPANY HERE IN DAKAR SENEGAL, AS A DECEASE FUND. MY FATHER (LATE) DR. LOYOLA S. FLEMING JR. THE FORMER DEPUTY MINISTER OF FINANCE UNDER THE EXECUTIVE CIVILIAN PRESIDENT OF LIBERIA, BUT WAS ASSASINATED BY THE REBELS DURING THE CIVIL WAR AND I NARROWLY ESCAPED WITH THE IMPORTANT DOCUMENTS OF THE DEPOSITED
MONEY TO DAKAR SENEGAL WHERE I AM NOW SEEKING ASYLUM UNDER (UNHCR). HOWEVER, I NEED YOUR ASSISTANCE TO TRANSFER THE MONEY TO YOUR ACCOUNT PENDING WHEN I WILL COME OVER TO YOUR COUNTRY FOR US TO MEET FOR INVESTMENT OF THE MONEY. I ONLY WANT THIS TO BE DONE THIS WAY BECAUSE YOUR COUNTRY IS POLITICALLY STABLE FOR ANY PROFITABLE INVESTMENT, AND I ALSO WANT TO ADD HERE THAT IF ACCEPTED BY YOU, YOU WILL SERVE AS THE ORIGINAL BENEFICIARY OF THE MONEY. I FEEL CONFIDENCE TO INTRODUCE THIS OFFER TO YOU, YOUR PARTICIPATION AND ALL YOUR ASSISTANCE REGARDING THIS TRANSFER, I HAVE DECIDED TO GIVE YOU 17% OF THE TOTAL MONEY. THEREFORE, IF ACCEPTED BY YOU, YOU ARE REQUESTED TO FURNISH ME BACK IMMEDIATELY YOU RECEIVE THIS REQUEST TO TRANSFER THE MONEY FROM DAKAR SENEGAL TO YOUR ACCOUNT. ON COMMENCEMENT OF THIS TRANSACTION I WANT TO LET YOU UNDERSTAND THAT THE FUTURE OF MYSELF DEPENDS
SOLELY ON THIS MONEY, SO PLEASE KEEP THIS BUSINESS TO YOURSELF ONLY TO AVOID RAISE EYE BROW OF ANY THIRD PARTY. I AM EAGERLY EXPECTING YOUR URGENT RESPONSE YOURS SINCERLY, ROBERT FLEMING. Do you get hundreds of mails everyday? Delete none. Keep them all.
