An
Email with the Subject "hello" was
received in one of Scamdex's honeypot email accounts on Thu, 16 Mar 2017 15:57:27 -0700 (PDT)
and has been classified as a Generic Scam Email.
The sender shows as chek mohamed <chekmohamed731@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
africagoldcontactpartner92%buysellmailexportchekmohamed731@gmail.com(or, diamant and others)
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[delivered-to:] => scamdex@gmail.com
[received:] => Array
(
[0] => by 10.182.89.138 with SMTP id bo10csp39815obb; Thu, 16 Mar 2017 15:57:27 -0700 (PDT)
[1] => from mail-it0-x244.google.com (mail-it0-x244.google.com. [2607:f8b0:4001:c0b::244]) by mx.google.com with ESMTPS id 95si7032861ioi.209.2017.03.16.15.57.27 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 16 Mar 2017 15:57:27 -0700 (PDT)
[2] => by mail-it0-x244.google.com with SMTP id g138so32713itb.0 for ; Thu, 16 Mar 2017 15:57:27 -0700 (PDT)
[3] => by 10.79.91.134 with HTTP; Thu, 16 Mar 2017 15:57:26 -0700 (PDT)
)
[x-received:] => Array
(
[0] => by 10.107.179.11 with SMTP id c11mr13134474iof.68.1489705047286; Thu, 16 Mar 2017 15:57:27 -0700 (PDT)
[1] => by 10.36.170.68 with SMTP id y4mr210961iti.7.1489705046852; Thu,16 Mar 2017 15:57:26 -0700 (PDT)
)
[return-path:] =>
[received-spf:] => pass (google.com: domain of chekmohamed731@gmail.com designates 2607:f8b0:4001:c0b::244 as permitted sender) client-ip=2607:f8b0:4001:c0b::244;
[authentication-results:] => mx.google.com; dkim=pass header.i=@gmail.com; spf=pass (google.com: domain of chekmohamed731@gmail.com designates 2607:f8b0:4001:c0b::244 as permitted sender) smtp.mailfrom=chekmohamed731@gmail.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=HSVIXsxbynKYKx7Ow8ZYZIFDn2Y7gb/tUHcG+2IqrjU=; b=E5m5DsaNpeZp5EKjKsH9nAgN6717QgLdA/7hcHjf1pwmMBYIOdg7QWDHs26A1CDgUq ZSp0EaB77vXCSYoCx5A5rVWpXzc9W/ddr6RAYo4vg6Wfcerxol3ELmKvCvBH6Ud8kPXJ nIwT8bdrvQleHDAJgEAeYlphz98lu7OwMulHFFgarZFQBXvFt0Ba+yITDrSydataO7cF goGp0MzzDRTvvw7nut6zlbGYBT0R1MKi5cBQoLI2sCizFw6DYkPILOqCgNgxTWwP/bgX rkbGe8q3hGIrkKBcm94KFU6cofW8zshEbe6SzYTXDURnydi8uLBiIaCH5X2h+LUde3wu QPLQ==
[x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=HSVIXsxbynKYKx7Ow8ZYZIFDn2Y7gb/tUHcG+2IqrjU=; b=dYQ0FvElrioTtmcCZF43YuSSbXOznW0SP3IRny75wKnsjjoxZQxkXJHQiqOVA8Zm8a BcS4h7vLLs00suAAqW9SBgHFzP2Vbd7FU2KXRscwY63UgOq3QVWMdICJy/EjCebzYYNY xtL01tz9NEW3InKOjxZlmBSHbkdvGLBzJnLKvKgnqW1OmK4j7z+5BiwyQizlu0MX8bB8 5/NCYofhaOo+XUg9SjO6LC3UCFmCTFRZFnbFWqnmvLqZNll7z+8bXBJ33AkqnPylqdR/ nN70aMRmKvuv3mBxghd2+4P783kASj5mhkQxIqawjku6o7usNF+QAh7NYsijs3covhd7 TOow==
[x-gm-message-state:] => AFeK/H3mfByv6evblAyHaLemJmfyhKtjqyfBg/+NvgvRh8UipLTSJbR9msaPzGLLNCt99wEk/wvFEI4aRo+dnQ==
[mime-version:] => 1.0
[from:] => chek mohamed
[date:] => Thu, 16 Mar 2017 23:57:26 +0100
[message-id:] =>
[subject:] => hello
[to:] => chek mohamed
[content-type:] => multipart/alternative; boundary=f403045fc34c23554e054ae0fc50
[bcc:] => scamdex@gmail.com
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Hello, Africa inter SARL is an association based in Siguiri in Guinea, we operate in the field of precious metals (OR, Diamant and others). We are currently looking for buyers or partners who can help us sell the 150kg gold in 22 carat ingot for 92% purity at $ 26,500 per kg. The goods are currently in GUINEA CONAKRY with all valid export certificates. We are ready to export the goods to any destination that the buyer wants after signing a contract. Please contact our Conakry correspondent in GUINEA if you are interested in this very attractive offer.
Hello, Africa inter SARL is an association based in Siguiri in Guinea, we operate in the field of precious metals (OR, Diamant and others). We are currently looking for buyers or partners who can help us sell the 150kg gold in 22 carat ingot for 92% purity at $ 26,500 per kg. The goods are currently in GUINEA CONAKRY with all valid export certificates. We are ready to export the goods to any destination that the buyer wants after signing a contract. Please contact our Conakry correspondent in GUINEA if you are interested in this very attractive offer.ÂThank You Ahmed Barry
Garanti sans virus. www.avast.com
