An
Email with the Subject "FROM JEAN ABBAS" was
received in one of Scamdex's honeypot email accounts on Fri, 21 May 2010 01:36:45 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as jean abbas <jean.abbas14@btinternet.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
death0ivorytrunkboxchiefnext of kinbidaccountdepositedresponseinternet transferurgenteuroabidjansecurity(us$10.5m)hospitaldear
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => support@scamdex.com
[delivery-date:] => Fri, 21 May 2010 01:36:45 -0700
[received:] => Array
(
[0] => from n23.bullet.mail.ukl.yahoo.com ([87.248.110.140])by fire.newsblaze.com with smtp (Exim 4.69)(envelope-from )id 1OFNim-0006hD-LZfor support@scamdex.com; Fri, 21 May 2010 01:36:45 -0700
[1] => from [217.12.4.215] by n23.bullet.mail.ukl.yahoo.com with NNFMP; 21 May 2010 08:36:42 -0000
[2] => from [87.248.110.198] by t2.bullet.ukl.yahoo.com with NNFMP; 21 May 2010 08:36:42 -0000
[3] => from [127.0.0.1] by omp238.mail.ukl.yahoo.com with NNFMP; 21 May 2010 08:36:42 -0000
[4] => (qmail 87540 invoked by uid 60001); 21 May 2010 08:36:41 -0000
[5] => from [196.201.72.158] by web87113.mail.ird.yahoo.com via HTTP; Fri, 21 May 2010 08:36:41 GMT
)
[x-yahoo-newman-property:] => ymail-3
[x-yahoo-newman-id:] => 349010.70448.bm@omp238.mail.ukl.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=btinternet.com; s=s1024; t=1274431001; bh=xSYbpWc1oPu886ni3bFcf2cbWxKHE0ZST0469yOH+pQ=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=FC/K6cKMi9fY+gt//vJRIVBFCyXC4BnnNQ2wyCtpU9rsrxoKdIqkFeEJqau3+DQEoownB6koXdyTK6A3DcBgkQ/M9I9PN6l+DzIFjGc2BxnLne7hVkWUJ0vH3jsr6p52mNPkd8ioeRg/mjk/Tw4Tv+z4bPYd10E85Ztoz3BYIgI=
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=btinternet.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=m4VwbwxDmQmj+GmXLPE+6ZJFN1wLdOyo96/kkDNo9xs+yyC4Ga5wCDjplo02AtVrCApExTHUAaQbZ+JE0jwNfcNrZG0WI9SBr9QOziQ8HBX1KwLmSqInYrOa3ViQbZ03JO7x2npYOoWt/JPgnw39dTNUBEcHxMFDKsZ8LzqM9pA=;
[message-id:] => <829999.86196.qm@web87113.mail.ird.yahoo.com>
[x-ymail-osg:] => ZGi5pBsVM1l9BRpjhzxEXd_Gs57FGLG3fHx2H4ub7Wpj52DC9zI7dm0MeSEiWdDa5I9srI4A6pW5SXslocoh8puxcd9PTqIbU_Mem7ScR226LAP0XKIvQa38a5vE0lKFvsVcudK.rLycqpIaVCubcORguGcIfrBhL3Zxkt5Gseq5YxJ2_GT.XeWeYGoewNpxJlM1GK2eui65Ok70sVkUv_6JAiMF6ODnOED4BpID3fUXOL54FXbTIhGoGIkde3Y0VyOiMIVkmYQGy0n7B9qQyuGRlGsajWpxvZXKKw.ismSoOeU1j8WREz_aIeuIZJj9WGq2yVLnd0c2SGpgFRQZidX61lqhqlvQ3PKhVXHcH4SLllwpKgkb0zzCNbUq3bo2mLSgPfrcM2whZviDJq9O5GPjCS3CKM59w4zvYooJcrOUBVHyzpThoqnLlPrzbgHBGDRy3GKSy1yu_PLsyunZJRNkDSImtmPtvS6D3t3_XEnQfBA9fGuS_9Oxd3xHOdEOwVa3vJtKgbRjjYhX6xjQ2k.KnjpHamdbbzZmnJkBSWzBqfiauHSpCQF2foJytKjQLlmcAUjE7BOZ44bwiyfIvTLHnNiuSH6MR.8_L17Kot7JD9A4aepr_TvTDa618K1dKoWOsZo0Y3p6GOvgVh8ZeDSQpx_IxVotq.pt1nQNAOZZ6xluZ7l73vHC4MNiCDhdB63p36dR5nkQwGzmOh5YfiGF.xZged7BFPo5PG9nS0iH4CglyyVRsG83FoejCr3oXex_Q7Wue39kJikwjIen6YTDY2cLU1zRnsORUVhptIvvpF.sqZRcWfCjZVR.shLIe9ELiA2_BUdwg_SNNdgYVX7PvGjWUrCKtU..f.Khp0Ll.aNpf8qobruQSaJZv.Z1O5WZH6X2wMflfm5ow6myHvM4wBVkzTOptpk7RzTt0vLlIuC4SkmbH7_Oz9aczXKbpx9e3Y5vmfJYA2LRgiVqxR.als_cQT_zSXD2EDLzRtpdCB3hvNJxG6gqDNiLW.a0I0LkbhruAwztBcSHmxwu0N1nDQS9v7hqowFyDFzMcAHYWI_q6.Y2w_eshEKeOxNlQsb8sG6iVfzglgqWC0RxjMDO0wW6V.KICDpecFQwWVNBWdJrElnl.HIz7K3caJmK411ayi21OfI6MdjF.DqGGIvhLQPDG9KbTAkeDD_cQFb1UECirmnzHR4P4Ms6UGbO.vCWprUupmI-
[x-mailer:] => YahooMailClassic/11.0.8 YahooMailWebService/0.8.103.269680
[date:] => Fri, 21 May 2010 08:36:41 +0000 (GMT)
[from:] => jean abbas
[reply-to:] => jean_abbas14@y7mail.com
[subject:] => FROM JEAN ABBAS
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1663027863-1274431001=:86196"
[x-spam-status:] => No, score=-9.0
[x-spam-score:] => -89
[x-spam-bar:] => ---------
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
FROM JEAN ABBAS ABIDJAN,IVORY COAST
Tel:+22506317435
DATE:21/05/2010
DEAR ONE,
I AM JEAN ABBAS,THE ONLY SON AND OF LATE CHIEF JOSEPH ABBAS MY FATHER WAS A VERY WEALTHY COCOA MERCHANT BASED IN ABIDJAN,BEFORE HE WAS POISONED TO DEATH BY HIS ASSOCIATES.
BEFORE THE DEATH OF MY LATE FATHER IN A HOSPITAL HERE,HE TOLD ME OF HIS(US$10.5M)THAT HE DEPOSITED IN A ONE OF THE SECURITY COMPANY IN EUROPE.I WAS ALSO MADE THE NEXT OF KIN TO THE MONEY.HE DECLARED THE TRUNK BOX THAT CONTAINS THIS MONEY AS A"FAMILY VALUABLES" TO THE SECURITY COMPANY.BECAUSE HE DOESN'T WANT THEM TO KNOW THE REAL CONTENT OF THE BOX,JUST FOR SECURITY REASONS.
I WANT YOU TO ASSIST ME IN RETRIEVING OF THIS MONEY AND LOGDGED IT INTO A LOCAL ACCOUNT OVER THERE IN EUROPE FOR AN ONWARD TRANSFER INTO YOUR ACCOUNT.PLEASE,YOUR URGENT RESPONSE IS HIGHLY NEEDED.
BEST REGARDS,
JEAN ABBAS