An
Email with the Subject "My Dear Good Friend," was
received in one of Scamdex's honeypot email accounts on Wed, 10 Nov 2010 13:50:22 -0800
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Mr Johnson Koffi <mrkoffi77@att.net>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
million hundred thousand united ...bankaccountclaimsclaimthree millionfive hundred thousanddepositeddepositreliabletransactionjobserviceescrow40%fundbusinesslegal transferpackagemailbank bank transferbank accountdollar our bank new bank diseaseconfidentialdie will ach($3,500,000.00)hospitalmy dearnmr johnson koffimodalities
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submitted@scamdex.com
[delivery-date:] => Wed, 10 Nov 2010 13:50:22 -0800
[received:] => Array
(
[0] => from nm1-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.203])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1PGIYf-0007bv-TFfor submitted@scamdex.com; Wed, 10 Nov 2010 13:50:22 -0800
[1] => from [98.139.91.67] by nm1.bullet.mail.sp2.yahoo.com with NNFMP; 10 Nov 2010 21:50:24 -0000
[2] => from [98.139.91.43] by tm7.bullet.mail.sp2.yahoo.com with NNFMP; 10 Nov 2010 21:50:24 -0000
[3] => from [127.0.0.1] by omp1043.mail.sp2.yahoo.com with NNFMP; 10 Nov 2010 21:50:24 -0000
[4] => (qmail 83268 invoked by uid 60001); 10 Nov 2010 21:50:24 -0000
[5] => from [41.218.197.30] by web83815.mail.sp1.yahoo.com via HTTP; Wed, 10 Nov 2010 13:50:23 PST
)
[x-yahoo-newman-property:] => ymail-5
[x-yahoo-newman-id:] => 618144.75457.bm@omp1043.mail.sp2.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1289425824; bh=SiT8ix1fnR/DrvKSIP0p11b7uZFId+wwOmH7BlMesBk=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=h4CmRfNG4Q22NdOgksPkcuOaYwyX9CUgbVF6lzWvFXSV1tznqNLkwIpUlLdSCsAxDizVKG5iJlNpxIk18EdTh+0qcJYlt6guT7RSZ+bmEHE3JXNUJbmQfvQqp7ZU1OLDb0NaAQSXMLkiL3OglLbl6DYU2DRO2rYQOtdgZ9yTENA=
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=0gns0bNLke2osKu6I16loCuZ+V11Rz0GlV9qNNhmIYozSuPNWGhguJ/xiTRGFEk63dcsO9UmGe66o2pX93RWdbjiyhhe9wjwX8dQOIf8qncIptkj0tb7GZIXTlxhvn4KmS227DtphSlyy/7Jo6i0MBaEwnHlF12DAIBvn4/ph6c=;
[message-id:] => <453864.81625.qm@web83815.mail.sp1.yahoo.com>
[x-ymail-osg:] => IHhLG_QVM1mIQzF8rekOphzj6RrPkBC_Y34LMc9p.yCGzpKHnRL_l7oV
[x-mailer:] => YahooMailClassic/11.4.9 YahooMailWebService/0.8.107.284920
[date:] => Wed, 10 Nov 2010 13:50:23 -0800 (PST)
[from:] => Mr Johnson Koffi
[subject:] => My Dear Good Friend,
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-14043048-1289425823=:81625"
[x-spam-status:] => No, score=-14.0
[x-spam-score:] => -139
[x-spam-bar:] => --------------
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I write to seek your services in a private and confidential matter regarding an unaccounted fund in our bank here in Ghana during the last 2009 business year. As a Regional Manager in this Bank, I deposited this fund in an ESCROW CALL ACCOUNT at our headquarters pending when I shall get a reliable person. This requires a private arrangement. Could you perhaps be able to receive these funds under legal claims then I will file you in. I will appreciate for fewer questions asked and your participation will be 40% of the total money. There are practically no risks involved, the transaction will be executed under a legitimate arrangement that will protect you from any breach of the law,it will be simply a bank-to-bank transfer.
I have all the
details and will file you in if you are really willing. Your major role would be to provide an existing account or open a new bank account where the funds will be transferred and stand as the original depositor of this fund in our bank, as long as you will remain honest to me till the end for this important business trusting in you and believing that you will never let me down either now or in future. At this juncture, I wish to tell you what prompted me to package this deal. I have a 9yrs old daughter who has leukemia, a disease of the blood, and she needs a bone marrow transplant or she will die. I want this transplanting to be done in any good children's hospital in your Country, if there is one. Once this fund is transferred into your account, I shall resign from my job and bring my family to start a new life in your country.The funds in question are quite large,Three million five hundred thousand United States Dollars($3,500,000.00).
I
will expect a straight answer from you. If yes, please get back to me so that we can work out the modalities without further delay.Reply to my private email address ;johnsonkoffi2010@hotmail.com