An
Email with the Subject "Dear Friend," was
received in one of Scamdex's honeypot email accounts on Wed, 09 Feb 2011 15:22:31 -0800
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as MR DAVID PETER <davidogbpeter1@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
assistanceafricaafrican$50 million dollarsforeignoilbankcontactnumbersaccount million40%fund transferlegalurgentsecuresentmailbank bank officbank accountsharedollar the bank our bank nthe bank confidentialtop secret will ($50m)dearnmr david peter
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Wed, 09 Feb 2011 15:22:31 -0800
[received:] => Array
(
[0] => from nm30-vm0.bullet.mail.ne1.yahoo.com ([98.138.91.69])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1PnJMf-0007ir-Gofor scams@scamdex.com; Wed, 09 Feb 2011 15:22:31 -0800
[1] => from [98.138.90.55] by nm30.bullet.mail.ne1.yahoo.com with NNFMP; 09 Feb 2011 23:22:29 -0000
[2] => from [98.138.89.194] by tm8.bullet.mail.ne1.yahoo.com with NNFMP; 09 Feb 2011 23:22:29 -0000
[3] => from [127.0.0.1] by omp1052.mail.ne1.yahoo.com with NNFMP; 09 Feb 2011 23:22:29 -0000
[4] => (qmail 66406 invoked by uid 60001); 9 Feb 2011 23:22:28 -0000
[5] => from [217.113.66.233] by web114207.mail.gq1.yahoo.com via HTTP; Wed, 09 Feb 2011 15:22:27 PST
)
[x-yahoo-newman-property:] => ymail-3
[x-yahoo-newman-id:] => 200182.70993.bm@omp1052.mail.ne1.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1297293748; bh=hwubc8wxUME1MCONwSprUO3jwWkHq0Nhymt9th5nhfE=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=6GoMRGUnL8sEY1duWFCKLacvdTVKK0TbjZyabpDztCiH8zRnxkRqo3dgeboUwQe4gO+goHxpst/vUnMO+o6Gr2/AfuFbrda/+P8h3oOinu0DXLdFfILg1sHXNd3DsaF1+RZ81fHjVzMyTWLa85IyBPBPs85VHeIdiINt/+7HbVY=
[message-id:] => <934501.61030.qm@web114207.mail.gq1.yahoo.com>
[x-ymail-osg:] => 823OQI8VM1nk.3Gi8bwdzseI9IvK.2HBPkqZUq75yCpAa7htMCRFYXLsiSBui029lc7GMiuDHgPTz_k1v6wLcy.08SFxfCbDgWUIOPei8VjQ2QBvOyj5vab63uGV.pWXbhol7opFzab.y7iWVeP16YgKI2ljQPN06qe3LpOq4r18ivZOUPDLjW9drZKKAlChWgrHAo1gI1VXMUmGiVD3A7YYDzoaTEbK1ww2joJ20tR_tgnnuLG3t_nWR_h6ggBzzYhle5E4KK9eHBhMt81ZIpcNykH7Ycimb9ggN8S3BRLFPp4H4J9uVsp.dMyJA2rkGHNZIwR_q8Xmb3shICrFJHlAP1tvaG4gXKcGIYdzRWM28kBGA1Xgbtv28z1gZXqUg77DHFQtUIo3_meiNkaVesBzvgfaPL7CahDgMonBAupbk.bNkYaf32KVjvqRoyij6bI6zWnVYHTaqWd0F0I5sRYGhTWzIiHSRoegkkcnZU12v_BQ_0sdq3PM_ja.WEAb5nWCSQ4IIqxC2JZVMJbPGbWglo8UIHmgAKM4eYVXT5pwD5Wnjzi6J.9JCn6uIA8cL32rzSlJBrP_nf59g5aWL8qMegphqxH0nv2Pmr_pnQObw9a2A1fDtHiaXjO3iyUOy_LL.jFPsjpA8a73uJUK7YfH3Keh7j_KTtgTv9BUxn7bxSniq3dD4eojY_fHaKDktuLQlaeSstQ5Y7KvnzRacDwXmcPqa1_d1meVvxkWKOr63vvZAXF5j0Zv5HYQipQPw4Pp0Q66VSEc7WEBnaqOBg7_Emc.SHXqmtmbNxlVJxgXinsBvWzdSGLqOHPiwWiFFbC8SHxKS_lFfAAKJ2K.4K2RSCi3LZMcR0TPI8aTU.eH2m.WGm8gwyjb_jTfy4DnA8P2M_dOOh.Ia_EC
[x-rocketymmf:] => anny_sunday@y7mail.com
[x-mailer:] => YahooMailClassic/11.4.20 YahooMailWebService/0.8.108.291010
[date:] => Wed, 9 Feb 2011 15:22:27 -0800 (PST)
[from:] => MR DAVID PETER
[reply-to:] => davidjjcpeter1@gmail.com
[subject:] => Dear Friend,
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1280519159-1297293747=:61030"
[x-spam-status:] => No, score=-2.5
[x-spam-score:] => -24
[x-spam-bar:] => --
[x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Friend, With due respect to your person and much sincerityof purpose I make this contact with you as I believe that you can be of greatassistance to me. my name is Mr. DAVID PETER from BURKINA FASO in West Africa.Presently I work in the Bank as the manager in charge of auditing and accountingsection. I have been searching for your contact since you left our countrysome years ago .I do not know whether this is your correct email addressor not because I only used your name initials to search for your contact inthe internet .In case you are not the person I am supposed to contact , pleasesee this as a confidential message and do not reveal it to another personbut if you are not the intended receiver, do let me know whether you canbe of assistance regarding my proposal below because it is top secret. [...]Content analysis details: (-2.5 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, lowtrust[98.138.91.69 listed in list.dnswl.org]-3.0 URG_BIZ BODY: Contains urgent matter0.0 FREEMAIL_FROM Sender email is freemail (davidogbpeter1[at]gmail.com)0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (davidogbpeter1[at]gmail.com)-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear!0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information0.0 T_MONEY_PERCENT X% of a lot of money for you0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases0.5 FORM_FRAUD_5 Fill a form and many fraud phrases0.5 FORM_FRAUD_3 Fill a form and several fraud phrases-11 AWL AWL: From: address is in the auto white-list
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Dear Friend,
With due respect to your person and much sincerity of purpose I make this contact with you as I believe that you can be of great assistance to me. my name is Mr. DAVID PETER from BURKINA FASO in West Africa. Presently I work in the Bank as the manager in charge of auditing and accounting section. I have been searching for your contact since you left our country some years ago .I do not know whether this is your correct email address or not because I only used your name initials to search for your
contact in the internet .In case you are not the person I am supposed to contact , please see this as a confidential message and do not reveal it to another person but if you are not the intended receiver, do let me know whether you can be of assistance regarding my proposal below because it is top secret.
I am about to retire from active Bank service to start a new life but I am sceptical to reveal this particular secret to a stranger . You must assure me that everything will be handled confidentially because we are not going to suffer again in life.
It has been 10 years now that most of the greedy African Politicians used our bank to Launder money overseas through the help of their Political advisers. Most of the funds which they transferred out of the shores of Africa was gold and oil money that was supposed to have been used to develop the continent. Their Political advisers always inflated the amounts before transfer to foreign accounts so I also used the opportunity to divert part of the funds hence I am aware that there is no official trace of how much was transferred as all the accounts used for such transfers were being closed after transfer.
I acted as the Bank Officer to most of the politicians and when I discovered that they were using me to succeed in their greedy act, I also cleaned some of their banking records from the Bank files and no one cared to ask me because the money was too much for them to control. They laundered over ($10b)Ten Billion Dollars during the process .As I am sending this message to you, I was able to divert more than Fifty Million Dollars ($50m) to an escrow account belonging to no one in the bank.
The bank is anxious now to know who is the beneficiary to the funds because they have made a lot of profits with the funds.
It is more than Eight years now and most of the politicians are no longer using our bank to transfer funds overseas. The $50 Million Dollars has been lying waste but I don't want to retire from the bank without transferring the funds to a foreign account to enable me share the proceeds with the receiver. The money will be shared 60% for me and 40% for you .
There is no one coming to ask you about the funds because I secured everything.I only want you to assist me by providing a bank account where the funds can be transferred. You are not to face any difficulties or legal implications as I am going to handle the transfer personally. If you are capable of receiving the funds, do let me know immediately to enable me give you a detailed information on what to do.
For me, I have not stolen the money from anyone because the other people that took the whole money did not face any problems. This is my chance also to grab my own but you must keep the details of the funds secret to avoid leakages as no one in the bank knows about the funds.
Please supply me the following:
Your current contact address and Telephone Numbers.
I shall intimate you on what to do when I get your confirmation and acceptance. If you are capable of being my trusted associate, do declare your consent to me.
Waiting for your urgent response.
Yours Faithfully, Mr DAVID PETER