An
Email with the Subject "GOOD OFFER FROM STANDARD BANK" was
received in one of Scamdex's honeypot email accounts on Mon, 10 Oct 2011 00:38:41 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as "RICHARDTSHABALALA" <richardtshabalala1@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
beneficiaryforeignsmithbankcontactaccountpartnerjobforeigner80%urgentbusinessinvestmentlegal transfermailbank dollar this bank local bank richardtshabalala@gmail.com will co-operate mr smith b. andrew, mr. smith b. andrew mr. richard tshabalala
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => cj@scamdex.com
[delivery-date:] => Mon, 10 Oct 2011 00:38:41 -0700
[received:] => Array
(
[0] => from p3plsmtp16-05-2.prod.phx3.secureserver.net ([173.201.193.62] helo=p3plwbeout16-05.prod.phx3.secureserver.net)by lester.newsblaze.com with smtp (Exim 4.69)(envelope-from )id 1RDARd-0002ko-ANfor cj@scamdex.com; Mon, 10 Oct 2011 00:38:41 -0700
[1] => (qmail 17068 invoked from network); 10 Oct 2011 07:38:38 -0000
[2] => from unknown (HELO localhost) (173.201.193.117) by p3plwbeout16-05.prod.phx3.secureserver.net with SMTP; 10 Oct 2011 07:38:38 -0000
[3] => (qmail 11087 invoked by uid 99); 10 Oct 2011 07:38:38 -0000
)
[content-transfer-encoding:] => quoted-printable
[content-type:] => text/html; charset="utf-8"
[x-originating-ip:] => 41.27.145.118
[user-agent:] => Web-Based Email 5.6.03
[message-id:] => <20111010003837.3de0905ca06a87770b88565a57234ef8.7508e34d7c.wbe@email16.secureserver.net>
[from:] => "RICHARDTSHABALALA"
[x-sender:] => ewds@fanhunt11.com
[reply-to:] => "RICHARDTSHABALALA"
[to:] =>
[subject:] => GOOD OFFER FROM STANDARD BANK
[date:] => Mon, 10 Oct 2011 00:38:37 -0700
[mime-version:] => 1.0
[x-spam-status:] => No, score=-0.0
[x-spam-score:] => 0
[x-spam-bar:] => /
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: RICHARD TSHABALALA JOHANNESBURG, SOUTH AFRICA TEL:+27-73-973-57412[...] Content analysis details: (-0.0 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 MILLION_USD BODY: Talks about millions of dollars0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(richardtshabalala1[at]gmail.com)-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, notrust[173.201.193.62 listed in list.dnswl.org]-2.0 SUBJ_ALL_CAPS Subject is all capitals-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)0.0 HTML_MESSAGE BODY: HTML included in message1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts0.0 LOTS_OF_MONEY Huge... sums of money1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)0.1 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_MONEY_PERCENT X% of a lot of money for you0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I am Mr. RICHARD TSHABALALA, I work withSTANDARD BANK, my partner and me has decided to contact you because there is an account opened in this bank in 1999 and since 2001 and nobody has operated on this account again. After going through some old files in the records, I discovered that if I do not remit this money out urgently it would be forfeited for nothing. The owner of this account is Mr SmithB. Andrew, a foreigner, and a miner at a Gold Company, a geologist by profession and died since 2000. No other person knows this account or anything concerning it, the account has no beneficiary and my investigation proved to me as well that the company does not know anything about this account and the money in this account is USD 45,000,000.00 (forty Five MillionUnited States Dollars).
I am only contacting you as a foreigner because this money cannot be approved to a local bank here but can only be approved to any foreign account because the money is in United State Dollars and the former owner Mr. Smith B. Andrew a foreigner too. I know that this message will come to you as a surprise as we donât know ourselves before, but be sure that it is real and genuine business. I only got your contact from internal affairs department with believe in God that you will never let me down in this business, considering my position as a public servant. You are the only person that I have contacted in this business, so please reply me urgently so that I will inform you on the next step to take immediately. Send also your private telephone and fax number including your name to be used for the deposit. I want us to meet face to face to sign a binding agreement to bind us together. And I will fly to your country for withdrawal and sharing and other investment.
Meanwhile, I am contacting you because of the need to involve a foreigner with a foreign account and foreign beneficiary. I need your full co-operation to make this work fine because the management is ready to approve this payment to any foreigner who has the correct information of this account, which I will give you soon as you indicate your sincerity to co-operate with me, and capability to handle such amount in strict confidence and trust according to my instruction and Advice for our mutual benefit because this opportunity may never come again in my life. I need your strong assurance and trust that you will not let me down and With my position in the office I donât want anything that will Jeopardize my job so I advice that we should make secrecy and confidentiality our primary working condition, bearing in mind that I am a public servant I will also use my position and influence to effect legal approvals and onward transfer of this of this money into your account with appropriate clearance form of the ministries and foreign exchange department. At the Conclusion of this business, you will be given 20% of the total amount, 80% will be for my partner , I look forward to your earliest reply.
RICHARD TSHABALALA JOHANNESBURG, SOUTH AFRICA TEL:+27-73-973-57412 FAX+ PRIVATE AND CONFIDENTIAL I am Mr. RICHARD TSHABALALA, I work with STANDARD BANK, my partner and me has decided to contact you because there is an account opened in this bank in 1999 and since 2001 and nobody has operated on this account again. After going through some old files in the records, I discovered that if I do not remit this money out urgently it would be forfeited for nothing. The owner of this account is Mr Smith B. Andrew, a foreigner, and a miner at a Gold Company, a geologist by profession and died since 2000. No other person knows this account or anything concerning it, the account has no beneficiary and my investigation proved to me as well that the company does not know anything about this account and the money in this account is USD 45,000,000.00 (forty Five Million United States Dollars). I am only contacting you as a foreigner because this money cannot be approved to a local bank here but can only be approved to any foreign account because the money is in United State Dollars and the former owner Mr. Smith B. Andrew a foreigner too. I know that this message will come to you as a surprise as we donât know ourselves before, but be sure that it is real and genuine business. I only got your contact from internal affairs department with believe in God that you will never let me down in this business, considering my position as a public servant. You are the only person that I have contacted in this business, so please reply me urgently so that I will inform you on the next step to take immediately. Send also your private telephone and fax number including your name to be used for the deposit. I want us to meet face to face to sign a binding agreement to bind us together. And I will fly to your country for withdrawal and sharing and other investment. Meanwhile, I am contacting you because of the need to involve a foreigner with a foreign account and foreign beneficiary. I need your full co-operation to make this work fine because the management is ready to approve this payment to any foreigner who has the correct information of this account, which I will give you soon as you indicate your sincerity to co-operate with me, and capability to handle such amount in strict confidence and trust according to my instruction and Advice for our mutual benefit because this opportunity may never come again in my life. I need your strong assurance and trust that you will not let me down and With my position in the office I donât want anything that will Jeopardize my job so I advice that we should make secrecy and confidentiality our primary working condition, bearing in mind that I am a public servant I will also use my position and influence to effect legal approvals and onward transfer of this of this money into your account with appropriate clearance form of the ministries and foreign exchange department. At the Conclusion of this business, you will be given 20% of the total amount, 80% will be for my partner , I look forward to your earliest reply. Yours Sincerely, MR. RICHARD TSHABALALA Richardtshabalala@gmail.com