An
Email with the Subject "I need your urgent assistance reply back to me now." was
received in one of Scamdex's honeypot email accounts on Thu, 13 Sep 2012 21:22:29 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as kwesi mensah <mrjames.alimama@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
assistance million bankaccount millionresponse40%60%urgent transferbusinessdormantalimama@yahoo.com will yahoo.com($10.5)dear
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => cj@scamdex.com
[delivery-date:] => Thu, 13 Sep 2012 21:22:29 -0700
[received:] => Array
(
[0] => from mail-qc0-f193.google.com ([209.85.216.193]:40604)by lester.newsblaze.com with esmtps (TLSv1:RC4-SHA:128)(Exim 4.77)(envelope-from )id 1TCNQD-0002Si-EWfor cj@scamdex.com; Thu, 13 Sep 2012 21:22:29 -0700
[1] => by qcsg1 with SMTP id g1so620981qcs.4 for ; Thu, 13 Sep 2012 21:22:29 -0700 (PDT)
[2] => by 10.224.174.75 with SMTP id s11mr4171886qaz.88.1347596549411; Thu,13 Sep 2012 21:22:29 -0700 (PDT)
[3] => by 10.49.94.45 with HTTP; Thu, 13 Sep 2012 21:22:29 -0700 (PDT)
)
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:content-type; bh=9YmI8jeMjbghmyWNT/RqX+E3IDFwJHDwj7t4NiTQSq4=; b=rj/67dtT2SsU5IGDy2P5+cTZky2J6CW91p9YCx3QHM2SNdghuKBTO/9yLX1QVqnPOw DkrKX8TEEgcGD3+U+50vFo1i3isCVzGKmpSY/Tip2cqmDcYko5U2HoxfclBs3K7SQ8NX ilphaP3+pMRFqKehbGx9Ym2HepBgS5p0sToZWHNxAUN9KdZ89D5viTiJ7Hw4h7dTMED6 T0FqsMPeRjWcYVlXbeecJphy1LS8wosjq70zypZuN+xRBdQjyr3eS92EFJWWDSa2xjQf yH/eAMnKBW6ruJOZ9wj4qx+JFkz7A5OZ/9V+8O4J6U9jl6eBTBzcoYOUMKPTlAg3/QUj j7mQ==
[mime-version:] => 1.0
[sender:] => kwesimensah1988@gmail.com
[date:] => Thu, 13 Sep 2012 21:22:29 -0700
[x-google-sender-auth:] => qGuEYKkOm4cSrSiFGPcWJ6DJE5M
[message-id:] =>
[subject:] => I need your urgent assistance reply back to me now.
[from:] => kwesi mensah
[to:] => undisclosed-recipients:;
[content-type:] => multipart/alternative; boundary=20cf30334811a0d78404c9a1c50e
[bcc:] => cj@scamdex.com
[x-spam-status:] => No, score=-3.4
[x-spam-score:] => -33
[x-spam-bar:] => ---
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: * Dear sir/madam , I need your urgent assistance in transferring the sum of ($10.5) MILLION to your account within 10 or 14 banking days. This money has been dormant for years in our Bank. Upon receipt of your reply,I will give you full details on how the business will be executed and also note that you will have 40% of the above mentioned while 60% will be for me, I am expecting your urgent response . [...] Content analysis details: (-3.4 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 URG_BIZ BODY: Contains urgent matter-3.0 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mrjames.alimama[at]yahoo.com)-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.193 listed in list.dnswl.org]-0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (kwesimensah1988[at]gmail.com) 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 MONEY_PERCENT X% of a lot of money for you 3.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Dear sir/madam , I need your urgent assistance in transferring the sum of ($10.5) MILLION to your account within 10 or 14 banking days. This money has been dormant for years in our Bank.
Upon receipt of your reply,I will give you full details on how the business will be executed and also note that you will have 40% of the above mentioned while 60% will be for me, I am expecting your urgent response .
Thanks/Regard,
Mr.James Ali Mama
Dear sir/madam , I need your urgent assistance in transferring the sum of ($10.5) MILLION to your account within 10 or 14 banking days. This money has been dormant for years in our Bank.
Upon receipt of your reply,I will give you full details on how the business will be executed and also note that you will have 40% of the above mentioned while 60% will be for me, I am expecting your urgent response .