An
Email with the Subject "Dear Friend .Urgent Attention" was
received in one of Scamdex's honeypot email accounts on Sun, 12 Jul 2015 19:10:19 -0700 (PDT)
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as "From Mr.Christophe Guye" <unmessage@outlook.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
accidentafricaverificationcontactreliablepaymenturgentbusinesssentexportsharecote d ivoire will hospitaldear
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[delivered-to:] => scamdex@gmail.com
[received:] => Array
(
[0] => by 10.96.142.197 with SMTP id ry5csp1344690qdb; Sun, 12 Jul 2015 19:10:19 -0700 (PDT)
[1] => from web100211.mail.kks.yahoo.co.jp (web100211.mail.kks.yahoo.co.jp. [114.111.99.106]) by mx.google.com with SMTP id pw8si25844244pdb.85.2015.07.12.19.10.17 for ; Sun, 12 Jul 2015 19:10:18 -0700 (PDT)
[2] => (qmail 32539 invoked by uid 60001); 13 Jul 2015 02:10:16 -0000
[3] => from [196.47.157.221] by web100211.mail.kks.yahoo.co.jp via HTTP; Mon, 13 Jul 2015 11:10:16 JST
)
[x-received:] => by 10.66.147.4 with SMTP id tg4mr65406958pab.69.1436753418967; Sun, 12 Jul 2015 19:10:18 -0700 (PDT)
[return-path:] =>
[received-spf:] => softfail (google.com: domain of transitioning unmessage@outlook.com does not designate 114.111.99.106 as permitted sender) client-ip=114.111.99.106;
[authentication-results:] => mx.google.com; spf=softfail (google.com: domain of transitioning unmessage@outlook.com does not designate 114.111.99.106 as permitted sender) smtp.mail=unmessage@outlook.com; dmarc=fail (p=NONE dis=NONE) header.from=outlook.com
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=yj20050223; d=yahoo.co.jp; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:X-YMail-JAS:Sender:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=QTSLIXFYTmAFRfM8G1ujg1POSjXVpRlsu1h2B9tv3tJ2pzjlqfczbM5817Nqbw07s+48HT6jQP56ROy7+n/kBEwF002m8Mgx7vsQsuZ1Kn7tYGeJnR4P5NGfHBP0nRoP ;
[message-id:] => <533088.26268.qm@web100211.mail.kks.yahoo.co.jp>
[x-ymail-osg:] => xcyBXoAVM1nsc7F_B0LmRbVEqzcKrRGV2FPgBjO0pJXxkEqttPNP2VS3K.ehuw7JNmet3wpJKg7h6DwHyKp2DrKBudt5yo.qy58miAhgRNK.XJrCkMl8D11tNbQkY2TGkEfMjsMIOcPItx1YO889oawvoO6Tfm61WO1YnR6YX7CBoL9DCXt_1BU5Iwsrb5fMZp8Yha_hDkAhsl5V52Zz.7nbuc9Bc4KO_KQWOW3RE0Awu_BosAhxSLdD_udTPMX2WPSyKXDXDs2b2GpzsUfcFItEuu18Q9unNnvOfBIkty.XCnhb2uyrOMbcvwqVF53RhDRAz.XwokGayKSxalI_kvvnEnhOdm0PCqIMIivtodL1Afv.TyyPiE_cf74UctGUFvXAl6s5xyQWaHnBHzi_SHPhmYSpTg2c3DU1t6uR0SZ2Fzl.yIDnOdEvolbOJlh2n0oQ7npo3gC4LzfQGi6fKwkUHbVl8VfzlmuoMNQdjHoXR_X4tkq8KubgHkfrNO9leQ3H92IMqbDRozCwrHVbNeIiwSs4vgC_xGlz5AQQ0_JJQ0Y0fbJ8jiP1BocDS6Vi1_JG5Q5jfLfXf7jngut0cYyGvq_n8oBh.yhrDJQjwNyXBR6NAdJoPjcO4d_8YzyO1HdIWrKGFIpyCVJcSDt7NucZS2Nb.3P9g0U7C3lGX4Mz6zrgZQYTE_YHgueQUxQunv1IeJjYOARrdAGgHT3GdHrkVbyUGx5uRw0BPXL9GRLiEwuYhb3c1ilpK_ZmwN0jn449tcXCoDCNMhJsOZ9lUZSUEq2dwTkMLfUdCwsSzOaf
[x-rocketymmf:] => sopsystem01
[x-mailer:] => YahooMailWebService/0.8.111_65
[x-ymail-jas:] => .mmOE3IVM1l7w1CxCZ0DOKeP37uMCLWMTj._pBKzbyrIC72w3UpKOfAgPxiunuxvoqO7vH4LDV5irbICshw8Ps0dtKZgh67.vmN11uMg99372btOs9tNvbqARNZz3Its251w
[sender:] => sopsystem01@yahoo.co.jp
[date:] => Mon, 13 Jul 2015 11:10:16 +0900 (JST)
[from:] => "From Mr.Christophe Guye"
[reply-to:] => "From Mr.Christophe Guye"
[subject:] => Dear Friend .Urgent Attention
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1343450554-1436753416=:26268"
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I need reliable businessman whom I will present to the farm industry where I work, as the supplier of animals drugs materials, It Is very large farming Industry with more than 900 acres of land that Is making big success In the Country now we are well known with our good name you can find us only in Cote D Ivoire. But we are going well further to create branches In other part of Africa which might realise within a short time and more other Countries too meanwhile we supplies our product to various part of the World and Import too from Countries in South America and others.
We import and export animal and produce:, higher sperm concentration, higher fertility more pregnancy, less cell damage during freeze thaw, all types of live animal, coffee and other agricultural product. I am contacting you from hospital where I admitted
heading to eight months now because of motor accident injury cases, now my director instructed me to import 200 liters of a new chemical material we use for production since Ebola started which I purchased $4,500 one liter and supplied to my director at rate of $8,900,
Now he wants me to send my junior colleague to the manufacture where I purchased the material last time since I will not travel for verification and payment, and I don’t want my junior colleague to find out deal I make first time .Friend if you can handle this I will wait for your urgent respond, before I will give you further details. Note that you and I will share profit we will make from my director 50/50.
Best Regards, Christophe Guye
Dear friend
I need reliable businessman whom I will present to the farm industry where I work, as the supplier of animals drugs materials, It Is very large farming Industry with more than 900 acres of land that Is making big success In the Country now we are well known with our good name you can find us only in Cote D Ivoire. But we are going well further to create branches In other part of Africa which might realise within a short time and more other Countries too meanwhile we supplies our product to various part of the World and Import too from Countries in South America and others.
We import and export animal and produce:, higher sperm concentration, higher fertility more pregnancy, less cell damage during freeze thaw, all types of live animal, coffee and other agricultural product. I am contacting you from hospital where I admitted
heading to eight months now because of motor accident injury cases, now my director instructed me to import 200 liters of a new chemical material we use for production since Ebola started which I purchased $4,500 one liter and supplied to my director at rate of $8,900,
Now he wants me to send my junior colleague to the manufacture where I purchased the material last time since I will not travel for verification and payment, and I don’t want my junior colleague to find out deal I make first time .Friend if you can handle this I will wait for your urgent respond, before I will give you further details. Note that you and I will share profit we will make from my director 50/50.