An
Email with the Subject "Good Day" was
received in one of Scamdex's honeypot email accounts on Fri, 26 Oct 2007 04:48:18 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Frank Williams <frank_williams088@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
killeddeathivoryescapedbankbidaccount15%5%business transferfundsentexportmailbank abidjansierrafrank_williams088@yahoo.comfrank_williams411@yahoo.fr will spamsecurityyahoo.comyahoo.yahoo!http://mail.yahoo.com
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => info@scamdex.com
[delivery-date:] => Fri, 26 Oct 2007 04:48:18 -0700
[received:] => Array
(
[0] => from n8.bullet.ukl.yahoo.com ([217.146.182.188])by bartok.o7e.net with smtp (Exim 4.68)(envelope-from )id 1IlNfd-00035o-Offor info@scamdex.com; Fri, 26 Oct 2007 04:48:18 -0700
[1] => from [217.12.4.215] by n8.bullet.ukl.yahoo.com with NNFMP; 26 Oct 2007 11:48:06 -0000
[2] => from [216.252.122.218] by t2.bullet.ukl.yahoo.com with NNFMP; 26 Oct 2007 11:48:06 -0000
[3] => from [69.147.84.114] by t3.bullet.sp1.yahoo.com with NNFMP; 26 Oct 2007 11:48:05 -0000
[4] => from [127.0.0.1] by omp203.mail.sp1.yahoo.com with NNFMP; 26 Oct 2007 11:48:05 -0000
[5] => (qmail 50605 invoked by uid 60001); 26 Oct 2007 11:48:05 -0000
[6] => from [41.207.212.172] by web44805.mail.sp1.yahoo.com via HTTP; Fri, 26 Oct 2007 04:48:05 PDT
)
[x-yahoo-newman-property:] => ymail-3
[x-yahoo-newman-id:] => 657546.17522.bm@omp203.mail.sp1.yahoo.com
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; b=0hm6RBax4AvcUPFAP6KdsrbR9yCFn+Yh+RAwo77rRJzqmmiIVUO6P3Niftp1wA/JhAezOH7dVTPMZn0z96ixxXhfHGT0t2pT8VAmTNu+RmdZ/ebHQvJV30TS5tFmriPA8SkfM+ZA9OHYlGqtkJ0DgABSYq8D1VraD/JTIBaeDTA=;
[x-ymail-osg:] => 3SwN.6cVM1lBFYWDYiAs5.7mLUv7u93jwYgUhZcR
[date:] => Fri, 26 Oct 2007 04:48:05 -0700 (PDT)
[from:] => Frank Williams
[reply-to:] => frank_williams411@yahoo.fr
[subject:] => Good Day
[to:] => mailtoadmin@broadcastadvertisenow.com
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-183964371-1193399285=:47861"
[content-transfer-encoding:] => 8bit
[message-id:] => <530783.47861.qm@web44805.mail.sp1.yahoo.com>
[x-spam-status:] => No, score=1.2
[x-spam-score:] => 12
[x-spam-bar:] => +
[x-spam-flag:] => NO
[x-scamdex-scores:] => S:35 P:28 A:30 L:27 E:31 G:26
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 35
[x-scamdex-totscore:] => 177
[x-scamdex-kw:] => \%,account,bank,business,courier,death,export,fund,killed,sent
[x-scamdex-em:] => bm@omp203.mail.sp,frank_williams411@yahoo.fr,mailtoadmin@broadcastadvertisenow.com
[x-scamdex-dir:] => S
[x-scamdex-id:] => S1193416841.M383482P18779V0805I004766D3
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
My name is Frank Williams, 24 years from Sierra Leone . My father and I escaped from our country at the heat of the civil war after loosing my mother and two of my senior brothers in the war. As a result of the political instability in my country even after the war, my father established his cocoa and coffee export business in Abidjan , Ivory Coast . He was in Buake,
A northern city to negotiate for the purchase of a cocoa plantation when he was shot and killed by the rebel troupes fighting to take over the Government of the country on the 22nd September, 2002. The death of my father has now made me an orphan and thereby exposing me to danger.
Before the unfortunate death, my late father had in his personal account with a bank here the sum of $18.4m. As a result of the present insecurity of lives and property in this country,
I wish request that you assist me use your account in your country to transfer the balance of my father's account.
Again to assist me with a letter of invitation that will make me get a visa to your country for residence in order for me to continue my education and to invest the fund in a viable business venture.
I am willing to give you 15% while 5% has been earmarked for expenses. If this is acceptable to you,
Send me a mail through my regular e-mail account so that we can discuss further on this
matter.
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
From:Frank Williams Abidjan , Ivory Coast Rrue No 568 cocody
My name is Frank Williams, 24 years from Sierra Leone . My father and I escaped from our country at the heat of the civil war after loosing my mother and two of my senior brothers in the war. As a result of the political instability in my country even after the war, my father established his cocoa and coffee export business in Abidjan , Ivory Coast . He was in Buake, A northern city to negotiate for the purchase of a cocoa plantation when he was shot and killed by the rebel troupes fighting to take over the Government of the country on the 22nd September, 2002. The death of my father has now made me an orphan and thereby exposing me to danger.
Before the unfortunate death, my late father had in his personal account with a bank here the sum of $18.4m. As a result of the present insecurity of lives and property in this country, I wish request that you assist me use your account in your country to transfer the balance of my father's account. Again to assist me with a letter of invitation that will make me get a visa to your country for residence in order for me to continue my education and to invest the fund in a viable business venture.
I am willing to give you 15% while 5% has been earmarked for expenses. If this is acceptable to you, Send me a mail through my regular e-mail account so that we can discuss further on this
matter.
Frank Williams frank_williams411@yahoo.fr
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com