An
Email with the Subject "Greetings to you Beloved." was
received in one of Scamdex's honeypot email accounts on 06 Jul 2020 04:28:45 -0000
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as "Mrs. Julie Hush" <glesliecooper@mail2world.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
late husbandcancer million hundred thousand united ...oildiedresidentfive millionsix hundred thousanddepositedresponseinternetprocess artfund transfersentmaildollarsurprisecote d'ivoire by my late ...respect will securitygodwidowbelovedengr.donate mrs. julie g. hush,years old
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[delivered-to:] => Array
(
[0] => unknown
[1] => scamdex@gmail.com
)
[received:] => Array
(
[0] => from imap.gmail.com (74.125.195.108:993) by mail.scamalot.com with IMAP4-SSL; 06 Jul 2020 04:28:45 -0000
[1] => by 2002:a05:6638:24f:0:0:0:0 with SMTP id w15csp319635jaq; Wed, 10 Jun 2020 03:35:00 -0700 (PDT)
[2] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id m17sor14588369iow.105.2020.06.10.03.35.00 for (Google Transport Security); Wed, 10 Jun 2020 03:35:00 -0700 (PDT)
[3] => from sonic309-13.consmr.mail.bf2.yahoo.com (sonic309-13.consmr.mail.bf2.yahoo.com. [74.6.129.123]) by gmr-mx.google.com with ESMTPS id r17si816977pgu.4.2020.06.10.03.35.00 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 10 Jun 2020 03:35:00 -0700 (PDT)
[4] => from sonic.gate.mail.ne1.yahoo.com by sonic309.consmr.mail.bf2.yahoo.com with HTTP; Wed, 10 Jun 2020 10:34:59 +0000
)
[x-received:] => Array
(
[0] => by 2002:a02:a78e:: with SMTP id e14mr2500490jaj.9.1591785300903; Wed, 10 Jun 2020 03:35:00 -0700 (PDT)
[1] => by 2002:a17:90b:895:: with SMTP id bj21mr2404404pjb.148.1591785300459; Wed, 10 Jun 2020 03:35:00 -0700 (PDT)
)
[arc-seal:] => Array
(
[0] => i=2; a=rsa-sha256; t=1591785300; cv=pass; d=google.com; s=arc-20160816; b=sCXGdD65al3daMSSw0Xf9SDIlFZ6LE8oLaq7H9Ie8F4DgKFKTbwoTgWaF1qIisWlY0 0W+jVL1MyHOYEWtOCLB+hqFOgl51cZpiJnTv3fr8j2KRA3qbSjCUGBEySeeNO5PsXIbc CpTmdS7WMEIvUICX/tFMxtHwQGWmDz70BRmDg8HRrwTCvt5F/BRQMorziryA7tUKFmku Qldvp8KVIkf+gUNQnghfT82YplqXx/lvjX73zDvoUSUxZIrN5fS4jWGJeLY2kmGtrvD+ pd3emq/iSBIqzqXUD9bigpdhka69C5GPDGiUhCg6E/t+uK1LfHzSV0BouTqxRNVpuTlB 2ufQ==
[1] => i=1; a=rsa-sha256; t=1591785300; cv=none; d=google.com; s=arc-20160816; b=Mdqcq+3XQvmP557T5Gu2OBRLpypl/Dhl/e8cZSdVUyYHCyVWK/dS2/ThEwszzPFzJV hh9sVVpiYMXu04wYHfDIwu9edXC445BlYSmnPgeqXhtikshkQJ26PhEwvQa0mM6zI0eE EtzYEc3cZ3L4f7j08iVDYBEWzX+rbjFdeptJV7y0gGv+4f237YxVvl3vH5sqJFdc1mnI Mtzoo/HDKnPBaA5PgzTXHtr4CaBUmdBcCinfcIUBm+7daZcf26tdofXa+Up90tOJXEwC 9tLV+/vH1agiw4wJA/B/JkcjRGz22ScWYIntvW94Iy3FWvaBEAgCRrt4GdUW3t4c4di7 r41Q==
)
[arc-message-signature:] => Array
(
[0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=references:mime-version:subject:message-id:reply-to:from:date :dkim-signature; bh=jFOLCYxU1MNQciQxdXOEsMR5xnqgQJPktrjj3cYXOQI=; b=jDP6iAntNoKWbTSmwT0w0V+6G3eUy9LllCzcP3c4Re2g5i0JRBi7vBQJDkuw2RUMwE NsAPb98kO5o84DMbL6EnezcV5TrgPfwUt+L8cIRoY4amnI/UXF9Xh/08TFt7bbv3I1oO Nw8pPwtJBk2JA7EFcxkbPYgonm3YXQRkg8kAOUKy9YUsM327raiRfrk/DhnCHCsD3GN1 5czn9refAsaPu3B1s/lrEBN9dMaPwacdB14K4qw4OEu7XS35ddrG/rKQ0/ig2OwhoqWJ t1+UFKvbn8Y3d2HCLR+cSuLDhOXI54BbSeR+j4OGj6UP9w86GyprwgOY2hZzERPkbxIj 7NwA==
[1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=references:mime-version:subject:message-id:reply-to:from:date :dkim-signature; bh=jFOLCYxU1MNQciQxdXOEsMR5xnqgQJPktrjj3cYXOQI=; b=B4tLgu/eC2ovj+M5F7MEPQsYD2b7v6S4P98grFrTJaoizbX/vU4cdqvl2lACfUlcMG xIBa6XchFtSP2L5eFW+bUrXwY2xy9Afadho7gbbCvgpexrVD2bahDgsYZJ7TvGwIT/mR odzFW+fGbKTeEvqPH79v60zuntsEG1B0WopuGYRzduupWpxMDar5SjG20f7bZ0icH/88 Zrji0i6fRLAJVBI/j0SWbkdOzGgGJ8Es5sfc5ZbTdVw/2+EHKmp+YTwTXMTXLuonoRbz dgCuA1mrgSI9woMC+uRCqG+2GBy8I/7XlucfnlDUUr9o/5G25Emz0q6wjuziuBTDDSOH jncA==
)
[arc-authentication-results:] => Array
(
[0] => i=2; mx.google.com; dkim=pass header.i=@yahoo.com header.s=s2048 header.b=lqojjaXU; arc=pass (i=1 dkim=pass dkdomain=yahoo.com); spf=fail (google.com: domain of glesliecooper@mail2world.com does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=glesliecooper@mail2world.com
[1] => i=1; gmr-mx.google.com; dkim=pass header.i=@yahoo.com header.s=s2048 header.b=lqojjaXU; spf=fail (google.com: domain of glesliecooper@mail2world.com does not designate 74.6.129.123 as permitted sender) smtp.mailfrom=glesliecooper@mail2world.com
)
[received-spf:] => Array
(
[0] => fail (google.com: domain of glesliecooper@mail2world.com does not designate 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
[1] => fail (google.com: domain of glesliecooper@mail2world.com does not designate 74.6.129.123 as permitted sender) client-ip=74.6.129.123;
)
[authentication-results:] => mx.google.com; dkim=pass header.i=@yahoo.com header.s=s2048 header.b=lqojjaXU; arc=pass (i=1 dkim=pass dkdomain=yahoo.com); spf=fail (google.com: domain of glesliecooper@mail2world.com does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=glesliecooper@mail2world.com
[x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:dkim-signature:date:from:reply-to:message-id :subject:mime-version:references; bh=jFOLCYxU1MNQciQxdXOEsMR5xnqgQJPktrjj3cYXOQI=; b=aPubvjw4K3MXy7Mf/qcRoguNBhSsicLtbpE+EjwM8ToxSCpncemSXYelKxxVQ/ZqP/ m0Gl/L0YoYtMXSux5x7Bo2qr8nPHSJ4fkgjpbDgPf6dq4uGh+ZBmVt/VUltkeGQuO3Ay 5cnZQgCXBohp1K24M9+w4vTkXk2y/cTSDFdFrfesqqD6qnKjwMQ1r/tqugBUOfA7G7Ab JyfmZGQvMRxSRNQTbcEnqwhBu1sk3p0j0E84nHDF6GqnyiVwHEwRbDAlI2d0VuBz/3fp THsIqS7kdHy8T5lcCKNS3kL7p6huy9DUql8pRjmjrVQ83SQcHvBeDGnLaocs6aNo9Zs0 yzBw==
[x-gm-message-state:] => AOAM532ZT60Dhl0zATpKEPuNxtX8muW9C5sQKsQU4yhKD+CwFYjjdDyt bTu6kpkS0VfwOrgWqy4OtNMfqelWbq4SL5iYUQ==
[x-google-smtp-source:] => ABdhPJyH9N2/cvjccPiKN+P6VUH3FWr0VY8VNqFOQkGIrVzA8bTGlDidvne36e8QE9xUT3MNpqCWa7uAqk1RqBpJbxXIbr9XXyY=
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1591785299; bh=jFOLCYxU1MNQciQxdXOEsMR5xnqgQJPktrjj3cYXOQI=; h=Date:From:Reply-To:Subject:References:From:Subject; b=lqojjaXUP2URMfr1BsRNlt8j9xoU2c4VY64Q0R2+REVczj1wW/L76t2/CY88trc7pjRabcrycN8zhryNbiU8KWSP2a52ScjefeERW8dD2UA9OMUd08J4uH/616XwiI9usMhnD0wfkyPufKNNQo0y2G4gNnvU7l1Eg1pGbJ1UjlvGFMVPitk1J7Nqzajk8z/zVb8YjzWDkq5jBKcESCEKAyc163DLkTTVwGqjUeP/Zr0jCtDrMceHKC0JCZyRs8DEpYy7/OzUCqFdEOyV/qw0rnFB/sE65ADiHLVRiMrB9usOQBDqGcI+rVO6OwfkyWZTyLsNRBCeWJl5FAYTzyATFA==
[x-ymail-osg:] => b8sTMooVM1nzchclCKWsza9aNeJfXhg2NO25kdAWAXQ3RBKCoXaSXgxacV9xGek Mh.Xck0FSq7MdC9Eo68D8a5Yyv8zT.YvDxGWhJGsiPgRElvOX342RtKyCvTQkWhjIzGcbFaQ.p4K 8uoiA1Hi4x0bqH7P7A5JXTgPao53eCBbyzyYXo.w1EvG.82yInI_m4uyxD.ErvWyXdCN7m9mQhhx yB8XrKEiotJMgGexfUl95kQD7FDeZdCa0HdAPz8qpsFy1MXfmbchAWIaNMzGFbYnvi1vlbDycy86 C91w4p1kfi4wD0qdEB4LQmFnK7fnpe9O3ALsjWdNGHo_TiBtrJDUdnsmh0hhkojfWeVKntyZmKJn joMw8ZQEdGas8z7WcsWdqcniB78IAUgU50c4LjF_M8ejkycL_W2BIiwoBAhaCwGo.EQqV3OSqAzX LVPnMIPh0BExewdM_INFY7E.w3YMaoHrndAm3PWMWqEgVHeqM20i8JuvuPsXlzOUmdpIhufeZdyU JJM4fIDSq79KU.64LbjItJsEF6tkV4CmGUVQQ0oOnkk2lCAfJKxumMNkQh9aocuQGsVOhE.Bw.RO CqNoE4897AJYkx001GQaF2a.IE5.OMHNJ38Zhzd3mhyY6Cp8e_8KErzSbj8aPKy0TfQUb1d2cP5j C9GrfL3Uvh9tt5PwT0danNx6HAI2BgblST82tX.3ZrhpJHLeZTBLokOnNRcs37A5VZW7ovc3FRMD 8Hk_bdG2spZLZU5yRL6xDQK9qjMh12r6yATopcUbd6kTDUt2e8fGc8w1RrfkrlJ5ev6fpcCBOaJu WhwP2ogZrJAPM_LTQc9XHX_k2gs.4aDdV6NCdm0.pGDgUu4LCtNoxzlQOVTyc.FRfMmVIjTDJ0QR TDSVxdk4Ndu7IHa5Uct8mdVLrvvSt7ymY_iXWv6JoJuRK3iWsjwH6tsvpQxO557rPVNyFGlPGNZi 6bW9k_WgVNh3eKF9E2rS7ni4gFR9yRT6us4deIknXKaYwkcNizDVB7ZfdLAhBDzgG6UfAYjg6jLX cAafoCGquQeFonh3oOrqigWzjbyEAlOHUzIeLep5JvoGzGGp_tTHo5hLeWmRWnAbKJjYUr1Uk3Sd Vmu8sLpLQtlSxQ6WDW6NvDqEj3.bbjcjZqG_aQqd0qlH_huJFsISr6JvV3lBiKGCD2vPwOWyVLfF NSgFJU5Yd7gjBE7Xy_56gVhg6C59fMelzFDEZpZBiHZgaYuSjuOnqJkQszd5kt8kshdWDHqOEe76 CjUJh9d_YsJWWSIoCyX0hoMZ6hELP1GOAY2Dknkvhr9T0MYzp0m3l1m_Q0xUZdbFTiiE5dPW_Ewl FJ4xECGRH
[date:] => Wed, 10 Jun 2020 10:34:55 +0000 (UTC)
[from:] => "Mrs. Julie Hush"
[reply-to:] => "Mrs. Julie Hush"
[message-id:] => <2023985288.1458398.1591785295375@mail.yahoo.com>
[subject:] => Greetings to you Beloved.
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="----=_Part_1458397_1877380622.1591785295374"
[references:] => <2023985288.1458398.1591785295375.ref@mail.yahoo.com>
[x-mailer:] => WebService/1.1.16072 YMailNorrin Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0
[content-length:] => 3110
[x-getmail-retrieved-from-mailbox:] => =?utf-8?q?=5BGmail=5D/Spam?=
[x-gmail-thrid:] => =?utf-8?q?1669107863656297157?=
[x-gmail-msgid:] => =?utf-8?q?1669107863656297157?=
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I know you will be surprise to read my email, apart from being surprise you may be skeptical to reply back to me because of what is going on in the internet world, one has to be very careful because a lot of scam are out there to scam innocent citizen and this has made it very difficult for people to believe anything that comes through the internet but this is a different case.
With due Respect and Humanity I write to donate and hand over this fund to you for orphanages and widows / less privileged and propagate the gospel of God $5.6M (Five Million Six hundred thousand United States dollars)deposited here in a security firm in Cote d'Ivoire by my late husband. I, Mrs. Julie G. Hush, 68 years old without a child, married to late Engr. Gabriel Hush who worked with oil company PETROCI Cote d'Ivoire before he died after a Cardiac Arteries Operation, presently my doctor said I will not last for four months due to Colon Cancer, you are request to send your full name, telephone and your resident address for documentation process to transfer the fund to you without any hindrance to accomplish our noble vow to God.
Thanks and waiting your quick response.
Always pray for me daily.
God bless us Mrs. Julie G. Hush
Greetings to you Beloved.
I know you will be surprise to read my email, apart from being surprise you may be skeptical to reply back to me because of what is going on in the internet world, one has to be very careful because a lot of scam are out there to scam innocent citizen and this has made it very difficult for people to believe anything that comes through the internet but this is a different case.
With due Respect and Humanity I write to donate and hand over this fund to you for orphanages and widows / less privileged and propagate the gospel of God $5.6M (Five Million Six hundred thousand United States dollars)deposited here in a security firm in Cote d'Ivoire by my late husband. I, Mrs. Julie G. Hush, 68 years old without a child, married to late Engr. Gabriel Hush who worked with oil company PETROCI Cote d'Ivoire before he died after a Cardiac Arteries Operation, presently my doctor said I will not last for four months due to Colon Cancer, you are request to send your full name, telephone and your resident address for documentation process to transfer the fund to you without any hindrance to accomplish our noble vow to God.