An
Email with the Subject "A benefiting massage!(Mrs Nadel Halioua)" was
received in one of Scamdex's honeypot email accounts on Mon, 31 Jan 2011 10:46:04 -0800
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Mrs Halioua Nadel <nadel_halioua002@voila.fr>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
beneficiaryafricanafrica5 million million 5 million dollarsgoldboxforeignoilbankaccountclaimrecords milliontwo milliontransactionopportunityescrow50%40%10%business transferinvestmentfundsecurebank sharedollar the bank our bank confidential will exchange(mrs nadel halioua)($2.5m)dearnmrs halioua nadel
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submitted@scamdex.com
[delivery-date:] => Mon, 31 Jan 2011 10:46:04 -0800
[received:] => Array
(
[0] => from web120406.mail.ne1.yahoo.com ([98.138.85.213])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1PjylH-0008Mg-G6for submitted@scamdex.com; Mon, 31 Jan 2011 10:46:04 -0800
[1] => (qmail 88158 invoked by uid 60001); 31 Jan 2011 18:46:03 -0000
[2] => from [41.203.238.165] by web120406.mail.ne1.yahoo.com via HTTP; Mon, 31 Jan 2011 10:46:03 PST
)
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1296499563; bh=ud575Lg0ltG7D3Th4Qr7S/8KpZFw2QZ96TUL77Ydq4Y=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=jdtFnV9uz8Q4FGKYb81NgCR1PiMeCz/CuiX8t5VVZKnSO1uNiCBodSTSiFqdOZJpZMbh/XbquWaoKziU7+Ln4OhzW+hXDqHnCr/oxHcK1Fq3ehH7dV4JXhHdmwg52rKqmZcx6uHQhLbuSeBO/epXTBQDOqmHdty+SSsEKBkCW94=
[message-id:] => <169750.87842.qm@web120406.mail.ne1.yahoo.com>
[x-ymail-osg:] => u6ANWzwVM1lWl1esNmYp1bNESKYn9cMaapN46l2NYQZuRBMs6AinZ0EDfz2_TtB7x0SAxQvlIRCVO9b_0YTq0.k_81jmMbxh1aWjS_WT.9UbkLL7GWrTjlyjDcarQuT6Go0v2zQJKMDsF9cCfrn03S8ZmH07mh4VHM2rI_8lC8PaRDP2ZilPq_r1SiFesDallSiei6AtCFlyoHRbz4_xQcI8WzdGzEOla2SzdHu0HYqj1v9CtQcK.yfF6oIZ1nHZen9qIrdDSIirpDXXYD4nEiANzQP6FNw9z06Bh1qLKnF2MuCyglctJ7FmhO1b4pB.OEuEV.pnB74N6gLKgkNXWcL8CLhoPnQ3_icPq2xYNrxptzEHTXmlDBH8hdlg8nDRBTwn7x8qcjfFLRlw81xn8LldtUnRSTdToee_j2ug0oEaePfAeHxPSChJWkdz73JyExK0s6udzhjUjrf2BvuQ9hciL0fWbIT1gzuT4SksIEAgSzNujn47ESt3uScEEi40GjfCfQmNQlSjP_MRdCCQN.pGO3p5vw_H0Tpb2BGyBq1xQDWZegk57yiYh106LXIfEcQxJjSirfcqjQY49IOgQuK06i5qY8zwqM0Wo2mgUdhV8_R_.HLgE3iaHUmd58lXnd9oxAIiIj3_TFASH6Yg63NZx3clB8nVTW38nGNF24n51cCcEo0jgwPtUlEi2b0cKic97pn7KGzQNs7AdVvVwOO3luGZYhjfSMtPXQQGkJdXJkAm9mV5Af4yk0h56se.OyYArPTTm1C0coPsPpR3vD1vbgdzM9ahjoV_2A9CRzj2Lo4NNNOKLEDjJdSzMFK.P9VoK.N.vOE7qT7Nbjks8EPSPtZHzQfzkiXZJ7ZQbWE4e.ixqZ84XL.qvhVX48kNYw2d2K4ppuE6MieVBgMaiTfbkGFPRWzHhGx811FBK_BoIsdOIKqoIm2Vqyjf5IZDNztuXibAfJp3PaQCra8NoJTrEyt5yEGzxU7631laRvTirxqbuqFLo4VGkKw_40wffRFKNfdKF8T5omvGRwNA7dT6pWKDjRLppGGomej3O0Av6wDrPwgPwJkuJGAx
[x-rocketymmf:] => james.rick89
[x-mailer:] => YahooMailClassic/11.4.20 YahooMailWebService/0.8.107.285259
[date:] => Mon, 31 Jan 2011 10:46:03 -0800 (PST)
[from:] => Mrs Halioua Nadel
[reply-to:] => nadel_halioua001@voila.fr
[subject:] => A benefiting massage!(Mrs Nadel Halioua)
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-904010358-1296499563=:87842"
[x-spam-status:] => No, score=3.4
[x-spam-score:] => 34
[x-spam-bar:] => +++
[x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Friend, Greetings to you and your family, I am the managerof bill and exchange in THE BANK , i have a business of 2.5 Million UnitedState Dollars to be transfer to your account for investment in your country, if you are ready to assist me get back to me, i will give you full detailson how the fund will be transfer to you. Be rest assure that everything willbe handled confidentially because, this is a great opportunity we cannotafford to miss, as it will make our family profit alot. It has been 5 yearsago, that most of the greedy African Politicians used our bank to Laundermoney overseas through the help of their Political advisers. Most of thefunds which they transferred out of the shores of Africa was gold and oilmoney that was supposed to have been used to develop the continent. The Politicaladvisers always inflated the amounts before transfer to foreign accountsso I also used the opportunity to divert part of the funds hence I am awarethat there is no official trace of how much was transferred as all the accountsused for such transfers were being closed after transfer. I acted as theAccount Officer to most of the politicians and when I discovered that theywere using me to succeed in their greedy act,I also cleaned some of theirbanking records from the Bank files and no one cared to ask me because themoney was too much for them to control As I am sending this message to you,I was able to divert the sum of two million five hundred united state dollars($2.5M) to an escrow account belonging to no one in the bank. Now the bankis very anxious to know who is the real beneficiary of the funds becausethey have made a lot of profits with the funds. It has been five years nowand most of the politicians are no longer using our bank to transfer fundsoverseas,as majority of them are not in power again, because their tenurehas expired,and the $2.5 Million Dollars has been lying in the bank as unclaimedfund. Once the fund has been transferred into your account,i will retirefrom the bank and [...] Content analysis details: (3.4 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 MILLION_USD BODY: Talks about millions of dollars-3.0 UNCLAIMED_MONEY BODY: People just leave money laying around0.0 FREEMAIL_FROM Sender email is freemail (nadel_halioua002[at]voila.fr)2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (nadel_halioua002[at]voila.fr)-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear!0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL0.0 T_MONEY_PERCENT X% of a lot of money for you0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Greetings to you and your family, I am the manager of bill and exchange in THE BANK , i have a business of 2.5 Million United State Dollars to be transfer to your account for investment in your country , if you are ready to assist me get back to me, i will give you full details on how the fund will be transfer to you.
Be rest assure that everything will be handled confidentially because, this is a great opportunity we cannot afford to miss, as it will make our family profit alot.
It has been 5 years ago, that most of the greedy African Politicians used our bank to Launder money overseas through the help of their Political advisers.
Most of the funds which they transferred out of
the shores of Africa was gold and oil money that was supposed to have been used to develop the continent.
The Political advisers always inflated the amounts before transfer to foreign accounts so I also used the opportunity to divert part of the funds hence I am aware that there is no official trace of how much was transferred as all the accounts used for such transfers were being closed after transfer.
I acted as the Account Officer to most of the politicians and when I discovered that they were using me to succeed in their greedy act,I also cleaned some of their banking records from the Bank files and no one cared to ask me because the money was too much for them to control As I am sending this message to you, I was able to divert the sum of two million five hundred united state dollars ($2.5M) to an escrow account belonging to no one in the bank.
Now the bank is very anxious to know who is the real beneficiary
of the funds because they have made a lot of profits with the funds.
It has been five years now and most of the politicians are no longer using our bank to transfer funds overseas,as majority of them are not in power again, because their tenure has expired,and the $2.5 Million Dollars has been lying in the bank as unclaimed fund. Once the fund has been transferred into your account,i will retire from the bank and without wasting time i will like you to indicate your interest in receiving this fund into your account in your country.
So that after the transfer of the fund i can come to your country for the sharing of the fund, The money will be shared 50% for me and 40% for you while the other 10% will be for the orphanage home with the poor people.There is no one that is going to ask you any question about the funds because everything is well secured by me .
If you are interested in this
transaction, do not fail to reply me back, but if you are not interested delete my message from your box ok.Hoping to hear from you soon.