An
Email with the Subject "Re: Investment Capital. (Pls. READ AND GET BACK TO ME)!!!!." was
received in one of Scamdex's honeypot email accounts on Fri, 13 Jul 2012 10:02:27 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as "Gen. Mathieu G.O" <genmathieu2@yahoo.com.hk>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
generalassistanceafrica2 million milliondepositedreliabletrustworthytransactionprojectinvestmentbusinessfundsecuremailcontractorgenmathieu2@yahoo.com will securitygodyahoo.com(pls. read and get back t...(rÃpublique du b...dearcooperationread and get back
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Fri, 13 Jul 2012 10:02:27 -0700
[received:] => Array
(
[0] => from ppp240-194.static.internode.on.net ([203.122.240.194]:20196 helo=hearingmatters.com.au)by lester.newsblaze.com with esmtp (Exim 4.77)(envelope-from )id 1SpjG4-00042m-Qlfor scams@scamdex.com; Fri, 13 Jul 2012 10:02:27 -0700
[1] => from 246.Red-83-45-187.dynamicIP.rima-tde.net ([83.45.187.246]) by hearingmatters.com.auwith Microsoft SMTPSVC(6.0.3790.3959); Sat, 14 Jul 2012 00:59:56 +0930
)
[from:] => "Gen. Mathieu G.O"
[subject:] => Re: Investment Capital. (Pls. READ AND GET BACK TO ME)!!!!.
[to:] => "scams"
[content-type:] => multipart/alternative; boundary="Wl7x6Nwcd=_YxhwyPvIdF4TupZUYT3siMm"
[mime-version:] => 1.0
[reply-to:] => "Gen. Mathieu G.O"
[organization:] => Gen. Mathieu G.O
[date:] => Fri, 13 Jul 2012 17:29:53 +0200
[x-antivirus:] => avast! (VPS 120713-0, 13/07/2012), Outbound message
[x-antivirus-status:] => Clean
[message-id:] =>
[x-originalarrivaltime:] => 13 Jul 2012 15:29:57.0341 (UTC) FILETIME=[5BED90D0:01CD610C]
[x-spam-status:] => No, score=2.9
[x-spam-score:] => 29
[x-spam-bar:] => ++
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Re: Investment Capital. Dear friend, I am looking for your cooperation in areas related to Construction, Real Estate, and Agriculture Manufacturing business or building a Tourist Hotel/shopping Mall in your country, I am sorry if this is not in line with your business. I need an experienced person to assist me to set up develop the project and assume responsibility of ownership as chairman but will be bringing in profit /distribute profit monthly or annually. I am a General in the Republic of Benin West Africa; (République du Bénin). [...] Content analysis details: (2.9 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (genmathieu2[at]yahoo.com.hk) 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ("gen. mathieu g.o" ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (genmathieu2[at]yahoo.com.hk)-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.5 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419) 0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419) 1.9 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases 1.9 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I am looking for your cooperation in areas related to Construction, Real Estate, and Agriculture Manufacturing business or building a Tourist Hotel/shopping Mall in your country, I am sorry if this is not in line with your business. I need an experienced person to assist me to set up develop the project and assume responsibility of ownership as chairman but will be bringing in profit /distribute profit monthly or annually. I am a General in the Republic of Benin West Africa; (RÃpublique du BÃnin).
The source of this fund is gratification from a German contractor I have helped to secure contracts and has nothing or whatsoever to do with our government.
The money $10.2 million has been deposited with a security firm abroad. I need the assistance of a reliable and trustworthy person to help me receive this money, because as an active General we declared our assets according to our constitution before taking oath of office, and also, we will be compelled to declare our assets near or in the future due to the ongoing corruption in our Country which you might be aware of it if you do listen to BBC/CNN NEWS. So please if you are interested and capable to handle this transaction with honesty, kindly get back to me via my PRIVATE e-mail address: genmathieu5@hotmail.com for further details you need to know to enable us carry on.
God bless you.
With Warmest Regards, Gen. Mathieu G.O
ï
Re: Investment Capital.
Dear friend,
I am looking for your cooperation in areas related to Construction, Real Estate, and Agriculture Manufacturing business or building a Tourist Hotel/shopping Mall in your country, I am sorry if this is not in line with your business. I need an experienced person to assist me to set up develop the project and assume responsibility of ownership as chairman but will be bringing in profit /distribute profit monthly or annually. I am a General in the Republic of Benin West Africa; (RÃpublique du BÃnin).
The source of this fund is gratification from a German contractor I have helped to secure contracts and has nothing or whatsoever to do with our government.
The money $10.2 million has been deposited with a security firm abroad. I need the assistance of a reliable and trustworthy person to help me receive this money, because as an active General we declared our assets according to our constitution before taking oath of office, and also, we will be compelled to declare our assets near or in the future due to the ongoing corruption in our Country which you might be aware of it if you do listen to BBC/CNN NEWS. So please if you are interested and capable to handle this transaction with honesty, kindly get back to me via my PRIVATE e-mail address: genmathieu5@hotmail.com for further details you need to know to enable us carry on.
God bless you.
With Warmest Regards, Gen. Mathieu G.O
