An
Email with the Subject "Urgent" was
received in one of Scamdex's honeypot email accounts on Thu, 9 Jan 2014 06:02:07 -0800 (PST)
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as roselyne <roselyne13@yeah.net>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
finance5 million million hundred thousandeurooilcontact millionfive hundred thousanddepositedreliablelucrativeexecutivetransactionurgentbusiness transferinvestmentfundsentresendmaileurosincerelydie will godboablessedbeloved(sixteen million five hun...( william.roselyne@yandex...my dear miss. roselyne williamfinancial
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[delivered-to:] => scamdex@gmail.com
[received:] => Array
(
[0] => by 10.224.215.193 with SMTP id hf1csp19117qab; Thu, 9 Jan 2014 06:02:07 -0800 (PST)
[1] => from m153-177.yeah.net (m153-178.yeah.net. [123.58.178.153]) by mx.google.com with ESMTP id xu6si4040144pab.51.2014.01.09.06.02.02 for ; Thu, 09 Jan 2014 06:02:06 -0800 (PST)
[2] => from roselyne13$yeah.net ( [41.218.198.57] ) by ajax-webmail-app4(Coremail) ; Thu, 9 Jan 2014 22:00:28 +0800 (CST)
)
[x-received:] => by 10.66.138.40 with SMTP id qn8mr3915031pab.154.1389276126704; Thu, 09 Jan 2014 06:02:06 -0800 (PST)
[return-path:] =>
[received-spf:] => pass (google.com: domain of roselyne13@yeah.net designates 123.58.178.153 as permitted sender) client-ip=123.58.178.153;
[authentication-results:] => mx.google.com; spf=pass (google.com: domain of roselyne13@yeah.net designates 123.58.178.153 as permitted sender) smtp.mail=roselyne13@yeah.net; dkim=pass (test mode) header.i=@yeah.net
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yeah.net;s=s110527; h=Date:From:Subject:MIME-Version:Message-ID; bh=Y91YXWjlKASx0z+XUDBdukchYO5yDt60A2nYi74POoE=; b=k0ihZ7f8xp6A8mAhKwAKR85V+N++RmIexfrYFeYw1pKlQCvB85vlNfG56obgclLwSvIKaIUmOJiFLaaitB/yVgmAZFXkDSVUAnyznXHIEnyj1pjINh0JT9aRot/3zZC8fGKzB5ehsoTo2Htz4oy/QJaXt/ZCrddxz7qMz90tfyQ=
[x-cm-headercharset:] => UTF-8
[x-originating-ip:] => [41.218.198.57]
[date:] => Thu, 9 Jan 2014 22:00:28 +0800 (CST)
[from:] => roselyne
[subject:] => Urgent
[x-priority:] => 3
[x-mailer:] => Coremail Webmail Server Version SP_ntes V3.5 build20131204(24406.5820.5783) Copyright (c) 2002-2014 www.mailtech.cn yeah
[x-cm-ctrldata:] => Ne2UoGZvb3Rlcl9odG09MjY5NDoxODg=
[content-type:] => multipart/alternative; boundary="----=_Part_89768_532683899.1389276028927"
[mime-version:] => 1.0
[message-id:] => <6d4dd528.5890.143774ddfff.Coremail.roselyne13@yeah.net>
[x-cm-transid:] => NVUQrEBJ10F9q85ScHEWAA--.16971W
[x-cm-senderinfo:] => purvvz51qhijo61htxgoqh3/1tbiDwMOHVH7XiMuoAAHsB
[x-coremail-antispam:] => 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU==
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Good day i have resend the mail once you get back to me i will tell you what to do next
I hope all is well over there in your country If so, thanks to God almighty, My name is Miss. Roselyne William , I am single Age 24 ft 5/6 wt 59, an Ex Communication Student, I am a single girl never been married before, my father of blessed memory by name Late Dr Arop Justin Wiliam, who was the Group Executive Director of Finance with CNPC oil company at the Khartoum refinery in Sudan, He was assassinated along side with my beloved mother and my only brother, Our family house was burnt down by the rebels during the last crisis in my country when Janjaweed militants came to our house and this sent me away to other country as i made my escape only by God's special grace and with the help of Catholic missionaries because i was in the boarding house when this incident took place.
Actually in search of an honest and reliable person who will help me to relocate, for a better life, i have chosen to contact you after my prayers, Though you may wonder why I am so soon giving in to you without seeing you, well I will say that my instinct still tells that you could be true to me. Briefly, I will like to disclose much to you if you will help me to relocate to your country with the substance that i inherited from my parent. I have a substantial amount of 16.5 Million (Sixteen Million five Hundred ThousandEuro) which i will like to invest in your country into any lucrative business venture which you are to advise and execute since i donât have any business experience for now.
However, I shall forward you with the necessary documents on confirmation of your acceptance to assist me for the transfer and investment of the fund. As you will help me in the investment, and i will like to complete my studies, as i was in my 1st year in the university, when the crisis started This is the reason why I decided to contact you, I shall appreciate an urgent message indicating your ability and willingness to handle this friendship and transaction sincerely,
In my next mail i will tell you more about this money and the leading financial institution which the money was deposited . My dear, i have never told any person about the existence of this money and i will like you to keep it secret because i am afraid of losing the money and my life. I humbly waiting for your mail with your picture ( william.roselyne@yandex.com ) . Kisses and hugs to you. please reply to my private email address: (ro).
Thanks and God bless. Take Caress, Yours Roselyne William
Good day i have resend the mail once you get back to me i will tell you what to do next
I hope all is well over there in your country If so, thanks to God almighty, My name is Miss. Roselyne William , I am single Age 24 ft 5/6 wt 59, an Ex Communication Student, I am a single girl never been married before, my father of blessed memory by name Late Dr Arop Justin Wiliam, who was the Group Executive Director of Finance with CNPC oil company at the Khartoum refinery in Sudan, He was assassinated along side with my beloved mother and my only brother, Our family house was burnt down by the rebels during the last crisis in my country when Janjaweed militants came to our house and this sent me away to other country as i made my escape only by God's special grace and with the help of Catholic missionaries because i was in the boarding house when this incident took place.
Actually in search of an honest and reliable person who will help me to relocate, for a better life, i have chosen to contact you after my prayers, Though you may wonder why I am so soon giving in to you without seeing you, well I will say that my instinct still tells that you could be true to me. Briefly, I will like to disclose much to you if you will help me to relocate to your country with the substance that i inherited from my parent. I have a substantial amount of 16.5 Million (Sixteen Million five Hundred ThousandEuro) which i will like to invest in your country into any lucrative business venture which you are to advise and execute since i donât have any business experience for now.
However, I shall forward you with the necessary documents on confirmation of your acceptance to assist me for the transfer and investment of the fund. As you will help me in the investment, and i will like to complete my studies, as i was in my 1st year in the university, when the crisis started This is the reason why I decided to contact you, I shall appreciate an urgent message indicating your ability and willingness to handle this friendship and transaction sincerely,
In my next mail i will tell you more about this money and the leading financial institution which the money was deposited . My dear, i have never told any person about the existence of this money and i will like you to keep it secret because i am afraid of losing the money and my life. I humbly waiting for your mail with your picture ( william.roselyne@yandex.com ) . Kisses and hugs to you. please reply to my private email address: (ro).
Thanks and God bless. Take Caress, Yours Roselyne William