An
Email with the Subject "URGENT REPLY" was
received in one of Scamdex's honeypot email accounts on Wed, 03 Aug 2005 20:54:10 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as queen nelson <queen_baby_az@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
nigeriadeath million hundred thousand dollarsgoldtrunkboxdiedwin millionfive hundred thousanddepositedtransactionresponseurgentbusiness transferfundmaildollarconfidentialqueen_baby_az@yahoo.comdie will spamsecurityyahoo.comyahoo!treasureach(us$20,500,000,00)consignmenthttp://mail.yahoo.comyears old
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => Scams@scamdex.com
[delivery-date:] => Wed, 03 Aug 2005 20:54:10 -0700
[received:] => Array
(
[0] => from [64.233.170.196] (helo=rproxy.gmail.com)by sun.newsblaze.com with esmtp (Exim 4.34)id 1E0Wo6-0000T7-T5for Scams@scamdex.com; Wed, 03 Aug 2005 20:54:10 -0700
[1] => by rproxy.gmail.com with SMTP id y7so282798rne for ; Wed, 03 Aug 2005 20:54:11 -0700 (PDT)
[2] => by 10.11.99.16 with SMTP id w16mr10571cwb; Wed, 03 Aug 2005 20:54:10 -0700 (PDT)
[3] => by 10.11.94.41 with SMTP id r41cs1382cwb; Wed, 3 Aug 2005 20:54:10 -0700 (PDT)
[4] => by 10.54.29.28 with SMTP id c28mr1201767wrc; Wed, 03 Aug 2005 20:54:10 -0700 (PDT)
[5] => from web33914.mail.mud.yahoo.com (web33914.mail.mud.yahoo.com [66.163.178.78]) by mx.gmail.com with SMTP id 35si1590899wra.2005.08.03.20.54.09; Wed, 03 Aug 2005 20:54:10 -0700 (PDT)
[6] => (qmail 24224 invoked by uid 60001); 4 Aug 2005 03:54:08 -0000
[7] => from [216.139.185.59] by web33914.mail.mud.yahoo.com via HTTP; Wed, 03 Aug 2005 20:54:08 PDT
)
[x-forwarded-to:] => Scams@scamdex.com
[x-forwarded-for:] => box.8675309@gmail.com Scams@scamdex.com
[x-gmail-received:] => 5b65168627064e8fe0d67b5d872ff4ffd1291596
[delivered-to:] => box.8675309@gmail.com
[received-spf:] => pass (gmail.com: domain of queen_baby_az@yahoo.com designates 66.163.178.78 as permitted sender)
[domainkey-status:] => good (test mode)
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=VmSqqAha00E5b9N5XIq4DuYPtt0mzP+QefCD0vIbTRj2K5CRXkD6cAGVLz/2zd1qYRod6h11JqH/R24/dbHMbUJLaXWzwe41KMsGGXy28V+yiwh/wXgFS4r3mIRuu0iPMt16K14RtqXvKZO3mCxoawJRm8dvzJPzKAsst/wO/+g= ;
[x-uid:] => Array
(
[0] => <20050804035408.24222.qmail@web33914.mail.mud.yahoo.com>
[1] => 245
)
[date:] => Wed, 3 Aug 2005 20:54:08 -0700 (PDT)
[from:] => queen nelson
[subject:] => URGENT REPLY
[to:] => queen_baby_az@yahoo.com
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1045560948-1123127648=:22469"
[content-transfer-encoding:] => 8bit
[status:] => RO
[x-status:] =>
[x-keywords:] =>
[message-id:] => <20050804035408.24222.qmail@web33914.mail.mud.yahoo.com>
[x-scamdex-scores:] => S:72 P:49 A:51 L:54 E:52 G:49
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 72
[x-scamdex-totscore:] => 327
[x-scamdex-kw:] => box,business,death,die,dollars,fund,gold,hundred thousand,inc.,million,nigeria,response,transaction,treasure,trunk,trust,urgent
[x-scamdex-em:] => 8675309@gmail.com,queen_baby_az@yahoo.com
[x-scamdex-dir:] => S
[x-scamdex-id:] => S1204818640.M563685P21232V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
How are you at the moment? i hope there is no trouble at all?
My Name is QUEEN the daughter of NELSON .a gold and cocoa merchant who was based in Nigeria and had a branch office in Accra Ghana.
My father was a wealthy gold/cocoa merchant who had been doing busines in many countries. According to my father, my own mother died when i was nine years old.
The story is that my father was poisoned to death by his business associate here in Nigeria. Bu twhen he was about to die,he called me beside his sick bed and told me that he deposited the sum of twenty million five hundred thousand dollars(us$20,500,000,00) in a security company. This money was deposited as a family treasure and kept for us.
My only problem now is that, since my father was poinsoned to death by his business associate, i do not trust any person here again including my father brothers and sisters.Most of them have been threatening us so much that we can not even approach them for any help. They are doing all they can to get hold of my fathers properties.
Thus, i seek for an urgent help before they get hold of us. Right now, i want you to help me in the following ways.
1. i want you to help me in transfering the consignment from the security company direct to your country.
This money was deposited in a trunk box.
2. you are going to be my personal guardian untill i come over your country.
3. you will help me to invest the fund in your country.
This business is highly confidential because none of my late father brothers and sisters know about this transaction.
I am waiting for your immediate response.
Thanks for your understanding.
Yours Faithfully.
QUEEN.B,NELSON
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
My Good Friend,
How are you at the moment? i hope there is no trouble at all?
My Name is QUEEN the daughter of NELSON .a gold and cocoa merchant who was based in Nigeria and had a branch office in Accra Ghana.
My father was a wealthy gold/cocoa merchant who had been doing busines in many countries. According to my father, my own mother died when i was nine years old.
The story is that my father was poisoned to death by his business associate here in Nigeria. Bu twhen he was about to die,he called me beside his sick bed and told me that he deposited the sum of twenty million five hundred thousand dollars(us$20,500,000,00) in a security company. This money was deposited as a family treasure and kept for us.
My only problem now is that, since my father was poinsoned to death by his business associate, i do not trust any person here again including my father brothers and sisters.Most of them have been threatening us so much that we can not even approach them for any help. They are doing all they can to get hold of my fathers properties.
Thus, i seek for an urgent help before they get hold of us. Right now, i want you to help me in the following ways.
1. i want you to help me in transfering the consignment from the security company direct to your country.
This money was deposited in a trunk box.
2. you are going to be my personal guardian untill i come over your country.
3. you will help me to invest the fund in your country.
This business is highly confidential because none of my late father brothers and sisters know about this transaction.
I am waiting for your immediate response.
Thanks for your understanding.
Yours Faithfully.
QUEEN.B,NELSON
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com