An
Email with the Subject "Good day" was
received in one of Scamdex's honeypot email accounts on Wed, 5 Jul 2017 09:44:04 -0700 (PDT)
and has been classified as a Generic Scam Email.
The sender shows as william don <williamdon434@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
goldchiefbankcontactnumberspartnertransactionpaymentrepresentativeservicebusiness transferproposalsentbuymailexportbank transferwilliamdon434@gmail.com will ach[or their representative]
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[delivered-to:] => scamdex@gmail.com
[received:] => Array
(
[0] => by 10.46.83.9 with SMTP id h9csp960973ljb; Wed, 5 Jul 2017 09:44:04 -0700 (PDT)
[1] => from mail-ua0-x241.google.com (mail-ua0-x241.google.com. [2607:f8b0:400c:c08::241]) by mx.google.com with ESMTPS id i78si1085533vkd.230.2017.07.05.09.44.03 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 05 Jul 2017 09:44:04 -0700 (PDT)
[2] => by mail-ua0-x241.google.com with SMTP id l38so17593701uaf.1 for ; Wed, 05 Jul 2017 09:44:03 -0700 (PDT)
[3] => by 10.103.148.141 with HTTP; Wed, 5 Jul 2017 09:44:02 -0700 (PDT)
)
[x-received:] => Array
(
[0] => by 10.176.27.141 with SMTP id k13mr23658482uai.93.1499273044089; Wed, 05 Jul 2017 09:44:04 -0700 (PDT)
[1] => by 10.159.48.69 with SMTP id i5mr25741268uab.106.1499273043466; Wed, 05 Jul 2017 09:44:03 -0700 (PDT)
)
[arc-seal:] => i=1; a=rsa-sha256; t=1499273044; cv=none; d=google.com; s=arc-20160816; b=xjpDG5i4Saxt4u4ch954hWJ0erIkdcAVPUFhqdDZMPQPdhX+MffUyi5pGNxwngFS8X Ele0ZQ7XnZLDZOpAOSuGYeFS712+iWfinJ/+T5vUO58AM8+C7bj763SczdJmu8/EFCDC uiqB8nzRIYrzIIlaHE0P+3lUyCdc3XF/eDG770lNlwNSDwwh59pzBu/D/4IKOLgPdjaj RqK77z4UTeGGgAqD5Skf+IYPrkN5KVAKV0RmKaxb5477uGomRraRAb4KfOowBx7BRLNX 1xQQE6T3NmGMNdTHRkdAqc6vBJ0W1I3h40BXsYaVtF8H3QdNwzkRh1bU8TyUN76IqiRu On0A==
[arc-message-signature:] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=to:subject:message-id:date:from:mime-version:dkim-signature :arc-authentication-results; bh=pTkTAY7vm4G9MJ45ceKbUqS+1Nuh8GsmxKJcKFMTY/4=; b=WBx+0B73DulSiRDmkUOtZ8KcBF3f7HdDYmBKO3IBsS76EO+sTOlji3VU2gH2qVy/p4 RVyKM/VDSgK2hkmRr204Om6vFRYfnVWgbgIhskFKkSA6lAFlBgqB54j6+JaWxJ8xKDmi v20pWe5dhvQoXl3lPNx0i9qeJh3uHP6SP+hs3ZbKgSlNV6Vl7m0enX+HYSozjJ4sRNTF TAhtsZMGiMQWJ9KzACI7kMBEk0CtMeDcS1kA0QCb9gWbwfdlG5ADOBkfj9wwLqdX9v99 LUw8UzYvf+wG46zvDY8l7ftLuiEcq+ncjzAJy5SQzR439YoUBYUZG1Gk91cLS6Wg2Mi+ EIoQ==
[arc-authentication-results:] => i=1; mx.google.com; dkim=pass header.i=@gmail.com header.b=LgIIpsN7; spf=pass (google.com: domain of williamdon434@gmail.com designates 2607:f8b0:400c:c08::241 as permitted sender) smtp.mailfrom=williamdon434@gmail.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
[return-path:] =>
[received-spf:] => pass (google.com: domain of williamdon434@gmail.com designates 2607:f8b0:400c:c08::241 as permitted sender) client-ip=2607:f8b0:400c:c08::241;
[authentication-results:] => mx.google.com; dkim=pass header.i=@gmail.com header.b=LgIIpsN7; spf=pass (google.com: domain of williamdon434@gmail.com designates 2607:f8b0:400c:c08::241 as permitted sender) smtp.mailfrom=williamdon434@gmail.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=gmail.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=pTkTAY7vm4G9MJ45ceKbUqS+1Nuh8GsmxKJcKFMTY/4=; b=LgIIpsN7N6pmsL+fHclZp4fbOfIJ8I/5Ay4rZeP4Zt/GmrgLBzZkF+FQqqhQiuVLWY 5jgyUddiiH8oi4KGrtlZ+iYa0XfqEEuir+3yT1avaOnPa0i+6hhJRAlheQsv0JeiqWqo aKsgkHScKXVVeo6UT+qgVI/W06S9CpxRFIAXUalayh31oa/FuRQLS2xb5/klEZ8cfaB5 xvKdnxVEMFoAsSPh0Sha3EzLZTe8cGSvqeQ1p9KyqY/GOsANtseBEkToDeeECFc3/njZ +9BLPrnPj0oQLfDDld6/eCUC8SWpiNTfJBdYXQg+8l15gLEGs3i5NrLgH6yyT4UQcV2j tP3g==
[x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=pTkTAY7vm4G9MJ45ceKbUqS+1Nuh8GsmxKJcKFMTY/4=; b=DPbWa/RjOMLYC1yyaB69fNmUPxE4kknTBP+uPYdNa48TxzHH6VOC7pvrYhhuRRUxH+ 3x9svCNdInhwF2vWM/d++OW4dVZvyaheO2Ir1i+6bwyOHWKKNqHiIWWIepnZb4iH44aH 9R0M8A9VQrX+ZH9MePN9cHZl+F9tHinDkY2QJBRgskBE6APLmcBtFHpbJA0/8dWyF3g3 wA9PLiYKV21YbZE6PHfC18LHqyu+cGOcDA2FJ26dqpNLC5nDbGYcrNfhTojpux/MtwDy rGnDaDjP33P6WC683sgmD2ZM8YmVSzrBceLK/hg48YTcrJkW/QX6MZe213YP6RnzO52t Jmrg==
[x-gm-message-state:] => AKS2vOzhId2Bq1c7fXZDbgEaUJyV1UHYlBGqrelZDjocVOzqhjMe1hMu zzHd4OBbjJgDbm0Qt3Hvk7fsy4+whQ==
[mime-version:] => 1.0
[from:] => william don
[date:] => Wed, 5 Jul 2017 17:44:02 +0100
[message-id:] =>
[subject:] => Good day
[to:] => undisclosed-recipients:;
[content-type:] => multipart/alternative; boundary="f403045e34b42d6039055394b521"
[bcc:] => scamdex@gmail.com
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
It is our atmost delight to approach you with this composition.We are a Mining Company based in Ghana and we are interested in contacting you for business transactions.
Our firm is in possession of the Gold Export Certificate issued by the Government of the Republic of Ghana necessary to export gold from Ghana, thus we can provide service to any part of the world.
We are prepared to offer the quantity of gold required to the Buyer [or their representative] upon their arrival here in Accra. After the Buyer has confirmed the quantity and the quality of the gold with their refinery, and is satisfied, only then will we accept payment, by bank transfer, from the Buyer to us. Further, we currently seek outside-based serious investors on a partnership basis in order to increase our production capacity. If you are interested in this proposal, or have any further questions, kindly contact me at the numbers listed above.Looking forward to doing business with you.
Yours truly,
Mr. Evans Abdulam
Chief MarketingÂ
Good day It is our atmost delight to approach you with this composition.We are a Mining Company based in Ghana and we are interested in contacting you for business transactions.Our firm is in possession of the Gold Export Certificate issued by the Government of the Republic of Ghana necessary to export gold from Ghana, thus we can provide service to any part of the world.We are prepared to offer the quantity of gold required to the Buyer [or their representative] upon their arrival here in Accra. After the Buyer has confirmed the quantity and the quality of the gold with their refinery, and is satisfied, only then will we accept payment, by bank transfer, from the Buyer to us. Further, we currently seek outside-based serious investors on a partnership basis in order to increase our production capacity. If you are interested in this proposal, or have any further questions, kindly contact me at the numbers listed above.Looking forward to doing business with you.Yours truly, Mr. Evans AbdulamChief MarketingÂ