An
Email with the Subject "Greetings," was
received in one of Scamdex's honeypot email accounts on Wed, 1 Jun 2016 20:21:37 -0700 (PDT)
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as "Mrs. Monica Z. H.F.A," <h_ste@aol.fr>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
assistance7 million u.s.mobilwinaccount milliontransactionopportunity39%1%60%businessmaildollarburkina fasoauditsincerelyh_ste@aol.frmrsmonicaz00@gmail.com will remit mrs. monica z,nmrs. monica z. h.f.a,
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[delivered-to:] => scamdex@gmail.com
[received:] => Array
(
[0] => by 10.159.32.38 with SMTP id 35csp415939uam; Wed, 1 Jun 2016 20:21:37 -0700 (PDT)
[1] => from oms-a011e.mx.aol.com (oms-a011e.mx.aol.com. [204.29.186.158]) by mx.google.com with ESMTPS id k97si8782499qgk.40.2016.06.01.20.21.37 for (version=TLS1 cipher=AES128-SHA bits=128/128); Wed, 01 Jun 2016 20:21:37 -0700 (PDT)
[2] => from omr-m002e.mx.aol.com (omr-m002.mx.aol.com [10.74.122.178])(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))(No client certificate requested)by oms-a011e.mx.aol.com (AOL Outbound OMS Interface) with ESMTPS id D500C380007Afor ; Wed, 1 Jun 2016 23:21:36 -0400 (EDT)
[3] => from mtaomg-mac01.mx.aol.com (mtaomg-mac01.mx.aol.com [172.26.222.207])by omr-m002e.mx.aol.com (Outbound Mail Relay) with ESMTP id 38823380008A;Wed, 1 Jun 2016 23:21:36 -0400 (EDT)
[4] => from core-mra03e.mail.aol.com (core-mra03.mail.aol.com [172.27.117.13])by mtaomg-mac01.mx.aol.com (OMAG/Core Interface) with ESMTP id 2616938000081;Wed, 1 Jun 2016 23:21:32 -0400 (EDT)
[5] => from 213.168.249.45 by webprd-m65.mail.aol.com (10.74.55.13) with HTTP (WebMailUI); Wed, 01 Jun 2016 23:21:31 -0400
)
[x-received:] => by 10.140.84.229 with SMTP id l92mr38225144qgd.100.1464837697121; Wed, 01 Jun 2016 20:21:37 -0700 (PDT)
[return-path:] =>
[received-spf:] => pass (google.com: domain of h_ste@aol.fr designates 204.29.186.158 as permitted sender) client-ip=204.29.186.158;
[authentication-results:] => mx.google.com; dkim=pass header.i=@mx.aol.fr; spf=pass (google.com: domain of h_ste@aol.fr designates 204.29.186.158 as permitted sender) smtp.mailfrom=h_ste@aol.fr; dmarc=pass (p=QUARANTINE dis=NONE) header.from=aol.fr
[date:] => Wed, 1 Jun 2016 23:21:31 -0400
[from:] => "Mrs. Monica Z. H.F.A,"
[message-id:] => <1550f21599d-7740-117e8@webprd-m65.mail.aol.com>
[subject:] => Greetings,
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="----=_Part_92309_1321300925.1464837691803"
[x-mb-message-source:] => WebUI
[x-mb-message-type:] => User
[x-mailer:] => JAS STD
[x-originating-ip:] => [213.168.249.45]
[x-aol-global-disposition:] => S
[x-spam-flag:] => YES
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.fr;s=20150623; t=1464837695;bh=pFTJ2974DFhkyT6an/6MtQw+OQCdASOwO76T9pMM/tQ=;h=From:Subject:Message-Id:Date:MIME-Version:Content-Type;b=2Y/61HbPMxqVQ9OIT7Y/6PkndvWxNnzDqBQbtQay5QYNY152elE2wxhSOUvyrhpvm q5nKHcpDwBXyZeU7Uvzkzt1D9hm8DQKUhT0PSEBjelLm3NXPG5U6KneM7kh21Re1ky nSdULnGdsKeFe7NgkASS0zJbmSdA1Mn+m1/ZLb1w=
[x-aol-reroute:] => YES
[x-aol-sid:] => 3039ac1adecf574fa63c0a27
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I am Mrs. Monica Z, the Head of File Auditor from Burkina Faso, I seek your assistance and I assured of your capability to champion this business opportunity to remit $2.7 Million U.S.A Dollars. Into your account if you are interested let me know so that I can send you the details of this transaction. I agreed that 39% of this total sum will be for you while 1% will be set aside for expenses incurred during the business and 60% would be for me. If you are willing, please quickly get back to me by completing the following information for enquiry. reply to my private email: mrsmonicaz00@gmail.com
Your name.......................................
Country........................................
Mobile number......................
Profession.......................
Age/passport.................
My sincerely yours,
Mrs. Monica Z. H.F.A,
mrsmonicaz00@gmail.com
Greetings,
I am Mrs. Monica Z, the Head of File Auditor from Burkina Faso, I seek your assistance and I assured of your capability to champion this business opportunity to remit $2.7 Million U.S.A Dollars. Into your account if you are interested let me know so that I can send you the details of this transaction. I agreed that 39% of this total sum will be for you while 1% will be set aside for expenses incurred during the business and 60% would be for me. If you are willing, please quickly get back to me by completing the following information for enquiry. reply to my private email: mrsmonicaz00@gmail.com
Your name.......................................
Country........................................
Mobile number......................
Profession.......................
Age/passport.................
My sincerely yours,
Mrs. Monica Z. H.F.A,
mrsmonicaz00@gmail.com
