An
Email with the Subject "YOUR URGENT RESPOND NEEDED" was
received in one of Scamdex's honeypot email accounts on Tue, 06 Dec 2011 18:14:45 -0800
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as savadogo mahama <vhgfuo02@msn.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
africadeceasednext of kinbankcontactaccountcustomerurgent transfercustomfundproposalbusinessmailbank bib bank our bank burkina fasocrashas a surprisemutual benefitdormanttop secretvhgfuo02@msn.commahama18@gmail.com will ouagadougouexchangetreasury(a.d.b)($25.3 million united sta...(savadogo.mahama18@gmail.com)dear mr. savadogo mahama. mr. al-aboodi mostafa)nmr. savadogo mahama.
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => 419@scamdex.com
[delivery-date:] => Tue, 06 Dec 2011 18:14:45 -0800
[received:] => Array
(
[0] => from blu0-omc4-s4.blu0.hotmail.com ([65.55.111.143])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1RY71x-0004FX-DHfor 419@scamdex.com; Tue, 06 Dec 2011 18:14:45 -0800
[1] => from BLU0-SMTP314 ([65.55.111.135]) by blu0-omc4-s4.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 6 Dec 2011 18:14:43 -0800
[2] => from home-7a0dedf2e4 ([41.203.228.240]) by BLU0-SMTP314.phx.gbl over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Tue, 6 Dec 2011 18:14:42 -0800
)
[x-originating-ip:] => [41.203.228.240]
[x-originating-email:] => [vhgfuo02@msn.com]
[message-id:] =>
[from:] => savadogo mahama
[to:] => "." <.>
[x-mailer:] => Barca 2.8 (4400) - EVALUATION VERSION
[x-url:] => http://www.pocomail.com/
[reply-to:] => savadogo.mahama18@gmail.com
[date:] => Wed, 7 Dec 2011 02:13:06 +0100
[subject:] => YOUR URGENT RESPOND NEEDED
[mime-version:] => 1.0
[content-type:] => text/plain; charset="iso-8859-1"
[content-transfer-encoding:] => quoted-printable
[x-originalarrivaltime:] => 07 Dec 2011 02:14:42.0529 (UTC) FILETIME=[FB37CD10:01CCB485]
[x-spam-status:] => No, score=-3.5
[x-spam-score:] => -34
[x-spam-bar:] => ---
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: URGENT ACTION HIGHLY NEEDED FROM: MR. SAVADOGO MAHAMA. AFRICANDEVELOPMENT BANK (A.D.B) OUAGADOUGOU BURKINA FASO WEST AFRICA. DEAR FRIEND,I know that this mail will come to you as a surprise. i am the bill and exchangemanager bib bank here in Ouagadougou Burkina Faso . [...] Content analysis details: (-3.5 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 URG_BIZ BODY: Contains urgent matter-3.0 MILLION_USD BODY: Talks about millions of dollars3.1 HK_SCAM_N2 BODY: HK_SCAM_N21.2 TO_MALFORMED To: has a malformed address0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(vhgfuo02[at]msn.com)-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at http://www.dnswl.org/, hightrust[65.55.111.143 listed in list.dnswl.org]-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (vhgfuo02[at]msn.com)0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars0.0 LOTS_OF_MONEY Huge... sums of money0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_MONEY_PERCENT X% of a lot of money for you0.4 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money1.2 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
URGENT ACTION HIGHLY NEEDED
FROM: MR. SAVADOGO MAHAMA.
AFRICAN DEVELOPMENT BANK (A.D.B)
OUAGADOUGOU BURKINA FASO
WEST AFRICA.
DEAR FRIEND,
I know that this mail will come to you as a surprise. i am the bill and exchange manager bib bank
here in Ouagadougou Burkina Faso .
i hoped that you will not expose or betray this trust and confident that i am about to repose on
you for the mutual benefit of our both families. I need your urgent assistance in transferring the
sum of ($25.3 Million United States Dollars) immediately to your account. The money has been
dormant for years in our bank here without any body coming for it.
I want the money to release to you as the nearest person to our deceased customer (the owner of the
account is Mr. Al-Aboodi Mostafa) who died along with his entire family,I want you to apply as a
next of kin to the late customer in air crash since 31ST JULY 2003.i doesnt want the money to go
into our bank treasury as an abandoned fund. So this is the reason why I contacted you, so that my
bank we release the money to you as the nearest person to the deceased customer.
Please I would like you to keep this proposal as a top secret and delete if you are not interested.
Upon receipt of your reply, I will send you full details on how the business will be executed and
also note that you will have 40% of the above mentioned sum if you agree to transact the business
with me. Please contact me through my personal e-mail address (savadogo.mahama18@gmail.com).
Thanks and hoping to hear from you soon.
MR. SAVADOGO MAHAMA.
URGENT ACTION HIGHLY NEEDED
FROM: MR. SAVADOGO MAHAMA.
AFRICAN DEVELOPMENT BANK (A.D.B)
OUAGADOUGOU BURKINA FASO
WEST AFRICA.
DEAR FRIEND,
I know that this mail will come to you as a surprise. i am the bill and exchange manager bib bank
here in Ouagadougou Burkina Faso .
i hoped that you will not expose or betray this trust and confident that i am about to repose on
you for the mutual benefit of our both families. I need your urgent assistance in transferring the
sum of ($25.3 Million United States Dollars) immediately to your account. The money has been
dormant for year’s in our bank here without any body coming for it.
I want the money to release to you as the nearest person to our deceased customer (the owner of the
account is Mr. Al-Aboodi Mostafa) who died along with his entire family,I want you to apply as a
next of kin to the late customer in air crash since 31ST JULY 2003.i doesn’t want the money to go
into our bank treasury as an abandoned fund. So this is the reason why I contacted you, so that my
bank we release the money to you as the nearest person to the deceased customer.
Please I would like you to keep this proposal as a top secret and delete if you are not interested.
Upon receipt of your reply, I will send you full details on how the business will be executed and
also note that you will have 40% of the above mentioned sum if you agree to transact the business
with me. Please contact me through my personal e-mail address (savadogo.mahama18@gmail.com).
Thanks and hoping to hear from you soon.
MR. SAVADOGO MAHAMA.