An
Email with the Subject "Dear Friend" was
received in one of Scamdex's honeypot email accounts on Fri, 15 Aug 2014 00:58:43 -0700 (PDT)
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Mr Johnson Abu <m_ab3@aol.fr>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
deathassistancemillion deceasednext of kindiedbankaccount40%58%2%iraqurgent transferreportmailauditas a surprisemutual benefitm_ab3@aol.frmrjohnsonabu17@yahoo.fr will yahoo.($10.5)(mrs.hajia el-madi)dearhttp://www.cnn.com/2006/w...http://news.bbc.co.uk/2/h...nmr johnson abu
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[delivered-to:] => scamdex@gmail.com
[received:] => Array
(
[0] => by 10.224.101.193 with SMTP id d1csp10879qao; Fri, 15 Aug 2014 00:58:43 -0700 (PDT)
[1] => from oms-mc01.r1000.mx.aol.com (oms-mc01.r1000.mx.aol.com. [64.12.81.66]) by mx.google.com with ESMTPS id q4si10879031qat.61.2014.08.15.00.58.42 for (version=TLSv1 cipher=RC4-SHA bits=128/128); Fri, 15 Aug 2014 00:58:43 -0700 (PDT)
[2] => from mtaomg-mcd01.mx.aol.com (mtaomg-mcd01.mx.aol.com [172.26.223.207])by oms-mc01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 29070380011FF;Fri, 15 Aug 2014 03:58:42 -0400 (EDT)
[3] => from core-lga05c.mail.aol.com (core-lga05.mail.aol.com [10.76.11.5])by mtaomg-mcd01.mx.aol.com (OMAG/Core Interface) with ESMTP id 5F4C638000081;Fri, 15 Aug 2014 03:58:36 -0400 (EDT)
[4] => from 41.138.98.184 by webmail-vm082.sysops.aol.com (149.174.146.96) with HTTP (WebMailUI); Fri, 15 Aug 2014 03:58:36 -0400
)
[x-received:] => by 10.224.44.14 with SMTP id y14mr25069180qae.34.1408089523072; Fri, 15 Aug 2014 00:58:43 -0700 (PDT)
[return-path:] =>
[received-spf:] => none (google.com: m_ab3@aol.fr does not designate permitted sender hosts) client-ip=64.12.81.66;
[authentication-results:] => mx.google.com; spf=neutral (google.com: m_ab3@aol.fr does not designate permitted sender hosts) smtp.mail=m_ab3@aol.fr; dkim=pass header.i=@mx.aol.com
[x-mb-message-source:] => WebUI
[subject:] => Dear Friend
[x-mb-message-type:] => User
[mime-version:] => 1.0
[from:] => Mr Johnson Abu
[content-type:] => multipart/alternative; boundary="--------MB_8D18675DA09BDA5_1F18_33F89_webmail-vm082.sysops.aol.com"
[x-mailer:] => AOL Webmail STANDARD
[message-id:] => <8D18675DA075C45-1F18-F403@webmail-vm082.sysops.aol.com>
[x-originating-ip:] => [41.138.98.184]
[date:] => Fri, 15 Aug 2014 03:58:36 -0400 (EDT)
[x-aol-global-disposition:] => S
[x-spam-flag:] => YES
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;s=20140625; t=1408089517;bh=dsNSAeLKgJGTCWz48O5qvnRJoy4r8U1xpUc/gIZ1GRU=;h=From:Subject:Message-Id:Date:MIME-Version:Content-Type;b=lNgpoIRXJbvQSNRbNqZXsHr4iPBUez5Qzr+uqqEFjcju9KZuFCTEpYLbrOrIQG/1A +qwwWfuTnbqacQ3wKlL118SBY01ChSnb8BGaR5Jgo1jtkEsOisLprM8OS8LYvmoDyB SLUPL1u5MgMGaOj7SJiR+YxQCPLHyQTV28twuRwI=
[x-aol-reroute:] => YES
[x-aol-sid:] => 3039ac1adfcf53edbdac4adf
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
PLEASE REPLY TO MY PRIVATE EMAIL ID mrjohnsonabu17@yahoo.fr
I know that this message will come to you as a surprise. I am the Auditing and Accounting section manager with a bank. I Hope that you will not expose or betray this trust and confident that I am about to repose on you for the mutual benefit of our both families.I need your urgent assistance in transferring the sum of ($10.5)million to your account within 10 or 14 banking days.you will have 40% of the above mentioned sum while 58% will be for me, and the other 2% will be for the expences These are the details about the deceased and his family. Late Hassan El-madi used his late wife (MRS.HAJIA EL-MADI) as his next of kin but unfortunately,
she died along side with him in their house. So, nobody knows about the account and as such,you should not be afriad in this deal. Just keep it as secret between us.You can still see again the website covering U.S.A Boomp Explosion as posted by the CNN and BBC news report;
PLEASE REPLY TO MY PRIVATE EMAIL ID mrjohnsonabu17@yahoo.fr
Your Full Name........
Your phone Number........
Your Passport.............
Your Profession...........................
Your Age.. ...........................
Your Country:
if you are not interested please do not reply.
Best Regards.
Mr Johnson Abu
Dear Friend
PLEASE REPLY TO MY PRIVATE EMAIL ID mrjohnsonabu17@yahoo.fr
I know that this message will come to you as a surprise. I am the Auditing and Accounting section manager with a bank. I Hope that you will not expose or betray this trust and confident that I am about to repose on you for the mutual benefit of our both families.I need your urgent assistance in transferring the sum of ($10.5)million to your account within 10 or 14 banking days.you will have 40% of the above mentioned sum while 58% will be for me, and the other 2% will be for the expences These are the details about the deceased and his family. Late Hassan El-madi used his late wife (MRS.HAJIA EL-MADI) as his next of kin but unfortunately,
she died along side with him in their house. So, nobody knows about the account and as such,you should not be afriad in this deal. Just keep it as secret between us.You can still see again the website covering U.S.A Boomp Explosion as posted by the CNN and BBC news report;
PLEASE REPLY TO MY PRIVATE EMAIL ID mrjohnsonabu17@yahoo.fr
Your Full Name........
Your phone Number........
Your Passport.............
Your Profession...........................
Your Age.. ...........................
Your Country:
if you are not interested please do not reply.
Best Regards.
Mr Johnson Abu