An
Email with the Subject "YOUR QUICK REPLY NEEDED......" was
received in one of Scamdex's honeypot email accounts on Thu, 06 Jan 2011 06:09:34 -0800
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as "Mr. Ousman Dabi" <ousmandabi@work-8.co.cc>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
africanext of kinbankclaimclaimsdepositcustomer60%urgentcustomfund transfersentmailbank bank account and bank nominated bank thenbank burkina fasocrashconfidentialousmandabi@gmail.comsincerely will ouagadougoutreasury($25.500,000.00) mr. ousman dabi,
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => mxw@scamdex.com
[delivery-date:] => Thu, 06 Jan 2011 06:09:34 -0800
[received:] => Array
(
[0] => from nm6-vm0.bullet.mail.ird.yahoo.com ([77.238.189.210])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1PaqWz-0006G9-48for mxw@scamdex.com; Thu, 06 Jan 2011 06:09:34 -0800
[1] => from [77.238.189.232] by nm6.bullet.mail.ird.yahoo.com with NNFMP; 06 Jan 2011 14:09:31 -0000
[2] => from [212.82.108.236] by tm13.bullet.mail.ird.yahoo.com with NNFMP; 06 Jan 2011 14:09:31 -0000
[3] => from [127.0.0.1] by omp1001.mail.ird.yahoo.com with NNFMP; 06 Jan 2011 14:09:31 -0000
[4] => (qmail 7268 invoked by uid 60001); 6 Jan 2011 14:09:31 -0000
[5] => from [212.52.148.109] by web24815.mail.ird.yahoo.com via HTTP; Thu, 06 Jan 2011 14:09:31 GMT
)
[x-yahoo-newman-property:] => ymail-3
[x-yahoo-newman-id:] => 731572.23291.bm@omp1001.mail.ird.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1294322971; bh=NusJ4/DNlYi84DLIgCtYxpGRHhvbhhz1UCJJTaBUia4=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=S6zmRySNaXrKLz6MV6Qz/pIXYEFV+O6M8ViTpA+yTzyP5kfEZNH7HkzFpvUWPARuAk2Ku6JAvjjdmBsVlV939e+yIB8IPfBy3iQlh4iklqtZoXdq4GhOBINyj/mV32tRPinMPBLVZ6Kle+VNb2sRlQL9AspiyP3I8MS+A8Fo4l8=
[message-id:] => <553644.6853.qm@web24815.mail.ird.yahoo.com>
[x-ymail-osg:] => uB7pULsVM1merRjel.Ki1Ku1n.jap.S9eE_TV7ZR1iNV86AMbI3jjjDWlm4QZGgB4kNbjx9yr5ZctD.0l.9QRNP8GfyWq0zMCI_BXGKoLc_XeqbCWfW6Y_qs9KfcTl4vkGG0gX_DI8CSJuF5eQkW6XNBQkQWwnbhNQjl0NgjCOCdTKBlvmIu4yRRBjzj9ZK.o1rWj9UfAx1G5ZTVLYGHKrygsA0_wQ1IdDvsdp8YfC2UMmhwMmTQpK4IY54A9X26uXHSPsyDTnG8G9Xf7rOMbCQzxblifDUM5jDaow1XzwKX5TTqJrjoHiJ1tjQbSa6t6PAkuUOHUrqmPPp0J8dwQ7UDww5NBeiurKhZej66cjbiclEB5_I3A4a6rF3kvyyQjUcdZPxrKEukhe6Mw3ZCZXUo14i6zNjx6fSmN3pXqQDONZQOfp3VggcTqjjV_ay59p2B8YmlVAWS4QPK0dloaXxTgaN04qzJxRP9PKOM28g9uAWA_qjnDbywl6b.S0xthPT4EuYDmcKAegxPpbrpm9UuYy34hrL6BQJDavgxd_SeZ3QADHfmQ_PxLpkBb7L1qe1kAejkuacTjNCiDatpZU8tqUxk5HvETg_j7nEGrD_ClQf4nvPeVhmTE9Lne304JRxVjamYAyFKY3T1aifXzxm7bwZjeYmSzUZ7uYTv5LxU4B_PVsGvN5Ubjs6esG6z70GhTtS0VXmzNJDH4CWetwrBXA32zxUEiMMAfyQbrcPRg.qet8G5SV4VcBhTQz26.gerTdiZ1EAbG0W6S6tdRpk0h2GrNnMDz36JpvX4wLM_7CvpPeY_QCThCToKJn89i1.eI06R1nAq85WN1i6efidbgyN8yjuiId.kfkg.apKIGuoYRKRl8CbD1zuOrZO9552rRFjlHMhY.DFwOsF8MEKmnd0CekNZo.a7qoeRMZqk6i24H2o4yDMQfBBCHHneyI__
[x-rocketymmf:] => singer_pedro
[x-mailer:] => YahooMailClassic/11.4.20 YahooMailWebService/0.8.107.285259
[date:] => Thu, 6 Jan 2011 14:09:31 +0000 (GMT)
[from:] => "Mr. Ousman Dabi"
[reply-to:] => mr.ousmandabi@gmail.com
[subject:] => YOUR QUICK REPLY NEEDED......
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-1368796019-1294322971=:6853"
[x-spam-status:] => No, score=3.6
[x-spam-score:] => 36
[x-spam-bar:] => +++
[x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: YOUR QUICK REPLY NEEDED...... From: Mr. Ousman Dabi, Billand Exchange manager, Bank Of Africa Ouagadougou Burkina Faso. My dear, Ichose to reach you through this medium because it is the fastest and mostreliable way of communication, as I wish to solicit for your urgent assistancein what I strongly believe will be of great benefit to both of us. I am Mr.Ousman Dabi, an Accounts Manager with BANK OF AFRICA in Burkina Faso. Theissue I am presenting to you is a case of one of my late customer, a nationalof USA who died in a plane crash leaving an unclaimed treasury bills (Bonds)with my bank. In 2003, my late customer invested in treasury bill bonds herein my Bank in Ouagadougou totalling 25.5 million USA Dollars ($25.500,000.00)which was due to be collected in 2007 with accrued dividends. On my yearlyappraisal of my customers at the turn of every year, I discovered that thisfixed deposit remained overdue for retrieval. I had put up series of mailsand bank notifications to him which were sent Back uncollected. I later discoveredthat he passed on along with his wife and his relations in a tragic air crash.[...] Content analysis details: (3.6 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, lowtrust[77.238.189.210 listed in list.dnswl.org]1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net[Blocked - see ]-3.0 URG_BIZ BODY: Contains urgent matter0.0 HK_SCAM_N2 BODY: HK_SCAM_N20.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server[212.52.148.109 listed in dnsbl.sorbs.net]2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL[212.52.148.109 listed in zen.spamhaus.org]-2.0 SUBJ_ALL_CAPS Subject is all capitals-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS3.5 FILL_THIS_FORM_LONG Fill in a form with personal information0.0 DECEASED_NO_ML Dead not via mailing list3.1 RISK_FREE No risk0.0 FILL_THIS_FORM Fill in a form with personal information1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)2.2 FILL_THIS_FORM_LOAN Answer loan question(s)0.0 T_MONEY_PERCENT X% of a lot of money for you0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money0.9 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form0.0 MONEY_FORM Lots of money if you fill out a form0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases0.5 FORM_FRAUD_5 Fill a form and many fraud phrases0.5 FORM_FRAUD_3 Fill a form and several fraud phrases-14 AWL AWL: From: address is in the auto white-list
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
YOUR QUICK REPLY NEEDED...... From: Mr. Ousman Dabi, Bill and Exchange manager, Bank Of Africa Ouagadougou Burkina Faso.
My dear,
I
chose to reach you through this medium because it is the fastest and
most reliable way of communication, as I wish to solicit for your urgent
assistance in what I strongly believe will be of great benefit to both
of us.
I am Mr. Ousman Dabi,
an Accounts Manager with BANK OF AFRICA in Burkina Faso. The issue I am
presenting to you is a case of one of my late customer, a national of
USA who died in a plane crash leaving an unclaimed treasury bills
(Bonds) with my bank.
In 2003, my late customer invested in
treasury bill bonds here in my Bank in Ouagadougou totalling 25.5
million USA Dollars ($25.500,000.00) which was due to be collected in
2007 with
accrued dividends. On my yearly appraisal of my customers at the turn of
every year, I discovered that this fixed deposit remained overdue for
retrieval. I had put up series of mails and bank notifications to him
which were sent Back uncollected. I later discovered that he passed on
along with his wife and his relations in a tragic air crash.
Since
his death, I have managed his account expecting any of his extended
relatives to come forward to claim his money but all attempts to trace
his relatives over the years has been fruitless since he did not declare
any of his relative's information in his banking records with us. Added
to this professional ethics obligates us to act with extreme
confidentiality when dealing with clients accounts of this type.
According
to the banking law, the money will be bequeathed to the government if
it remains unclaimed with the next couple months.
However, I
don't belong to that
school of thought who proposes that the fortunes of unlucky people be
given to the government and I am fully convinced that no one would turn
up to execute the letter of Administration to claim his funds before
the next 2 months. Hence, I decided to contact you to come in as the
next of kin to my late customer so that the funds totalling
$25,500,000.00 can then be transferred to your nominated bank account in
your country within 20 working days after we have filed in your claims
transfer application to the bank.
I will prepare every operation
that will assist you to claim the funds as the next of kin and
everything will be left between you and me. The Share would be 40% for
you and 60% for me.
Again, I feel that you may be apprehensive
and consider this amount too big for you to defend. It does not matter,
as there are documents to back it up. This transaction is risk free and
as the most senior account manager with the
bank is rest assured that all documents to enable you get this fund as
the next of kin will be carefully worked. Do not be bothered that you
are not related in any way to my late customer as I am in position to
affix your name as the next of kin.
Kindly send your reply enclosing;
Your Full Names........................ Mailing Address ......................... Phone Number ......................... Age........................... ................. Occupation.................... ............. to my private email address mr.ousmandabi@gmail.com
for confidentiality, to enable me talk to you before I send you the
certificate of deposit and other relevant information relating to this
fund transfer.
I need not emphasize the confidentiality of this issue and I therefore appeal to you not discuss this request with anybody,
even if you decline to take full advantage of this great and urgent opportunity in my bank.
I look forward to your quick reply to my Privat email address: mr.ousmandabi@gmail.com Sincerely,
Mr. Ousman Dabi For More Urgent Information call me on: +22678266639190