An
Email with the Subject "URGENT URGENT" was
received in one of Scamdex's honeypot email accounts on Fri, 3 Jul 2015 12:52:05 -0700 (PDT)
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Zari Himma <zhimma2@aol.fr>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
deceasednext of kinbankcontactclaimcustomer10%urgent transfercustomfundproposalbusinessmailbank bank account our bank the bank your bank zarihimma123@gmail.com will (usd$10.5m)(the owner of the account)(etc)(zarihimma123@gmail.com)nmr. zari himma
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[delivered-to:] => scamdex@gmail.com
[received:] => Array
(
[0] => by 10.96.142.197 with SMTP id ry5csp249390qdb; Fri, 3 Jul 2015 12:52:05 -0700 (PDT)
[1] => from oms-m06.mx.aol.com (oms-m06.mx.aol.com. [64.12.233.222]) by mx.google.com with ESMTPS id 90si3876915qgc.12.2015.07.03.12.52.05 for (version=TLSv1 cipher=RC4-SHA bits=128/128); Fri, 03 Jul 2015 12:52:05 -0700 (PDT)
[2] => from omr-m10.mx.aol.com (omr-m10.mx.aol.com [64.12.143.86])(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))(No client certificate requested)by oms-m06.mx.aol.com (AOL Outbound OMS Interface) with ESMTPS id 6444A38002436for ; Fri, 3 Jul 2015 15:30:18 -0400 (EDT)
[3] => from mtaomg-mcb01.mx.aol.com (mtaomg-mcb01.mx.aol.com [172.26.50.175])by omr-m10.mx.aol.com (Outbound Mail Relay) with ESMTP id 1F4207000009E;Fri, 3 Jul 2015 15:30:18 -0400 (EDT)
[4] => from core-mja09e.mail.aol.com (core-mja09.mail.aol.com [172.27.32.9])by mtaomg-mcb01.mx.aol.com (OMAG/Core Interface) with ESMTP id A89E038000082;Fri, 3 Jul 2015 15:30:16 -0400 (EDT)
[5] => from 46.23.66.110 by webprd-m76.mail.aol.com (10.74.63.44) with HTTP (WebMailUI); Fri, 03 Jul 2015 15:30:16 -0400
)
[x-received:] => by 10.140.96.116 with SMTP id j107mr33685074qge.20.1435953125307; Fri, 03 Jul 2015 12:52:05 -0700 (PDT)
[return-path:] =>
[received-spf:] => pass (google.com: domain of zhimma2@aol.fr designates 64.12.233.222 as permitted sender) client-ip=64.12.233.222;
[authentication-results:] => mx.google.com; spf=pass (google.com: domain of zhimma2@aol.fr designates 64.12.233.222 as permitted sender) smtp.mail=zhimma2@aol.fr; dkim=pass header.i=@mx.aol.fr; dmarc=pass (p=NONE dis=NONE) header.from=aol.fr
[date:] => Fri, 3 Jul 2015 15:30:16 -0400
[from:] => Zari Himma
[message-id:] => <14e5565dde9-1079-353e3@webprd-m76.mail.aol.com>
[subject:] => URGENT URGENT
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="----=_Part_262739_897299884.1435951816166"
[x-mb-message-source:] => WebUI
[x-mb-message-type:] => User
[x-mailer:] => JAS STD
[x-originating-ip:] => [46.23.66.110]
[x-aol-global-disposition:] => S
[x-spam-flag:] => YES
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.fr;s=20150623; t=1435951817;bh=J2vo+FNcZIr5mr6GiJri1zaoCkfSdUL4eh0RfVGldn8=;h=From:Subject:Message-Id:Date:MIME-Version:Content-Type;b=uv16nIbgoh4j8TZJ+ZMTnQyUUNt5bxXBTQZOCT8UfBh9lhlRiroa5v8D4j69T0Eek CUCiPow/Qos6frsZO4pDfPWPEQ17StHAWzEnkp0nGGB09R5AE8fwTuqxQU5wfLiRtG aIcmqEd3fSJd4dOsy3FeAFdZeWV2SzmOxTcdHZqU=
[x-aol-reroute:] => YES
[x-aol-sid:] => 3039ac1a32af5596e2c81aff
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I know that this message will come to you as a surprise. I am Mr. Zari Himma from Burkina Faso the Accounting and Auditing Manager bank of Africa (B.O.A), Ouagadougou
I hoped that you will not expose or betray this trust and confident that I am about to repose on you for the mutual benefit of our families. I need your urgent assistance in transferring the sum of (usd$10.5m) million to your account within 10 to 14 banking days. This money has been dormant for years in our bank without claim. I want the bank to release the money to you as the nearest person to our deceased customer (the owner of the account) died along with his supposed next of kin in an air crash since July, 2007.
I don't want the money to go into our bank treasurer account as an abandoned fund. So this is the reason why I contacted you so that the bank can release the money to you as the next of kin to the deceased customer. Please I would like you to keep this proposal as a top secret and delete it if you are not upon receipt of your reply, I will give you full details on how the business will be executed and also note that you will have 35% of the above mentioned sum if you agree to handle this business with me? And 10% will be set aside for any expenses that warrant on the process before the fund get into your bank account such as telephone calls bills (etc).
Finally send your photo or your international passports for more identification.
Feel free to Contact me at my here_under email address for more explanations of the fund transfer. (zarihimma123@gmail.com)
Best Regards,
Mr. Zari Himma
Dear friend,
I know that this message will come to you as a surprise. I am Mr. Zari Himma from Burkina Faso the Accounting and Auditing Manager bank of Africa (B.O.A), Ouagadougou
I hoped that you will not expose or betray this trust and confident that I am about to repose on you for the mutual benefit of our families. I need your urgent assistance in transferring the sum of (usd$10.5m) million to your account within 10 to 14 banking days. This money has been dormant for years in our bank without claim. I want the bank to release the money to you as the nearest person to our deceased customer (the owner of the account) died along with his supposed next of kin in an air crash since July, 2007.
I don't want the money to go into our bank treasurer account as an abandoned fund. So this is the reason why I contacted you so that the bank can release the money to you as the next of kin to the deceased customer. Please I would like you to keep this proposal as a top secret and delete it if you are not upon receipt of your reply, I will give you full details on how the business will be executed and also note that you will have 35% of the above mentioned sum if you agree to handle this business with me? And 10% will be set aside for any expenses that warrant on the process before the fund get into your bank account such as telephone calls bills (etc).
Finally send your photo or your international passports for more identification.
Feel free to Contact me at my here_under email address for more explanations of the fund transfer. (zarihimma123@gmail.com)