BRIAN POTTER [email protected]

eturn-Path: <[email protected]>
Received: from compute1.internal (compute1.nyi.mail.srv.osa [10.202.2.41])
by sloti14d5p3 (Cyrus git2.5+0-git-fastmail-7658) with LMTPA;
Thu, 26 Jan 2012 00:10:47 -0500
X-Sieve: CMU Sieve 2.4
X-Spam-charsets:
X-Mail-from: [email protected]
Received: from mx1.nyi.mail.srv.osa ([10.202.2.200])
by compute1.internal (LMTPProxy); Thu, 26 Jan 2012 00:10:47 -0500
Received: from maverick.nswebhost.com (maverick.nswebhost.com [209.217.230.116])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx1.nyi.mail.srv.osa (Postfix) with ESMTPS id C2D724C014A
Thu, 26 Jan 2012 00:10:46 -0500 (EST)
Received: from informat by maverick.nswebhost.com with local (Exim 4.69)
(envelope-from <[email protected]>)
id 1RqHbf-0006fS-HF
Wed, 25 Jan 2012 23:10:43 -0600

Subject: BONDED ACCOUNT.
X-PHP-Script: www.informativoanchieta.com.br/banners/mam.php for 41.203.79.249
From: BRIAN POTTER <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Wed, 25 Jan 2012 23:10:43 -0600
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - maverick.nswebhost.com
X-AntiAbuse: Original Domain - fastmail.co.uk
X-AntiAbuse: Originator/Caller UID/GID - [560 587] / [47 12]
X-AntiAbuse: Sender Address Domain - maverick.nswebhost.com
X-Truedomain-Domain: rediffmail.com
X-Truedomain-SPF: No Record
X-Truedomain-DKIM: No Signature
X-Truedomain-ID: DC9240E4E09E6C5814704768096E8BF0
X-Truedomain: Neutral

Hi,

My names is Mr Brian Potter, formerly working with SNS Bank
Netherlands Branch, presently I am working with Capital One Bank
Europe Plc here in United Kingdom. I have a proposition to discuss
with you about a certain bonded account in our Bank. The bonded has a
balance of GBP 18.5 Million.

Please contact me through email or Telephone on this for more details.
It will be beneficial to both parties concerned I am contacting you on
this due to you share the same Family name with the Bonded
Account/Depositor Mr.V.Buchholz.

Please contact me through my private email [email protected] , for more information.
Thanks and hoping to hear from you soon.

Yours Sincerely,
Mr. Brian Cole Potter
Capital One Plc

The same scam email is also being sent from [email protected] :

Delivered-To: XXXXXXXXXXX
Received: by 10.223.156.194 with SMTP id y2cs25540faw;
Wed, 25 Jan 2012 19:59:38 -0800 (PST)
Received: by 10.68.72.69 with SMTP id b5mr1362000pbv.120.1327550377025;
Wed, 25 Jan 2012 19:59:37 -0800 (PST)
Return-Path: <[email protected]>
Received: from rediffmail.com (f5mail-224-123.rediffmail.com. [114.31.224.123])
by mx.google.com with SMTP id h6si3914078pbn.142.2012.01.25.19.59.35;
Wed, 25 Jan 2012 19:59:37 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 114.31.224.123 as permitted sender) client-ip=114.31.224.123;
DomainKey-Status: good (test mode)
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 114.31.224.123 as permitted sender) [email protected]; domainkeys=pass (test mode) [email protected]
Received: (qmail 15769 invoked by uid 510); 14 Jan 2012 13:25:01 -0000
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=redf; d=rediffmail.com;
b=g6PUPwVKRfTcvCRBm0lXcDbfwL6d2XSYl05pL61IC6BH7OBbF5QbwuOoCpZuuVElvqPhKOJcMbslbs3/ULgqpdgiYShYyKJRJJFBqNnuQHYjiIXJ/hhiytOtrRc2ORSOkrmPuS+LhdYg8MMBgekJRtzvbPf2qBr6EiV2kXNnspg= ;
x-m-msg: asd54ad564ad7aa6sd5as6d5; a6da7d6asas6dasd77; 5dad65ad5sd;
X-CTCH-Spam: Suspect
X-CTCH-VOD: Unknown
X-CTCH-Flags: : 64
X-CTCH-RefID: str=0001.0A150202.4F11822F.0099,ss=2,re=0.000,fgs=64
X-REDF-OSEN: [email protected]
Date: 14 Jan 2012 13:25:01 -0000
Message-ID: <[email protected]>
MIME-Version: 1.0
To: XXXXXXXXXX
Received: from unknown 41.203.79.249 by rediffmail.com via HTTP; 14 Jan 2012 13:25:01 -0000
Subject: =?utf-8?B?Qk9OREVEIEFDQ09VTlQgT0ZGRVI=?=
From: "BRIAN POTTER" <[email protected]>
Content-Type: multipart/alternative;
boundary="=_151729062cb60a9f3518a4ebb1dbc988"

--=_151729062cb60a9f3518a4ebb1dbc988
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="UTF-8"

Dear Mr ,

My names is Mr Brian Potter, formerly working with SNS Bank
Netherlands Branch, presently I am working with Capital One Bank
Europe Plc here in United Kingdom. I have a proposition to discuss
with you about a certain bonded account in our Bank. The bonded has a
balance of GBP 72.3 Million.

Please contact me through email or Telephone on this for more details.
It will be beneficial to both parties concerned I am contacting you on
this due to you share the same Family name with the Bonded
Account/Depositor Mr.V.Buchholz.

Please contact me through my private email [email protected] , for more information.
Thanks and hoping to hear from you soon.

Yours Sincerely,
Mr. Brian Cole Potter
Capital One Plc