by Reportandie
Fri Mar 08, 2013 6:18 am
Delivered-To: [my.redacted.address]
Received: by 10.194.28.200 with SMTP id d8csp34297wjh;
Sun, 3 Mar 2013 20:10:40 -0800 (PST)
X-Received: by 10.14.225.72 with SMTP id y48mr33910224eep.45.1362370239832;
Sun, 03 Mar 2013 20:10:39 -0800 (PST)
Return-Path: <info at yahoo.com>
Received: from server1c.axioma.local (axioma.nest.vn.ua. [193.243.159.222])
by mx.google.com with ESMTP id i43si31646057eem.198.2013.03.03.20.09.38;
Sun, 03 Mar 2013 20:10:39 -0800 (PST)
Received-SPF: neutral (google.com: 193.243.159.222 is neither permitted nor denied by best guess record for domain of info at yahoo.com) client-ip=193.243.159.222;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 193.243.159.222 is neither permitted nor denied by best guess record for domain of info at yahoo.com) smtp.mail=info at yahoo.com
Received: by server1c.axioma.local (Postfix, from userid 5000)
id D57FE67244F; Tue, 19 Feb 2013 23:57:52 +0200 (EET)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
server1c.axioma.local
X-Spam-Flag: YES
X-Spam-Level: ************************************************
X-Spam-Status: Yes, score=48.5 required=3.0 tests=ADVANCE_FEE_2_NEW_FORM,
ADVANCE_FEE_2_NEW_FRM_MNY,ADVANCE_FEE_2_NEW_MONEY,ADVANCE_FEE_3_NEW,
ADVANCE_FEE_3_NEW_FORM,ADVANCE_FEE_3_NEW_FRM_MNY,ADVANCE_FEE_3_NEW_MONEY,
ADVANCE_FEE_4_NEW,ADVANCE_FEE_4_NEW_FORM,ADVANCE_FEE_4_NEW_FRM_MNY,
ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW,ADVANCE_FEE_5_NEW_FORM,
ADVANCE_FEE_5_NEW_FRM_MNY,ADVANCE_FEE_5_NEW_MONEY,ALL_TRUSTED,
AXB_XMAILER_MIMEOLE_OL_024C2,DEAR_SOMETHING,FILL_THIS_FORM,
FILL_THIS_FORM_LOAN,FILL_THIS_FORM_LONG,FORGED_MUA_OUTLOOK,FORGED_YAHOO_RCVD,
FORM_FRAUD_5,FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,
FROM_MISSPACED,FROM_MISSP_EH_MATCH,FROM_MISSP_MSFT,FROM_MISSP_USER,
FSL_CTYPE_WIN1251,FSL_MISSP_REPLYTO,FSL_NEW_HELO_USER,HK_SCAM_N2,
LOTS_OF_MONEY,MILLION_USD,MISSING_HEADERS,MISSING_MID,MONEY_FORM,
MONEY_FRAUD_3,MONEY_FRAUD_5,MONEY_FROM_MISSP,NSL_RCVD_FROM_USER,
REPLYTO_WITHOUT_TO_CC,SUBJ_ALL_CAPS,TO_NO_BRKTS_FROM_MSSP
autolearn=unavailable version=3.3.1
X-Spam-Report:
* -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
* 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
* 0.0 NSL_RCVD_FROM_USER Received from User
* 1.6 SUBJ_ALL_CAPS Subject is all capitals
* 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
* (<ahmedkhan19600[at]yahoo.com.hk>
)
* 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
* 1.2 MISSING_HEADERS Missing To: header
* 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
* 2.5 MILLION_USD BODY: Talks about millions of dollars
* 3.8 HK_SCAM_N2 BODY: HK_SCAM_N2
* 0.1 MISSING_MID Missing Message-Id: header
* 0.0 LOTS_OF_MONEY Huge... sums of money
* 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
* 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
* 2.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
* 0.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
* 0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
* 0.0 FROM_MISSP_USER From misspaced, from "User"
* 0.0 MONEY_FROM_MISSP Lots of money and misspaced From
* 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
* 0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
* 0.0 FROM_MISSPACED From: missing whitespace
* 0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
* 1.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
* 0.9 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
* 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
* 3.2 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
* 0.0 FILL_THIS_FORM Fill in a form with personal information
* 3.5 FILL_THIS_FORM_LONG Fill in a form with personal information
* 1.2 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
* 0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
* 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
* 2.0 ADVANCE_FEE_5_NEW_FORM Advance Fee fraud and a form
* 2.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
* 4.0 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
* 2.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
* 0.0 MONEY_FORM Lots of money if you fill out a form
* 0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 3.5 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
* 0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
* 0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
* 1.1 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
* 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Received: from User (cyberjaya.perfect-privacy.com [202.71.103.246])
by server1c.axioma.local (Postfix) with ESMTPA id D2DEB660E24;
Mon, 18 Feb 2013 00:17:27 +0200 (EET)
Reply-To: <[email protected]>
From: "Ahmed Khan"<info at yahoo.com>
Subject: [SPAM VERY CONFIDENTIAL.
Date: Sun, 17 Feb 2013 14:18:15 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 130217-0, 02/17/2013), Outbound message
X-Antivirus-Status: Clean
X-Spam-Prev-Subject: VERY CONFIDENTIAL.
Message-Id: <[email protected]>
To: [redacted]
DEAR SIR
i am Ahmed Khan, A Private Investment Manager; I am getting in touch with you regarding the estate of Anderson Whitaker an investment placed under my management over 10 years ago. I would respectfully request that you keep the contents of this mail confidential.
In 1999, Anderson Whitaker came to me and had series of talks. He informed us that he had a financial portfolio of 21Million United States Dollars and he wanted us to manage and invest these funds for him.
The funds were invested and attractive margins were made during our first months of operation, the profit and interest at this point was over $29million United States Dollars. In mid 2002, he instructed that the principal (US$25M) be liquidated and transferred as cash to South Africa. Where he had to make an urgent investment requiring cash. We got in touch with the specialist Bank, who agreed to receive this money for a fee and make cash available to Anderson, In 2010, specialist Bank informed us that the funds remained unclaimed. I was informed about this, and upon investigation discovered that Anderson was involved in a hiking accident in Mainland and died intestate. Several International People finders were contacted by me firm but he has no next of kin and the reason I am contacting you is because I want to make you the beneficiary.
I have exclusive access to his file; you will be made the beneficiary of these funds. On verification, which will be the details I make available to the Bank, it would be legally confirmed as I am working with my local solicitor on this deal to make sure all legal aspects are covered. You do not have to have known him. I know this sounds a bit heavy and complex but believe and trust me as it is achievable. For your assistance, I propose we split the funds in half and share it equally. This practice is not unusual in the banking sector here in my Country South Africa. The other option is that the funds will revert back to the state, where it may be shared by State officials for their personal use and enrichment, I worked for that money and telling you the fact Anderson still owes me my percentage for service and naturally I deserve to have that money but cannot do it alone so i need your help.
Please can we keep communication for now strictly by the contact details below? I am a family man, with a wife and children. I send you this mail not without a measure of fear as to the consequences, but I know within me that nothing ventured is nothing gained and that success and riches never come easy or on a platter of gold. This is the one truth I have learned from my private investment clients. Do not betray my confidence. We should act swiftly on this if you are in agreement and please get back to me immediately via the above contact details, with details of how and when best to contact you, I will need your , FULL NAME, ADDRESS , HOME TELEPHONE ,OFFICE TELEPHONE ,CELL PHONE and Occupation .
I await your prompt response to this matter
Received: by 10.194.28.200 with SMTP id d8csp34297wjh;
Sun, 3 Mar 2013 20:10:40 -0800 (PST)
X-Received: by 10.14.225.72 with SMTP id y48mr33910224eep.45.1362370239832;
Sun, 03 Mar 2013 20:10:39 -0800 (PST)
Return-Path: <info at yahoo.com>
Received: from server1c.axioma.local (axioma.nest.vn.ua. [193.243.159.222])
by mx.google.com with ESMTP id i43si31646057eem.198.2013.03.03.20.09.38;
Sun, 03 Mar 2013 20:10:39 -0800 (PST)
Received-SPF: neutral (google.com: 193.243.159.222 is neither permitted nor denied by best guess record for domain of info at yahoo.com) client-ip=193.243.159.222;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 193.243.159.222 is neither permitted nor denied by best guess record for domain of info at yahoo.com) smtp.mail=info at yahoo.com
Received: by server1c.axioma.local (Postfix, from userid 5000)
id D57FE67244F; Tue, 19 Feb 2013 23:57:52 +0200 (EET)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
server1c.axioma.local
X-Spam-Flag: YES
X-Spam-Level: ************************************************
X-Spam-Status: Yes, score=48.5 required=3.0 tests=ADVANCE_FEE_2_NEW_FORM,
ADVANCE_FEE_2_NEW_FRM_MNY,ADVANCE_FEE_2_NEW_MONEY,ADVANCE_FEE_3_NEW,
ADVANCE_FEE_3_NEW_FORM,ADVANCE_FEE_3_NEW_FRM_MNY,ADVANCE_FEE_3_NEW_MONEY,
ADVANCE_FEE_4_NEW,ADVANCE_FEE_4_NEW_FORM,ADVANCE_FEE_4_NEW_FRM_MNY,
ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW,ADVANCE_FEE_5_NEW_FORM,
ADVANCE_FEE_5_NEW_FRM_MNY,ADVANCE_FEE_5_NEW_MONEY,ALL_TRUSTED,
AXB_XMAILER_MIMEOLE_OL_024C2,DEAR_SOMETHING,FILL_THIS_FORM,
FILL_THIS_FORM_LOAN,FILL_THIS_FORM_LONG,FORGED_MUA_OUTLOOK,FORGED_YAHOO_RCVD,
FORM_FRAUD_5,FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,
FROM_MISSPACED,FROM_MISSP_EH_MATCH,FROM_MISSP_MSFT,FROM_MISSP_USER,
FSL_CTYPE_WIN1251,FSL_MISSP_REPLYTO,FSL_NEW_HELO_USER,HK_SCAM_N2,
LOTS_OF_MONEY,MILLION_USD,MISSING_HEADERS,MISSING_MID,MONEY_FORM,
MONEY_FRAUD_3,MONEY_FRAUD_5,MONEY_FROM_MISSP,NSL_RCVD_FROM_USER,
REPLYTO_WITHOUT_TO_CC,SUBJ_ALL_CAPS,TO_NO_BRKTS_FROM_MSSP
autolearn=unavailable version=3.3.1
X-Spam-Report:
* -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
* 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
* 0.0 NSL_RCVD_FROM_USER Received from User
* 1.6 SUBJ_ALL_CAPS Subject is all capitals
* 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
* (<ahmedkhan19600[at]yahoo.com.hk>
)
* 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
* 1.2 MISSING_HEADERS Missing To: header
* 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
* 2.5 MILLION_USD BODY: Talks about millions of dollars
* 3.8 HK_SCAM_N2 BODY: HK_SCAM_N2
* 0.1 MISSING_MID Missing Message-Id: header
* 0.0 LOTS_OF_MONEY Huge... sums of money
* 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
* 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
* 2.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
* 0.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
* 0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
* 0.0 FROM_MISSP_USER From misspaced, from "User"
* 0.0 MONEY_FROM_MISSP Lots of money and misspaced From
* 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
* 0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
* 0.0 FROM_MISSPACED From: missing whitespace
* 0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
* 1.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
* 0.9 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
* 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
* 3.2 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
* 0.0 FILL_THIS_FORM Fill in a form with personal information
* 3.5 FILL_THIS_FORM_LONG Fill in a form with personal information
* 1.2 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
* 0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
* 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
* 2.0 ADVANCE_FEE_5_NEW_FORM Advance Fee fraud and a form
* 2.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
* 4.0 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
* 2.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
* 0.0 MONEY_FORM Lots of money if you fill out a form
* 0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 3.5 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
* 0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
* 0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
* 1.1 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
* 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Received: from User (cyberjaya.perfect-privacy.com [202.71.103.246])
by server1c.axioma.local (Postfix) with ESMTPA id D2DEB660E24;
Mon, 18 Feb 2013 00:17:27 +0200 (EET)
Reply-To: <[email protected]>
From: "Ahmed Khan"<info at yahoo.com>
Subject: [SPAM VERY CONFIDENTIAL.
Date: Sun, 17 Feb 2013 14:18:15 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 130217-0, 02/17/2013), Outbound message
X-Antivirus-Status: Clean
X-Spam-Prev-Subject: VERY CONFIDENTIAL.
Message-Id: <[email protected]>
To: [redacted]
DEAR SIR
i am Ahmed Khan, A Private Investment Manager; I am getting in touch with you regarding the estate of Anderson Whitaker an investment placed under my management over 10 years ago. I would respectfully request that you keep the contents of this mail confidential.
In 1999, Anderson Whitaker came to me and had series of talks. He informed us that he had a financial portfolio of 21Million United States Dollars and he wanted us to manage and invest these funds for him.
The funds were invested and attractive margins were made during our first months of operation, the profit and interest at this point was over $29million United States Dollars. In mid 2002, he instructed that the principal (US$25M) be liquidated and transferred as cash to South Africa. Where he had to make an urgent investment requiring cash. We got in touch with the specialist Bank, who agreed to receive this money for a fee and make cash available to Anderson, In 2010, specialist Bank informed us that the funds remained unclaimed. I was informed about this, and upon investigation discovered that Anderson was involved in a hiking accident in Mainland and died intestate. Several International People finders were contacted by me firm but he has no next of kin and the reason I am contacting you is because I want to make you the beneficiary.
I have exclusive access to his file; you will be made the beneficiary of these funds. On verification, which will be the details I make available to the Bank, it would be legally confirmed as I am working with my local solicitor on this deal to make sure all legal aspects are covered. You do not have to have known him. I know this sounds a bit heavy and complex but believe and trust me as it is achievable. For your assistance, I propose we split the funds in half and share it equally. This practice is not unusual in the banking sector here in my Country South Africa. The other option is that the funds will revert back to the state, where it may be shared by State officials for their personal use and enrichment, I worked for that money and telling you the fact Anderson still owes me my percentage for service and naturally I deserve to have that money but cannot do it alone so i need your help.
Please can we keep communication for now strictly by the contact details below? I am a family man, with a wife and children. I send you this mail not without a measure of fear as to the consequences, but I know within me that nothing ventured is nothing gained and that success and riches never come easy or on a platter of gold. This is the one truth I have learned from my private investment clients. Do not betray my confidence. We should act swiftly on this if you are in agreement and please get back to me immediately via the above contact details, with details of how and when best to contact you, I will need your , FULL NAME, ADDRESS , HOME TELEPHONE ,OFFICE TELEPHONE ,CELL PHONE and Occupation .
I await your prompt response to this matter