An
Email with the Subject "Best Regards" was
received in one of Scamdex's honeypot email accounts on Fri, 13 May 2011 03:34:16 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Ahmad hashim <ahmad_hashim@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
foreignbankaccountclaimdepositpaymentopportunity50%urgentbusiness transferfundlegalreportsentpaidmailbank accountdollar nominated bank ndesignated bank auditsincerelyrespectahmad_hashim@yahoo.com will securityyahoo.comremittanceremittreasuryachdear mr. ahmad hashimnmr. ahmad hashimfinancial
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Fri, 13 May 2011 03:34:16 -0700
[received:] => Array
(
[0] => from [92.255.238.238] (helo=mail.vgu.ru)by chester.loopbiz.com with esmtp (Exim 4.69)(envelope-from )id 1QKphH-0001Rz-DYfor scams@scamdex.com; Fri, 13 May 2011 03:34:16 -0700
[1] => from 92.255.238.238 (mail.vgu [10.0.0.14])by mail.vgu.ru (Postfix) with ESMTP id 9EF2F101A20;Fri, 13 May 2011 13:35:35 +0400 (MSD)
)
[mime-version:] => 1.0
[content-type:] => text/plain;charset=UTF-8;format=flowed
[content-transfer-encoding:] => 7bit
[date:] => Fri, 13 May 2011 04:35:35 -0500
[from:] => Ahmad hashim
[to:] => undisclosed-recipients:;
[subject:] => Best Regards
[reply-to:] =>
[message-id:] => <2ab28b7aa9c166f8b8e3694d31d46946@vgu.ru>
[x-sender:] => ahmad_hashim@yahoo.com
[user-agent:] => Roundcube Webmail/0.4.2
[x-spam-status:] => No, score=2.7
[x-spam-score:] => 27
[x-spam-bar:] => ++
[x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: -- From Mahmood.Mr. Ahmad Hashim Director Gen, Foreign AffairsMinistry. Foreign Affairs Ministry building Kuala Lumpur Malaysia. PAYMENTAUTHENTICATION. Dear Sir/Madam. I write to introduce this urgent/importantbusiness opportunity to you Irrespective of the fact that we have not seenor known each other before believing that it will be of immense benefit toboth of us. Let me formally introduce myself. I am Mr. Ahmad Hashim Mahmood,Director Gen. Foreign Affairs Ministry; my office monitors and controls theaffairs of all banks and financial institutions in Malaysia concerned withforeign contract payments. I am the final signatory to any transfer or remittanceof huge funds moving within banks both on the local and international levelsin line to foreign contracts settlement. [...] Content analysis details: (2.7 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 URG_BIZ BODY: Contains urgent matter-3.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'-3.0 MILLION_USD BODY: Talks about millions of dollars-3.0 UNCLAIMED_MONEY BODY: People just leave money laying around0.0 FREEMAIL_FROM Sender email is freemail (ahmad_hashim[at]yahoo.com)1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT[92.255.238.238 listed in bb.barracudacentral.org]0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO0.0 LOTS_OF_MONEY Huge... sums of money1.3 RDNS_NONE Delivered to internal network by a host with no rDNS0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL0.0 T_MONEY_PERCENT X% of a lot of money for you0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
--
From Mahmood.Mr. Ahmad Hashim
Director Gen, Foreign Affairs Ministry.
Foreign Affairs Ministry building
Kuala Lumpur Malaysia.
PAYMENT AUTHENTICATION.
Dear Sir/Madam.
I write to introduce this urgent/important business opportunity to you
before
formally
Affairs
financial
the
within banks
settlement.
nominated
accounts,
the
be
with you as
before me and
fund into
Million
United States Dollars.
As it is my duty to recommend the transfer of these
as
unclaimed deposits, I have the opportunity to write you based on the
Payments
audited
sum
this legally.
MY CONDITIONS.
in your
your assistance.
be
strictly by email / telephone, for security purposes.
3. You will help me to invest the fund in your country.
and the
on the
Payment schedule instantly to meet the three days mandate.
Waiting for your reply soon.
Yours Sincerely
Mr. Ahmad Hashim Mahmood
--
From Mahmood.Mr. Ahmad Hashim
Director Gen, Foreign Affairs Ministry.
Foreign Affairs Ministry building
Kuala Lumpur Malaysia.
PAYMENT AUTHENTICATION.
Dear Sir/Madam.
I write to introduce this urgent/important business opportunity to you
Irrespective of the fact that we have not seen or known each other
before
believing that it will be of immense benefit to both of us. Let me
formally
introduce myself. I am Mr. Ahmad Hashim Mahmood, Director Gen. Foreign
Affairs
Ministry; my office monitors and controls the affairs of all banks and
financial
institutions in Malaysia concerned with foreign contract payments. I am
the
final signatory to any transfer or remittance of huge funds moving
within banks
both on the local and international levels in line to foreign contracts
settlement.
I have before me list of funds, which could not be transferred to some
nominated
accounts as these accounts have been identified either as ghost
accounts,
unclaimed deposits and over-invoiced sum etc. I write to present you to
the
federal government that you are among the people expecting the funds to
be
transferred into their account, on this note; I wish to have a deal
with you as
regards to the unpaid certified contract funds. I have every files
before me and
the data's will be to change to your name to enable you receive the
fund into
your nominated bank account as the beneficiary of the fund's amount $35
Million
United States Dollars.
As it is my duty to recommend the transfer of these
surplus funds to the Federal Government Treasury and Reserve Accounts
as
unclaimed deposits, I have the opportunity to write you based on the
instructions I received 2 days ago from the Committee on Contract
Payments
/Foreign Debts to submit the List of payment reports / expenditures and
audited
reports of revenues. Among several others, I have decided to remit this
sum
following my idea that we have a deal/agreement and I am going to do
this legally.
MY CONDITIONS.
1. You will give me 50% of the contract funds as soon as you confirm it
in your
designated bank account. And you will take 50% of the total sum for
your assistance.
2. This deal must be kept secret forever, and all correspondence will
be
strictly by email / telephone, for security purposes.
3. You will help me to invest the fund in your country.
If you AGREE with my conditions, l advise you on what to do immediately
and the
transfer will commence without delay as I will proceed to fix your name
on the
Payment schedule instantly to meet the three days mandate.
Waiting for your reply soon.
Yours Sincerely
Mr. Ahmad Hashim Mahmood
