An
Email with the Subject "( HIGHLY CONFIDENTIAL)" was
received in one of Scamdex's honeypot email accounts on Thu, 28 Jul 2005 02:15:12 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as "JOHN KULLAR" <johnkullar@hotmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
killedassistanceafricaafricanfinance million hundred thousand dollarstrunkboxpresidentrefugeebankcontactaccountagentresidentfive millionfive hundred thousanddepositedpartnertransaction20%5%75%processfund transferbusinessinvestmentmailbank accountdollarsurpriseconfidential will securitytreasureach( highly confidential)(twenty five million, fiv...
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => Scams@scamdex.com
[delivery-date:] => Thu, 28 Jul 2005 02:15:12 -0700
[received:] => Array
(
[0] => from [64.233.170.197] (helo=rproxy.gmail.com)by sun.newsblaze.com with esmtp (Exim 4.34)id 1Dy4Tw-0004Gw-Kjfor Scams@scamdex.com; Thu, 28 Jul 2005 02:15:12 -0700
[1] => by rproxy.gmail.com with SMTP id y7so608636rne for ; Thu, 28 Jul 2005 02:15:12 -0700 (PDT)
[2] => by 10.11.116.64 with SMTP id o64mr18370cwc; Thu, 28 Jul 2005 02:15:12 -0700 (PDT)
[3] => by 10.11.94.15 with SMTP id r15cs1691cwb; Thu, 28 Jul 2005 02:15:02 -0700 (PDT)
[4] => by 10.36.252.76 with SMTP id z76mr974849nzh; Thu, 28 Jul 2005 02:13:24 -0700 (PDT)
[5] => from hotmail.com (bay12-f29.bay12.hotmail.com [64.4.35.29]) by mx.gmail.com with ESMTP id p4si522315nzc.2005.07.28.02.13.21; Thu, 28 Jul 2005 02:13:24 -0700 (PDT)
[6] => from mail pickup service by hotmail.com with Microsoft SMTPSVC; Thu, 28 Jul 2005 02:10:15 -0700
[7] => from 165.146.6.129 by by12fd.bay12.hotmail.msn.com with HTTP;Thu, 28 Jul 2005 09:10:15 GMT
)
[x-forwarded-to:] => Scams@scamdex.com
[x-forwarded-for:] => box.8675309@gmail.com Scams@scamdex.com
[x-gmail-received:] => 47cb9e5f4d4a7a7cb02e1ad4ccfcbaa2b4511e95
[delivered-to:] => box.8675309@gmail.com
[received-spf:] => pass (gmail.com: domain of johnkullar@hotmail.com designates 64.4.35.29 as permitted sender)
[message-id:] =>
[x-originating-ip:] => [165.146.6.129]
[x-originating-email:] => [johnkullar@hotmail.com]
[x-sender:] => johnkullar@hotmail.com
[from:] => "JOHN KULLAR"
[to:] => johnkullar@hotmail.com
[bcc:] =>
[subject:] => ( HIGHLY CONFIDENTIAL)
[date:] => Thu, 28 Jul 2005 11:10:15 +0200
[mime-version:] => 1.0
[content-type:] => text/plain; format=flowed
[x-originalarrivaltime:] => 28 Jul 2005 09:10:15.0483 (UTC) FILETIME=[2AD168B0:01C59354]
[status:] => RO
[x-status:] =>
[x-keywords:] =>
[x-uid:] => 2
[x-scamdex-scores:] => S:94 P:70 A:73 L:74 E:77 G:68
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 94
[x-scamdex-totscore:] => 456
[x-scamdex-kw:] => \%,account,africa,agent,assistance,bank,box,business,contact,death,dollars,finance,fund,hundred thousand,inc.,killed,million,partner,process,resident,service,south,transaction,treasure,trunk,trust
[x-scamdex-em:] => 8675309@gmail.com,johnkullar@hotmail.com
[x-scamdex-dir:] => S
[x-scamdex-id:] => S1161839102.M985285P2247V0805I000DEF5E
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
FROM JOHN KULLAR
JOHANNESBURG SOUTH AFRICA.
phone+27-83-5220441
ATTN:DIRECTOR
( HIGHLY CONFIDENTIAL)
personally. I got your contact through Johannesburg Chamber of Commerce.
murdered in the land dispute in Zimbabwe. My late father was among the few
of the ruling Government of President Mugabe for allegedly supporting the
Before his death he had taken to Johannesburg, Republic of South Africa the
deposited it with a private Security and Finance company as if he foresaw
This money is contained in a metallic trunk box and he registered it as
was meant to purchase new agricultural machines and chemicals for farmers
This land dispute sparked off when President Robert Mugabe introduced a new
vehemently condemned the modus oparandi adopted by the government. This
thugs in which more than fifty-one (51) people were killed including my
West especially Britain and America have voiced their condemnation against
As the eldest son of my father, I am saddled with the responsibility of
without exposing the whole situation.
of encountering the same experience in future since both countries have
Moreso, South African Monetary Laws does not allow refugees/ asylum seekers
bank account.
out of South Africa into your overseas chosen account.
the total fund, and 5% will be for any unforeseen expenses that we might
in your country under your guidance.
via my tel/fax number above . Feel free to ask any question you consider
easier communication.
and believe that you will oblige us in the need for security and attention
and urgency it deserves.
Thanks for
your Understanding,
John Kullar
for the family
FROM JOHN KULLAR
JOHANNESBURG SOUTH AFRICA.
phone+27-83-5220441
ATTN:DIRECTOR
( HIGHLY CONFIDENTIAL)
You may be surprised to receive this letter since you do not know me
personally. I got your contact through Johannesburg Chamber of Commerce.
I am John Kullar, the son of late Dr. Jacob Kullar , who was recently
murdered in the land dispute in Zimbabwe. My late father was among the few
black Zimbabwean rich farmers who was murdered in cold blood by the agents
of the ruling Government of President Mugabe for allegedly supporting the
party controlled by the white minority.
Before his death he had taken to Johannesburg, Republic of South Africa the
sum of US$25.5M (Twenty five million, five hundred thousand dollars) and
deposited it with a private Security and Finance company as if he foresaw
the looming danger in Zimbabwe.
This money is contained in a metallic trunk box and he registered it as
family treasures and valuables for adequate security reasons. The fund/money
was meant to purchase new agricultural machines and chemicals for farmers
in Lesotho and Swaziland.
This land dispute sparked off when President Robert Mugabe introduced a new
land act that wholly affected the white farmers and, some few blacks who
vehemently condemned the modus oparandi adopted by the government. This
resulted to rampage and mob action by the war veterans and some political
thugs in which more than fifty-one (51) people were killed including my
father. May his soul rest in perfect peace. Heads of Governments from the
West especially Britain and America have voiced their condemnation against
Mugabe’s plan.
As the eldest son of my father, I am saddled with the responsibility of
seeking a genuine partner and account where this money will be transferred
without exposing the whole situation.
I am faced with the dilemma of investing this money in South Africa for fear
of encountering the same experience in future since both countries have
almost the same political history.
Moreso, South African Monetary Laws does not allow refugees/ asylum seekers
to engage in any business activities neither are they allowed to open any
bank account.
Therefore, I am seeking for your very good assistance to transfer this money
out of South Africa into your overseas chosen account.
For your efforts and assistance I have made up my mind to offer you 20% of
the total fund, and 5% will be for any unforeseen expenses that we might
encounter in the process of the transfer, and 75% will be for my Investments
in your country under your guidance.
Please should this request meet your utmost consideration, kindly contact me
via my tel/fax number above . Feel free to ask any question you consider
necessary and in return try to include your private phone and fax number for
easier communication.
The confidentiality of this request cannot be over emphasized as we trust
and believe that you will oblige us in the need for security and attention
it demands. Please treat this transaction with absolutely confidentiality
and urgency it deserves.
Thanks for
your Understanding,
John Kullar
for the family