| Current Path : /home/ift/mails/30/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //home/ift/mails/30/1523070148.zrspam.304643_2018_04_07 |
From johnmore3@yandex.com Sat Apr 7 05:02:28 2018
Return-Path: <johnmore3@yandex.com>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 49E893D200006; Sat, 7 Apr 2018 05:02:28 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Sat, 07 Apr 2018 05:02:28 +0200
From: "Mr.Robert David"<johnmore3@yandex.com>
To: undisclosed-recipients:;
Subject: *****SPAM***** Re: Change of Ownership of your $15.2M G
Date: Sat, 7 Apr 2018 02:21:01 +0200
Message-Id: <20180407002240.2ABC91F794C@smtpa.comstar.ru>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **************************************************
X-Spam-Status: Yes, score=67.1 required=5.0 tests=ADVANCE_FEE_2_NEW_MONEY,
ADVANCE_FEE_3_NEW,ADVANCE_FEE_3_NEW_MONEY,ADVANCE_FEE_4_NEW,
ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW,ADVANCE_FEE_5_NEW_MONEY,
AXB_XMAILER_MIMEOLE_OL_024C2,BAYES_00,DEAR_BENEFICIARY,FAKE_REPLY_C,
FORGED_MUA_OUTLOOK,FORM_FRAUD_3,FORM_FRAUD_5,FREEMAIL_FROM,FREEMAIL_REPLYTO,
FREEMAIL_REPLYTO_END_DIGIT,FROM_MISSPACED,FROM_MISSP_FREEMAIL,FROM_MISSP_MSFT,
FROM_MISSP_REPLYTO,FROM_MISSP_TO_UNDISC,FROM_MISSP_USER,FSL_CTYPE_WIN1251,
FSL_MISSP_REPLYTO,FSL_NEW_HELO_USER,HK_NAME_FM_MR_MRS,LOTS_OF_MONEY,
MONEY_FORM_SHORT,MONEY_FRAUD_3,MONEY_FRAUD_5,MONEY_FROM_MISSP,
MSOE_MID_WRONG_CASE,NSL_RCVD_FROM_USER,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,RCVD_IN_RP_RNBL,RCVD_IN_SORBS_WEB,RDNS_NONE,
T_FILL_THIS_FORM_SHORT,T_FROM_MISSP_DKIM,URIBL_BLOCKED autolearn=no
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5AC834C4.79B97D78"
This is a multi-part message in MIME format.
------------=_5AC834C4.79B97D78
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Re: Change of Ownership of your $15.2M Attention:Beneficiary
I wish to introduce myself to you properly, as the new Director Appointed
Fraud Alert Department in United Nations Fund Release Department here in
Nigeria, I hereby send to you the information submitted in my desk last week
by Mr. Harrison Dung Lee of H. Dung Hong Kong Group Ltd, with a letter of
changing of funds ownership. [...]
Content analysis details: (67.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: un.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[83.242.139.67 listed in psbl.surriel.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[83.242.139.67 listed in bl.score.senderscore.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[83.242.139.67 listed in bl.mailspike.net]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[83.242.139.67 listed in dnsbl.sorbs.net]
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
3.1 NSL_RCVD_FROM_USER Received from User
4.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(johnmore3[at]yandex.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(johnmore2[at]yandex.com)
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[83.242.139.67 listed in bb.barracudacentral.org]
2.5 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
2.2 AXB_XMAILER_MIMEOLE_OL_024C2 No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.7 FROM_MISSP_USER From misspaced, from "User"
4.5 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
1.5 HK_NAME_FM_MR_MRS No description available.
0.8 FSL_NEW_HELO_USER No description available.
1.5 FAKE_REPLY_C No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.7 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
1.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.2 FROM_MISSPACED From: missing whitespace
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.2 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
4.3 FROM_MISSP_FREEMAIL From misspaced + freemail provider
4.3 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
4.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
2.5 FORM_FRAUD_3 Fill a form and several fraud phrases
------------=_5AC834C4.79B97D78
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Received: from smtpa.comstar.ru (unknown [83.242.139.67])
by ift-informatik.de (Postfix) with ESMTP id 6C0DB3D200005
for <info@ift-informatik.de>; Sat, 7 Apr 2018 05:02:26 +0200 (CEST)
Received: from User (unknown [94.177.189.47])
(Authenticated sender: test@comstar.ru)
by smtpa.comstar.ru (Postfix) with ESMTP id 2ABC91F794C;
Sat, 7 Apr 2018 04:22:40 +0400 (MSD)
Reply-To: <johnmore2@yandex.com>
From: "Mr.Robert David"<johnmore3@yandex.com>
Subject: Re: Change of Ownership of your $15.2M G
Date: Sat, 7 Apr 2018 02:21:01 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20180407002240.2ABC91F794C@smtpa.comstar.ru>
To: undisclosed-recipients:;
Re: Change of Ownership of your $15.2M
Attention:Beneficiary
I wish to introduce myself to you properly, as the new Director Appointed Fraud Alert Department in United Nations Fund Release Department here in Nigeria, I hereby send to you the information submitted in my desk last week by Mr. Harrison Dung Lee of H. Dung Hong Kong Group Ltd, with a letter of changing of funds ownership.
Mr. Harrison Dung confirmed to us that you instructed him to stand on
your behalf to receive your approved claims of $15.2M to his
Hong Kong bank account.
This as a matter of urgency because we do not want to transfer the
$15.2M to wrong person especially now that there is so many
scam and fraudulent activities going on all over the word so we want
to know first if you instructed the above name to receive your
approved $15.2M on your behalf.
You are required to verify the following information and inform us if you are aware or know anything about this.
1. Did you instruct one Mr. Harrison Dung Lee of H. Dung ong Kong
Group Ltd, whose Information's is below, to claim and receive your
$15.2M on your behalf ?
2. Did you sign any " Change of Funds Ownership" in favor of Mr.Harrison Dung Lee thereby making him the current beneficiary / to receive your $15.2M with the following account details? Bank Name: Standard Chartered Bank, ( Hong Kong )
Account Name: H. Dung ong Kong Group Ltd
In Favor of: Mr. Harrison Dung Lee
Account # 114-1025567-8
Swift Code: SCBL 11K111
Finally, Advice if you sent Mr. Harrison Dung Lee to receive your funds on your behalf, and if you have anything to do with the above stated account, as I asked him to come back in a week time, and if I
do not hear from you till then, I will not have any choice than to effect the payment in the name and account given to me.
For more vital information, please visit
http://www.un.org/News/Press/docs/2003/ik344.doc.htm
We wait to hear from you soonest, and be rest assured of our professional service.
Do send the underlisted information for confirmation.
1. Your Full Names.
2. Your Private Telephone Numbers
3. Your Contact Address.
Yours Faithfully,
Mr.Robert David
Fraud Alert Department
United Nations Fund Release Department
Lagos, Nigeria
johnmore3@yandex.com
------------=_5AC834C4.79B97D78--