| Current Path : /home/ift/mails/31/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //home/ift/mails/31/1525907160.zrspam.314041_2018_05_10 |
From jhnabhfbnabh@ymail.com Thu May 10 01:06:00 2018
Return-Path: <jhnabhfbnabh@ymail.com>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 214813D20003E; Thu, 10 May 2018 01:06:00 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Thu, 10 May 2018 01:06:00 +0200
From: "FROM TELEX AND TELEGRAPHIC MONEY WIRE TRANSFER SECTION"<jhnabhfbnabh@ymail.com>
To: undisclosed-recipients:;
Subject: *****SPAM***** FROM TELEX AND TELEGRAPHIC MONEY WIRE TRANSFER SECTION
Date: Wed, 9 May 2018 14:10:18 -0700
Message-Id: <20180509211214.391A37E2EF@smtpa.comstar.ru>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **************************************************
X-Spam-Status: Yes, score=63.1 required=5.0 tests=ADVANCE_FEE_2_NEW_MONEY,
ADVANCE_FEE_3_NEW,ADVANCE_FEE_3_NEW_MONEY,ADVANCE_FEE_4_NEW,
ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW,ADVANCE_FEE_5_NEW_MONEY,
AXB_XMAILER_MIMEOLE_OL_024C2,BAYES_00,FORGED_MUA_OUTLOOK,FREEMAIL_FROM,
FREEMAIL_REPLYTO,FROM_MISSPACED,FROM_MISSP_FREEMAIL,FROM_MISSP_MSFT,
FROM_MISSP_REPLYTO,FROM_MISSP_TO_UNDISC,FROM_MISSP_USER,FSL_CTYPE_WIN1251,
FSL_MISSP_REPLYTO,FSL_NEW_HELO_USER,HK_NAME_FM_FROM,LOTS_OF_MONEY,MILLION_USD,
MONEY_FRAUD_3,MONEY_FRAUD_5,MONEY_FROM_MISSP,MSOE_MID_WRONG_CASE,
NSL_RCVD_FROM_USER,PYZOR_CHECK,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,RCVD_IN_SORBS_WEB,RDNS_NONE,SUBJ_ALL_CAPS,
T_FROM_MISSP_DKIM autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5AF37ED8.6108C665"
This is a multi-part message in MIME format.
------------=_5AF37ED8.6108C665
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ATTN: The PRESIDENCY Federal Government of Nigeria has already
SIGNED the release and payment of your Accumulated sum of $7 MILLION - USD
and the FIRST BANK OF NIGERIA, PLC is ready to pay you your $7 MILLION -
USD, but some of our directors are using your MONEY to run their own PERSONAL
BUSINESS, but now i will help you COMPLETE the TRANSFER PROCESS to YOUR BANK
ACCOUNT. [...]
Content analysis details: (63.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[50.198.47.113 listed in dnsbl.sorbs.net]
3.2 MILLION_USD BODY: Talks about millions of dollars
4.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.1 NSL_RCVD_FROM_USER Received from User
1.5 SUBJ_ALL_CAPS Subject is all capitals
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[83.242.139.67 listed in psbl.surriel.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[83.242.139.67 listed in bl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jhnabhfbnabh[at]ymail.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[83.242.139.67 listed in bb.barracudacentral.org]
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
4.5 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.8 FSL_NEW_HELO_USER No description available.
2.6 MSOE_MID_WRONG_CASE No description available.
0.7 FROM_MISSP_USER From misspaced, from "User"
2.5 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
2.2 AXB_XMAILER_MIMEOLE_OL_024C2 No description available.
2.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
1.5 HK_NAME_FM_FROM No description available.
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.7 MONEY_FROM_MISSP Lots of money and misspaced From
1.2 FROM_MISSPACED From: missing whitespace
1.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.2 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
4.3 MONEY_FRAUD_5 Lots of money and many fraud phrases
4.3 FROM_MISSP_FREEMAIL From misspaced + freemail provider
4.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
------------=_5AF37ED8.6108C665
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Received: from smtpa.comstar.ru (unknown [83.242.139.67])
by ift-informatik.de (Postfix) with ESMTP id 636713D20003A
for <christian.gabriel@shortnote.de>; Thu, 10 May 2018 01:05:58 +0200 (CEST)
Received: from User (50-198-47-113-static.hfc.comcastbusiness.net [50.198.47.113])
(Authenticated sender: test@comstar.ru)
by smtpa.comstar.ru (Postfix) with ESMTP id 391A37E2EF;
Thu, 10 May 2018 01:12:13 +0400 (MSD)
Reply-To: <jhnabh@ymail.com>
From: "FROM TELEX AND TELEGRAPHIC MONEY WIRE TRANSFER SECTION"<jhnabhfbnabh@ymail.com>
Subject: FROM TELEX AND TELEGRAPHIC MONEY WIRE TRANSFER SECTION
Date: Wed, 9 May 2018 14:10:18 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20180509211214.391A37E2EF@smtpa.comstar.ru>
To: undisclosed-recipients:;
ATTN:
The PRESIDENCY Federal Government of Nigeria has already SIGNED the
release and payment of your Accumulated sum of $7 MILLION - USD and
the FIRST BANK OF NIGERIA, PLC is ready to pay you your $7 MILLION -
USD, but some of our directors are using your MONEY to run their own
PERSONAL BUSINESS, but now i will help you COMPLETE the TRANSFER
PROCESS to YOUR BANK ACCOUNT.
WE have decided to assist you get your $7MILLION - USD TRANSFERRED to
any BANK OF YOUR CHOICE, it is risky but we have to do it, once the $7
MILLION - USD is credited to your bank account and you confirm it,
make sure you re-transfer the $7 MILLION - USD to another account
immediately you confirmed the receipt of the $7MILLION - USD in your
account, I know why I want it this way, to avoid been traced very
soon.
Note: If I assist you to do the TRANSFER and you receive your
$7MILLION - USD successfully in your bank account, you will give me $2
MILLION - USD of the $7MILLION - USD for helping you transfer your
$7MILLION - USD to your bank account successfuly.
If you want me to go ahead, let me know as soon as you get this mail,
so that I can include your name in the next PAYMENT SCHEDULE and make
the transfer without further delay. It might be in the next 6 months
that they will find out this transaction, I expect you by then that,
you must have re-transferred the fund into another account, because
once the transaction is done it will be deleted from the computer
payment database system so that the fund cannot be traced by the
NIGERIAN GOVERNMENT as quickly as possible.
Yours sincerely,
JOHN ABOH,
DIRECTOR OF TELEX OPERATIONS.
------------=_5AF37ED8.6108C665--