
| Current Path : /proc/thread-self/root/home/ift/mails/33/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/33/1534292961.zrspam.339631_2018_08_15 |
From angelco@quartz.ocn.ne.jp Wed Aug 15 02:29:21 2018
Return-Path: <angelco@quartz.ocn.ne.jp>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 9FD0B3D200A92; Wed, 15 Aug 2018 02:29:21 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Wed, 15 Aug 2018 02:29:21 +0200
From: "Mr.James Hassan"<angelco@quartz.ocn.ne.jp>
To: undisclosed-recipients:;
Subject: *****SPAM***** RE: THE REASON WHY YOU HAVE NOT SUCCEEDED IN RECEIVING YOUR FUND
Date: Wed, 15 Aug 2018 02:29:54 +0200
Message-Id: <20180815002831.D1AF75D5188@msgw003-01.ocn.ad.jp>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **************************************************
X-Spam-Status: Yes, score=53.7 required=5.0 tests=ADVANCE_FEE_2_NEW_MONEY,
ADVANCE_FEE_3_NEW,ADVANCE_FEE_3_NEW_MONEY,ADVANCE_FEE_4_NEW,
ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW,ADVANCE_FEE_5_NEW_MONEY,
AXB_XMAILER_MIMEOLE_OL_024C2,BAYES_00,FAKE_REPLY_C,FORGED_MUA_OUTLOOK,
FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,FROM_MISSPACED,
FROM_MISSP_MSFT,FROM_MISSP_REPLYTO,FROM_MISSP_TO_UNDISC,FROM_MISSP_USER,
FSL_CTYPE_WIN1251,FSL_MISSP_REPLYTO,FSL_NEW_HELO_USER,HK_NAME_MR_MRS,
HK_SCAM_S25,LOTS_OF_MONEY,MONEY_FRAUD_3,MONEY_FRAUD_5,MONEY_FROM_MISSP,
MSOE_MID_WRONG_CASE,NSL_RCVD_FROM_USER,PYZOR_CHECK,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_RP_RNBL,RCVD_IN_SBL,SUBJ_ALL_CAPS,T_FROM_MISSP_DKIM autolearn=no
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5B7373E1.958979AD"
This is a multi-part message in MIME format.
------------=_5B7373E1.958979AD
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Beloved Friend RE: THE REASON WHY YOU HAVE NOT SUCCEEDED
IN RECEIVING YOUR FUND After waiting to hear from you or your Ghana partner
for a long time now, I decided to make this direct approach to you as my
new resolution in other not to let it be if I have anything in mind against
you. I do not know if you have asked yourself why each time the release of
this fund is approved, all of a sudden, the payment will be stopped or one
problem or the other will come up if you have not asked this question or
you do not know, this is an opportunity for me to tell you. [...]
Content analysis details: (53.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[153.149.233.30 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?153.149.233.30>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[153.149.233.30 listed in bl.score.senderscore.com]
2.0 HK_SCAM_S25 BODY: No description available.
3.1 NSL_RCVD_FROM_USER Received from User
4.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(drusmanhassan152[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.7 FROM_MISSP_USER From misspaced, from "User"
2.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 HK_NAME_MR_MRS No description available.
0.8 FSL_NEW_HELO_USER No description available.
2.6 MSOE_MID_WRONG_CASE No description available.
2.2 AXB_XMAILER_MIMEOLE_OL_024C2 No description available.
2.5 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
4.5 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
1.5 FAKE_REPLY_C No description available.
1.7 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
1.2 FROM_MISSPACED From: missing whitespace
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
2.2 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
4.3 MONEY_FRAUD_5 Lots of money and many fraud phrases
4.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
------------=_5B7373E1.958979AD
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Received: from mbkd0229.ocn.ad.jp (mbkd0229.ocn.ad.jp [153.149.233.30])
by ift-informatik.de (Postfix) with ESMTP id 780503D200A86
for <christian.gabriel@shortnote.de>; Wed, 15 Aug 2018 02:29:18 +0200 (CEST)
Received: from mf-smf-ucb020c2 (mf-smf-ucb020c2.ocn.ad.jp [153.153.66.134])
by mbkd0229.ocn.ad.jp (Postfix) with ESMTP id E1763E82313;
Wed, 15 Aug 2018 09:29:16 +0900 (JST)
Received: from msgw003-01.ocn.ad.jp ([180.37.203.82])
by mf-smf-ucb020c2 with ESMTP
id pjgafCm3JzT2fpjgaflsUu; Wed, 15 Aug 2018 09:29:16 +0900
Received: from User (p656238-omed01.osaka.ocn.ne.jp [153.157.191.238])
by msgw003-01.ocn.ad.jp (Postfix) with SMTP id D1AF75D5188;
Wed, 15 Aug 2018 09:28:31 +0900 (JST)
Reply-To: <drusmanhassan152@yahoo.com>
From: "Mr.James Hassan"<angelco@quartz.ocn.ne.jp>
Subject: RE: THE REASON WHY YOU HAVE NOT SUCCEEDED IN RECEIVING YOUR FUND
Date: Wed, 15 Aug 2018 02:29:54 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20180815002831.D1AF75D5188@msgw003-01.ocn.ad.jp>
To: undisclosed-recipients:;
Dear Beloved Friend
RE: THE REASON WHY YOU HAVE NOT SUCCEEDED IN RECEIVING YOUR FUND
After waiting to hear from you or your Ghana partner for a long time
now, I decided to make this direct approach to you as my new
resolution in other not to let it be if I have anything in mind
against you. I do not know if you have asked yourself why each time
the release of this fund is approved, all of a sudden, the payment
will be stopped or one problem or the other will come up if you have
not asked this question or you do not know, this is an opportunity for
me to tell you.
Some time ago, your Ghanaian friends, I mean the people that
introduced you to the project approached me through my dear wife who
work with the Federal Ministry of Finance and requested me to assist
them conclude a money transfer deal they had with you. They requested
me to assist them by removing the original contractor's name,
company's name and bank particulars from the Bank Of Ghana vetting
computer and replacing them with your name and bank details in order
to make you appear as the rightful beneficiary of this fund.
I agreed on condition that they will pay me US$100,000.00 as soon as
your name appears as the beneficiary. I did as agreed and demanded to
be paid, but your friends started telling me stories, they even told
me you promised to send money to me.
Do you know that up till now, I have not received a single cent from
them and have not set my eyes on any of them? Based on their attitude,
I decided to stop the fund release movement because I cannot be denied
of my right in my own office considering the risk as it might affect
my job.. Secondly, I know the source of the funds that you did not
execute any contract in Ghana , although I am the only person
privileged to know this information and it is a fact. Why I am making
this clear to you is that I can see that you are still making efforts
in order to conclude this project. Now I am ready to forget the past.
I do not need the US $100.000.00 any longer from you but a good
compensation from your mind. I need your assurance that those
colleagues will be totally kept out of this transaction. I know that
none of them is aware of my new approach to you. Stop spending your
money unnecessarily to Bank of Ghana Officers both here and overseas
because you will not receive this money without my hand in it. I
personally did the work at the beginning and only I can perform it.
Finally,
I need your promise that no official of the Bank of Ghana will be
aware of my involvement in this regard because of my position. Now
re-assure me that you will be willing to compensate me and that you
will assist my wife to establish a foreign account in your country
where my compensation will be lodged. Also a TT FUND RELEASE APPROVAL
DOCUMENTS will be sent to you for endorsement after which I will remit
the money within 48 hours.
I am a man of my word. If you are ready to conclude this business with
me, kindly contact me on my mail so that we can have a chat over this
issue once and for all. But if the reverse is the case, do not bother
yourself to reach me and forget about this money.
BEST REGARDS
Mr.James Hassan
Chairman payment verification Panel
------------=_5B7373E1.958979AD--