Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Keith <infotransac0002@yahoo.co.jp> <infotransac02@yahoo.co.jp> <20110318064129.0DC7E6370447@kungfulegend.com> (Gelesen: 582 mal)
 
Almöhi
Themenstarter Themenstarter
General Counsel
***
Offline


I love Anti-Scam

Beiträge: 20887
Standort: Deutschland
Mitglied seit: 09. November 2009
Keith <infotransac0002@yahoo.co.jp> <infotransac02@yahoo.co.jp> <20110318064129.0DC7E6370447@kungfulegend.com>
23. März 2011 um 08:57
 
Spoiler:
X-Mozilla-Keys:                                                                                 
Delivered-To: GMX delivery to xyz@gmx.de
Received: from kungfulegend.com ([203.121.35.5])
     by mimp003 with uismtp
     id LXWh1g00z06f7WK01XWiZw; Fri, 18 Mar 2011 08:30:47 +0100
Received: by kungfulegend.com (Postfix, from userid 783)
     id 0C5A0637045A; Fri, 18 Mar 2011 14:41:45 +0800 (CST)
Received: from localhost by ODIN
     with SpamAssassin (version 3.2.5);
     Fri, 18 Mar 2011 14:41:44 +0800
From: "Keith Dobbs"<infotransac0002@yahoo.co.jp>
To: undisclosed-recipients:;
Subject: *****SPAM***** Your Response In Necessary.  ..
Date: Fri, 18 Mar 2011 00:41:45 -0600
Message-Id: <20110318064129.0DC7E6370447@kungfulegend.com>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on ODIN
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.2 required=5.0 tests=ALL_TRUSTED,AWL,
     FORGED_MUA_OUTLOOK,MILLION_USD,MSOE_MID_WRONG_CASE autolearn=no version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4D82FEA8.8D09B1E5"
X-GMX-Antispam: ; Detail=5D7Q89H36p6v0AUTgaMO3n55oiouBHT6Epo81kR77eQ3JHbCX5HsdPmfJwEI2uXJ4onEJ
HUdbAy7gV6FUBK0mJwhw0sZgZbJFVeyQXn+SYQ20NMz9U6fyx5fL53yj4nEJg0y0EZv4W8iigIp7z1
lMrGuLCy3SIPcr2T2J1pUYDsc2s1AJB7oHOCRXIwGUHstJ3WVe5z6gxT9+1rmUituNA==V2

This is a multi-part message in MIME format.

------------=_4D82FEA8.8D09B1E5
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit



Spam detection software, running on the system "ODIN", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
admin for details.

Content preview:  My name is Keith Dobbs and a protocol officer assigned to
  the United Nation, a job I have handled for over 13 years till date. In my
   capacity, I am designated to over-see and investigate almost any operation
   I may feel is out of line. [...] 

Content analysis details:   (5.2 points, 5.0 required)

pts rule name              description
---- ---------------------- --------------------------------------------------
-1.4 ALL_TRUSTED            Passed through trusted hosts only via SMTP
1.8 MILLION_USD            BODY: Talks about millions of dollars
0.7 MSOE_MID_WRONG_CASE    MSOE_MID_WRONG_CASE
4.2 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
-0.0 AWL                    AWL: From: address is in the auto white-list




Your Response In Necessary. ...eml
Betreff:
Your Response In Necessary. ..
Von:
"Keith Dobbs"<infotransac0002@yahoo.co.jp>
Datum:
Fri, 18 Mar 2011 00:41:45 -0600
An:
undisclosed-recipients:;
Received:
from User (unknown [216.65.181.5]) (Authenticated sender: test) by kungfulegend.com (Postfix) with ESMTPA id 0DC7E6370447; Fri, 18 Mar 2011 14:41:28 +0800 (CST)
Antwort an:
<infotransac02@yahoo.co.jp>
MIME-Version:
1.0
Content-Type:
text/plain; charset="Windows-1251"
Content-Transfer-Encoding:
7bit
X-Priority:
3
X-MSMail-Priority:
Normal
X-Mailer:
Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE:
Produced By Microsoft MimeOLE V6.00.2600.0000
Nachricht-ID:
<20110318064129.0DC7E6370447@kungfulegend.com>

My name is Keith Dobbs and a protocol officer assigned to the United Nation, a job I have handled for over 13 years till date. In my capacity, I am designated to over-see and investigate almost any operation I may feel is out of line.

But Three (3) weeks ago, I took a personal initiative to run a check through the six security vaults, which keeps the custody of most valuable, treasures and delicate items. Four out of the six passed without much interest until I discovered in the 5th and sixth about $5.5 Million United State Dollars respectively.

It became even more interesting to realize that package has been pending for a long time and is supposed to have been delivered to you.

This is due to the fact that you were unable to pay the required fees necessary to process the documentation needed for the release of your package.

However, I want to inform you that after much deliberation with fellow officers of the United Nations, it has been agreed that the funds be delivered to you immediately.

The good news is that a financier has being contracted to assist you to pay the required fees,she will provide fund needed for the processing of these documents.

Meanwhile, before I proceed further, I implore you to re-confirm the information I have with me as stated below:

Full name:

Occupation:

Age:

Residential Address:

Telephone and Mobile Numbers:

I shall give you further details as soon as I re-confirm the above information.

Yours Faithfully,

Keith Dobbs.
« Zuletzt geändert: 31. März 2011 um 22:08 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
Uli
General Counsel
***
Offline



Beiträge: 30521
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Keith <infotransac0002@yahoo.co.jp> <infotransac02@yahoo.co.jp>
Antwort #1 - 31. März 2011 um 22:06
 
Zwei IP in diesem Text, wobei ich nicht weiß, ob der Quelltext mitten in diesem Posting tatsächlich ein Quelltext war.

Über Malaysia:
Code
Alles auswählen
IP-Adresse: 	203.121.35.5
Ländercode der IP: 	MY
Land der IP: 	ip address Malaysia
Bundesland der IP: 	Wilayah Persekutuan
Stadt der IP: 	Kuala Lumpur
Breitengrad der IP: 	3.1667
Längengrad der IP: 	101.7000
Provider der IP: 	TIME Telecommunications Sdn Bhd  



Über Kanada:
Code
Alles auswählen
IP-Adresse: 	216.65.181.5
Ländercode der IP: 	CA
Land der IP: 	ip address Canada
Bundesland der IP: 	Saskatchewan
Stadt der IP: 	Melfort
Breitengrad der IP: 	52.8667
Längengrad der IP: 	-104.6000
Provider der IP: 	Yourlink
Organisation: 	Yourlink
Host der IP: 	216-65-181-005.yourlink.ca 



Der Registrant der Seite kungfulegend.com wird mal wieder über ein Verschleierungsdienst anonymisiert! Vermutlich ein Spamversender. Da ich für so etwas kein Verständnis habe, kommt auch die URL mit in die Betreffzeile!
« Zuletzt geändert: 31. März 2011 um 22:09 von Uli »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema