[208636] in Zephyr_Bugs
HELLO GOOD FRIEND
daemon@ATHENA.MIT.EDU (ddddddddddddd)
Wed Jun 8 09:54:34 2016
To: undisclosed-recipients:;
Message-ID: <9D.BC.02677.69328575@dmz-mailsec-scanner-4.mit.edu>
Reply-To: <drdukepreye@gmail.com>
From: "ddddddddddddd"<ddddddddd@MIT.EDU>
Date: Thu, 9 Jun 2016 11:23:01 -0700
MIME-Version: 1.0
Content-type: multipart/report; boundary="======7822==55483======"; report-type="spam-notification"
X-MailScanner-From: ddddddddd@jinrih.com.tw
This is a multi-part message in MIME format...
--======7822==55483======
Content-Type: text/plain; charset="ISO-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Our MailScanner believes that the attachment to this message sent to you
=20=20=20
From: ddddddddd@jinrih.com.tw
Subject: HELLO GOOD FRIEND
is Unsolicited Commercial Email (spam). Unless you are sure that this messa=
ge
is incorrectly thought to be spam, please delete this message without openi=
ng
it. Opening spam messages might allow the spammer to verify your email
address.
If you believe that this message has been incorrectly marked as spam, please
forward this email to postmaster.
Date: 20160608
pts rule name description
---- ---------------------- -----------------------------------------------=
---
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
3.1 NSL_RCVD_FROM_USER Received from User
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
4.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 MISSING_HEADERS Missing To: header
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.2 DATE_IN_FUTURE_24_48 Date: is 24 to 48 hours after Received: date
2.5 MILLION_USD BODY: Talks about millions of dollars
3.0 HK_SCAM_N2 BODY: No description available.
2.4 DNS_FROM_AHBL_RHSBL RBL: Envelope sender listed in dnsbl.ahbl.org
[listed in jinrih.com.tw.rhsbl.ahbl.org. IN]
[A]
2.5 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.8 FSL_NEW_HELO_USER No description available.
1.9 REPLYTO_WITHOUT_TO_CC No description available.
2.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.7 FROM_MISSP_USER From misspaced, from "User"
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.7 MONEY_FROM_MISSP Lots of money and misspaced From
2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
1.2 FROM_MISSPACED From: missing whitespace
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_5_NEW_FORM Advance Fee fraud and a form
2.2 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.4 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
4.3 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.4 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 MONEY_FORM Lots of money if you fill out a form
2.3 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
1.5 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
4.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.3 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
--======7822==55483======
Content-Type: message/rfc822
Content-Disposition: attachment
Content-Transfer-Encoding: binary
Received: from User (unknown [154.120.111.242])
(Authenticated sender: test)
by jinrih.com.tw (Postfix) with ESMTPA id CA2336BEE;
Wed, 8 Jun 2016 18:22:58 +0800 (CST)
Reply-To: <drdukepreye@gmail.com>
From: "ddddddddddddd"<ddddddddd>
Subject: HELLO GOOD FRIEND
Date: Thu, 9 Jun 2016 11:23:01 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Hello Good friend
I am Dr Duke Preye A private accountant and chief external auditor Standard Bank of South Africa, I need your service in a confidential matter regarding the transfer of $27MUSD (Twenty Seven Million United State Dollars)
An investor, Japanese and a contractor with the Kruger diamond mines died without naming a legal next of kin to his fund in my bank. The amount is $27M (Twenty Seven Million United State Dollars) and banking regulation legislation in South Africa demand that I notify the fiscal authorities after five years. Further details will be given upon your reply.please also you will forward this infomations to me for us to proceed,
Your Full Name........................
Your Sex..................................
Your Age..................................
Your Country.............................
Your Occupation........................
Your Personal Mobile Number.....
Send your reply to my private email address (drdukepreye@gmail.com) with your full contact details and for confirmation of this proposal, the amount is ready at present.On your immediate approval and acceptance to assist me in this matter,i will inform you of what to do.All I require is your honest co-operation to enable this deal through.I guarantee that this will be executed under a legitimate arrangement that will protect both of us from any breach of the law to cover up your reputable name. Looking forward to your urgent anticipation to this offer.Thank you and my sincere regards to you and your family.
Best Regards.
Dr Duke Preye
--======7822==55483======--