25.05.2013, 16:54
Hallo!
Ich habe heute zwei eMails ( Spam ) erhalten, die meine Mail-App ( originale von Apple ) abstürzen lässt! Heißt: Ich kann meine eMails so lange nicht abrufen, bis ich diese beiden eMails am PC aus meinem Mailserver lösche!
Es handelt sich um diese beiden eMails:
1.
Der Header dazu:
2.
Der Header dazu:
Weiß jemand bzw. kann mir jemand sagen, warum die Mail-App dann komplett abstürzt?!
Ich habe heute zwei eMails ( Spam ) erhalten, die meine Mail-App ( originale von Apple ) abstürzen lässt! Heißt: Ich kann meine eMails so lange nicht abrufen, bis ich diese beiden eMails am PC aus meinem Mailserver lösche!
Es handelt sich um diese beiden eMails:
1.
Code:
ECOBANK INTL PLC.
SCAM COMPENSATION OFFICE DEPARTMENT
WORLD BANK/UNITED NATIONS
2012/2013 SCAM VICTIMS COMPENSATIONS PAYMENTS.
YOUR REF/PAYMENTS CODE: ECB/06654 FOR $500,000 USD ONLY.
Dear Scam Victim,
This is to bring to your notice that our bank (ECOBANK INTL. PLC) is delegated by the WORLD BANK/UNITED NATIONS to pay victims of scam $500,000 (Five Hundred Thousand Dollars Only). You are listed/approved for this payment as one of the scammed victims to be paid this amount.
The payments are to be remitted by ECOBANK INTL PLC as corresponding paying bank under funding assistance by The WORLD BANK. Benefactor of this compensation award will have to be first cleared by ECOBANK INTL PLC and confirmed as a victim from Scam before scam payment can be effected. We shall feed you with further modalities as soon as we get response from you.
You are to send the following informations to your remittance officer for further verifications.
YOUR FULL NAMES.___________________________ ADDRESS.___________________________
PHONE NUMBER.__________________
AMOUNT DEFRAUDED.________________
AGE.___________
OCCUPATION._____________________
COUNTRY.________________________
Send a copy of your response via email or call your remittance officer quoting your PAYMENT CODE NUMBER(ECB/06654).
Yours Faithfully,
NAME: MR.CLEMENT SYLVANIUS
SCAMMED VICTIM/REF/PAYMENTS CODE:
ECB/06654 $500,000 USD.
Telephone : +27 799 396 055
Email: ecobnktransferunit@administrativos.comDer Header dazu:
Code:
Return-path: <consullta@un.com>
Delivery-date: Sat, 25 May 2013 00:58:33 +0200
Received: from mi023.mc1.hosteurope.de ([80.237.138.232])
by w***.webpack.hosteurope.de running ExIM with esmtp
id 1Ug0wT-0001Bf-4G; Sat, 25 May 2013 00:58:33 +0200
Received: from post.engr.uvic.ca ([142.104.96.14])
by mx0.webpack.hosteurope.de (mi023.mc1.hosteurope.de) with esmtp
id 1Ug0wS-0004Rx-MR
for w***er@christian-***-o***e.de; Sat, 25 May 2013 00:58:33 +0200
Received: from localhost (localhost [127.0.0.1])
by post.engr.uvic.ca (Postfix) with ESMTP id 243053F8B9A;
Fri, 24 May 2013 15:58:23 -0700 (PDT)
X-Virus-Scanned: by amavisd-new at engr.UVic.CA
Received: from post.engr.uvic.ca ([127.0.0.1])
by localhost (post.engr.UVic.CA [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id gdi+AGtzEYxW; Fri, 24 May 2013 15:58:15 -0700 (PDT)
Received: from [192.168.1.100] (8ta-151-113-233.telkomadsl.co.za [41.151.113.233])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by post.engr.uvic.ca (Postfix) with ESMTP id 4F46B3F8B3C;
Fri, 24 May 2013 15:57:54 -0700 (PDT)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: !!!Attention!
To: Recipients <consullta@un.com>
From: "SCAM VICTIMS COMPENSATIONS PAYMENTS <consullta"@un.com
Date: Sat, 25 May 2013 00:56:56 -0700
Reply-To: ecobnktransferunit@administrativos.com
Message-Id: <20130524225755.4F46B3F8B3C@post.engr.uvic.ca>
X-HE-Spam-Level: ++++++++++++
X-HE-Spam-Score: 12.2
X-HE-Spam-Report: Content analysis details: (12.2 points)
pts rule name description
---- ---------------------- --------------------------------------------------
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium
trust
[142.104.96.14 listed in list.dnswl.org]
2.6 TVD_APPROVED BODY: TVD_APPROVED
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
1.7 MONEY_FROM_41 Lots of money from Africa
2.9 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.2 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
1.2 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.6 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-SPAM-FLAG: Yes
Envelope-to: web***er@christian-***-**e.de2.
Code:
Greetings to you,
I am Mrs.Helen Wong, from Shanghai Banking Corporation Limited. (China)I have a business proposal of USD$30,000,000 (Thirty Million United States Dollars Only) for you to transact with me.
Contact me via my email address: mrshelenwong222@yahoo.co.jp
Mrs. Helen WongDer Header dazu:
Code:
Return-path: <consullta@yahoo.com>
Delivery-date: Sat, 25 May 2013 01:01:17 +0200
Received: from mi016.mc1.hosteurope.de ([80.237.138.239])
by w***.webpack.hosteurope.de running ExIM with esmtp
id 1Ug0z6-0002BA-Ur; Sat, 25 May 2013 01:01:16 +0200
Received: from post.engr.uvic.ca ([142.104.96.14])
by mx0.webpack.hosteurope.de (mi016.mc1.hosteurope.de) with esmtp
id 1Ug0z6-0003Uq-JC
for we***@christian-***-o***.de; Sat, 25 May 2013 01:01:16 +0200
Received: from localhost (localhost [127.0.0.1])
by post.engr.uvic.ca (Postfix) with ESMTP id DC8643F8BCA;
Fri, 24 May 2013 16:01:14 -0700 (PDT)
X-Virus-Scanned: by amavisd-new at engr.UVic.CA
Received: from post.engr.uvic.ca ([127.0.0.1])
by localhost (post.engr.UVic.CA [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id b2yE7NYXTzel; Fri, 24 May 2013 16:01:14 -0700 (PDT)
Received: from [192.168.1.100] (8ta-151-113-233.telkomadsl.co.za [41.151.113.233])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by post.engr.uvic.ca (Postfix) with ESMTP id 2623D3F8BAF;
Fri, 24 May 2013 15:59:56 -0700 (PDT)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Greetings to you
To: Recipients <consullta@yahoo.com>
From: "Mrs Helen Wong" <consullta@yahoo.com>
Date: Sat, 25 May 2013 00:57:57 -0700
Reply-To: mrshelenwong222@yahoo.co.jp
Message-Id: <20130524225957.2623D3F8BAF@post.engr.uvic.ca>
X-HE-Spam-Level: ++++++
X-HE-Spam-Score: 6.9
X-HE-Spam-Report: Content analysis details: (6.9 points)
pts rule name description
---- ---------------------- --------------------------------------------------
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium
trust
[142.104.96.14 listed in list.dnswl.org]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(consullta[at]yahoo.com)
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mrshelenwong222[at]yahoo.co.jp
)
1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.9 MONEY_FROM_41 Lots of money from Africa
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-SPAM-FLAG: Yes
Envelope-to: web***@christian-***-on***.deWeiß jemand bzw. kann mir jemand sagen, warum die Mail-App dann komplett abstürzt?!