| Current Path : /home/ift/mails/30/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //home/ift/mails/30/1522164818.zrspam.301676_2018_03_27 |
From netadmin@haldylaw.com Tue Mar 27 17:33:38 2018
Return-Path: <netadmin@haldylaw.com>
X-Original-To: tjungblut@ift-informatik.de
Delivered-To: tjungblut@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id A84E33D200D56; Tue, 27 Mar 2018 17:33:38 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Tue, 27 Mar 2018 17:33:38 +0200
From: "Rosetta Hayhurst" <netadmin@haldylaw.com>
To: <tobias.jungblut@ift-informatik.de>
Subject: *****SPAM***** Purchase Order_4523687_27032018
Date: Tue, 27 Mar 2018 19:03:34 +0330
Message-Id: <0c7bedbb549f$1cfd45ba$8dcfa61c$@com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *************
X-Spam-Status: Yes, score=13.3 required=5.0 tests=BAYES_50,
CK_HELO_DYNAMIC_SPLIT_IP,DOS_OUTLOOK_TO_MX,HTML_MESSAGE,MIME_QP_LONG_LINE,
PYZOR_CHECK,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,RCVD_IN_PSBL,RDNS_NONE,
TVD_RCVD_IP autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5ABA6452.EC9B6A0C"
This is a multi-part message in MIME format.
------------=_5ABA6452.EC9B6A0C
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi Sir, Please find attached PDF. Thanks & Regards, [...]
Content analysis details: (13.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[46.100.146.202 listed in zen.spamhaus.org]
0.0 TVD_RCVD_IP No description available.
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[46.100.146.202 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[46.100.146.202 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4984]
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.8 DOS_OUTLOOK_TO_MX Delivered direct to MX with Outlook headers
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5ABA6452.EC9B6A0C
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 151-239-173-105.shatel.ir (unknown [46.100.146.202])
by ift-informatik.de (Postfix) with ESMTP id 194713D200D55
for <tobias.jungblut@ift-informatik.de>; Tue, 27 Mar 2018 17:33:36 +0200 (CEST)
From: "Rosetta Hayhurst" <netadmin@haldylaw.com>
To: <tobias.jungblut@ift-informatik.de>
Subject: Purchase Order_4523687_27032018
Date: Tue, 27 Mar 2018 19:03:34 +0330
Message-ID: <0c7bedbb549f$1cfd45ba$8dcfa61c$@com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0074_3ADDB19C.5509F170"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AdBx5/5UsdSTxflQTPi+FyODmVaqhA==
Content-Language: en-us
This is a multipart message in MIME format.
------=_NextPart_000_0074_3ADDB19C.5509F170
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0075_3ADDB19C.5509F170"
------=_NextPart_001_0075_3ADDB19C.5509F170
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hi Sir,
Please find attached PDF.
Thanks & Regards,
Rosetta Hayhurst,
Network Administrator,
09883653972.
------=_NextPart_001_0075_3ADDB19C.5509F170
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Blackadder ITC";
panose-1:4 2 5 5 5 16 7 2 13 2;}
@font-face
{font-family:Mistral;
panose-1:3 9 7 2 3 4 7 2 4 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3DEN-US link=3Dblue vlink=3Dpurple>
<div class=3DSection1>
<p class=3DMsoNormal>Hi Sir,<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal>Please find attached PDF.<o:p></o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
<p class=3DMsoNormal><span =
style=3D'font-size:24.0pt;font-family:Mistral'>Thanks
& Regards,</span><span style=3D'font-size:12.0pt;font-family:"Times =
New Roman","serif"'><o:p></o:p></span></p>
<p class=3DMsoNormal><span style=3D'font-size:12.0pt;font-family:"Times =
New Roman","serif"'> <o:p></o:p></span></p>
<p class=3DMsoNormal><span =
style=3D'font-size:24.0pt;font-family:Mistral'>Rosetta Hayhurst,<o:p></o:p></span></p>
<p class=3DMsoNormal><span =
style=3D'font-size:24.0pt;font-family:Mistral'>Network
Administrator,<o:p></o:p></span></p>
<p class=3DMsoNormal><span =
style=3D'font-size:22.0pt;font-family:Mistral'>09883653972.</span><o:p></=
o:p></p>
<p class=3DMsoNormal><o:p> </o:p></p>
</div>
</body>
</html>
------=_NextPart_001_0075_3ADDB19C.5509F170--
------=_NextPart_000_0074_3ADDB19C.5509F170
Content-Type: application/zip;
name="Purchase Order_4523687_27032018.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="Purchase Order_4523687_27032018.zip"
UEsDBBQACAAIACtie0wAAAAAAAAAAAAAAAAdAAAAUE9fNTI5MjE3NjUyOTM4OF8yNzAzMjAx
OC51cmw1jN1qwkAUhO8X9k1qsj9RE2EvRCkNCkpL6YUpItkjWdiclewJKtJ374LtXMx8zMAc
HkIIJYulmCT4s9U/PVXMfr452w/hoo2sXirODjUSDAj00YWB2pHSXq+3LpLh7PN9a87OwyLP
AQdovSOyIZ7QZg5zG9qxB6SY73fHqaqUnM9S6LI8qrnQSsgyu8Zz+msD1mjhZiRnb4E2cDfi
Wb+md7NaNF8ObbjGJt4jQa9VEzvwXqvMes/ZL1BLBwi0LCNbuQAAANsAAABQSwECFAAUAAgA
CAArYntMtCwjW7kAAADbAAAAHQAAAAAAAAAAAAAAAAAAAAAAUE9fNTI5MjE3NjUyOTM4OF8y
NzAzMjAxOC51cmxQSwUGAAAAAAEAAQBLAAAABAEAAAAA
------=_NextPart_000_0074_3ADDB19C.5509F170--
------------=_5ABA6452.EC9B6A0C--