
| Current Path : /proc/thread-self/root/home/ift/mails/14/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/14/1478688518.zrspam.144607_2016_11_09 |
From Cardenas.Archie@ghalt.in Wed Nov 9 11:48:38 2016
Return-Path: <Cardenas.Archie@ghalt.in>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 3C5AD37525413; Wed, 9 Nov 2016 11:48:38 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Wed, 09 Nov 2016 11:48:38 +0100
From: "Archie Cardenas" <Cardenas.Archie@ghalt.in>
To: CGABRIEL <cgabriel@ift-informatik.de>
Subject: *****SPAM***** Account temporarily suspended
Date: Wed, 09 Nov 2016 05:48:23 -0500
Message-Id: <7471241203.334898.16836.nullmailer@ift-informatik.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ***************
X-Spam-Status: Yes, score=15.0 required=5.0 tests=BAYES_00,PYZOR_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L5,RCVD_IN_PBL,RCVD_IN_PSBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,
RDNS_NONE,TVD_PH_BODY_ACCOUNTS_PRE,UNPARSEABLE_RELAY autolearn=no
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5822FF06.CC2C1C77"
This is a multi-part message in MIME format.
------------=_5822FF06.CC2C1C77
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Customer. You have exceeded the limit of operations on
your credit card. Thus, we have temporarily blocked your account. The full
itemization of transactions and instructions are given in the document attached
to this message. [...]
Content analysis details: (15.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[190.41.159.123 listed in zen.spamhaus.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[190.41.159.123 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?190.41.159.123>]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[190.41.159.123 listed in bl.mailspike.net]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[190.41.159.123 listed in bb.barracudacentral.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[190.41.159.123 listed in dnsbl.sorbs.net]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.4 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5822FF06.CC2C1C77
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from [190.41.159.123] (unknown [190.41.159.123])
by ift-informatik.de (Postfix) with ESMTP id 8E13337522ABB
for <cgabriel@ift-informatik.de>; Wed, 9 Nov 2016 11:48:31 +0100 (CET)
Received: from internal (unknown [x.x.x.x])
Received: (nullmailer pid 79714 invoked by uid 04);
Wed, 09 Nov 2016 05:48:23 -0500
To: CGABRIEL <cgabriel@ift-informatik.de>
Subject: Account temporarily suspended
X-PHP-Originating-Script: 04:ExtendedMail.class.php
From: "Archie Cardenas" <Cardenas.Archie@ghalt.in>
Date: Wed, 09 Nov 2016 05:48:23 -0500
MIME-Version: 1.0
Content-Type: multipart/related; boundary="137ce6350553ba6a6cc99c6b9714e6e6"
Message-Id: <7471241203.334898.16836.nullmailer@ift-informatik.de>
--137ce6350553ba6a6cc99c6b9714e6e6
Content-type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Dear Customer.
You have exceeded the limit of operations on your credit card.
Thus, we have temporarily blocked your account.
The full itemization of transactions and instructions are given in the =
document attached to this message.
Best regards.
--137ce6350553ba6a6cc99c6b9714e6e6
Content-Type: application/zip; name="cgabriel_1a6d23a.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="cgabriel_1a6d23a.zip"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--137ce6350553ba6a6cc99c6b9714e6e6--
------------=_5822FF06.CC2C1C77--