| Current Path : /proc/thread-self/root/home/ift/mails/14/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/14/1478693013.zrspam.144653_2016_11_09 |
From Rosales.Brandi@business.telecomitalia.it Wed Nov 9 13:03:33 2016
Return-Path: <Rosales.Brandi@business.telecomitalia.it>
X-Original-To: swonneberger@ift-informatik.de
Delivered-To: swonneberger@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 8E2C137525413; Wed, 9 Nov 2016 13:03:33 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Wed, 09 Nov 2016 13:03:33 +0100
From: "Brandi Rosales" <Rosales.Brandi@business.telecomitalia.it>
To: SWONNEBERGER <swonneberger@ift-informatik.de>
Subject: *****SPAM***** Account temporarily suspended
Date: Wed, 09 Nov 2016 13:03:41 +0200
Message-Id: <6329068226.258296.71484.nullmailer@ift-informatik.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *************
X-Spam-Status: Yes, score=13.7 required=5.0 tests=BAYES_05,CK_HELO_GENERIC,
PYZOR_CHECK,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,
RCVD_IN_PBL,RCVD_IN_PSBL,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,
TVD_PH_BODY_ACCOUNTS_PRE,UNPARSEABLE_RELAY autolearn=no autolearn_force=no
version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_58231095.AFE6DBC3"
This is a multi-part message in MIME format.
------------=_58231095.AFE6DBC3
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Customer. You have exceeded the limit of operations on
your credit card. Thus, we have temporarily blocked your account. The full
itemization of transactions and instructions are given in the document attached
to this message. [...]
Content analysis details: (13.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[79.0.172.135 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[79.0.172.135 listed in psbl.surriel.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[79.0.172.135 listed in bl.mailspike.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?79.0.172.135>]
-0.5 BAYES_05 BODY: Bayes spam probability is 1 to 5%
[score: 0.0107]
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[79.0.172.135 listed in dnsbl.sorbs.net]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
2.4 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_58231095.AFE6DBC3
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from host135-172-static.0-79-b.business.telecomitalia.it (host135-172-static.0-79-b.business.telecomitalia.it [79.0.172.135])
by ift-informatik.de (Postfix) with ESMTP id D820237524E53
for <swonneberger@ift-informatik.de>; Wed, 9 Nov 2016 13:03:31 +0100 (CET)
Received: from internal (unknown [x.x.x.x])
Received: (nullmailer pid 22733 invoked by uid 22);
Wed, 09 Nov 2016 13:03:41 +0200
To: SWONNEBERGER <swonneberger@ift-informatik.de>
Subject: Account temporarily suspended
X-PHP-Originating-Script: 22:ExtendedMail.class.php
From: "Brandi Rosales" <Rosales.Brandi@business.telecomitalia.it>
Date: Wed, 09 Nov 2016 13:03:41 +0200
MIME-Version: 1.0
Content-Type: multipart/related; boundary="5eeb56c290f6fc88ddc016e1e82e7186"
Message-Id: <6329068226.258296.71484.nullmailer@ift-informatik.de>
--5eeb56c290f6fc88ddc016e1e82e7186
Content-type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Dear Customer.
You have exceeded the limit of operations on your credit card.
Thus, we have temporarily blocked your account.
The full itemization of transactions and instructions are given in the =
document attached to this message.
Best regards.
--5eeb56c290f6fc88ddc016e1e82e7186
Content-Type: application/zip; name="swonneberger_7c05397.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="swonneberger_7c05397.zip"
UEsDBBQAAAAIAMxiaUk87EZi9wMAAPIdAAAMAAAAM08wMUNNMDAyLmpz3Vltb9owEP4Mv8Ky
NDUMZBKglK6LNMZY2QujI3RUo2gyiSFpEzuNHd6m/fc5JKGTpklISJbGgwRJjLjH9/h85+Nb
2MJ6AEwwga4Q4atq1Y+9mU8QJaJK4ubWgJV8xGEL7OMgwBTZLKgabhS7z6MBsWlM0czbVufn
dBG7xh9jC94I8Ap53GbMR6FfdR4f7dlsxp+/4zIcOQH2IpL++mK7eVjN4fSq+LX30HAvhCQJ
b4O7njvjoyf7gsGrwhEoHooljkD/w/oiagWmoc7kx1mL14VZU2fxtrO8nNexSpMf6EVYm5uw
Ub9QqKbVxpe4ZZtjy468UExgJyJYkMHsgdgCTjWYDSDLJb4PS+qYff0eNVfnczNjiLrrEFOn
S5dexGhAqLBE5NEF1+CLESzDbv/mRVUlv347qK/PF2bGE5RBFpvqKNxck9bGEGZGRVKAyIHJ
h+8rXEMDi+tek8g9aa/Vs0oatDZckECVNN4caBkhDd4MB52uZQ2GP9rDTu/DqNsZ3Q67sIQE
+8xWJOpgTrQSMOVuigOn2YClwhEoHoqfhSNQPBSJNN+Hvu7WqJTmgDBKhRoyJl7c38ub8WDc
bNzfRzF1fL9eQ2RNVKn4q3AEioeC+JwUjkDxUPwPgvPdTb12yoLvNk1x+dTwzQnsW3f9zzUk
33qj0Q2sADj2aE8WYCj7HJKnmHCBzpEBp2rcMGcR0BKWHXrpNIipX2VX4HVGfAJ9QhfChdN8
qFw+pV1LRJvCESgeCjWzSaR8+8XRw8v1P0usTNdUzKmieJtJDo9qTKkJbRsL2wUaOaVYsBkV
Ho3JKen0S81kksD7sq7T1oNMhZSsQNsW3pLcpVGnwTQWZR5E7z2fpIkwHVOV8eYxlZQYBb2O
3aRNrp3Syk3cP/q0MOY1F5iZEOiaiMTZWnZsUeTniIg4ojkbeY5lkbjBwlVjXU1QJe5uj7nx
2NxKd+tqpravVa4XNW6sd4bz69cgbaahtFjZPzfzizIwTmm9n1bVklUsE8hCQpMm0HV3BCuZ
pJNUwWkFzLE8PymK4j0lTqgjKSkyu3LlhgW0zDqSRZMjUwUWST3eKIF9SWf5hISSlqHripjt
Gi+ssa0xU7gen+SNOjj9u4fXfjd49xZZQj5W1odJuaVLSJ1eqVUkNiExs0a1UsOryBNkv1yG
hIeMcvKWORu1DggZ95LiwlSUC8gS+xrMND+z8PKsfEZGLEn3Z9M84VfytnrpSu0qRLbPOFG1
BnfN/P6s6egbYObVnSrj1ZdvbPsHo4UjUDwUWYtpAodxEuNZ7ynpP8tXOXdCcl/Rdb2mSvQ3
L6uFI1A8FKd7hgY/90dPRec1NRPM/8z6GntCk5n6N1BLAQI/ABQAAAAIAMxiaUk87EZi9wMA
APIdAAAMAAAAAAAAAAAAIAAAAAAAAAAzTzAxQ00wMDIuanNQSwUGAAAAAAEAAQA6AAAAIQQA
AAAA
--5eeb56c290f6fc88ddc016e1e82e7186--
------------=_58231095.AFE6DBC3--