| Current Path : /proc/thread-self/root/home/ift/mails/16/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/16/1481552248.zrspam.164512_2016_12_12 |
From Fuentes.Carmelo@feelgoodnlp.nl Mon Dec 12 15:17:28 2016
Return-Path: <Fuentes.Carmelo@feelgoodnlp.nl>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id B58B73752561E; Mon, 12 Dec 2016 15:17:28 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Mon, 12 Dec 2016 15:17:28 +0100
From: "Carmelo Fuentes" <Fuentes.Carmelo@feelgoodnlp.nl>
To: <cgabriel@ift-informatik.de>
Subject: *****SPAM***** Software License
Date: Mon, 12 Dec 2016 11:17:26 -0300
Message-Id: <5659458385.654537.02934.server@ift-informatik.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *********
X-Spam-Status: Yes, score=9.8 required=5.0 tests=BAYES_20,CK_HELO_GENERIC,
HELO_DYNAMIC_IPADDR,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,RCVD_IN_XBL,RDNS_NONE,URIBL_BLOCKED
autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_584EB178.0F2E86F8"
This is a multi-part message in MIME format.
------------=_584EB178.0F2E86F8
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello cgabriel, it is Carmelo. Sending you the scan of the
software license agreement (Order #2457067). It is in the attachment. Please
look into it ASAP. ---- Best Regards, Carmelo Fuentes Dangerous Attachment
has been Removed. The file "softlic_2457067.zip" has been removed because
of a virus. It was infected with the "JS/Nemucod.QZ!tr.dldr" virus. File
quarantined as: ""."http://www.fortinet.com/ve?vid=7261288" [...]
Content analysis details: (9.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[190.104.204.194 listed in zen.spamhaus.org]
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?190.104.204.194>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[190.104.204.194 listed in psbl.surriel.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[190.104.204.194 listed in bl.mailspike.net]
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.1101]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: fortinet.com]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.0 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_584EB178.0F2E86F8
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from static.194.204.104.190.cps.com.ar (unknown [190.104.204.194])
by ift-informatik.de (Postfix) with ESMTP id 599C23752561D
for <cgabriel@ift-informatik.de>; Mon, 12 Dec 2016 15:17:26 +0100 (CET)
From: "Carmelo Fuentes" <Fuentes.Carmelo@feelgoodnlp.nl>
To: <cgabriel@ift-informatik.de>
Subject: Software License
Date: Mon, 12 Dec 2016 11:17:26 -0300
MIME-Version: 1.0
Content-Type: multipart/related; boundary="e27061b13ef8690825f2af6eeb6d14c1"
Message-Id: <5659458385.654537.02934.server@ift-informatik.de>
--e27061b13ef8690825f2af6eeb6d14c1
Content-Type: text/plain;
charset=utf-8
Content-Transfer-Encoding: base64
SGVsbG8gY2dhYnJpZWwsIGl0IGlzIENhcm1lbG8uDQpTZW5kaW5nIHlvdSB0aGUgc2NhbiBvZiB0
aGUgc29mdHdhcmUgbGljZW5zZSBhZ3JlZW1lbnQgKE9yZGVyICMyNDU3MDY3KS4NCkl0IGlzIGlu
IHRoZSBhdHRhY2htZW50LiBQbGVhc2UgbG9vayBpbnRvIGl0IEFTQVAuDQoNCi0tLS0NCkJlc3Qg
UmVnYXJkcywNCkNhcm1lbG8gRnVlbnRlcw0KDQo=
--e27061b13ef8690825f2af6eeb6d14c1
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Content-Length: 232
Connection: Close
Dangerous Attachment has been Removed. The file "softlic_2457067.zip" has been removed because of a virus. It was infected with the "JS/Nemucod.QZ!tr.dldr" virus. File quarantined as: ""."http://www.fortinet.com/ve?vid=7261288"
--e27061b13ef8690825f2af6eeb6d14c1--
------------=_584EB178.0F2E86F8--