| Current Path : /proc/thread-self/root/home/ift/mails/28/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/28/1516361129.zrspam.286425_2018_01_19 |
From yahoopromo@asia.com Fri Jan 19 12:25:29 2018
Return-Path: <yahoopromo@asia.com>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 599D91C881E8E; Fri, 19 Jan 2018 12:25:29 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Fri, 19 Jan 2018 12:25:29 +0100
From: "YAHOO ASIA"<yahoopromo@asia.com>
Subject: *****SPAM***** Congratulations To This Email
Date: Fri, 19 Jan 2018 12:09:05 +0100
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **************************************************
X-Spam-Status: Yes, score=72.8 required=5.0 tests=ADVANCE_FEE_2_NEW_FORM,
ADVANCE_FEE_2_NEW_FRM_MNY,ADVANCE_FEE_2_NEW_MONEY,ADVANCE_FEE_3_NEW,
ADVANCE_FEE_3_NEW_FORM,ADVANCE_FEE_3_NEW_FRM_MNY,ADVANCE_FEE_3_NEW_MONEY,
ADVANCE_FEE_4_NEW,ADVANCE_FEE_4_NEW_FORM,ADVANCE_FEE_4_NEW_FRM_MNY,
ADVANCE_FEE_4_NEW_MONEY,AXB_XMAILER_MIMEOLE_OL_1ECD5,BAYES_00,
CK_HELO_DYNAMIC_SPLIT_IP,FILL_THIS_FORM,FILL_THIS_FORM_LONG,FM_LOTTO_MONEY,
FM_LOTTO_YOU_WON,FORGED_MUA_OUTLOOK,FORM_FRAUD_3,FORM_FRAUD_5,FREEMAIL_FROM,
FREEMAIL_REPLYTO,FROM_MISSPACED,FROM_MISSP_DYNIP,FROM_MISSP_FREEMAIL,
FROM_MISSP_MSFT,FROM_MISSP_REPLYTO,FROM_MISSP_USER,FSL_MISSP_REPLYTO,
FSL_NEW_HELO_USER,LOTS_OF_MONEY,LOTTO_DEPT,MILLION_USD,MISSING_HEADERS,
MISSING_MID,MONEY_FORM,MONEY_FRAUD_3,MONEY_FRAUD_5,MONEY_FROM_MISSP,
NSL_RCVD_FROM_USER,PYZOR_CHECK,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,
RCVD_IN_SORBS_WEB,RDNS_DYNAMIC,REPLYTO_WITHOUT_TO_CC,TO_NO_BRKTS_FROM_MSSP,
TO_NO_BRKTS_MSFT,TVD_PH_BODY_META,TVD_RCVD_IP,T_FROM_MISSP_DKIM,T_LOTTO_URI,
US_DOLLARS_3 autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5A61D5A9.91F39AF5"
Message-Id: <20180119112529.599D91C881E8E@ift-informatik.de>
This is a multi-part message in MIME format.
------------=_5A61D5A9.91F39AF5
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Congratulations to the recipient of this email address, as
we wish to let you know that your email address has won on our ongoing YAHOO
ASIA lottery awards international email promotion season prize draw. [...]
Content analysis details: (72.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 TVD_RCVD_IP No description available.
3.1 NSL_RCVD_FROM_USER Received from User
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(yahoopromo[at]asia.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?120.234.15.130>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[120.234.15.130 listed in dnsbl.sorbs.net]
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 T_LOTTO_URI URI: Claims Department
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[46.105.59.194 listed in bb.barracudacentral.org]
2.5 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
2.0 AXB_XMAILER_MIMEOLE_OL_1ECD5 No description available.
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.8 FSL_NEW_HELO_USER No description available.
0.5 MISSING_MID Missing Message-Id: header
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
0.7 FROM_MISSP_USER From misspaced, from "User"
3.5 TVD_PH_BODY_META No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.6 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
1.7 MONEY_FROM_MISSP Lots of money and misspaced From
1.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.2 FROM_MISSPACED From: missing whitespace
0.0 FM_LOTTO_MONEY Talks about lotto and large money!
2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
1.5 FM_LOTTO_YOU_WON Talks about lotto and you won!
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 LOTTO_DEPT Claims Department
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
4.3 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.3 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
1.4 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.4 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
4.3 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.5 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
4.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.3 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
2.5 FORM_FRAUD_3 Fill a form and several fraud phrases
------------=_5A61D5A9.91F39AF5
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Received: from 46-105-59-194.ovh.net (46-105-59-194.ovh.net [46.105.59.194])
by ift-informatik.de (Postfix) with ESMTP id C009E1C8817BA
for <christian.gabriel@shortnote.de>; Fri, 19 Jan 2018 12:25:27 +0100 (CET)
Received: from User (unknown [120.234.15.130])
by 46-105-59-194.ovh.net (Postfix) with ESMTPA id A9019F6F171;
Fri, 19 Jan 2018 12:09:42 +0100 (CET)
Reply-To: <yahasiapromo@yahoo.com>
From: "YAHOO ASIA"<yahoopromo@asia.com>
Subject: Congratulations To This Email
Date: Fri, 19 Jan 2018 12:09:05 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="_iso-2022-jp$ESC"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Congratulations to the recipient of this email address, as we wish to let you know that your email address has won on our ongoing YAHOO ASIA lottery awards international email promotion season prize draw.
The beneficiary of this email address should understand that you have been entitled to receive a lump sum payment of USD 1,000,000.00 ( One Million United States Dollars ) as cash prize. To have your claim process, you are advised to contact with the claim office department on this email: yah_claimdept@yahoo.com Remember to forward along to the email with your relevants necessary details, which includes your Full Name, Address, Country, Nationality, Occupation, Gender, and Age.
We hereby once again, wishes your email address congratulations for your fortunate on this success, This message is from YAHOO ASIA Pacific organization promotion lottery.
Yours Sincerely,
Yahoo Team
Asia Pacific office
Bangkok Thailand.
------------=_5A61D5A9.91F39AF5--