| Current Path : /proc/thread-self/root/home/ift/mails/36/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/36/1539737153.zrspam.366388_2018_10_17 |
From test@comstar.ru Wed Oct 17 02:45:53 2018
Return-Path: <test@comstar.ru>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id C1A3D3D200055; Wed, 17 Oct 2018 02:45:53 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Wed, 17 Oct 2018 02:45:53 +0200
From: test@comstar.ru
To: Recipients <test@comstar.ru>
Subject: *****SPAM***** my subject
Date: Tue, 16 Oct 2018 21:58:49 -0700
Message-Id: <20181016212555.438BBE090D4F@octours.com.ec>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *************
X-Spam-Status: Yes, score=13.2 required=5.0 tests=BAYES_00,
DATE_IN_FUTURE_03_06,FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,
HK_SCAM_S7,LOTS_OF_MONEY,PYZOR_CHECK,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_RP_RNBL,
RDNS_NONE,SPF_HELO_SOFTFAIL,US_DOLLARS_3 autolearn=no autolearn_force=no
version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5BC68641.4A945144"
This is a multi-part message in MIME format.
------------=_5BC68641.4A945144
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Peter Wong director of operations, Hong Kong and Shanghai
Banking Corporation Limited Hong Kong. I have a very confidential business
proposition involving transfer of $18.350.000.00 that will be of great benefit
for both of us. Reply for more details as regards this transaction [...]
Content analysis details: (13.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?138.122.109.190>]
2.4 HK_SCAM_S7 BODY: No description available.
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[138.122.109.190 listed in bl.score.senderscore.com]
3.0 DATE_IN_FUTURE_03_06 Date: is 3 to 6 hours after Received: date
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(peterwong20177[at]qq.com)
0.7 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0008]
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
------------=_5BC68641.4A945144
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Received: from octours.com.ec (unknown [138.122.109.190])
by ift-informatik.de (Postfix) with ESMTP id C71A83D200003
for <christian.gabriel@shortnote.de>; Wed, 17 Oct 2018 02:45:51 +0200 (CEST)
Received: from [149.56.166.231] (ip231.ip-149-56-166.net [149.56.166.231])
by octours.com.ec (Postfix) with ESMTP id 438BBE090D4F;
Tue, 16 Oct 2018 16:25:55 -0500 (ECT)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: my subject
To: Recipients <test@comstar.ru>
From: test@comstar.ru
Date: Tue, 16 Oct 2018 21:58:49 -0700
Reply-To: peterwong20177@qq.com
Message-Id: <20181016212555.438BBE090D4F@octours.com.ec>
X-OCTOURS-MailScanner-Information: Please contact the ISP for more information
X-OCTOURS-MailScanner-ID: 438BBE090D4F.A5CF1
X-OCTOURS-MailScanner: Found to be clean
X-OCTOURS-MailScanner-SpamScore: ssss
X-OCTOURS-MailScanner-From: test@comstar.ru
X-OCTOURS-MailScanner-Watermark: 1540329959.99907@NG6XLbP/yRUX16BwYaWo/Q
X-Spam-Status: No
I am Peter Wong director of operations, Hong Kong and Shanghai Banking
Corporation Limited Hong Kong. I have a very confidential business
proposition involving transfer of $18.350.000.00 that will be of great
benefit for both of us. Reply for more details as regards this
transaction
Best Regards
Peter Wong
ec
------------=_5BC68641.4A945144--