| Current Path : /proc/thread-self/root/home/ift/mails/39/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/39/1544770411.zrspam.395833_2018_12_14 |
From admin@filahafarm.com Fri Dec 14 07:53:31 2018
Return-Path: <admin@filahafarm.com>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 49BE23D200074; Fri, 14 Dec 2018 07:53:31 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Fri, 14 Dec 2018 07:53:31 +0100
From: "HSBC_USER"<admin@filahafarm.com>
Subject: *****SPAM*****
Date: Thu, 13 Dec 2018 23:14:39 -0800
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *********************************************
X-Spam-Status: Yes, score=45.0 required=5.0 tests=AXB_XMAILER_MIMEOLE_OL_024C2,
BAYES_50,FORGED_MUA_OUTLOOK,FREEMAIL_FORGED_REPLYTO,
FREEMAIL_REPLYTO_END_DIGIT,FROM_MISSPACED,FROM_MISSP_MSFT,FROM_MISSP_REPLYTO,
FROM_MISSP_USER,FSL_CTYPE_WIN1251,FSL_MISSP_REPLYTO,FSL_NEW_HELO_USER,
HK_SCAM_S7,LOTS_OF_MONEY,MISSING_HEADERS,MISSING_MID,MONEY_FROM_MISSP,
NSL_RCVD_FROM_USER,PYZOR_CHECK,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,
RCVD_IN_MSPIKE_H2,RCVD_IN_RP_RNBL,RDNS_NONE,REPLYTO_WITHOUT_TO_CC,
SPF_HELO_NEUTRAL,TO_NO_BRKTS_FROM_MSSP,TO_NO_BRKTS_MSFT,T_FROM_MISSP_DKIM,
US_DOLLARS_3 autolearn=spam autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C13536B.AEC6F21C"
Message-Id: <20181214065331.49BE23D200074@ift-informatik.de>
This is a multi-part message in MIME format.
------------=_5C13536B.AEC6F21C
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Peter Wong director of operations,Hong Kong and Shanghai
Banking Corporation Limited Hong Kong.I have a very confidential business
proposition involving transfer of $18.350.000.00 that will be of great benefit
for both of us. reply for more details as regards this transaction [...]
Content analysis details: (45.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.4 HK_SCAM_S7 BODY: No description available.
4.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.1 NSL_RCVD_FROM_USER Received from User
1.0 MISSING_HEADERS Missing To: header
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[91.121.116.43 listed in wl.mailspike.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?91.121.116.43>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[91.121.116.43 listed in bl.score.senderscore.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[91.121.116.43 listed in bb.barracudacentral.org]
0.1 SPF_HELO_NEUTRAL SPF: HELO does not match SPF record (neutral)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(peterwong20177[at]qq.com)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4973]
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.8 FSL_NEW_HELO_USER No description available.
2.5 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.7 FROM_MISSP_USER From misspaced, from "User"
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.2 AXB_XMAILER_MIMEOLE_OL_024C2 No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 MISSING_MID Missing Message-Id: header
2.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.7 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
1.2 FROM_MISSPACED From: missing whitespace
1.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
------------=_5C13536B.AEC6F21C
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Received: from imtsdesign.es (unknown [91.121.116.43])
by ift-informatik.de (Postfix) with ESMTP id EB3923D200065
for <christian.gabriel@shortnote.de>; Fri, 14 Dec 2018 07:53:28 +0100 (CET)
Received: from User (ip113.ip-217-182-38.eu [217.182.38.113])
by imtsdesign.es (Postfix) with ESMTPA id E8EA6710F4;
Thu, 13 Dec 2018 23:56:04 +0100 (CET)
Reply-To: <peterwong20177@qq.com>
From: "HSBC_USER"<admin@filahafarm.com>
Subject:
Date: Thu, 13 Dec 2018 23:14:39 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
I am Peter Wong director of operations,Hong Kong and Shanghai Banking Corporation
Limited Hong Kong.I have a very confidential business proposition involving transfer of
$18.350.000.00 that will be of great benefit for both of us. reply for more details as regards this
transaction
Best Regards
Peter Wong
wb
------------=_5C13536B.AEC6F21C--