| Current Path : /var/mail/shortnote.de/cgabriel/.Trash/cur/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : /var/mail/shortnote.de/cgabriel/.Trash/cur/1608049393.M636683P62233.ift3,S=7046,W=7207:2, |
Return-Path: <kkmseaivw@valvesoftware.com>
X-Original-To: christian.gabriel@shortnote.de
Delivered-To: christian.gabriel@shortnote.de
Received: from localhost (localhost [127.0.0.1])
by ift3.home (Postfix) with ESMTP id 0166C2C0072
for <christian.gabriel@shortnote.de>; Tue, 15 Dec 2020 13:58:47 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: 4.701
X-Spam-Level: ****
X-Spam-Status: No, score=4.701 tagged_above=2 required=6.31
tests=[BAYES_99=3.5, BAYES_999=0.2, HEADER_FROM_DIFFERENT_DOMAINS=1,
HTML_MESSAGE=0.001, NO_RELAYS=-0.001, URIBL_BLOCKED=0.001]
autolearn=no autolearn_force=no
Received: from ift3.home ([127.0.0.1])
by localhost (ift3.ift-informatik.de [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id kNiqrmCeLoDU for <christian.gabriel@shortnote.de>;
Tue, 15 Dec 2020 13:58:43 +0100 (CET)
Received: by ift3.home (Postfix, from userid 177)
id 97AC12C0029; Tue, 15 Dec 2020 13:58:43 +0100 (CET)
Received: from localhost by ift3
with SpamAssassin (version 3.4.4);
Tue, 15 Dec 2020 13:58:43 +0100
From: "Customer service" <kkmseaivw@gingerall.com>
To: christian.gabriel@shortnote.de
Subject: *****SPAM***** Your account will be recharged.
Date: Tue, 15 Dec 2020 19:58:34 +0700
Message-Id: <YgvEOTsPKFKYvUYtBFdAEy.28746@swift.generated>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5FD8B303.25524273"
This is a multi-part message in MIME format.
------------=_5FD8B303.25524273
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "ift3",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: It's hard to believe, but thanks to random advertising on
the [online platform], over the past 3 months, residents of the city have
cashed up to 900,000 in local banks, and the amount continues to gro [...]
Content analysis details: (5.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: page.link]
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
address
[62.76.186.203 listed in dnsbl.sorbs.net]
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
DNSWL was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[62.76.186.203 listed in list.dnswl.org]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=985619.54.4449978%40valvesoftware.com;ip=62.76.186.203;r=ift3]
1.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5FD8B303.25524273
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 742f4JH5 (unknown [172.20.20.1])
by ift3.home (Postfix) with ESMTPS id 236812C0029
for <christian.gabriel@shortnote.de>; Tue, 15 Dec 2020 13:58:38 +0100 (CET)
Received: from [62.76.186.203] ([62.76.186.203:49859]) by valvesoftware.com (envelope-from <985619.54.4449978@valvesoftware.com>) (ecelerity 9.1.49.97475 r(Core:5.8.74.9)) with ECSTREAM id 5U/M4-28111-USUIWRNZ; Tue, 15 Dec 2020 19:58:34 +0700
Message-ID: <YgvEOTsPKFKYvUYtBFdAEy.28746@swift.generated>
From: "Customer service" <kkmseaivw@gingerall.com>
Sender: kkmseaivw@valvesoftware.com
Reply-To: kkmseaivw@valvesoftware.com
Subject: Your account will be recharged.
To: christian.gabriel@shortnote.de
Date: Tue, 15 Dec 2020 19:58:34 +0700
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Create Send
X-Mailer-Code: kumhmozmrrkphsrv
X-Mailer-SubscriberID: 9248728997;x3l8
Feedback-ID: superdeal:51731563:campaign:mailerSoft
X-Mailru-Msgtype: vipqrgqntnhkgtwoyjqnxxncxvrverqs
X-Virus-Status: Clean
Precedence: Bulk
X-CSA-Complaints: kkmseaivw@valvesoftware.com
x-job: 9948524_692933
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html;windows 1252"/>
<style>
body
{
font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif;
font-size: 13px;
color: #000;
}
</style>
</head>
<body>
<DIV align=3Dleft><FONT size=3D2 face=3DArial>It's hard to believe, but t=
hanks to=20
random advertising on the [online platform], over the past 3 months, resi=
dents=20
of the city have cashed up to 900,000 in local banks, and the amount cont=
inues=20
to grow!<BR>The result will not keep you waiting!</FONT></DIV>
<DIV> </DIV>
<DIV align=3Dleft><FONT size=3D2 face=3DArial>The algorithm multiplies th=
e initial=20
deposit at least once in 5. This is a revolutionary method that was made=20
possible by the global crisis.</FONT></DIV>
<DIV> </DIV>
<DIV align=3Dleft><FONT size=3D2 face=3DArial>The amount continues to=20
increase!</FONT></DIV>
<DIV> </DIV>
<DIV align=3Dleft><FONT size=3D2 face=3DArial>The city administration is =
concerned and=20
tried to block the [platform] last week.</FONT></DIV>
<DIV> </DIV>
<DIV align=3Dleft><FONT size=3D2 face=3DArial><A href=3D"https://www.dmas=
.dk/find-akupunkturlaege/andre-sundhedsfaglige-akupunkturklinikker/131-sy=
geplejerske-annette-harreschou/?referrer&c=3DMTMx&url=3Dhttps://sellout.p=
age.link%2FinS4AcWUFq2qWK1i7/">You can switch to=20
a working platform [here].</A></FONT></DIV>
<DIV> </DIV>
<DIV align=3Dleft><FONT size=3D2 face=3DArial>Change your life today!</FO=
NT></DIV>
<DIV> </DIV>
<DIV align=3Dleft><FONT size=3D2 face=3DArial>Register on the platform an=
d perhaps=20
tomorrow, you will become the part of the elite of the new=20
era!</FONT></DIV></BODY></HTML>
------------=_5FD8B303.25524273--