[SPAM] great news
Thomas Debergeyck <[email protected]> Wed, 24 Aug 2016 12:47:54 +0300
| Newsgroups | gmane.mail.vpopmail,gmane.spam.detected |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
------------=_57BD6D59.ECCCEF62
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "blaine.gmane.org",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, I've got great news for you, you're going to be really
surprised, just take a look <http://kandardahi.working-in-pjs.com/e4nzoos>
Thomas Debergeyck [...]
Content analysis details: (6.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: working-in-pjs.com]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: working-in-pjs.com]
0.0 T_HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_57BD6D59.ECCCEF62
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-path: <[email protected]>
Envelope-to: [email protected]
Received: from [184.154.94.19] (helo=mail.inter7.com)
by blaine.gmane.org with esmtp (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1bcUmv-0007rx-VQ
for [email protected]; Wed, 24 Aug 2016 11:48:02 +0200
Received: (qmail 13028 invoked by uid 89); 24 Aug 2016 09:48:00 -0000
Mailing-List: contact [email protected]; run by ezmlm
Precedence: bulk
List-Post: <mailto:[email protected]>
List-Help: <mailto:[email protected]>
List-Unsubscribe: <mailto:[email protected]>
List-Subscribe: <mailto:[email protected]>
Reply-To: [email protected]
Delivered-To: mailing list [email protected]
Received: (qmail 13021 invoked by uid 0); 24 Aug 2016 09:48:00 -0000
From: Thomas Debergeyck <[email protected]>
To: "users-accept-1173743269.7834.mfamhkembanlnkcjipmg"
<users-accept-1173743269.7834.mfamhkembanlnkcjipmg@renatan.thibs.com>, "Andy Bradford"
<[email protected]>, "vchkpw"
<[email protected]>, "valerie.vanbrabant" <[email protected]>
Date: Wed, 24 Aug 2016 12:47:54 +0300
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_000F_015B7EEE.33F0AA32"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Thread-Index: AdHuCUVnL9Db3mE503xrPb4PRG36+A==
Content-Language: en-us
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.walterstevenson.com
X-AntiAbuse: Original Domain - inter7.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - thibs.com
X-Get-Message-Sender-Via: server.walterstevenson.com: authenticated_id: [email protected]
X-Authenticated-Sender: server.walterstevenson.com: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-DSPAM-Result: Spam
X-DSPAM-Processed: Wed Aug 24 04:48:00 2016
X-DSPAM-Confidence: 0.5631
X-DSPAM-Improbability: 1 in 130 chance of being ham
X-DSPAM-Probability: 1.0000
X-DSPAM-Signature: 57bd6d5042081126417401
X-DSPAM-Factors: 27,
Content-Language*us, 0.99294,
Content-Language*en+us, 0.99294,
really+surprised, 0.99000,
really+surprised, 0.99000,
Received*esmtpsa+(TLSv1.2, 0.02150,
To*"vchkpw", 0.02284,
Received*VY, 0.02284,
Received*(TLSv1.2, 0.02411,
X-Mailer*Outlook+Build, 0.03022,
Date*Wed, 0.96791,
X-Mailer*Build, 0.03949,
To*<vchkpw, 0.03959,
To*<vchkpw+inter7.com>, 0.04925,
Content-Language*en, 0.94595,
news, 0.93516,
news, 0.93516,
really, 0.93274,
really, 0.93274,
got, 0.92563,
got, 0.92563,
This, 0.92325,
surprised, 0.91924,
surprised, 0.91924,
going, 0.91084,
going, 0.91084,
Received*Wed+24, 0.09277,
is+a, 0.90496
Subject: [vchkpw] [SPAM] great news
X-Broken-Reverse-DNS: no host name found for IP address 184.154.94.19
This is a multipart message in MIME format.
------=_NextPart_000_000F_015B7EEE.33F0AA32
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hi,
I've got great news for you, you're going to be really surprised, just take a look <http://kandardahi.working-in-pjs.com/e4nzoos>
Thomas Debergeyck
!DSPAM:57bd6d5042081126417401!
------=_NextPart_000_000F_015B7EEE.33F0AA32
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 8bit
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span lang=EN-US>Hi, <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>I've got great news for you, you're going to be really surprised, just take a look <a href="http://kandardahi.working-in-pjs.com/e4nzoos">http://kandardahi.working-in-pjs.com/e4nzoos</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Thomas Debergeyck<o:p></o:p></span></p></div>
!DSPAM:57bd6d5042081126417401!
</body></html>
------=_NextPart_000_000F_015B7EEE.33F0AA32--
------------=_57BD6D59.ECCCEF62--