
| Current Path : /home/ift/mails/17/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //home/ift/mails/17/1482297328.zrspam.170077_2016_12_21 |
From bizsurport@gmail.com Wed Dec 21 06:15:28 2016
Return-Path: <bizsurport@gmail.com>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 4C83237525D81; Wed, 21 Dec 2016 06:15:28 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Wed, 21 Dec 2016 06:15:28 +0100
From: "James N."<bizsurport@gmail.com>
To: jjamesns@gmail.com
Subject: *****SPAM***** Real Offer
Date: Wed, 21 Dec 2016 00:15:38 -0500
Message-Id: <E1cJZEr-0007Yi-M7@srv01.adrenalina.net.br>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *************************************
X-Spam-Status: Yes, score=37.4 required=5.0 tests=AXB_XMAILER_MIMEOLE_OL_024C2,
BAYES_50,DKIM_ADSP_CUSTOM_MED,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,
FORGED_OUTLOOK_TAGS,FREEMAIL_FROM,FREEMAIL_REPLYTO,FROM_MISSP_MSFT,
FROM_MISSP_REPLYTO,FSL_CTYPE_WIN1251,FSL_MISSP_REPLYTO,FSL_NEW_HELO_USER,
HTML_MESSAGE,MIME_HTML_ONLY,MSOE_MID_WRONG_CASE,NML_ADSP_CUSTOM_MED,
NSL_RCVD_HELO_USER,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,
RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L4,RCVD_IN_PSBL,RCVD_IN_SORBS_WEB,
TO_NO_BRKTS_FROM_MSSP,TO_NO_BRKTS_MSFT,T_FROM_MISSP_DKIM autolearn=no
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_585A0FF0.3629FD38"
This is a multi-part message in MIME format.
------------=_585A0FF0.3629FD38
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good Afternoon Sir, Kindly forgive my manners of approach
to communicate with you through this medium, I am a financial Consultant based
in Spain and my name is James Nicholls. I want to introduce to you a politician
with a substantial amount of money as investment capital searching for a
good and reliable person to engage in a partnership venture with, ranging
from any small scale investments to large scale investments. This investment
could be in any of the following sectors: Oil and Gas, Energy, Banking, Real
Estate, Resort Business, Tourism, Mining, Transportation, Health Sector,
Shipping, Agriculture Industry, and any other business that may be of interest.
Your responsibility is to manage and supervise the project and to have full
control over the investment. My client is willing to offer you a favorable
percentage of the business based on your agreement with her. [...]
Content analysis details: (37.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.4 NSL_RCVD_HELO_USER Received from HELO User
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?179.97.95.182>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[179.97.95.182 listed in psbl.surriel.com]
0.0 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)
[179.97.95.182 listed in bl.mailspike.net]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[179.97.95.182 listed in bb.barracudacentral.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[71.245.63.44 listed in dnsbl.sorbs.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(bizsurport[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.5 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
2.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.6 MSOE_MID_WRONG_CASE No description available.
2.2 AXB_XMAILER_MIMEOLE_OL_024C2 No description available.
0.8 FSL_NEW_HELO_USER No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_585A0FF0.3629FD38
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from srv01.adrenalina.net.br (ns1.adrenalina.net.br [179.97.95.182])
by ift-informatik.de (Postfix) with ESMTPS id 3EC8037525D80
for <christian.gabriel@shortnote.de>; Wed, 21 Dec 2016 06:15:26 +0100 (CET)
Received: from static-71-245-63-44.sctnpa.east.verizon.net ([71.245.63.44] helo=User)
by srv01.adrenalina.net.br with esmtpa (Exim 4.84_2)
(envelope-from <bizsurport@gmail.com>)
id 1cJZEr-0007Yi-M7; Wed, 21 Dec 2016 03:14:54 -0200
Reply-To: <jjamesns@gmail.com>
From: "James N."<bizsurport@gmail.com>
To: jjamesns@gmail.com
Subject: Real Offer
Date: Wed, 21 Dec 2016 00:15:38 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <E1cJZEr-0007Yi-M7@srv01.adrenalina.net.br>
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
Good Afternoon Sir,</DIV>
<DIV>
</DIV>
<DIV>
Kindly forgive my manners of approach to communicate with you through this medium, I am a financial Consultant based in Spain and my name is James Nicholls. I want to introduce to you a politician with a substantial amount of money as investment capital searching for a good and reliable person to engage in a partnership venture with, ranging from any small scale investments to large scale investments. This investment could be in any of the following sectors: Oil and Gas, Energy, Banking, Real Estate, Resort Business, Tourism, Mining, Transportation, Health Sector, Shipping, Agriculture Industry, and any other business that may be of interest. Your responsibility is to manage and supervise the project and to have full control over the investment. My client is willing to offer you a favorable percentage of the business based on your agreement with her.</DIV>
<DIV>
</DIV>
<DIV>
I will be able to work with you and assist you in developing this project. If you think you have a solid background and the drive and enthusiasm of making a good profit in any of the mentioned business sectors or any other business opportunities in your country that may be of interest or If you require funding or loan for any business or personal purposes, please do not hesitate to inform me, as my client will be able to assist. If for any reason you are not in the position to assist in this business request, I would appreciate it if you can put me in touch with anyone that you think that may be interested.</DIV>
<DIV>
</DIV>
<DIV>
I look forward to your prompt response. Thank you.</DIV>
<DIV>
</DIV>
<DIV>
Best Wishes,</DIV>
<DIV>
James Nicholls</DIV>
</FONT>
</BODY></HTML>
------------=_585A0FF0.3629FD38--