four-years-of-spam-mail/spam/1579343936.M371207P15642.sp...

285 lines
11 KiB
Plaintext

Received: from localhost by v22014122474822114.stilfilm.com
with SpamAssassin (version 3.3.2);
Wed, 22 Nov 2017 20:58:12 +0100
From: "ezFHA.com Offer" <ezFHA.comOffer@sidekicktv.bid>
To: <mail@dorianvasco.de>
Subject: *****SPAM***** ***SPAM*** Do you qualify for a home loan?
Date: Thu, 20 Jul 2017 07:37:25 -0700
Message-Id: <6266338414739166266249117622312294@8qwjfy.sidekicktv.bid>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
v22014122474822114.stilfilm.com
X-Spam-Flag: YES
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.6 required=5.0 tests=DKIM_ADSP_NXDOMAIN,
HTML_IMAGE_RATIO_02,HTML_MESSAGE,HTML_OFF_PAGE,NO_DNS_FOR_FROM,PYZOR_CHECK,
RCVD_IN_BRBL_LASTEXT,T_REMOTE_IMAGE,URIBL_ABUSE_SURBL,URIBL_BLOCKED
autolearn=no version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5A15D6D4.3E8DB515"
This is a multi-part message in MIME format.
------------=_5A15D6D4.3E8DB515
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Software zur Erkennung von "Spam" auf dem Rechner
v22014122474822114.stilfilm.com
hat die eingegangene E-mail als mögliche "Spam"-Nachricht identifiziert.
Die ursprüngliche Nachricht wurde an diesen Bericht angehängt, so dass
Sie sie anschauen können (falls es doch eine legitime E-Mail ist) oder
ähnliche unerwünschte Nachrichten in Zukunft markieren können.
Bei Fragen zu diesem Vorgang wenden Sie sich bitte an
the administrator of that system
Vorschau: THE SECRET'S OUT You could be paying MUCH LESS for your mortgage
installments! Refinance Today & You Could Save Hundreds of Dollars! CALCULATE
NEW PAYMENT ezFHA.com http://www.sidekicktv.bid/6266-17-2491-41473916/mail/tindex5.html
This is an Advertisement. If you wish to no longer receive emails from ezFHA,
click here [...]
Inhaltsanalyse im Detail: (8.6 Punkte, 5.0 benötigt)
Pkte Regelname Beschreibung
---- ---------------------- --------------------------------------------------
1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[209.141.43.169 listed in bb.barracudacentral.org]
0.4 NO_DNS_FOR_FROM DNS: Domain der Absendeadresse nicht im DNS
registriert (kein MX/A Eintrag)
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: ezfha.com]
1.9 URIBL_ABUSE_SURBL Enthält URL in ABUSE-Liste (www.surbl.org) -
changed from JP to ABUSE bug 7279
[URIs: sidekicktv.bid]
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS
0.8 HTML_IMAGE_RATIO_02 BODY: Verhältnis Bilderfläche zu Text ist klein
0.0 HTML_MESSAGE BODY: Nachricht enthält HTML
2.0 PYZOR_CHECK Gelistet im Pyzor-System (http://pyzor.sf.net/)
1.0 HTML_OFF_PAGE HTML element rendered well off the displayed page
0.0 T_REMOTE_IMAGE Message contains an external image
Die ursprüngliche Nachricht enthielt nicht ausschließlich Klartext
(plain text) und kann eventuell eine Gefahr für einige E-Mail-Programme
darstellen (falls sie z.B. einen Computervirus enthält).
Möchten Sie die Nachricht dennoch ansehen, ist es wahrscheinlich
sicherer, sie zuerst in einer Datei zu speichern und diese Datei danach
mit einem Texteditor zu öffnen.
------------=_5A15D6D4.3E8DB515
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-Path: <ezFHA.comOffer@sidekicktv.bid>
Delivered-To: mail@dorianvasco.de
Received: from localhost (localhost [127.0.0.1])
by v22014122474822114.stilfilm.com (Postfix) with ESMTP id 7F0F9D48F7
for <mail@dorianvasco.de>; Thu, 20 Jul 2017 16:37:30 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at v22014122474822114.yourvserver.net
X-Spam-Flag: YES
X-Spam-Score: 7.848
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.848 required=5.5 tests=[BAYES_99=3.5,
BAYES_999=0.2, HTML_IMAGE_RATIO_02=0.437, HTML_MESSAGE=0.001,
HTML_OFF_PAGE=1, RCVD_IN_BRBL_LASTEXT=1.449, T_REMOTE_IMAGE=0.01,
URIBL_ABUSE_SURBL=1.25, URIBL_BLOCKED=0.001] autolearn=no
Received: from v22014122474822114.stilfilm.com ([127.0.0.1])
by localhost (v22014122474822114.stilfilm.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id y2kzI-L5vuMj for <mail@dorianvasco.de>;
Thu, 20 Jul 2017 16:37:28 +0200 (CEST)
Received: from 0278eff6.sidekicktv.bid (gateway1.cttsweb.net [209.141.43.169])
by v22014122474822114.stilfilm.com (Postfix) with ESMTP id 05D87D48F6
for <mail@dorianvasco.de>; Thu, 20 Jul 2017 16:37:27 +0200 (CEST)
Received: from 0278eff6.8qwjfy.sidekicktv.bid ([127.0.0.1]:14266 helo=8qwjfy.sidekicktv.bid)
by 8qwjfy.sidekicktv.bid with ESMTP id 02RUIOHXOL78EFVHRSYHMSF6;
for <mail@dorianvasco.de>; Thu, 20 Jul 2017 07:37:25 -0700
Date: Thu, 20 Jul 2017 07:37:25 -0700
Message-ID: <6266338414739166266249117622312294@8qwjfy.sidekicktv.bid>
To: <mail@dorianvasco.de>
From: "ezFHA.com Offer" <ezFHA.comOffer@sidekicktv.bid>
Subject: ***SPAM*** Do you qualify for a home loan?
Content-Language: en-us
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: multipart/alternative;
boundary="----=Part.428.1251.1500561445"
------=Part.428.1251.1500561445
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
THE SECRET'S OUT
You could be paying MUCH LESS
for your mortgage installments!
Refinance Today & You Could
Save Hundreds of Dollars!
CALCULATE NEW PAYMENT
ezFHA.com
http://www.sidekicktv.bid/6266-17-2491-41473916/mail/tindex5.html
This is an Advertisement. If you wish to no longer receive emails from ezFHA, click here
2045 Barrington Ave. Los Angeles, CA, 90025
If you wish to no longer receive emails from our affiliate follow the instructions below.
http://www.sidekicktv.bid/6266-17-2491-41473916/mail/rindex6.html
------=Part.428.1251.1500561445
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="UTF-8"
<html>
<head>
<meta charset="UTF-8">
<title>
</title>
</head>
<body style="margin:0px" bgcolor="#FFFFFF"><!-- <div style="position:absolute;top:-1000px;left:-1000px;height:0px;width:0px;"><img src="http://www.sidekicktv.bid/timgQQWMLJOXY/ROIUTKMRU/6266/6223/12294/253/41473916/img.gif" style="border=0;" /></div> -->
<div style="position:absolute;top:-1000px;left:-1000px;height:0px;width:0px;"><a href="http://www.sidekicktv.bid/trDYTRKPCCJ/BLXVCQUQC/6266/6223/12294/253/41473916/index.htm" style="border=0;"><div></div></a></div>
<table width="100%" border="0" cellspacing="0" cellpadding="0" bgcolor="#FFFFFF" style="margin :0px 0px 0px 0px; padding:0px;">
<tbody>
<tr>
<td>
<table width="601" align="center" border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr height="80px" bgcolor="#0040A1">
<td height="80" align="center" style="font-family:Helvetica, Arial, sans-serif; font-size:42px; color:#ffffff;">
<strong>THE SECRET'S OUT</strong>
</td>
</tr>
<tr>
<td align="center">
<img border="0" src="http://www.sidekicktv.bid/6266-17-2491-41473916/i/img0172491338.gif" width="601" height="357" alt="" style="display:block;">
</td>
</tr>
<tr>
<td align="center">
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td align="center" valign="top"></td>
</tr>
<tr>
<td></td>
</tr>
<tr>
<td align="center" valign="top">
<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td align="center" valign="top">
<table width="100%" border="0" cellspacing="0" cellpadding="0" style="color:#ffffff;font-family:Arial,sans-serif;font-size:15px;line-height:24px;text-align:left">
<tbody>
<tr>
<td colspan="5" align="center" valign="top" bgcolor="#0040A1">
<h1 style="color: #ffffff; font-family: Arial, sans-serif; font-size: 27px; font-weight: normal; line-height: normal; margin: 0; padding: 0;">
<strong>You could be paying MUCH LESS<br>
for your mortgage installments!</strong><br>
<br>
</h1>
</td>
</tr>
<tr>
<td colspan="5" align="center" valign="top" bgcolor="#FFFFFF">
<span style="font-size:27px; color:#0040a1;"><strong><br></strong> Refinance Today & You Could<strong><br>
Save Hundreds of Dollars!<br>
<br></strong></span>
</td>
</tr>
<tr>
<td colspan="5" align="left" valign="top"></td>
</tr>
<tr>
<td colspan="5" align="left" valign="top" bgcolor="#FFFFFF">
<table width="414" height="69" border="0" align="center" cellpadding="0" cellspacing="0" style="border-collapse:separate;vertical-align:bottom;">
<tbody>
<tr>
<td bgcolor="#C20001" height="69" style="border-radius: 4px; -webkit-border-radius: 4px; -moz-border-radius: 4px;" width="414">
<div align="center">
<a href="http://www.sidekicktv.bid/6266-17-2491-41473916/mail/tindex1.html" style="text-decoration: none;"><span style="font-size: 24px; font-weight: plain; font-style: normal; text-decoration: none; line-height: 1.2; color: #ffffff;">CALCULATE NEW PAYMENT</span></a>
</div>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td colspan="5" align="center" valign="top" bgcolor="#FFFFFF">
<img border="0" src="http://www.sidekicktv.bid/6266-17-2491-41473916/i/img1172491338.gif" width="228" height="91" alt="ezFHA.com">
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<table width="592" border="0" cellspacing="0" cellpadding="0" align="center" style="font-family:Arial, sans-serif; font-size:12px; color:#424242;">
<tbody>
<tr>
<td align="center">
<p>
This is an Advertisement. If you wish to no longer receive emails from ezFHA, <a href="http://www.sidekicktv.bid/6266-17-2491-41473916/mail/rindex2.html">click here</a><br>
</p>
<p>
2045 Barrington Ave. Los Angeles, CA, 90025<br>
<br>
If you wish to no longer receive emails from our affiliate follow the instructions below.
</p>
</td>
</tr>
</tbody>
</table><br>
<br>
</td>
</tr>
</tbody>
</table><img height="0" width="0" src="http://www.sidekicktv.bid/6266-17-2491-41473916/i/img2172491338.gif" style="position:absolute;visibility:hidden;" border="0" alt=""><img height="0" width="0" src="http://www.sidekicktv.bid/6266-17-2491-41473916/i/img3172491338.gif" style="position:absolute;visibility:hidden;" border="0" alt="">
<br><br><br><br><br><br><br><br><br>
<center>
<a href="http://www.sidekicktv.bid/6266-17-2491-41473916/mail/u.html"><img src="http://www.sidekicktv.bid/6266-17-2491-41473916/i/img4172491338.jpg"/></a>
</center>
</body>
</html>
------=Part.428.1251.1500561445--
------------=_5A15D6D4.3E8DB515--