Highscore geknackt: Spamassassin 69.6 Punkte

Von | 14. Januar 2014

Ganz ehrlich, so eine E-Mail ist mir noch nie untergekommen. Satte 69.6 Punkte! Damit schafft es diese Mail in meine persönliche Bestenliste :D

RE: ATM CARD PAYMENT FINAL DELIVERY NOTIFICATION.

Content preview: UNITED NATIONS COMPENSATION OFFICE BROADWAY, NEW YORK, UNITED
STATES OF AMERICA UNITED NATIONS 2011 SCAM VICTIMS COMPENSATIONS PAYMENTS.
DEAR FUND BENEFICIARY, […]

Content analysis details: (69.6 points, 5.0 required)

pts rule name description
—- ———————- ————————————————–
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.1 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(bankimoon273[at]yahoo.es)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<bankimoon215[at]yahoo.es>
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (bankimoon273[at]yahoo.es)
1.0 MISSING_HEADERS Missing To: header
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can’t send HTML in this format
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 LOTS_OF_MONEY Huge… sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.4 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.2 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
3.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FORGED_OUTLOOK_HTML Outlook can’t send HTML message only
2.5 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.6 FROM_MISSP_USER From misspaced, from „User“
1.5 FAKE_REPLY_C FAKE_REPLY_C
0.7 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.0 FROM_MISSP_PHISH Malformed, claims to be from financial organization
– possible phish
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.1 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
2.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.4 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
1.7 MONEY_ATM_CARD Lots of money on an ATM card
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.5 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.8 MONEY_FRAUD_5 Lots of money and many fraud phrases
4.3 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.4 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
1.8 FORM_FRAUD_3 Fill a form and several fraud phrases
1.5 COMPENSATION „Compensation“

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.