HOME

Mini Shell 1.0
DIR:/home/dna1981/mail/cur/
Current File : /home/dna1981/mail/cur/1585124746.M705475P24997.dna.dna-1981.com,S=5836,W=5947:2,
Envelope-to: email@thelogomasters.com
Delivery-date: Wed, 25 Mar 2020 02:25:46 -0600
Date: Tue, 24 Mar 2020 01:03:18 +0800
To: "email@thelogomasters.com" <email@thelogomasters.com>
From: Face Masks & Body Thermometer for Virus <hen6295851818@163.com>
Reply-to: Face Masks & Body Thermometer for Virus <hen6295851818@163.com>
Message-ID: <faf48c4f2c15186b5ff26d5d349dc0e1@10.255.20.49>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
 
 Content preview:  Untitled document Dear Sir & Madam, Good day!!! 
 
 Content analysis details:   (22.1 points, 4.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: 117.51.148.158]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 0.9966]
  2.0 DEAR_SOMETHING         BODY: Contains 'Dear (something)'
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit (hen6295851818[at]163.com)
  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
                             in digit
                             (bounce-1472-10486052-1472-248[at]yahoo.com)
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             (bounce-1472-10486052-1472-248[at]yahoo.com)
  1.3 DATE_IN_PAST_24_48     Date: is 24 to 48 hours before Received: date
  1.2 NUMERIC_HTTP_ADDR      URI: Uses a numeric IP address in URL
  0.0 NORMAL_HTTP_TO_IP      URI: URI host has a public dotted-decimal IPv4
                              address
  1.7 HTML_IMAGE_ONLY_08     BODY: HTML: images with 400-800 bytes of
                             words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: 117.51.148.158]
  0.1 URIBL_CSS              Contains an URL's NS IP listed in the Spamhaus CSS
                             blocklist
                             [URIs: 117.51.148.158]
  3.3 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
                             [117.51.148.158 listed in zen.spamhaus.org]
  0.0 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
                             EnvelopeFrom freemail headers are
                             different
  2.0 KAM_BADIPHTTP          Due to the Storm Bot Network, IPs in emails is bad
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  2.5 LIST_PARTIAL_SHORT_MSG Incomplete mailing list headers + short
                             message
  0.0 T_REMOTE_IMAGE         Message contains an external image
  0.0 SPOOFED_FREEMAIL       No description available.
X-Spam-Flag: YES
Subject:    Face Masks & Body Thermometer for Virus

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.=
w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
<title>Untitled document</title>
</head>
<body>
<p><span style=3D"font-size: small;">Dear Sir &amp; Madam, <br /><br />Good=
 day!!! <br /><br />Body Thermometer &amp; Face Masks as below:<br /><br />=
If you're interested in our product, please email me directly: hen629585181=
8@163.com<br /><br />Thanks &amp; Best regards <br />Dick</span></p>
<p><span style=3D"font-size: small;"><img src=3D"http://117.51.148.158/oem/=
image_viewer.php?p=3DTWVkaWFJRD0xfHx8fFVzZXJJRD0x" /><br /></span></p>

<img src=3D"http://117.51.148.158/oem/to.php?p=3Drz/rz/rs/14fm/rz/rs" width=
=3D"5" height=3D"2" alt=3D".">

</body>
</html>