From: Недобросовестные контрагенты <jeeringl@reggiane.com>

Date: Thu, 17 Nov 2011 15:16:02 +0100

Subject: ****SPAM**** Защита налогоплательщика. Недобросовестные

Spam detection software, running on the system "s15340946.onlinehome-server.info", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
postmaster for details.

Content preview: 28 мНЪАПЪ 2011 Ц. рЕЛЮ: опхгмюйх меднапнянбеярмшу онярюбыхйнб.
яонянаш опнрхбндеиярбхъ опхдхпйюл мюкнцнбни х ямхфемхе мюкнцнбни мюцпсгйх
он мдя 8 лНЯЙ. ЙНД: 445г9_68 в45вн95 [...]

Content analysis details: (10.1 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
4.4 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.5 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
1.1 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
[178.223.170.224 listed in dnsbl.sorbs.net]
1.6 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
0.5 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[178.223.170.224 listed in zen.spamhaus.org]
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.