Return-path: <postmaster@transocean.com>
Envelope-to: postmaster@transocean.com
Delivery-date: Sun, 20 Dec 2015 08:06:49 -0800
Received: from [202.80.216.20] (port=59041)
	by vps.transocean.com with esmtp (Exim 4.86)
	(envelope-from <postmaster@transocean.com>)
	id 1aAgVS-0001Ad-Qn
	for postmaster@transocean.com; Sun, 20 Dec 2015 08:06:49 -0800
Message-ID: <56773457.1090907@transocean.com>
Date: Sun, 20 Dec 2015 29:05:59 +0600
From: <postmaster@transocean.com>
User-Agent: Mozilla/5.0 (Windows NT 6.0; WOW64; rv:11.0) Gecko/20120327 Thunderbird/11.0.1
MIME-Version: 1.0
To: <postmaster@transocean.com>
Subject: want hot night?
Content-Type: multipart/alternative;
 boundary="------------060204070304000805000800"
X-Spam-Status: No, score=-72.8
X-Spam-Score: -727
X-Spam-Bar: ---------------------------------------------------
X-Ham-Report: Spam detection software, running on the system "vps.transocean.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  i want a new f*ck friend right now. let's talk and meetup
   for long and hot nights! my username is Danna18 u can see my naughty pics:
    right now i want a new f*ck friend right now. let's talk and meetup for long
    and hot nights! [...] 
 
 Content analysis details:   (-72.8 points, 3.5 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  5.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                             [URIs: nguyenvanlong.com]
 -100 USER_IN_WHITELIST      From: address is in the user's white-list
  1.1 INVALID_DATE           Invalid Date: header (not RFC 2822)
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.4964]
  1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                             above 50%
                             [cf: 100]
  0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  1.9 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
                             [URIs: nguyenvanlong.com]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the DBL blocklist
                             [URIs: nguyenvanlong.com]
  0.1 URIBL_SBL_A            Contains URL's A record listed in the SBL blocklist
                             [URIs: nguyenvanlong.com]
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  5.0 KAM_VERY_BLACK_DBL     Email that hits both URIBL Black and Spamhaus DBL
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  2.0 URI_WP_HACKED          URI for compromised WordPress site, possible malware
X-Spam-Flag: NO

This is a multi-part message in MIME format.
--------------060204070304000805000800
Content-Type: text/plain; charset=CP-850; format=flowed
Content-Transfer-Encoding: quoted-printable

i want a new f*ck friend right now.
let's talk and meetup for long and hot nights!

my username is Danna18
u can see my naughty pics:=20
right now
--------------060204070304000805000800
Content-Type: text/html; charset="CP-850"
Content-Transfer-Encoding: quoted-printable

<html>
  <head>

    <meta http-equiv=3D"content-type" content=3D"text/html; =
charset=3DCP-850">
  </head>
  <body bgcolor=3D"#FFFFFF" text=3D"#000000">
    i want a new f*ck friend right now.<br>
let's talk and meetup for long and hot nights!<br>
<br>
my username is Danna18<br>
u can see my naughty pics: <a =
href=3D"http://nguyenvanlong.com/wp-content/languages/themes/index.html">=
<b>right now</b></a> <--
  </body>
</html>

--------------060204070304000805000800--


