From rpl2 at systella.fr  Wed May  1 02:39:30 2013
From: rpl2 at systella.fr (rpl2 at systella.fr)
Date: Tue, 30 Apr 2013 17:39:30 -0700
Subject: [RPL/2] ***** SPAM ***** Chef de projet
Message-ID: <1287830331.63BVTA4Y859921@mduzrq.ucvavukikw.org>

Spam detection software, running on the system "rayleigh.systella.fr", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Monsieurs! Je voudrais vous pr?senter une nouvelle g?n?ration
   de la soci?t?. Nous sommes une entreprise solide qui d?veloppe ses fronti?res.
   Maintenent nous recherchons le personnel fiable pour travailler dans une
  ?quipe sympathique avec des gens forts ? proximit?. [...] 

Content analysis details:   (18.0 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [177.229.13.226 listed in zen.spamhaus.org]
 3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
 0.6 RCVD_IN_SORBS_WEB      RBL: SORBS: sender is an abusable web server
                            [177.229.13.226 listed in dnsbl.sorbs.net]
 1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                            https://senderscore.org/blacklistlookup/
                           [177.229.13.226 listed in bl.score.senderscore.com]
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [177.229.13.226 listed in psbl.surriel.com]
 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT
                            [177.229.13.226 listed in bb.barracudacentral.org]
 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist
                            [URIs: googlejob-france.com]
 1.7 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: googlejob-france.com]
 0.3 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old Bread)
                            [URIs: googlejob-france.com]
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 1.8 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_BLACK_OVERLAP  T_URIBL_BLACK_OVERLAP

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

-------------- next part --------------
An embedded message was scrubbed...
From: <rpl2 at systella.fr>,
	<freevmsnn at systella.fr>,
	<joel.bertrand at systella.fr>,
	<rpl2-owner at systella.fr>
Subject: Chef de projet
Date: Tue, 30 Apr 2013 17:39:30 -0700
Size: 2903
URL: <http://www.systella.fr/pipermail/rpl2/attachments/20130430/9f0b2f97/attachment.mht>

From rpl2 at systella.fr  Wed May  1 12:24:38 2013
From: rpl2 at systella.fr (rpl2 at systella.fr)
Date: Wed, 1 May 2013 11:24:38 +0100
Subject: [RPL/2] ***** SPAM ***** Offres
Message-ID: <4749020583.QFMTZHSO501734@qvyfknnmmsbu.idacylfhp.ru>

Spam detection software, running on the system "rayleigh.systella.fr", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Monsieurs! Je voudrais vous pr?senter une nouvelle g?n?ration
   de la soci?t?. Nous sommes une entreprise solide qui d?veloppe ses fronti?res.
   Maintenent nous recherchons le personnel fiable pour travailler dans une
  ?quipe sympathique avec des gens forts ? proximit?. [...] 

Content analysis details:   (13.8 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                            [151.42.156.153 listed in zen.spamhaus.org]
 0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
 0.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [151.42.156.153 listed in dnsbl.sorbs.net]
 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT
                            [151.42.156.153 listed in bb.barracudacentral.org]
 0.0 T_URIBL_SEM_FRESH_15   Contains a domain registered less than 15 days
                            ago
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_SEM_FRESH_10   Contains a domain registered less than 10 days
                            ago
                            [URIs: googlejob-france.com]
 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist
                            [URIs: googlejob-france.com]
 1.7 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: googlejob-france.com]
 0.3 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old Bread)
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_SEM_FRESH      Contains a domain registered less than 5 days ago
                            [URIs: googlejob-france.com]
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 1.8 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: googlejob-france.com]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 0.4 RDNS_DYNAMIC           Delivered to internal network by host with
                            dynamic-looking rDNS
 0.0 T_URIBL_BLACK_OVERLAP  T_URIBL_BLACK_OVERLAP

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

-------------- next part --------------
An embedded message was scrubbed...
From: <rpl2 at systella.fr>,
	<freevmsnn at systella.fr>,
	<joel.bertrand at systella.fr>
Subject: Offres
Date: Wed, 1 May 2013 11:24:38 +0100
Size: 2725
URL: <http://www.systella.fr/pipermail/rpl2/attachments/20130501/8ad42cba/attachment-0001.mht>

From bertrand at systella.fr  Wed May  1 13:38:54 2013
From: bertrand at systella.fr (bertrand at systella.fr)
Date: Wed, 1 May 2013 08:38:54 -0300
Subject: [RPL/2] ***** SPAM ***** revenu supplementaire de EURO 30031 par
	mois
Message-ID: <5042626395.0JF40AD9713746@whjnfbmrd.jmigmpcxcrshx.ru>

Spam detection software, running on the system "rayleigh.systella.fr", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Monsieurs! Je voudrais vous pr?senter une nouvelle g?n?ration
   de la soci?t?. Nous sommes une entreprise solide qui d?veloppe ses fronti?res.
   Maintenent nous recherchons le personnel fiable pour travailler dans une
  ?quipe sympathique avec des gens forts ? proximit?. [...] 

Content analysis details:   (18.0 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                            [201.250.180.179 listed in zen.spamhaus.org]
 0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
 3.9 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
                            2)
 1.1 FH_HELO_EQ_D_D_D_D     Helo is d-d-d-d
 0.0 TVD_RCVD_IP            TVD_RCVD_IP
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist
                            [URIs: googlejob-france.com]
 0.3 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old Bread)
                            [URIs: googlejob-france.com]
 1.8 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: googlejob-france.com]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 0.0 T_RCVD_IN_SEMBLACK     RBL: Received from an IP listed in
                            bl.spameatingmonkey.net
                           [201.250.180.179 listed in bl.spameatingmonkey.net]
 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT
                           [201.250.180.179 listed in bb.barracudacentral.org]
 1.3 RDNS_NONE              Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

-------------- next part --------------
An embedded message was scrubbed...
From: <bertrand at systella.fr>,
	<rpl2 at systella.fr>,
	<freevmsnn at systella.fr>,
	<joel.bertrand at systella.fr>,
	<rpl2-owner at systella.fr>
Subject: revenu supplementaire de EURO 30031 par mois
Date: Wed, 1 May 2013 08:38:54 -0300
Size: 2979
URL: <http://www.systella.fr/pipermail/rpl2/attachments/20130501/4c8fdabd/attachment.mht>

From lmt1 at systella.fr  Wed May  1 14:45:19 2013
From: lmt1 at systella.fr (lmt1 at systella.fr)
Date: Wed, 1 May 2013 12:45:19 +0000
Subject: [RPL/2] ***** SPAM ***** revenu supplementaire de EURO 30228 par
	mois
Message-ID: <201305011245.r41Cj9mM029367@rayleigh.systella.fr>

Spam detection software, running on the system "rayleigh.systella.fr", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Monsieurs! Je voudrais vous pr?senter une nouvelle g?n?ration
   de la soci?t?. Nous sommes une entreprise solide qui d?veloppe ses fronti?res.
   Maintenent nous recherchons le personnel fiable pour travailler dans une
  ?quipe sympathique avec des gens forts ? proximit?. [...] 

Content analysis details:   (22.1 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [85.60.104.87 listed in dnsbl.sorbs.net]
 2.9 HELO_DYNAMIC_SPLIT_IP  Relay HELO'd using suspicious hostname (Split
                            IP)
 3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                            [85.60.104.87 listed in zen.spamhaus.org]
 0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                [Blocked - see <http://www.spamcop.net/bl.shtml?85.60.104.87>]
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 0.0 T_URIBL_SEM_FRESH_15   Contains a domain registered less than 15 days
                            ago
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_SEM_FRESH_10   Contains a domain registered less than 10 days
                            ago
                            [URIs: googlejob-france.com]
 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist
                            [URIs: googlejob-france.com]
 1.7 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: googlejob-france.com]
 0.3 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old Bread)
                            [URIs: googlejob-france.com]
 1.8 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_SEM_FRESH      Contains a domain registered less than 5 days ago
                            [URIs: googlejob-france.com]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                            https://senderscore.org/blacklistlookup/
                            [85.60.104.87 listed in bl.score.senderscore.com]
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [85.60.104.87 listed in psbl.surriel.com]
 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT
                            [85.60.104.87 listed in bb.barracudacentral.org]
 0.4 RDNS_DYNAMIC           Delivered to internal network by host with
                            dynamic-looking rDNS
 0.1 MISSING_MID            Missing Message-Id: header
 0.0 T_URIBL_BLACK_OVERLAP  T_URIBL_BLACK_OVERLAP

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

-------------- next part --------------
An embedded message was scrubbed...
From: <lmt1 at systella.fr>,
	<bertrand at systella.fr>,
	<rpl2 at systella.fr>,
	<freevmsnn at systella.fr>,
	<joel.bertrand at systella.fr>
Subject: revenu supplementaire de EURO 30228 par mois
Date: Wed, 1 May 2013 12:45:19 +0000
Size: 2602
URL: <http://www.systella.fr/pipermail/rpl2/attachments/20130501/41734ac7/attachment.mht>

From lmt1 at systella.fr  Wed May  1 15:46:25 2013
From: lmt1 at systella.fr (lmt1 at systella.fr)
Date: Wed, 1 May 2013 07:46:25 -0600
Subject: [RPL/2] ***** SPAM ***** Chef de projet
Message-ID: <1186232948.PUJJFSJR686883@yjmbwjulgi.jivotwe.com>

Spam detection software, running on the system "rayleigh.systella.fr", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Monsieurs! Je voudrais vous pr?senter une nouvelle g?n?ration
   de la soci?t?. Nous sommes une entreprise solide qui d?veloppe ses fronti?res.
   Maintenent nous recherchons le personnel fiable pour travailler dans une
  ?quipe sympathique avec des gens forts ? proximit?. [...] 

Content analysis details:   (15.3 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.6 RCVD_IN_SORBS_WEB      RBL: SORBS: sender is an abusable web server
                            [84.77.101.161 listed in dnsbl.sorbs.net]
 0.0 T_URIBL_SEM_FRESH_15   Contains a domain registered less than 15 days
                            ago
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_SEM_FRESH_10   Contains a domain registered less than 10 days
                            ago
                            [URIs: googlejob-france.com]
 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist
                            [URIs: googlejob-france.com]
 1.7 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: googlejob-france.com]
 0.3 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old Bread)
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_SEM_FRESH      Contains a domain registered less than 5 days ago
                            [URIs: googlejob-france.com]
 3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                            [84.77.101.161 listed in zen.spamhaus.org]
 0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 1.8 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: googlejob-france.com]
 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT
                            [84.77.101.161 listed in bb.barracudacentral.org]
 0.0 T_URIBL_BLACK_OVERLAP  T_URIBL_BLACK_OVERLAP
 1.3 RDNS_NONE              Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

-------------- next part --------------
An embedded message was scrubbed...
From: <lmt1 at systella.fr>,
	<bertrand at systella.fr>,
	<rpl2 at systella.fr>,
	<freevmsnn at systella.fr>,
	<joel.bertrand at systella.fr>
Subject: Chef de projet
Date: Wed, 1 May 2013 07:46:25 -0600
Size: 2829
URL: <http://www.systella.fr/pipermail/rpl2/attachments/20130501/d0088330/attachment.mht>

From bertrand at systella.fr  Wed May  1 21:58:36 2013
From: bertrand at systella.fr (bertrand at systella.fr)
Date: Wed, 1 May 2013 16:58:36 -0300
Subject: [RPL/2] ***** SPAM ***** revenu supplementaire de EURO 30860 par
	mois
Message-ID: <8503514883.L04BHQO2476691@negtrzf.kirbnbeg.net>

Spam detection software, running on the system "rayleigh.systella.fr", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Monsieurs! Je voudrais vous pr?senter une nouvelle g?n?ration
   de la soci?t?. Nous sommes une entreprise solide qui d?veloppe ses fronti?res.
   Maintenent nous recherchons le personnel fiable pour travailler dans une
  ?quipe sympathique avec des gens forts ? proximit?. [...] 

Content analysis details:   (7.4 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.9 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
                            2)
 1.1 FH_HELO_EQ_D_D_D_D     Helo is d-d-d-d
 0.0 TVD_RCVD_IP            TVD_RCVD_IP
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 1.3 RDNS_NONE              Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

-------------- next part --------------
An embedded message was scrubbed...
From: <bertrand at systella.fr>,
	<rpl2 at systella.fr>,
	<freevmsnn at systella.fr>,
	<joel.bertrand at systella.fr>,
	<rpl2-owner at systella.fr>
Subject: revenu supplementaire de EURO 30860 par mois
Date: Wed, 1 May 2013 16:58:36 -0300
Size: 2976
URL: <http://www.systella.fr/pipermail/rpl2/attachments/20130501/18fb3b41/attachment-0001.mht>

From bertrand at systella.fr  Thu May  2 06:46:41 2013
From: bertrand at systella.fr (bertrand at systella.fr)
Date: Thu, 2 May 2013 05:46:41 +0100
Subject: [RPL/2] ***** SPAM ***** Manager de Secteur
Message-ID: <201305020446.r424kV8L014718@rayleigh.systella.fr>

Spam detection software, running on the system "rayleigh.systella.fr", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Monsieurs! Je voudrais vous pr?senter une nouvelle g?n?ration
   de la soci?t?. Nous sommes une entreprise solide qui d?veloppe ses fronti?res.
   Maintenent nous recherchons le personnel fiable pour travailler dans une
  ?quipe sympathique avec des gens forts ? proximit?. [...] 

Content analysis details:   (23.4 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [87.219.106.224 listed in zen.spamhaus.org]
 3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
 0.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [87.219.106.224 listed in dnsbl.sorbs.net]
 0.3 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old Bread)
                            [URIs: googlejob-france.com]
 3.9 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
                            2)
 2.9 HELO_DYNAMIC_SPLIT_IP  Relay HELO'd using suspicious hostname (Split
                            IP)
 0.0 TVD_RCVD_IP            TVD_RCVD_IP
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 0.0 T_URIBL_SEM_FRESH_15   Contains a domain registered less than 15 days
                            ago
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_SEM_FRESH_10   Contains a domain registered less than 10 days
                            ago
                            [URIs: googlejob-france.com]
 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist
                            [URIs: googlejob-france.com]
 1.7 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_SEM_FRESH      Contains a domain registered less than 5 days ago
                            [URIs: googlejob-france.com]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [87.219.106.224 listed in psbl.surriel.com]
 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT
                            [87.219.106.224 listed in bb.barracudacentral.org]
 0.0 T_RCVD_IN_SEMBLACK     RBL: Received from an IP listed in
                            bl.spameatingmonkey.net
                            [87.219.106.224 listed in bl.spameatingmonkey.net]
 1.8 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: googlejob-france.com]
 0.4 RDNS_DYNAMIC           Delivered to internal network by host with
                            dynamic-looking rDNS
 0.1 MISSING_MID            Missing Message-Id: header
 0.0 T_URIBL_BLACK_OVERLAP  T_URIBL_BLACK_OVERLAP

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

-------------- next part --------------
An embedded message was scrubbed...
From: <bertrand at systella.fr>,
	<rpl2 at systella.fr>,
	<freevmsnn at systella.fr>,
	<joel.bertrand at systella.fr>,
	<rpl2-owner at systella.fr>
Subject: Manager de Secteur
Date: Thu, 2 May 2013 05:46:41 +0100
Size: 2616
URL: <http://www.systella.fr/pipermail/rpl2/attachments/20130502/45258c44/attachment.mht>

From lmt1 at systella.fr  Thu May  2 12:09:17 2013
From: lmt1 at systella.fr (lmt1 at systella.fr)
Date: Thu, 2 May 2013 11:09:17 +0100
Subject: [RPL/2] ***** SPAM ***** revenu supplementaire de EURO 30038 par
	mois
Message-ID: <201305021009.r42A97EK009025@rayleigh.systella.fr>

Spam detection software, running on the system "rayleigh.systella.fr", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Monsieurs! Je voudrais vous pr?senter une nouvelle g?n?ration
   de la soci?t?. Nous sommes une entreprise solide qui d?veloppe ses fronti?res.
   Maintenent nous recherchons le personnel fiable pour travailler dans une
  ?quipe sympathique avec des gens forts ? proximit?. [...] 

Content analysis details:   (20.7 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [87.217.155.93 listed in dnsbl.sorbs.net]
 3.9 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
                            2)
 2.9 HELO_DYNAMIC_SPLIT_IP  Relay HELO'd using suspicious hostname (Split
                            IP)
 0.0 TVD_RCVD_IP            TVD_RCVD_IP
 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT
                            [87.217.155.93 listed in bb.barracudacentral.org]
 0.0 T_RCVD_IN_SEMBLACK     RBL: Received from an IP listed in
                            bl.spameatingmonkey.net
                            [87.217.155.93 listed in bl.spameatingmonkey.net]
 0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [87.217.155.93 listed in zen.spamhaus.org]
 3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 0.0 T_URIBL_SEM_FRESH_15   Contains a domain registered less than 15 days
                            ago
                            [URIs: googlejob-france.com]
 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist
                            [URIs: googlejob-france.com]
 1.7 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: googlejob-france.com]
 0.3 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old Bread)
                            [URIs: googlejob-france.com]
 1.8 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: googlejob-france.com]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 0.4 RDNS_DYNAMIC           Delivered to internal network by host with
                            dynamic-looking rDNS
 0.1 MISSING_MID            Missing Message-Id: header
 0.0 T_URIBL_BLACK_OVERLAP  T_URIBL_BLACK_OVERLAP

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

-------------- next part --------------
An embedded message was scrubbed...
From: <lmt1 at systella.fr>,
	<bertrand at systella.fr>,
	<rpl2 at systella.fr>,
	<freevmsnn at systella.fr>,
	<joel.bertrand at systella.fr>
Subject: revenu supplementaire de EURO 30038 par mois
Date: Thu, 2 May 2013 11:09:17 +0100
Size: 2584
URL: <http://www.systella.fr/pipermail/rpl2/attachments/20130502/2fdbc609/attachment.mht>

From rpl2 at systella.fr  Thu May  2 13:16:55 2013
From: rpl2 at systella.fr (rpl2 at systella.fr)
Date: Thu, 2 May 2013 13:16:55 +0200
Subject: [RPL/2] ***** SPAM ***** Manager de Secteur
Message-ID: <1760414668.S46LI089147187@jirric.xrhpjysn.su>

Spam detection software, running on the system "rayleigh.systella.fr", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Monsieurs! Je voudrais vous pr?senter une nouvelle g?n?ration
   de la soci?t?. Nous sommes une entreprise solide qui d?veloppe ses fronti?res.
   Maintenent nous recherchons le personnel fiable pour travailler dans une
  ?quipe sympathique avec des gens forts ? proximit?. [...] 

Content analysis details:   (14.7 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [91.200.65.93 listed in zen.spamhaus.org]
 3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT
                            [91.200.65.93 listed in bb.barracudacentral.org]
 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist
                            [URIs: googlejob-france.com]
 1.7 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: googlejob-france.com]
 0.3 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old Bread)
                            [URIs: googlejob-france.com]
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 1.8 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_BLACK_OVERLAP  T_URIBL_BLACK_OVERLAP
 1.3 RDNS_NONE              Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

-------------- next part --------------
An embedded message was scrubbed...
From: <rpl2 at systella.fr>,
	<freevmsnn at systella.fr>,
	<joel.bertrand at systella.fr>,
	<rpl2-owner at systella.fr>,
	<recrutement at systella.fr>
Subject: Manager de Secteur
Date: Thu, 2 May 2013 13:16:55 +0200
Size: 2856
URL: <http://www.systella.fr/pipermail/rpl2/attachments/20130502/09b49133/attachment.mht>

From bertrand at systella.fr  Thu May  2 15:29:51 2013
From: bertrand at systella.fr (bertrand at systella.fr)
Date: Thu, 2 May 2013 10:29:51 -0300
Subject: [RPL/2] ***** SPAM ***** Offres
Message-ID: <8844172249.2J5BBH7D248881@sxqtwdw.nhflcfgpu.net>

Spam detection software, running on the system "rayleigh.systella.fr", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Monsieurs! Je voudrais vous pr?senter une nouvelle g?n?ration
   de la soci?t?. Nous sommes une entreprise solide qui d?veloppe ses fronti?res.
   Maintenent nous recherchons le personnel fiable pour travailler dans une
  ?quipe sympathique avec des gens forts ? proximit?. [...] 

Content analysis details:   (10.4 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist
                            [URIs: googlejob-france.com]
 0.3 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old Bread)
                            [URIs: googlejob-france.com]
 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT
                            [190.114.175.96 listed in bb.barracudacentral.org]
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 0.0 T_URIBL_SEM_FRESH_15   Contains a domain registered less than 15 days
                            ago
                            [URIs: googlejob-france.com]
 1.7 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: googlejob-france.com]
 1.8 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_BLACK_OVERLAP  T_URIBL_BLACK_OVERLAP
 1.3 RDNS_NONE              Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

-------------- next part --------------
An embedded message was scrubbed...
From: <bertrand at systella.fr>,
	<rpl2 at systella.fr>,
	<freevmsnn at systella.fr>,
	<joel.bertrand at systella.fr>
Subject: Offres
Date: Thu, 2 May 2013 10:29:51 -0300
Size: 2786
URL: <http://www.systella.fr/pipermail/rpl2/attachments/20130502/c4946fc6/attachment-0001.mht>

From bertrand at systella.fr  Thu May  2 16:33:10 2013
From: bertrand at systella.fr (bertrand at systella.fr)
Date: Thu, 2 May 2013 15:33:10 +0100
Subject: [RPL/2] ***** SPAM ***** Offres
Message-ID: <4426901097.EOVG0TSS978849@qwrnf.lnhwl.org>

Spam detection software, running on the system "rayleigh.systella.fr", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Monsieurs! Je voudrais vous pr?senter une nouvelle g?n?ration
   de la soci?t?. Nous sommes une entreprise solide qui d?veloppe ses fronti?res.
   Maintenent nous recherchons le personnel fiable pour travailler dans une
  ?quipe sympathique avec des gens forts ? proximit?. [...] 

Content analysis details:   (17.2 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.9 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
                            2)
 1.1 FH_HELO_EQ_D_D_D_D     Helo is d-d-d-d
 0.0 TVD_RCVD_IP            TVD_RCVD_IP
 0.6 HK_RANDOM_ENVFROM      Envelope sender username looks random
 0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [31.211.221.16 listed in zen.spamhaus.org]
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 0.0 T_URIBL_SEM_FRESH_15   Contains a domain registered less than 15 days
                            ago
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_SEM_FRESH_10   Contains a domain registered less than 10 days
                            ago
                            [URIs: googlejob-france.com]
 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist
                            [URIs: googlejob-france.com]
 1.7 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: googlejob-france.com]
 0.3 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old Bread)
                            [URIs: googlejob-france.com]
 1.8 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: googlejob-france.com]
 0.0 T_URIBL_SEM_FRESH      Contains a domain registered less than 5 days ago
                            [URIs: googlejob-france.com]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                            https://senderscore.org/blacklistlookup/
                            [31.211.221.16 listed in bl.score.senderscore.com]
 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT
                            [31.211.221.16 listed in bb.barracudacentral.org]
 0.4 RDNS_DYNAMIC           Delivered to internal network by host with
                            dynamic-looking rDNS
 0.0 T_URIBL_BLACK_OVERLAP  T_URIBL_BLACK_OVERLAP

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

-------------- next part --------------
An embedded message was scrubbed...
From: <bertrand at systella.fr>,
	<rpl2 at systella.fr>,
	<freevmsnn at systella.fr>,
	<joel.bertrand at systella.fr>,
	<rpl2-owner at systella.fr>
Subject: Offres
Date: Thu, 2 May 2013 15:33:10 +0100
Size: 2952
URL: <http://www.systella.fr/pipermail/rpl2/attachments/20130502/2226e3dc/attachment.mht>