------------=_4DC97F50.444E8CB4
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

X-Virus-Flag: no
scandesc returned: 694561123
Received: from [59.120.59.2] (helo=forcecon.com)
     by mx46.web.de with esmtp (WEB.DE 4.110 #2)
     id 1QJr9L-0002VC-00
     for xxxxx@web.de; Tue, 10 May 2011 19:55:11 +0200
Received: from localhost (localhost.localdomain [127.0.0.1])
     by forcecon.com (Postfix) with SMTP id 9DEC52E5D96;
     Wed, 11 May 2011 00:27:47 +0800 (CST)
Received: from User (unknown [213.229.96.90])
     by forcecon.com (Postfix) with ESMTP id 5E0DC2E5D31;
     Wed, 11 May 2011 00:26:45 +0800 (CST)
Reply-To: <danielwang1@126.com>
From: "ICBC"<admin@icbc.com>
Subject: URGENT RESPONSE  
Date: Wed, 11 May 2011 00:27:22 +0800
MIME-Version: 1.0
Content-Type: text/plain;
     charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20110510162646.5E0DC2E5D31@forcecon.com>
To: undisclosed-recipients:;
Return-Path: admin@icbc.com
X-Virus-Status: No
X-Virus-Checker: Scanned by KlamAV 0.46 on xxxxx (no viruses);
     Tue, 10 May 2011 20:09:14 +0200
X-UID:

Inhaltsanalyse im Detail:   (25.3 Punkte, 5.0 benötigt)

Pkte Regelname              Beschreibung
---- ---------------------- --------------------------------------------------
1.3 TVD_PH_SUBJ_URGENT     TVD_PH_SUBJ_URGENT
0.0 T_FROM_MISSPACED       From: missing whitespace
0.5 SUBJ_ALL_CAPS          Betreff enthält nur Großbuchstaben
1.0 LOTTO_AGENT            BODY: Claims Agent
2.6 US_DOLLARS_3           BODY: Erwähnt Millonen von Dollar
3.8 FILL_THIS_FORM_LONG    BODY: Fill in a form with personal information
1.8 URG_BIZ                BODY: Dringende Geschäfte
0.0 T_FILL_THIS_FORM       Fill in a form with personal information
2.3 ADVANCE_FEE_2          Appears to be advance fee fraud (Nigerian 419)
0.0 T_LOTS_OF_MONEY        Huge... sums of money
2.7 ADVANCE_FEE_3          Appears to be advance fee fraud (Nigerian 419)
1.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
2.4 RDNS_NONE              Delivered to internal network by a host with no rDNS
1.0 MSOE_MID_WRONG_CASE    MSOE_MID_WRONG_CASE
1.0 MONEY_FROM_MISSP       Lots of money and misspaced From
4.0 FORGED_MUA_OUTLOOK     E-Mail täuscht E-Mail-Software Outlook vor