Page MenuHomePhabricator

euc-kr mangle 1
ActivePublic

Authored by revi on Apr 2 2020, 00:18.
Spam detection software, running on the system "prod1",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: UNIQLO À¯´ÏŬ·Î ¿Â¶óÀνºÅä¾î ±¤°í¼º
Á¤º¸ ¼ö½Åµ¿ÀÇ Ã³¸® °á°ú ¾È³» ¾È³çÇϼ¼¿ä.
À¯´ÏŬ·Î ¿Â¶óÀνºÅä¾î ÀÔ´Ï´Ù. Ç×»ó Àú [...]
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: uniqlo.com]
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel
letters
2.1 FROM_ILLEGAL_CHARS From: has too many raw illegal characters
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
1.1 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters
0.1 SUBJECT_NEEDS_ENCODING Subject is encoded but does not specify
the encoding
0.0 T_REMOTE_IMAGE Message contains an external image
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5E849812.443D79C2
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from [172.17.0.5] (unknown [172.17.0.5]) by mx1.simplelogin.co (Postfix) with ESMTP id 3C57B623CB for <[REDACTED]>; Wed,
1 Apr 2020 13:33:06 +0000 (UTC)
Received: by mx1.simplelogin.co (Postfix, from userid 1001) id A30C96241C; Wed,
1 Apr 2020 13:33:05 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on prod1
X-Spam-Level: **
X-Spam-Status: No, score=2.3 required=5.0 tests=FROM_EXCESS_BASE64, HTML_MESSAGE,MIME_HTML_ONLY,MISSING_MID,SPF_SOFTFAIL,T_REMOTE_IMAGE, URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.2
Received-SPF: Softfail (mailfrom) identity=mailfrom; client-ip=211.233.44.105; helo=aeml1.lotte.com; envelope-from=uniqlocs@uniqlo.co.kr; receiver=<UNKNOWN>
Received: from aeml1.lotte.com (aeml1.lotte.com [211.233.44.105]) by mx1.simplelogin.co (Postfix) with SMTP id 4B2E4623CB for <uniqlo-kr@[domain]>; Wed,
1 Apr 2020 13:33:02 +0000 (UTC)
Date: Wed, 1 Apr 2020 22:33:03 +0900
Subject: [유니클로 온라인 스토어] 마케팅 정보 수신동의 처리결과 안내 드립니다.
To: <uniqlo-kr@[domain]>
MIME-Version: 1.0
Content-transfer-encoding: BASE64
X-Mailer: Netpion Service Server v3.0.0
X-NetpionMsgID: 1585747983521.52925.642.72499664.1
Content-type: text/html; charset=euc-kr
Message-Id: <20200401133305.A30C96241C@mx1.simplelogin.co>
X-SimpleLogin-Type: Forward
From: "유니클로 온라인 스토어 - uniqlocs at uniqlo.co.kr" <reply+[REDACTED]@simplelogin.co>
List-Unsubscribe: <mailto:unsubsribe@simplelogin.co?subject=[REDACTED]=>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=simplelogin.co;
i=@simplelogin.co; q=dns/txt; s=dkim; t=1585747986; h=from : to;
bh=5kaUTCaXdXM9kcgDBkuOM+7j3TAAN+7oZEsxViBqc8s=;
b=tMZP4Ts45m+gZM61EpqGDhAjeqRvYZ9ek18B2IVI64NsDqA4xK/Xf32bPMvzF63iTsyr9
ShRZV3a7kRVhwikm27zPM5aGRgbvNdiRNDg2fGOItW3/vP3dtW/JwuYt9zoMeMrf7zdwwRh
wt03XAKoT2VQHb+4GGRT2i5CqvTADOo=

Event Timeline

revi created this paste.Apr 2 2020, 00:18