Spam detection software, running on the system "chamaeleon.lug-owl.de", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Kontovalidierung – Freischaltung Ihres Guthabens Wichtiger Hinweis – Kontosperrung / Guthabenfreigabe Content analysis details: (12.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.1 MISSING_MID Missing Message-Id: header 1.4 MISSING_DATE Missing Date: header 0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [34.73.130.105 listed in zen.spamhaus.org] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [34.73.130.105 listed in zen.spamhaus.org] 1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URI: diliptic3e.serveftp.com] 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL blocklist [URI: href.li/192.0.78.27] [URI: href.li/192.0.78.26] 0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [34.73.130.105 listed in wl.mailspike.net] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 4.0 DOS_BODY_HIGH_NO_MID High bit body and no message ID header 0.4 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps 0.0 T_REMOTE_IMAGE Message contains an external image 0.2 HELO_MISC_IP Looking for more Dynamic IP Relays 0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.