| Current Path : /proc/thread-self/root/home/ift/mails/15/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/15/1479890400.zrspam.151771_2016_11_23 |
From Raymond_Marylou@pacificbayresort.com Wed Nov 23 09:40:00 2016
Return-Path: <Raymond_Marylou@pacificbayresort.com>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 0B0A337525114; Wed, 23 Nov 2016 09:39:59 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Wed, 23 Nov 2016 09:39:59 +0100
From: "Mark Brooks" <Raymond_Marylou@pacificbayresort.com>
To: <Info@ift-informatik.de>
Subject: *****SPAM***** Online Ordering meds
Date: Wed, 23 Nov 2016 04:33:13 -0400
Message-Id: <037461e7sxp7$bx1c0t34$7331d9o2@RD873270032404>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **********************************
X-Spam-Status: Yes, score=34.8 required=5.0 tests=BAYES_99,BODY_ENHANCEMENT,
CK_HELO_GENERIC,DRUGS_ERECTILE,FR_3TAG_3TAG,HELO_DYNAMIC_HCC,
HELO_DYNAMIC_IPADDR,HTML_MESSAGE,IMPOTENCE,MIME_BASE64_TEXT,MIME_HTML_ONLY,
NULL_IN_BODY,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,RCVD_IN_RP_RNBL,RCVD_IN_XBL,TO_MALFORMED,
URIBL_BLOCKED,URIBL_DBL_SPAM,URIBL_JP_SURBL autolearn=spam autolearn_force=no
version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_583555DF.93FC4C9A"
This is a multi-part message in MIME format.
------------=_583555DF.93FC4C9A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Two high quality PRODUCTS that can help your love life! Cialis
vs Viagra. What is the BEST? Cialis may rival Viagra as a treatment for erectile
dysfunction. The launch of Viagra, the world's first treatment for impotency,
was an instant success. Now, Eli Lilly and ICOS Corporation (Lilly Icos)
have tapped into the vast demand for Viagra with a new drug called Cialis,
Viagra's first direct competitor. [...]
Content analysis details: (34.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: kolplast.pl]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: kolplast.pl]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: justleasing.pl]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?216.36.21.155>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[216.36.21.155 listed in psbl.surriel.com]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[216.36.21.155 listed in zen.spamhaus.org]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.4 IMPOTENCE BODY: Impotence cure
0.0 BODY_ENHANCEMENT BODY: Information on growing body parts
2.1 TO_MALFORMED To: has a malformed address
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[216.36.21.155 listed in bl.score.senderscore.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[216.36.21.155 listed in bl.mailspike.net]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[216.36.21.155 listed in bb.barracudacentral.org]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 FR_3TAG_3TAG RAW: Looks like 3 <e> small tags.
1.7 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
1.6 NULL_IN_BODY FULL: Message has NUL (ASCII 0) byte in message
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.0 DRUGS_ERECTILE Refers to an erectile drug
2.0 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
2.8 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_583555DF.93FC4C9A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from static-216-36-21-155.cpe.metrocast.net (static-216-36-21-155.cpe.metrocast.net [216.36.21.155])
by ift-informatik.de (Postfix) with SMTP id EF82A375227E9
for <info@ift-informatik.de>; Wed, 23 Nov 2016 09:39:49 +0100 (CET)
X-Message-Info: 3zPQyT48BqY4L6QYjADdbecwfGuHn41U
Received: from potentiometer.paceendo.com ([206.64.160.24]) by kh4-u85.paceendo.com with Microsoft SMTPSVC(5.0.2195.6824);
Wed, 23 Nov 2016 01:34:13 -0700
Received: from cadre.paceendo.com (footprint.paceendo.com [96.64.28.163])
by allegro.paceendo.com (8.12.10/8.12.9) with ESMTP id j2DBIwQX831433
for <info@ift-informatik.de>; Wed, 23 Nov 2016 13:36:13 +0500 (EST)
(envelope-from Raymond_Marylou@pacificbayresort.com)
Received: from CK569128330911 (modemcable587.113-073-37.gr.paceendo.com [79.226.146.91])
(authenticated bits=0)
by canterbury.paceendo.com (8.12.10/8.12.9) with ESMTP id o4MFB0xw965423
for <info@ift-informatik.de>; Wed, 23 Nov 2016 11:37:13 +0300 (EST)
(envelope-from Raymond_Marylou@pacificbayresort.com)
Message-ID: <037461e7sxp7$bx1c0t34$7331d9o2@RD873270032404>
From: "Mark Brooks" <Raymond_Marylou@pacificbayresort.com>
To: <Info>
Subject: Online Ordering meds
Date: Wed, 23 Nov 2016 04:33:13 -0400
MIME-Version: 1.0
Content-Type: text/html;
Content-Transfer-Encoding: base64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 D
------------=_583555DF.93FC4C9A--