| Current Path : /proc/thread-self/root/home/ift/mails/28/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/28/1515475045.zrspam.283827_2018_01_09 |
From hicrtgew@11400inc.com Tue Jan 9 06:17:25 2018
Return-Path: <hicrtgew@11400inc.com>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 5C53D1C8817C4; Tue, 9 Jan 2018 06:17:25 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Tue, 09 Jan 2018 06:17:25 +0100
From: "Frank" <hicrtgew@11400inc.com>
To: "Frank" <info@ift-informatik.de>
Subject: *****SPAM***** Best prices on great pilules!
Date: Tue, 09 Jan 2018 05:17:22 -0800
Message-Id: <68G7D_WmBZQs6JZ10mw4aYIEiTCAEcZhPQ@q3y.11400inc.com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ************************
X-Spam-Status: Yes, score=24.9 required=5.0 tests=BAYES_50,
DATE_IN_FUTURE_06_12,FR_3TAG_3TAG,HTML_FONT_LOW_CONTRAST,HTML_IMAGE_ONLY_20,
HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,
RCVD_IN_RP_RNBL,RCVD_IN_SORBS_WEB,RDNS_NONE,SPF_HELO_FAIL,T_REMOTE_IMAGE,
URIBL_BLOCKED,URIBL_DBL_SPAM,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A
autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5A545065.9E3C96A6"
This is a multi-part message in MIME format.
------------=_5A545065.9E3C96A6
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Show must go on! Your penis deserves a better life! Make a
great gift for it - buy our premium medicine! As a token of our appreciation,
please try these products! [...]
Content analysis details: (24.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: curingherbseshop.su]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: curingherbseshop.su]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?87.190.11.94>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[87.190.11.94 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[87.190.11.94 listed in psbl.surriel.com]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: curingherbseshop.su]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: curingherbseshop.su]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[87.190.11.94 listed in bl.score.senderscore.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[87.190.11.94 listed in bl.mailspike.net]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: curingherbseshop.su]
1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=mail1.therestaurantstore.com;ip=87.190.11.94;r=h2486555.stratoserver.net]
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
1.5 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 FR_3TAG_3TAG RAW: Looks like 3 <e> small tags.
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[87.190.11.94 listed in bb.barracudacentral.org]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.1 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image
0.0 T_REMOTE_IMAGE Message contains an external image
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5A545065.9E3C96A6
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from mail1.therestaurantstore.com (unknown [87.190.11.94])
by ift-informatik.de (Postfix) with ESMTP id 841611C8817B6
for <info@ift-informatik.de>; Tue, 9 Jan 2018 06:17:23 +0100 (CET)
Received: from apache by 04F22_3-3M05RIcls.11400inc.com with local (Exim 4.84_2)
(envelope-from <hicrtgew@11400inc.com>)
id kh654w-VmzVa4-0y
for info@ift-informatik.de; Tue, 09 Jan 2018 05:17:22 -0800
To: "Frank" <info@ift-informatik.de>
Subject: Best prices on great pilules!
X-PHP-Originating-Script: 502:PHPMailer.php
Date: Tue, 09 Jan 2018 05:17:22 -0800
From: "Frank" <hicrtgew@11400inc.com>
Message-ID: <68G7D_WmBZQs6JZ10mw4aYIEiTCAEcZhPQ@q3y.11400inc.com>
X-Priority: 3
X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
PCFkb2N0eXBlIGh0bWw+DQo8aHRtbD4NCjxoZWFkPg0KPG1ldGEgY2hhcnNldD0idXRmLTgiPg0K
PC9oZWFkPg0KPGJvZHk+DQo8dGFibGUgd2lkdGg9IjYwMCIgYm9yZGVyPSIwIiBhbGlnbj0iY2Vu
dGVyIiBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsOyBjb2xvcjogIzY2NjsiPg0KPHRib2R5Pg0K
PHRyPg0KPHRkIGFsaWduPSJjZW50ZXIiID48cD48YSBocmVmPSJodHRwOi8vY3VyaW5naGVyYnNl
c2hvcC5zdSIgPjxpbWcgc3JjPSJodHRwOi8vYWJsb2FkLmRlL2ltZy83ZHNvcC5naWYiPjwvYT48
b2w+PHA+PC9wPjwvb2w+PC9wPjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRkIGhlaWdodD0iMTE0IiBh
bGlnbj0iY2VudGVyIj4NCjx0YWJsZSB3aWR0aD0iNjAwIiBoZWlnaHQ9IjEwNSIgYm9yZGVyPSIw
Ij4NCjx0Ym9keT4NCjx0cj4NCjx0ZCBoZWlnaHQ9IjEwMSIgYWxpZ249ImNlbnRlciIgYmdjb2xv
cj0iIzMyQTZFNyI+PHAgc3R5bGU9ImZvbnQtc2l6ZTogMThweDsgY29sb3I6ICNmZmY7Ij5TaG93
IG11c3QgZ28gb24hIDwvcD48b2w+PHA+PC9wPjwvb2w+PC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0K
PC90YWJsZT4NCjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRkIGhlaWdodD0iMjEyIj48cD5Zb3VyIHBl
bmlzIGRlc2VydmVzIGEgYmV0dGVyIGxpZmUhIE1ha2UgYSBncmVhdCBnaWZ0IGZvciBpdCAtIGJ1
eSBvdXIgcHJlbWl1bSBtZWRpY2luZSEgPC9wPjxuYXY+PC9uYXY+DQo8cD5BcyBhIHRva2VuIG9m
IG91ciBhcHByZWNpYXRpb24sIHBsZWFzZSB0cnkgdGhlc2UgcHJvZHVjdHMhPC9wPg0KPHA+PHRh
YmxlIHdpZHRoPSI4NiIgYm9yZGVyPSIwIj48dGJvZHk+PHRyPjx0ZD48L3RkPjx0ZD48L3RkPjx0
ZD48L3RkPjx0ZD48L3RkPjwvdHI+PC90Ym9keT48L3RhYmxlPjwvcD4NCjx0YWJsZSB3aWR0aD0i
NjAwIiBib3JkZXI9IjAiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIGFsaWduPSJjZW50ZXIiPjxwIHN0
eWxlPSJmb250LXNpemU6IDI0cHg7IGNvbG9yOiAjRjU1MTUxOyI+PHNwYW4gc3R5bGU9ImNvbG9y
OiAjNkY2RjZGIj5DaHJpc3RtYXMgc2FsZSAtIDwvc3Bhbj4xMCUgb2ZmPC9wPg0KPHAgc3R5bGU9
ImZvbnQtc2l6ZTogMThweDsgY29sb3I6ICNGNTUxNTE7Ij48c3BhbiBzdHlsZT0iY29sb3I6ICM2
RjZGNkYiPlVzZSB0aGlzIGNvZGUgLTwvc3Bhbj4gPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMjRw
eCI+U0FMRTIwMTc8L3NwYW4+PC9wPjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8
L3RkPg0KPC90cj4NCjx0cj4NCjx0ZCBoZWlnaHQ9IjQ5Ij48dGFibGUgd2lkdGg9IjYwMCIgaGVp
Z2h0PSI3MSIgYm9yZGVyPSIwIj4NCjx0Ym9keT4NCjx0cj4NCjx0ZCBoZWlnaHQ9IjY3IiBhbGln
bj0iY2VudGVyIiBiZ2NvbG9yPSIjMzJBNkU3Ij48cCBzdHlsZT0iZm9udC1zaXplOiAxOHB4OyBj
b2xvcjogI2ZmZjsiPjxhIGhyZWY9Imh0dHA6Ly9jdXJpbmdoZXJic2VzaG9wLnN1IiAgc3R5bGU9
ImZvbnQtc2l6ZTogMThweDsgY29sb3I6ICNmZmY7Ij5UaGUgcHJpY2VzIGFyZSBsb3chPC9hPjwv
cD48L3RkPg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRk
IGFsaWduPSJjZW50ZXIiPjxhIGhyZWY9Imh0dHA6Ly9jdXJpbmdoZXJic2VzaG9wLnN1IiBzdHls
ZT0iZm9udC1zaXplOiAxOHB4OyBjb2xvcjogI0Y0NEY0RjsiPmh0dHA6Ly9jdXJpbmdoZXJic2Vz
aG9wLnN1PC9hPjxocj48L3RkPg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPC9ib2R5Pg0K
PC9odG1sPg
------------=_5A545065.9E3C96A6--