| Current Path : /proc/thread-self/root/home/ift/mails/35/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/35/1538007597.zrspam.356537_2018_09_27 |
From Joriswiyfy@comcastbusiness.net Thu Sep 27 02:19:57 2018
Return-Path: <Joriswiyfy@comcastbusiness.net>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id E4FBB3D200063; Thu, 27 Sep 2018 02:19:57 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Thu, 27 Sep 2018 02:19:57 +0200
From: "Christine" <Joriswiyfy@comcastbusiness.net>
To: "Christine" <christian.gabriel@shortnote.de>
Subject: *****SPAM***** Become the first among your friends who managed to restore your sexual performance completely.
Date: Wed, 26 Sep 2018 15:22:56 -0700
Message-Id: <503E91F8.8B21792E@comcastbusiness.net>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *******************
X-Spam-Status: Yes, score=19.1 required=5.0 tests=BAYES_99,
CK_HELO_DYNAMIC_SPLIT_IP,CK_HELO_GENERIC,HELO_DYNAMIC_IPADDR2,
HTML_IMAGE_ONLY_12,HTML_MESSAGE,HTML_SHORT_LINK_IMG_1,MIME_HTML_ONLY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_RP_RNBL,URIBL_BLOCKED,URIBL_DBL_SPAM,
URIBL_JP_SURBL autolearn=spam autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5BAC222D.15441D7A"
This is a multi-part message in MIME format.
------------=_5BAC222D.15441D7A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: If you are losing your potency you should act immediately!
Visit your doctor! Use this code - SALE2018 and get ADDITIONAL discount 5%
for all our product. We have the largest selection! [...]
Content analysis details: (19.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: trustshipmarket.com]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: trustshipmarket.com]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: trustshipmarket.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?50.193.45.169>]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[50.193.45.169 listed in bl.score.senderscore.com]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.1 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.0 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5BAC222D.15441D7A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 50-193-45-169-static.hfc.comcastbusiness.net (50-193-45-169-static.hfc.comcastbusiness.net [50.193.45.169])
by ift-informatik.de (Postfix) with ESMTP id B9EFD3D200005
for <christian.gabriel@shortnote.de>; Thu, 27 Sep 2018 02:19:54 +0200 (CEST)
Received: from unknown (185.32.127.17)
by mtu23.bigping.com with NNFMP; Wed, 26 Sep 2018 16:04:49 -0700
Received: from unknown (HELO mx.reskind.net) (Wed, 26 Sep 2018 15:49:54 -0700)
by webmail.halftomorrow.com with QMQP; Wed, 26 Sep 2018 15:49:54 -0700
Received: from [10.237.88.56] by qnx.mdrost.com with NNFMP; Wed, 26 Sep 2018 15:43:03 -0700
Received: from mail.naihautsui.co.kr [68.222.86.98] by rsmail.alkoholic.net with SMTP; Wed, 26 Sep 2018 15:37:54 -0700
Received: from mxs.perenter.com ([46.185.136.131]) by smtp.doneohx.com with ESMTP; Wed, 26 Sep 2018 15:22:56 -0700
Message-ID: <503E91F8.8B21792E@comcastbusiness.net>
Date: Wed, 26 Sep 2018 15:22:56 -0700
Reply-To: "Christine" <Joriswiyfy@comcastbusiness.net>
From: "Christine" <Joriswiyfy@comcastbusiness.net>
User-Agent: Mozilla 3.04 (Macintosh; I; 68K)
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Christine" <christian.gabriel@shortnote.de>
Subject: Become the first among your friends who managed to restore your sexual performance completely.
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: base64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------------=_5BAC222D.15441D7A--