| Current Path : /proc/thread-self/root/home/ift/mails/40/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/40/1545591166.zrspam.400225_2018_12_23 |
From WilliamTaylor@dierenspeciaalzaaktroetels.be Sun Dec 23 19:52:46 2018
Return-Path: <WilliamTaylor@dierenspeciaalzaaktroetels.be>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 9874B3D200064; Sun, 23 Dec 2018 19:52:46 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Sun, 23 Dec 2018 19:52:46 +0100
From: "Strickland" <WilliamTaylor@dierenspeciaalzaaktroetels.be>
To: "Strickland" <christian.gabriel@ift-informatik.de>
Subject: *****SPAM***** Nur in unserer Online-Apotheke!
Date: Sun, 23 Dec 2018 18:51:47 +0300
Message-Id: <4AC63AC7.001AE6A0@dierenspeciaalzaaktroetels.be>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *************************
X-Spam-Status: Yes, score=25.2 required=5.0 tests=BAYES_99,DATE_IN_PAST_03_06,
DRUGS_ERECTILE,HTML_MESSAGE,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,
RCVD_IN_RP_RNBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RDNS_NONE,SPF_HELO_PASS,
URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=spam
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C1FD97E.A2F5F7B2"
This is a multi-part message in MIME format.
------------=_5C1FD97E.A2F5F7B2
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Kaufen Sie niemals billige Fälschung! Nur Cialis-Marke! Jetzt
bestellen. Erhaltlich in unserem Online-Shop! http://bestmedshop.su [...]
Content analysis details: (25.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: bestmedshop.su]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: bestmedshop.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[103.220.6.254 listed in zen.spamhaus.org]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: bestmedshop.su]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: bestmedshop.su]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[103.220.6.254 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?103.220.6.254>]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[103.220.6.254 listed in bl.score.senderscore.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[103.220.6.254 listed in bl.mailspike.net]
1.6 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[103.220.6.254 listed in bb.barracudacentral.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[103.220.6.254 listed in dnsbl.sorbs.net]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.0 DRUGS_ERECTILE Refers to an erectile drug
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C1FD97E.A2F5F7B2
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from dierenspeciaalzaaktroetels.be (unknown [103.220.6.254])
by ift-informatik.de (Postfix) with ESMTP id EFD953D200063
for <christian.gabriel@ift-informatik.de>; Sun, 23 Dec 2018 19:52:43 +0100 (CET)
Received: from mtu23.bigping.com [106.39.230.92] by relay37.vosimerkam.net with ASMTP; Sun, 23 Dec 2018 18:51:47 +0300
Message-ID: <4AC63AC7.001AE6A0@dierenspeciaalzaaktroetels.be>
Date: Sun, 23 Dec 2018 18:51:47 +0300
From: "Strickland" <WilliamTaylor@dierenspeciaalzaaktroetels.be>
User-Agent: Opera/7.02 (Windows NT 5.1; U)
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Strickland" <christian.gabriel@ift-informatik.de>
Subject: Nur in unserer Online-Apotheke!
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: base64
PCFkb2N0eXBlIGh0bWw+DQo8aHRtbD4NCjxoZWFkPg0KPG1ldGEgY2hhcnNldD0idXRmLTgiPg0K
PC9oZWFkPg0KDQo8Ym9keT4NCgk8cCBzdHlsZT0iZm9udC1zaXplOjE4cHg7dGV4dC1hbGlnbjog
Y2VudGVyOyI+S2F1ZmVuIFNpZSBuaWVtYWxzIGJpbGxpZ2UgRsOkbHNjaHVuZyEgTnVyIENpYWxp
cy1NYXJrZSEgSmV0enQgYmVzdGVsbGVuLjwvcD48dGFibGUgd2lkdGg9IjMwJSIgYm9yZGVyPSIw
Ij48dGJvZHk+PHRyPjx0ZD48L3RkPjx0ZD48L3RkPjx0ZD48L3RkPjwvdHI+PC90Ym9keT48L3Rh
YmxlPg0KPHAgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsiPjxhIHN0eWxlPSJ0ZXh0LWRlY29y
YXRpb246IG5vbmU7IHBhZGRpbmc6IDE1cHggMzBweDsgZm9udC1zaXplOiAxNXB4OyB0ZXh0LWFs
aWduOiBjZW50ZXI7IGNvbG9yOiNmZmZmZmY7IGJhY2tncm91bmQtY29sb3I6I2Y1NTsgIiBocmVm
PSJodHRwOi8vYmVzdG1lZHNob3Auc3UiPkVyaGFsdGxpY2ggaW4gdW5zZXJlbSBPbmxpbmUtU2hv
cCE8L2E+PC9wPjx0YWJsZSB3aWR0aD0iMTQlIiBib3JkZXI9IjAiPjx0Ym9keT48dHI+PHRkPjwv
dGQ+PHRkPjwvdGQ+PHRkPjwvdGQ+PHRkPjwvdGQ+PC90cj48L3Rib2R5PjwvdGFibGU+DQo8cCBz
dHlsZT0idGV4dC1hbGlnbjogY2VudGVyOyI+Jm5ic3A7PC9wPg0KCTxwIHN0eWxlPSJ0ZXh0LWFs
aWduOiBjZW50ZXI7IGZvbnQtc2l6ZTogMThweDtjb2xvcjogIzQ4OEUzRjsiPjxhIGhyZWY9Imh0
dHA6Ly9iZXN0bWVkc2hvcC5zdSIgc3R5bGU9ImNvbG9yOiAjNDg4RTNGOyI+aHR0cDovL2Jlc3Rt
ZWRzaG9wLnN1PC9hPjxvbD48cD48L3A+PC9vbD48L3A+DQo8ZGl2IGJhY2tncm91bmQ9Imh0dHA6
Ly82NjZrYi5jb20vaS9kemFwYTg0MzR0d2gwN2Rldy5qcGciIHZhbGlnbj0idG9wIiBzdHlsZT0i
YmFja2dyb3VuZDogdXJsKGh0dHA6Ly82NjZrYi5jb20vaS9kemFwYWJmYm1rZWh2YmV6cy5qcGcp
IG5vLXJlcGVhdCBjZW50ZXI7YmFja2dyb3VuZC1jb2xvcjogI2ZmZjtiYWNrZ3JvdW5kLXBvc2l0
aW9uOiBjZW50ZXI7Ij4NCjxwPjwvcD4NCjxkaXY+DQo8Y2VudGVyPg0KPHRhYmxlIHdpZHRoPSI2
MDAiIGhlaWdodD0iMzcwIj4NCjx0cj4NCjx0ZCB2YWxpZ249Im1pZGRsZSIgc3R5bGU9InBhZGRp
bmctcmlnaHQ6IDE1cHg7cGFkZGluZy1sZWZ0OiAxNXB4O3RleHQtYWxpZ246bGVmdDsiICBoZWln
aHQ9IjM3MCI+PGxhYmVsPjwvbGFiZWw+DQo8L3RkPg0KPC90cj4NCjwvdGFibGU+DQo8L2NlbnRl
cj4NCjwvZGl2Pg0KPC9kaXY+PGRpdj48L2Rpdj4NCjxwIHN0eWxlPSJjb2xvcjogI2ExYTFhMTsg
dGV4dC1hbGlnbjogY2VudGVyOyI+VW5zdWJzY3JpYmUgZnJvbSB0aGlzIGxldHRlciA8YSBocmVm
PSJodHRwOi8vYmVzdG1lZHNob3Auc3UiPmhlcmU8L2E+PC9wPg0KPC9ib2R5Pg0KPC9odG1sPg0K
------------=_5C1FD97E.A2F5F7B2--