| Current Path : /proc/thread-self/root/home/ift/mails/40/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/40/1546107685.zrspam.402623_2018_12_29 |
From ChristopherRoberts@fritsvaneldik.nl Sat Dec 29 19:21:25 2018
Return-Path: <ChristopherRoberts@fritsvaneldik.nl>
X-Original-To: tjungblut@ift-informatik.de
Delivered-To: tjungblut@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 99F823D200010; Sat, 29 Dec 2018 19:21:25 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Sat, 29 Dec 2018 19:21:25 +0100
From: "Roth" <ChristopherRoberts@fritsvaneldik.nl>
To: "Roth" <tobias.jungblut@ift-informatik.de>
Subject: *****SPAM***** Holen Sie sich die Chance und fangen Sie es bis es verfugbar ist!
Date: Sat, 29 Dec 2018 17:14:29 +0300
Message-Id: <270E1D48.FF034D37@fritsvaneldik.nl>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **********************
X-Spam-Status: Yes, score=23.0 required=5.0 tests=BAYES_99,DRUGS_ERECTILE,
HTML_MESSAGE,MIME_BASE64_TEXT,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_BRBL_LASTEXT,RCVD_IN_PSBL,RCVD_IN_RP_RNBL,RCVD_IN_SORBS_WEB,
RCVD_IN_XBL,RDNS_NONE,SPF_HELO_PASS,URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_SBL,
URIBL_SBL_A autolearn=spam autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C27BB25.930DF8FB"
This is a multi-part message in MIME format.
------------=_5C27BB25.930DF8FB
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Cialis Brand. Und das ist es. Jetzt bestellen. Kaufen Sie
online in unserer Apotheke! http://bestmedshop.su [...]
Content analysis details: (23.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: bestmedshop.su]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: bestmedshop.su]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: bestmedshop.su]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[103.109.0.242 listed in psbl.surriel.com]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: bestmedshop.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[103.109.0.242 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?103.109.0.242>]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[103.109.0.242 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.7 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[103.109.0.242 listed in bb.barracudacentral.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[190.251.107.113 listed in dnsbl.sorbs.net]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.0 DRUGS_ERECTILE Refers to an erectile drug
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C27BB25.930DF8FB
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from fritsvaneldik.nl (unknown [103.109.0.242])
by ift-informatik.de (Postfix) with ESMTP id 775EA3D200010
for <tobias.jungblut@ift-informatik.de>; Sat, 29 Dec 2018 19:21:21 +0100 (CET)
Received: from unknown (HELO snmp.otwaloow.com) (Sat, 29 Dec 2018 18:09:44 +0300)
by relay-x.misswldrs.com with LOCAL; Sat, 29 Dec 2018 18:09:44 +0300
Received: from unknown (69.185.207.218)
by smtp18.yenddx.com with SMTP; Sat, 29 Dec 2018 17:55:22 +0300
Received: from m1.gns.snv.thisdomainl.com [190.251.107.113] by mtu67.syds.piswix.net with SMTP; Sat, 29 Dec 2018 17:38:24 +0300
Received: from unknown (HELO rly04.hottestmile.com) (Sat, 29 Dec 2018 17:18:49 +0300)
by mmx09.tilkbans.com with QMQP; Sat, 29 Dec 2018 17:18:49 +0300
Received: from asx121.turbo-inline.com [77.169.38.233] by rsmail.alkoholic.net with SMTP; Sat, 29 Dec 2018 17:14:29 +0300
Message-ID: <270E1D48.FF034D37@fritsvaneldik.nl>
Date: Sat, 29 Dec 2018 17:14:29 +0300
Reply-To: "Roth" <ChristopherRoberts@fritsvaneldik.nl>
From: "Roth" <ChristopherRoberts@fritsvaneldik.nl>
User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.5) Gecko/20031020 Thunderbird/0.3.1
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Roth" <tobias.jungblut@ift-informatik.de>
Subject: Holen Sie sich die Chance und fangen Sie es bis es verfugbar ist!
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64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------------=_5C27BB25.930DF8FB--