| Current Path : /proc/thread-self/root/home/ift/mails/40/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/40/1546255626.zrspam.403288_2018_12_31 |
From PaulPhillips@bracnet.net Mon Dec 31 12:27:06 2018
Return-Path: <PaulPhillips@bracnet.net>
X-Original-To: tjungblut@ift-informatik.de
Delivered-To: tjungblut@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id AA5393D200064; Mon, 31 Dec 2018 12:27:06 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Mon, 31 Dec 2018 12:27:06 +0100
From: "Lund" <PaulPhillips@bracnet.net>
To: "Lund" <tobias.jungblut@ift-informatik.de>
Subject: *****SPAM***** Einer der Bestseller wartet auf seinen glucklichen Besitzer in unserem Online-Shop.
Date: Mon, 31 Dec 2018 11:19:59 +0300
Message-Id: <81F1FFF3.98A72FE0@bracnet.net>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **************************
X-Spam-Status: Yes, score=26.5 required=5.0 tests=BAYES_99,DATE_IN_PAST_03_06,
DRUGS_ERECTILE,HELO_DYNAMIC_SPLIT_IP,HTML_MESSAGE,MIME_HTML_ONLY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,
RCVD_IN_RP_RNBL,RCVD_IN_XBL,RDNS_NONE,TVD_RCVD_IP,TVD_RCVD_SPACE_BRACKET,
UNPARSEABLE_RELAY,URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A
autolearn=spam autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C29FD0A.A5BC21AF"
This is a multi-part message in MIME format.
------------=_5C29FD0A.A5BC21AF
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Sie können alles machen! Kaufen Sie jetzt Cialis Brand. Erhaltlich
in unserem Online-Shop! http://bestmedshop.su [...]
Content analysis details: (26.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: bestmedshop.su]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: bestmedshop.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[115.127.96.211 listed in zen.spamhaus.org]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: bestmedshop.su]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: bestmedshop.su]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[115.127.96.211 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?115.127.96.211>]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 TVD_RCVD_SPACE_BRACKET No description available.
0.0 TVD_RCVD_IP No description available.
3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split
IP)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[115.127.96.211 listed in bl.score.senderscore.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[115.127.96.211 listed in bl.mailspike.net]
1.6 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.0 DRUGS_ERECTILE Refers to an erectile drug
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C29FD0A.A5BC21AF
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 115.127.96.211.bracnet.net (unknown [115.127.96.211])
by ift-informatik.de (Postfix) with ESMTP id 624093D200033
for <tobias.jungblut@ift-informatik.de>; Mon, 31 Dec 2018 12:27:02 +0100 (CET)
Received: from mxs.perenter.com ([Mon, 31 Dec 2018 11:20:22 +0300])
by mtu67.syds.piswix.net with SMTP; Mon, 31 Dec 2018 11:20:22 +0300
Received: from unknown (66.208.87.149)
by relay37.vosimerkam.net with SMTP; Mon, 31 Dec 2018 11:19:59 +0300
Message-ID: <81F1FFF3.98A72FE0@bracnet.net>
Date: Mon, 31 Dec 2018 11:19:59 +0300
From: "Lund" <PaulPhillips@bracnet.net>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Lund" <tobias.jungblut@ift-informatik.de>
Subject: Einer der Bestseller wartet auf seinen glucklichen Besitzer in unserem Online-Shop.
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: base64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------------=_5C29FD0A.A5BC21AF--