| Current Path : /var/mail/ift-informatik.de/cgabriel/.Archive.XXX/cur/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : /var/mail/ift-informatik.de/cgabriel/.Archive.XXX/cur/1507269176.zrspam.25712420171006:2, |
From uhgzocn@branwell.com Fri Oct 6 07:52:56 2017
Return-Path: <uhgzocn@branwell.com>
X-Original-To: tjungblut@ift-informatik.de
Delivered-To: tjungblut@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id E54B31C8817AF; Fri, 6 Oct 2017 07:52:56 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Fri, 06 Oct 2017 07:52:56 +0200
From: "Donald" <uhgzocn@branwell.com>
To: "Donald" <christian.gabriel@ift-informatik.de>
Subject: *****SPAM***** Viagra Super Active
Date: Thu, 05 Oct 2017 22:52:55 -0800
Message-Id: <0iq788IBg6fe.Ru110nG5Pl333@branwell.com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ************************
X-Spam-Status: Yes, score=24.4 required=5.0 tests=BAYES_95,DRUGS_ERECTILE,
FR_3TAG_3TAG,HTML_IMAGE_ONLY_12,HTML_MESSAGE,HTML_SHORT_LINK_IMG_2,
MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L5,RCVD_IN_RP_RNBL,RCVD_IN_XBL,RDNS_NONE,T_REMOTE_IMAGE,
URIBL_BLOCKED,URIBL_DBL_SPAM,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A
autolearn=spam autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_59D71A38.F2637BE5"
This is a multi-part message in MIME format.
------------=_59D71A38.F2637BE5
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Don't save on pleasure! Better medicine, better health! Damage
to nerves, arteries, smooth muscles, and fibrous tissues is a common cause
of impotence. As a token of our appreciation, please try these products!
You're welcome in our online shop! http://firsthotassist.su [...]
Content analysis details: (24.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: directupload.net]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: firsthotassist.su]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: firsthotassist.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[173.63.228.90 listed in zen.spamhaus.org]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[173.63.228.90 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?173.63.228.90>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[173.63.228.90 listed in bl.score.senderscore.com]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: firsthotassist.su]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: firsthotassist.su]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[173.63.228.90 listed in bl.mailspike.net]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9775]
0.0 HTML_MESSAGE BODY: HTML included in message
2.1 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
1.0 FR_3TAG_3TAG RAW: Looks like 3 <e> small tags.
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.0 DRUGS_ERECTILE Refers to an erectile drug
0.0 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_REMOTE_IMAGE Message contains an external image
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_59D71A38.F2637BE5
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from d71314b.ess.barracudanetworks.com (unknown [173.63.228.90])
by ift-informatik.de (Postfix) with ESMTP id BC4CA1C881794;
Fri, 6 Oct 2017 07:52:54 +0200 (CEST)
Received: from [173.63.228.90] (helo=branwell.com)
by branwell.com with esmtpa (Exim 4.84_2)
(envelope-from <uhgzocn@branwell.com>)
id q045ZU-2wryYD-dI
for christian.gabriel@ift-informatik.de; Thu, 05 Oct 2017 22:52:55 -0800
Date: Thu, 05 Oct 2017 22:52:55 -0800
To: "Donald" <christian.gabriel@ift-informatik.de>
Subject: Viagra Super Active
From: "Donald" <uhgzocn@branwell.com>
X-Priority: 3
X-Mailer: MAILER.branwell.com
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
Message-ID: <0iq788IBg6fe.Ru110nG5Pl333@branwell.com>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------------=_59D71A38.F2637BE5--