four-years-of-spam-mail/spam/1579343941.M569359P15642.sp...

157 lines
7.3 KiB
Plaintext

Received: from localhost by v22014122474822114.stilfilm.com
with SpamAssassin (version 3.3.2);
Wed, 22 Nov 2017 21:15:14 +0100
From: "DailySavingsFinder" <DailySavingsFinder@lessensdecapucine.be>
To: mail@dorianvasco.de
Subject: *****SPAM***** ***SPAM*** Promotion about Amazon Prime!
Date: Mon, 30 Oct 2017 21:57:57 +0000
Message-Id: <4f5aeea4a8c14e796e93eef0d953087e@lessensdecapucine.be>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
v22014122474822114.stilfilm.com
X-Spam-Flag: YES
X-Spam-Level: **************
X-Spam-Status: Yes, score=14.8 required=5.0 tests=DATE_IN_PAST_06_12,
DKIM_SIGNED,HTML_IMAGE_ONLY_08,HTML_IMAGE_RATIO_02,HTML_MESSAGE,
HTML_SHORT_LINK_IMG_1,MIME_HTML_ONLY,NO_DNS_FOR_FROM,PYZOR_CHECK,
RCVD_IN_BRBL_LASTEXT,RDNS_NONE,T_DKIM_INVALID,URIBL_ABUSE_SURBL,URIBL_BLOCKED,
URIBL_DBL_SPAM autolearn=unavailable version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5A15DAD2.7D9E5711"
This is a multi-part message in MIME format.
------------=_5A15DAD2.7D9E5711
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Software zur Erkennung von "Spam" auf dem Rechner
v22014122474822114.stilfilm.com
hat die eingegangene E-mail als mögliche "Spam"-Nachricht identifiziert.
Die ursprüngliche Nachricht wurde an diesen Bericht angehängt, so dass
Sie sie anschauen können (falls es doch eine legitime E-Mail ist) oder
ähnliche unerwünschte Nachrichten in Zukunft markieren können.
Bei Fragen zu diesem Vorgang wenden Sie sich bitte an
the administrator of that system
Vorschau: de-amazon-v3 If you wish to unsubscribe, please Click Here
[...]
Inhaltsanalyse im Detail: (14.8 Punkte, 5.0 benötigt)
Pkte Regelname Beschreibung
---- ---------------------- --------------------------------------------------
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URIs: quancent.com]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: quancent.com]
1.9 URIBL_ABUSE_SURBL Enthält URL in ABUSE-Liste (www.surbl.org) -
changed from JP to ABUSE bug 7279
[URIs: quancent.com]
1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[80.211.145.47 listed in bb.barracudacentral.org]
0.4 NO_DNS_FOR_FROM DNS: Domain der Absendeadresse nicht im DNS
registriert (kein MX/A Eintrag)
1.1 DATE_IN_PAST_06_12 Absendezeit 6 bis 12 Stunden vor Datum in
"Received"-Kopfzeilen
0.8 HTML_IMAGE_RATIO_02 BODY: Verhältnis Bilderfläche zu Text ist klein
0.0 HTML_MESSAGE BODY: Nachricht enthält HTML
1.8 HTML_IMAGE_ONLY_08 BODY: Außer Bildern nur 400-800 Zeichen Text
1.1 MIME_HTML_ONLY BODY: MIME-Nachricht besteht nur aus HTML
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
2.0 PYZOR_CHECK Gelistet im Pyzor-System (http://pyzor.sf.net/)
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Die ursprüngliche Nachricht enthielt nicht ausschließlich Klartext
(plain text) und kann eventuell eine Gefahr für einige E-Mail-Programme
darstellen (falls sie z.B. einen Computervirus enthält).
Möchten Sie die Nachricht dennoch ansehen, ist es wahrscheinlich
sicherer, sie zuerst in einer Datei zu speichern und diese Datei danach
mit einem Texteditor zu öffnen.
------------=_5A15DAD2.7D9E5711
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-Path: <DailySavingsFinder@lessensdecapucine.be>
Delivered-To: mail@dorianvasco.de
Received: from localhost (localhost [127.0.0.1])
by v22014122474822114.stilfilm.com (Postfix) with ESMTP id 01F1BD4D36
for <mail@dorianvasco.de>; Tue, 31 Oct 2017 08:20:18 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at v22014122474822114.yourvserver.net
X-Spam-Flag: YES
X-Spam-Score: 11.048
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.048 required=5.5 tests=[BAYES_50=0.8,
DATE_IN_PAST_06_12=1.543, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_08=1.651,
HTML_IMAGE_RATIO_02=0.437, HTML_MESSAGE=0.001,
HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=0.723,
RCVD_IN_BRBL_LASTEXT=1.449, RDNS_NONE=0.793, SPF_PASS=-0.001,
URIBL_ABUSE_SURBL=1.25, URIBL_BLOCKED=0.001, URIBL_DBL_SPAM=2.5]
autolearn=spam
Received: from v22014122474822114.stilfilm.com ([127.0.0.1])
by localhost (v22014122474822114.stilfilm.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id sNJGGOyA8MVb for <mail@dorianvasco.de>;
Tue, 31 Oct 2017 08:20:16 +0100 (CET)
Received: from svr.lessensdecapucine.be (unknown [80.211.145.47])
by v22014122474822114.stilfilm.com (Postfix) with ESMTP id 157A1D4CFA
for <mail@dorianvasco.de>; Tue, 31 Oct 2017 08:20:15 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=mail; d=lessensdecapucine.be;
h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=DailySavingsFinder@lessensdecapucine.be;
bh=TzZ6zw66Bork9WNKe1qYHPWKV2o=;
b=PekKOYd/rrJoXIeX75ZdB/8T6JnzfPu6StbvNe2EZUWbQ78JRMBqs8Kx+L+ULxkncfvnyLXJCapO
NDwtZo020h40lTOwu7baLhgmZcpLgr4ybmYxlkz8zwxUYH1+3/HirCQUNGUf/5bbSb32RxszNOaK
7MqzrzdV6N77460Ss+A=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=mail; d=lessensdecapucine.be;
b=QPcyPj/hehRZssE6FiMCKXfyqJsbVuJzC7GQSLTPhn1ZO1oUHSsrPJnk/IMH0Mc2mY/bynIxOzY5
mQptUavyLKxc/ZxXMkKTRtJ/fGWohMZ+PTNPRjTa/cxsnaE11npLgOZgLaIqSjoI+Jy0O18SwYEX
sSyMZUE9yUOy0mLTaFM=;
To: mail@dorianvasco.de
Subject: ***SPAM*** Promotion about Amazon Prime!
Message-ID: <4f5aeea4a8c14e796e93eef0d953087e@lessensdecapucine.be>
Date: Mon, 30 Oct 2017 21:57:57 +0000
From: "DailySavingsFinder" <DailySavingsFinder@lessensdecapucine.be>
Reply-To: DailySavingsFinder@lessensdecapucine.be
MIME-Version: 1.0
X-Mailer-LID: 10,5,13,14
List-Unsubscribe: <http://lessensdecapucine.be/unsubscribe.php?M=1963122&C=8e09b03828f17afabdd16c152087e63a&L=10&N=6>
X-Mailer-RecptId: 1963122
X-Mailer-SID: 6
X-Mailer-Sent-By: 1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit
<html>
<head>
<title>de-amazon-v3</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" leftmargin="0" topmargin="0" marginwidth="0"
marginheight="0">
<div align="center"><!-- Save for Web Slices (de-amazon-v3.jpg) --> <a
href="http://quancent.com/198eea484490d98000/of/fe/r"> <img border="0"
src="http://lessensdecapucine.be/admin/temp/user/1/de-amazon-v3.gif"
width="600" height="600" alt="de-amazon-v3.gif" title="de-amazon-v3.gif" />
<!-- End Save for Web Slices --> </a> <br /> <font face="Arial, Helvetica,
sans-serif" size="1" color="#666666">If you wish to unsubscribe, please <a
href="http://quancent.com/198eea484490d98000/of/fe/r">Click
Here</a></font></div>
</body>
</html>
------------=_5A15DAD2.7D9E5711--