Kein Spam?

SPAM: Message from 02013381152

Absender: Voice Message Server <serv**@*763795454.joddoc.de> Gesendet am: 18.10.2017 20:14:34 Betreff: Message from 02013381152 Anzahl: 29

Nachricht (Plain Version)

18/10/2017, 15:14:29 PM
29,{rndnum(1,1)}}-second message deposited by 02013381152

Header

Return-Path: serv**@*763795454.joddoc.de
X-Original-To: jodd**@*pambog.com
Received: from gallois.livando.com (gallois.livando.com [31.170.109.xxx])
by mx.discard.email (Go MTA) with ESMTP
for jodd**@*pambog.com; Wed, 18 Oct 2017 20:14:34 +0200 (CEST)
X-PDA-ORIGIN: gallois.livando.com
Received: (qmail 704 invoked by uid 569); 18 Oct 2017 18:14:34 -0000
Delivered-To: joddodbj-joddoc.de*******@*oddoc.de
X-Originally-To: last**@*oddoc.de
Received: (qmail 701 invoked from network); 18 Oct 2017 18:14:34 -0000
Received: by simscan 1.4.0
ppid: 673,
pid: 682,
t: 4.0602s

scanners:
clamav: 0.99.2/m:58/d:23960
spam: 3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on lv01.virtualhosts.de
X-Spam-Flag: YES
X-Spam-Level: **********************
X-Spam-Status: Yes, score=22.3 required=4.8 tests=CK_HELO_DYNAMIC_SPLIT_IP,
DOS_OUTLOOK_TO_MX,HELO_DYNAMIC_IPADDR2,NIX_SPAM,RCVD_IN_BARRACUDA_BRBL,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_DNSBL_INPS_DE,
RCVD_IN_PSBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RDNS_DYNAMIC,TVD_RCVD_IP,
TVD_SPACE_RATIO autolearn=disabled version=3.4.1
X-Spam-Report:
* 3.2 NIX_SPAM
RBL: Listed in NIX_SPAM DNSBL
* [186.201.223.xxx listed in ix.dnsbl.manitu.net]
* 2.7 RCVD_IN_PSBL
RBL: Received via a relay in PSBL
* [186.201.223.xxx listed in psbl.surriel.com]
* 0.7 RCVD_IN_XBL
RBL: Received via a relay in Spamhaus XBL
* [186.201.223.xxx listed in zen.spamhaus.org]
* 3.0 RCVD_IN_DNSBL_INPS_DE
RBL: Received via a relay in inps.de DNSBL
* [IP address 186.201.223.xxx automatically added]
[to inps.de-DNSBL at 2016-02-24 14:19:52 UTC, see]
[http://dnsbl.inps.de/query.cgi?action=check&ip=186.201.223.xxx]
* 1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
* (Split IP)
* 0.0 TVD_RCVD_IP Message was received from an IP address
* 1.2 RCVD_IN_BL_SPAMCOP_NET
RBL: Received via a relay in bl.spamcop.net
* [Blocked - see http://www.spamcop.net/bl.shtml?186.201.223.xxx]
* 1.6 RCVD_IN_BRBL_LASTEXT
RBL: No description available.
* [186.201.223.xxx listed in bb.barracudacentral.org]
* 0.6 RCVD_IN_SORBS_WEB
RBL:
SORBS: sender is an abusable web server
* [186.201.223.xxx listed in dnsbl.sorbs.net]
* 2.0 RCVD_IN_BARRACUDA_BRBL
RBL:
Listed: Barracuda Reputation Block List
* (BRBL)
* [186.201.223.xxx listed in b.barracudacentral.org]
* 0.4 RDNS_DYNAMIC Delivered to internal network by host with
* dynamic-looking rDNS
* 3.9 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
* 2)
* 0.0 TVD_SPACE_RATIO No description available.
* 1.4 DOS_OUTLOOK_TO_MX Delivered direct to MX with Outlook headers
Received: from 186-201-223-251.customer.tdatabrasil.net.br (186.201.223.xxx)
by gallois.livando.com with SMTP; 18 Oct 2017 18:14:30 -0000
Reply-To: serv**@*763795454.joddoc.de
From: "Voice Message Server" serv**@*763795454.joddoc.de
To: last**@*oddoc.de
References: 352370492.17523008562665140122.Ja***********@*vapp02.joddoc.de
In-Reply-To: 352370492.17523008562665140122.Ja***********@*vapp02.joddoc.de
Subject: Message from 02013381152
Date: Wed, 18 Oct 2017 15:14:29 -0200
Message-ID: 02a401d32759$76e46ad0$64ad4070$@joddoc.de
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_02A5_EA2DE56F.25F67FBC"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: fZrVkCTyPIrmuJsRoKEaJCuvCjTDCdYWgkmM
Content-Language: en-us