
| Current Path : /home/ift/mails/29/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //home/ift/mails/29/1520051727.zrspam.295794_2018_03_03 |
From christian.gabriel@shortnote.de Sat Mar 3 05:35:27 2018
Return-Path: <christian.gabriel@shortnote.de>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 483203D200D65; Sat, 3 Mar 2018 05:35:27 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Sat, 03 Mar 2018 05:35:27 +0100
From: <christian.gabriel@shortnote.de>
To: <christian.gabriel@shortnote.de>
Subject: *****SPAM***** I burn with passion
Date: 2 Mar 2018 15:03:19 -0700
Message-Id: <001b01d3b276$072a0f7a$e611a395$@shortnote.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *************************
X-Spam-Status: Yes, score=25.9 required=5.0 tests=BAYES_50,
CK_HELO_DYNAMIC_SPLIT_IP,CK_HELO_GENERIC,DATE_IN_PAST_06_12,DOS_OUTLOOK_TO_MX,
HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_MSPIKE_H2,RCVD_IN_PBL,
RCVD_IN_PSBL,RCVD_IN_SORBS_WEB,TVD_RCVD_IP,URIBL_BLOCKED,URIBL_DBL_SPAM,
URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A,URI_NO_WWW_INFO_CGI autolearn=spam
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5A9A260F.301DC6FA"
This is a multi-part message in MIME format.
------------=_5A9A260F.301DC6FA
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: r u down for right now? i'm 22/f looking for a f*ckbuddy on
the side... i'm crazy in bed ;) think you could tame my pu_$Sy? my username
is Maria84 u can see my naughty pics >> here r u down for right now? i'm
22/f looking for a f*ckbuddy on the side... i'm crazy in bed ;) think you
could tame my pu_$Sy? [...]
Content analysis details: (25.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: dreamnights.info]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: dreamnights.info]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[187.162.99.24 listed in zen.spamhaus.org]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: dreamnights.info]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: dreamnights.info]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[187.162.99.24 listed in psbl.surriel.com]
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
0.0 TVD_RCVD_IP No description available.
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[187.162.99.24 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[187.162.99.24 listed in wl.mailspike.net]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: dreamnights.info]
1.5 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
2.1 URI_NO_WWW_INFO_CGI URI: CGI in .info TLD other than third-level
"www"
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
2.8 DOS_OUTLOOK_TO_MX Delivered direct to MX with Outlook headers
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5A9A260F.301DC6FA
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 187-162-99-24.static.axtel.net (187-162-99-24.static.axtel.net [187.162.99.24])
by ift-informatik.de (Postfix) with ESMTP id 44FA73D200D64
for <christian.gabriel@shortnote.de>; Sat, 3 Mar 2018 05:35:24 +0100 (CET)
From: <christian.gabriel@shortnote.de>
To: <christian.gabriel@shortnote.de>
Subject: I burn with passion
Date: 2 Mar 2018 15:03:19 -0700
Message-ID: <001b01d3b276$072a0f7a$e611a395$@shortnote.de>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0018_01D3B276.0724E745"
X-Mailer: Microsoft Office Outlook 11
Thread-Index: Acib3vaxcg8xg5s2ib3vaxcg8xg5s2==
X-MimeOLE: Produced By Microsoft MimeOLE V6.1.7601.17514
This is a multi-part message in MIME format.
------=_NextPart_000_0018_01D3B276.0724E745
Content-Type: text/plain;
charset="cp-850"
Content-Transfer-Encoding: quoted-printable
r u down for right now? i'm 22/f looking for a f*ckbuddy on the side...
i'm crazy in bed ;) think you could tame my pu_$Sy?
my username is Maria84
u can see my naughty pics >>
here =20
------=_NextPart_000_0018_01D3B276.0724E745
Content-Type: text/html;
charset="cp-850"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Dus-ascii" =
http-equiv=3DContent-Type>
<META name=3DGENERATOR content=3D"MSHTML 8.00.7601.17514"></HEAD>
<BODY>
<DIV><SPAN class=3D301257892-02032018><FONT size=3D2=20
face=3DArial>r u down for right now? i'm 22/f looking for a f*ckbuddy on =
the side...<br>
i'm crazy in bed ;) think you could tame my pu_$Sy?<br>
<br>
my username is Maria84<br>
u can see my naughty pics <a =
href=3D"http://vip.dreamnights.info/tracker?smart_link_id=3D48&aff_id=3D1=
49">>><b> here</b> <<</a> <br></FONT></SPAN></DIV></BODY></HTML>
------=_NextPart_000_0018_01D3B276.0724E745--
------------=_5A9A260F.301DC6FA--