
| Current Path : /proc/thread-self/root/home/ift/mails/35/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/35/1537399245.zrspam.353335_2018_09_20 |
From Egbertputs@europermutas.com Thu Sep 20 01:20:45 2018
Return-Path: <Egbertputs@europermutas.com>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 7CC373D200A96; Thu, 20 Sep 2018 01:20:45 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Thu, 20 Sep 2018 01:20:45 +0200
From: "Ingrid" <Egbertputs@europermutas.com>
To: "Ingrid" <christian.gabriel@ift-informatik.de>
Subject: *****SPAM***** Hallo, Hubscher!
Date: Wed, 19 Sep 2018 14:40:45 -0700
Message-Id: <5C2A99D7.AF64B4F8@europermutas.com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *******************
X-Spam-Status: Yes, score=19.4 required=5.0 tests=BAYES_95,FR_3TAG_3TAG,
HTML_FONT_LOW_CONTRAST,HTML_IMAGE_ONLY_16,HTML_MESSAGE,HTML_OBFUSCATE_20_30,
HTML_SHORT_LINK_IMG_2,MIME_BASE64_TEXT,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L4,RCVD_IN_RP_RNBL,RDNS_NONE,URIBL_BLOCKED,URIBL_JP_SURBL,
URIBL_SBL,URIBL_SBL_A autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5BA2D9CD.6B132A06"
This is a multi-part message in MIME format.
------------=_5BA2D9CD.6B132A06
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hey, so ein attraktiver Mann ist bestimmt nicht gegen Dating!..
Ich schlage mich als Kandidatin vor :) Ich habe eine Cam-Show nur für dich
bereit http://makeiteasy.su/ [...]
Content analysis details: (19.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: media.tumblr.com]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: makeiteasy.su]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: makeiteasy.su]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: makeiteasy.su]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[185.191.252.62 listed in bl.score.senderscore.com]
0.0 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)
[185.191.252.62 listed in bl.mailspike.net]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.1 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words
2.0 HTML_OBFUSCATE_20_30 BODY: Message is 20% to 30% HTML obfuscation
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9850]
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
1.0 FR_3TAG_3TAG RAW: Looks like 3 <e> small tags.
1.7 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[185.191.252.62 listed in bb.barracudacentral.org]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5BA2D9CD.6B132A06
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from europermutas.com (unknown [185.191.252.62])
by ift-informatik.de (Postfix) with ESMTP id D47253D200A52
for <christian.gabriel@ift-informatik.de>; Thu, 20 Sep 2018 01:20:41 +0200 (CEST)
Received: from [150.198.233.193] by mxs.perenter.com with SMTP; Wed, 19 Sep 2018 15:06:36 -0700
Received: from unknown (21.121.234.223)
by snmp.otwaloow.com with ESMTP; Wed, 19 Sep 2018 15:00:37 -0700
Received: from [14.42.98.13] by mail.gimmicc.net with QMQP; Wed, 19 Sep 2018 14:40:45 -0700
Message-ID: <5C2A99D7.AF64B4F8@europermutas.com>
Date: Wed, 19 Sep 2018 14:40:45 -0700
From: "Ingrid" <Egbertputs@europermutas.com>
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.4) Gecko/20011019 Netscape6/6.2
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Ingrid" <christian.gabriel@ift-informatik.de>
Subject: Hallo, Hubscher!
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64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=
------------=_5BA2D9CD.6B132A06--