| Current Path : /proc/thread-self/root/home/ift/mails/35/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/35/1537490023.zrspam.353740_2018_09_21 |
From Antonnpo@gruminternet.com.br Fri Sep 21 02:33:43 2018
Return-Path: <Antonnpo@gruminternet.com.br>
X-Original-To: tjungblut@ift-informatik.de
Delivered-To: tjungblut@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 02C403D200A53; Fri, 21 Sep 2018 02:33:43 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Fri, 21 Sep 2018 02:33:42 +0200
From: "Elke" <Antonnpo@gruminternet.com.br>
To: "Elke" <tobias.jungblut@ift-informatik.de>
Subject: *****SPAM***** Wirst du meinen Abend mit Spa? fullen? ;)
Date: Thu, 20 Sep 2018 16:11:20 -0700
Message-Id: <7A8DD950.CA64FD44@gruminternet.com.br>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ********************
X-Spam-Status: Yes, score=20.0 required=5.0 tests=BAYES_95,
CK_HELO_DYNAMIC_SPLIT_IP,HELO_DYNAMIC_IPADDR2,HTML_IMAGE_ONLY_16,HTML_MESSAGE,
HTML_OBFUSCATE_10_20,HTML_SHORT_LINK_IMG_2,MIME_BASE64_TEXT,MIME_HTML_ONLY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L4,RCVD_IN_RP_RNBL,
RDNS_NONE,TVD_RCVD_IP,TVD_RCVD_SPACE_BRACKET,UNPARSEABLE_RELAY,URIBL_BLOCKED,
URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=spam autolearn_force=no
version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5BA43C66.E58FDB3D"
This is a multi-part message in MIME format.
------------=_5BA43C66.E58FDB3D
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Huhu! Willst du meN>hr uber mich wissen? Ich wurde es gerne
mit einem so hubschen Mann teilen :) Willst du mich hart ficken? http://makeiteasy.su/
[...]
Content analysis details: (20.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: makeiteasy.su]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: makeiteasy.su]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: makeiteasy.su]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: makeiteasy.su]
0.0 TVD_RCVD_IP No description available.
0.0 TVD_RCVD_SPACE_BRACKET No description available.
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.0 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)
[168.232.172.6 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[168.232.172.6 listed in bl.score.senderscore.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?168.232.172.6>]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.1 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_OBFUSCATE_10_20 BODY: Message is 10% to 20% HTML obfuscation
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9509]
1.7 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5BA43C66.E58FDB3D
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 168-232-172-6.gruminternet.com.br (unknown [168.232.172.6])
by ift-informatik.de (Postfix) with ESMTP id 1A1D73D200005
for <tobias.jungblut@ift-informatik.de>; Fri, 21 Sep 2018 02:33:36 +0200 (CEST)
Received: from [166.99.242.30] by smtp4.cyberemailings.com with SMTP; Thu, 20 Sep 2018 16:24:18 -0700
Received: from smtp.doneohx.com ([Thu, 20 Sep 2018 16:11:20 -0700])
by external.newsubdomain.com with ASMTP; Thu, 20 Sep 2018 16:11:20 -0700
Message-ID: <7A8DD950.CA64FD44@gruminternet.com.br>
Date: Thu, 20 Sep 2018 16:11:20 -0700
Reply-To: "Elke" <Antonnpo@gruminternet.com.br>
From: "Elke" <Antonnpo@gruminternet.com.br>
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
MIME-Version: 1.0
To: "Elke" <tobias.jungblut@ift-informatik.de>
Subject: Wirst du meinen Abend mit Spa? fullen? ;)
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64
PCFkb2N0eXBlIGh0bWw+DQo8aHRtbD4NCjxoZWFkPg0KPG1ldGEgY2hhcnNldD0idXRmLTgiPg0K
PC9oZWFkPg0KDQo8Ym9keT4NCjxwPjx1bD48L3VsPjwvcD4NCjxwPkh1PEI+aDwvQj51ISBXaWxs
c3QgIGR1PFNQQU4+ICBtZTwvU1BBPFM+TjwvUz4+aHIgdWJlciBtaWM8Rk9OVCAgZmFjZT1Bcmlh
bD5oPC9GT05UPiAgd2lzc2VuPyA8U1BBTj4gSWM8L1NQQU4+aCAgPFNQQU4+d3VyPC9TUEFOPmRl
IDxTPmU8L1M+cyBnZXJuZTxTUEFOPiAgbWl0PC9TUEFOPiBlaW5lPFNUUklLRT5tPC9TVFJJS0U+
IHNvIGh1YnNjaGU8Uz5uPC9TPiAgTWFubiAgPFU+dDwvVT5laWxlbiA6KTxTUEFOPjwvU1BBTj4g
PC9wPg0KPHA+PG9sPjwvb2w+PC9wPg0KPGEgICAgIGhyZWY9Imh0dHA6Ly9tYWtlaXRlYXN5LnN1
LyIgdGFyZ2V0PSJfYmxhbmsiIHN0eWxlPSJmb250LXdlaWdodDogbm9ybWFsO2xldHRlci1zcGFj
aW5nOiAgbm9ybWFsO2xpbmUtaGVpZ2h0OiAxMDAlO3RleHQtZGVjb3JhdGlvbjogbm9uZTtjb2xv
cjogI2Y1NTsiPldpbGxzdCAgZHUgbWljaCBoYXJ0IGZpY2tlbj88L2E+DQo8cD48dGFibGUgIHdp
ZHRoPSIzNCUiIGJvcmRlcj0iMCI+PHRib2R5Pjx0cj48dGQ+PC90ZD48dGQ+PC90ZD48dGQ+PC90
ZD48dGQ+PC90ZD48dGQ+PC90ZD48L3RyPjwvdGJvZHk+PC90YWJsZT48L3A+DQo8YSAgIGhyZWY9
Imh0dHA6Ly9tYWtlaXRlYXN5LnN1LyIgdGFyZ2V0PSJfYmxhbmsiIHN0eWxlPSJmb250LXdlaWdo
dDogbm9ybWFsO2xldHRlci1zcGFjaW5nOiBub3JtYWw7bGluZS1oZWlnaHQ6IDEwMCU7dGV4dC1k
ZWNvcmF0aW9uOiAgbm9uZTtjb2xvcjogI2Y1NTsiPmh0PEZPTlQgIGZhY2U9Q291cmllcj50PC9G
T05UPnA6Ly9tYWtlaXRlYXN5LnM8Rk9OVCBjb2xvcj0jZGMgMjFhPnU8L0ZPTlQ+LzwvYT4NCjxw
PjxkaXY+PC9kaXY+PC9wPg0KPGEgaHJlZj0iaHR0cDovL21ha2VpdGVhc3kuc3UvIj48aW1nICBz
cmM9Imh0dHBzOi8vNzgubWVkaWEudHVtYmxyLmNvbS81OTlmMGM3ZTI5N2RiYTJmMjMyODQwYmZh
YzBlOTdmYS90dW1ibHJfbzhnd3I3TERRNjF1M3lxOTNvM181NDAuZ2lmIiAgYm9yZGVyPSIwIiA+
PC9hPg0KPHA+PHRhYmxlIHdpZHRoPSIzNCUiIGJvcmRlcj0iMCI+PHRib2R5Pjx0cj48dGQ+PC90
ZD48dGQ+PC90ZD48dGQ+PC90ZD48dGQ+PC90ZD48L3RyPjwvdGJvZHk+PC90YWJsZT48L3A+DQo8
YSAgaHJlZj0iaHR0cDovL21ha2VpdGVhc3kuc3UvIj51bnN1YnNjcmliZTwvYT4NCjxwPjxvbD48
L29sPjwvcD4NCjwvYm9keT4NCjwvaHRtbD4NCg==
------------=_5BA43C66.E58FDB3D--