| Current Path : /proc/thread-self/root/home/ift/mails/35/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/35/1537551112.zrspam.354098_2018_09_21 |
From Jessegyoe@ctbctelecom.com.br Fri Sep 21 19:31:52 2018
Return-Path: <Jessegyoe@ctbctelecom.com.br>
X-Original-To: tjungblut@ift-informatik.de
Delivered-To: tjungblut@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id A79393D200A53; Fri, 21 Sep 2018 19:31:52 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Fri, 21 Sep 2018 19:31:52 +0200
From: "Louise" <Jessegyoe@ctbctelecom.com.br>
To: "Louise" <tobias.jungblut@ift-informatik.de>
Subject: *****SPAM***** Cooperarion with a large firm
Date: Fri, 21 Sep 2018 09:19:32 -0700
Message-Id: <159B53BA.52AF344A@ctbctelecom.com.br>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *********************
X-Spam-Status: Yes, score=21.8 required=5.0 tests=BAYES_99,CK_HELO_GENERIC,
HELO_DYNAMIC_IPADDR,HTML_MESSAGE,HTML_OBFUSCATE_10_20,MIME_HTML_ONLY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L5,RCVD_IN_RP_RNBL,RDNS_NONE,URIBL_BLOCKED,URIBL_DBL_SPAM,
URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=spam autolearn_force=no
version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5BA52B08.5B09AC7A"
This is a multi-part message in MIME format.
------------=_5BA52B08.5B09AC7A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Can you imagine making HUNDREDS OF THOUSANDS every month?
Yeah, THAT would change your life just a bit, right? Raking in profits of
$400K, $500K and more in a month, EVERY month would be EPIC! [...]
Content analysis details: (21.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: moneyforyou.su]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: moneyforyou.su]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[177.69.77.141 listed in bl.mailspike.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?177.69.77.141>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[177.69.77.141 listed in bl.score.senderscore.com]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: moneyforyou.su]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.69.77.141 listed in bb.barracudacentral.org]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: moneyforyou.su]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: moneyforyou.su]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_OBFUSCATE_10_20 BODY: Message is 10% to 20% HTML obfuscation
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.0 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5BA52B08.5B09AC7A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from meganet-200-170-143-190.static.ctbctelecom.com.br (unknown [177.69.77.141])
by ift-informatik.de (Postfix) with ESMTP id AF54C3D200005
for <tobias.jungblut@ift-informatik.de>; Fri, 21 Sep 2018 19:31:48 +0200 (CEST)
Received: from mx03.listsystemsf.net [128.121.65.219] by m1.gns.snv.thisdomainl.com with SMTP; Fri, 21 Sep 2018 09:27:44 -0700
Received: from mmx09.tilkbans.com ([93.211.161.119]) by relay-x.misswldrs.com with SMTP; Fri, 21 Sep 2018 09:19:32 -0700
Message-ID: <159B53BA.52AF344A@ctbctelecom.com.br>
Date: Fri, 21 Sep 2018 09:19:32 -0700
Reply-To: "Louise" <Jessegyoe@ctbctelecom.com.br>
From: "Louise" <Jessegyoe@ctbctelecom.com.br>
User-Agent: Mozilla 4.7 [en] (Win98; I)
MIME-Version: 1.0
To: "Louise" <tobias.jungblut@ift-informatik.de>
Subject: Cooperarion with a large firm
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: base64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------------=_5BA52B08.5B09AC7A--