| Current Path : /proc/thread-self/root/home/ift/mails/35/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/35/1537632432.zrspam.354519_2018_09_22 |
From Larsptaq@netcorporativa.com.br Sat Sep 22 18:07:12 2018
Return-Path: <Larsptaq@netcorporativa.com.br>
X-Original-To: tjungblut@ift-informatik.de
Delivered-To: tjungblut@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 2DAC13D200A96; Sat, 22 Sep 2018 18:07:12 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Sat, 22 Sep 2018 18:07:12 +0200
From: "Gertrud" <Larsptaq@netcorporativa.com.br>
To: "Gertrud" <tobias.jungblut@ift-informatik.de>
Subject: *****SPAM***** Wie war unser letztes Mal?
Date: Sat, 22 Sep 2018 07:35:39 -0700
Message-Id: <CF6BF24A.BA5DBF1D@netcorporativa.com.br>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ******************
X-Spam-Status: Yes, score=18.8 required=5.0 tests=BAYES_50,
CK_HELO_DYNAMIC_SPLIT_IP,HELO_DYNAMIC_IPADDR2,HTML_IMAGE_ONLY_12,HTML_MESSAGE,
HTML_OBFUSCATE_05_10,HTML_SHORT_LINK_IMG_2,MIME_HTML_ONLY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_RP_RNBL,RDNS_DYNAMIC,
TVD_RCVD_IP,URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=spam
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5BA668B0.80EAA0D6"
This is a multi-part message in MIME format.
------------=_5BA668B0.80EAA0D6
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Ich will unbedingt den Abend in netter Gesellschaft verbringen.
Teilst du ein Glas Wein mit mir? Möchten Sie etwas Gesellschaft? http://make>iteasy.su/
[...]
Content analysis details: (18.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: makeiteasy.su]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: makeiteasy.su]
0.0 TVD_RCVD_IP No description available.
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?177.91.74.82>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[177.91.74.82 listed in bl.score.senderscore.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.91.74.82 listed in bb.barracudacentral.org]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: makeiteasy.su]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: makeiteasy.su]
0.3 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.1 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5415]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5BA668B0.80EAA0D6
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 177-91-74-82.rev.netcorporativa.com.br (177-91-74-82.rev.netcorporativa.com.br [177.91.74.82])
by ift-informatik.de (Postfix) with ESMTP id 533373D200058
for <tobias.jungblut@ift-informatik.de>; Sat, 22 Sep 2018 18:07:06 +0200 (CEST)
Received: from unknown (42.26.242.205)
by external.newsubdomain.com with ESMTP; Sat, 22 Sep 2018 07:52:32 -0700
Received: from unknown (HELO relay-x.misswldrs.com) (Sat, 22 Sep 2018 07:42:14 -0700)
by mtu23.bigping.com with NNFMP; Sat, 22 Sep 2018 07:42:14 -0700
Received: from mtu67.syds.piswix.net [34.162.101.175] by mailout.endmonthnow.com with NNFMP; Sat, 22 Sep 2018 07:35:39 -0700
Message-ID: <CF6BF24A.BA5DBF1D@netcorporativa.com.br>
Date: Sat, 22 Sep 2018 07:35:39 -0700
From: "Gertrud" <Larsptaq@netcorporativa.com.br>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.4) Gecko/20010913
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Gertrud" <tobias.jungblut@ift-informatik.de>
Subject: Wie war unser letztes Mal?
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: base64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------------=_5BA668B0.80EAA0D6--