| Current Path : /proc/thread-self/root/home/ift/mails/35/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/35/1537837766.zrspam.355539_2018_09_25 |
From Bertcmihs@comcastbusiness.net Tue Sep 25 03:09:26 2018
Return-Path: <Bertcmihs@comcastbusiness.net>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 08F003D200A96; Tue, 25 Sep 2018 03:09:26 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Tue, 25 Sep 2018 03:09:26 +0200
From: "Anja" <Bertcmihs@comcastbusiness.net>
To: "Anja" <christian.gabriel@shortnote.de>
Subject: *****SPAM***** Das sollten wir sofort andern!
Date: Mon, 24 Sep 2018 16:28:31 -0700
Message-Id: <C1AADF54.6FD5F61E@comcastbusiness.net>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **********************
X-Spam-Status: Yes, score=22.1 required=5.0 tests=BAYES_95,
CK_HELO_DYNAMIC_SPLIT_IP,CK_HELO_GENERIC,FR_3TAG_3TAG,HELO_DYNAMIC_IPADDR2,
HTML_IMAGE_ONLY_16,HTML_MESSAGE,HTML_OBFUSCATE_20_30,HTML_SHORT_LINK_IMG_2,
MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_RP_RNBL,URIBL_BLOCKED,
URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=spam autolearn_force=no
version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5BA98AC6.3232FC34"
This is a multi-part message in MIME format.
------------=_5BA98AC6.3232FC34
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hey, kennst du meine Moglichkeiten Spa? zu haben? Kann ich
dir gerne zeigen ;) Ich habe eine sexy Überraschung für dich http://makeiteasy.su/
[...]
Content analysis details: (22.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: makeiteasy.su]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: makeiteasy.su]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: makeiteasy.su]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: makeiteasy.su]
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?50.247.73.249>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[50.247.73.249 listed in bl.score.senderscore.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[50.247.73.249 listed in bb.barracudacentral.org]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.1 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words
2.0 HTML_OBFUSCATE_20_30 BODY: Message is 20% to 30% HTML obfuscation
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9523]
1.0 FR_3TAG_3TAG RAW: Looks like 3 <e> small tags.
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.0 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5BA98AC6.3232FC34
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 50-247-73-249-static.hfc.comcastbusiness.net (50-247-73-249-static.hfc.comcastbusiness.net [50.247.73.249])
by ift-informatik.de (Postfix) with ESMTP id CCF803D20004F
for <christian.gabriel@shortnote.de>; Tue, 25 Sep 2018 03:09:22 +0200 (CEST)
Received: from [28.85.17.186] by snmp.otwaloow.com with SMTP; Mon, 24 Sep 2018 17:01:37 -0700
Received: from [192.214.233.135] by qnx.mdrost.com with QMQP; Mon, 24 Sep 2018 16:56:37 -0700
Received: from webmail.halftomorrow.com [200.34.62.225] by mx03.listsystemsf.net with NNFMP; Mon, 24 Sep 2018 16:53:43 -0700
Received: from [128.218.120.113] by rsmail.alkoholic.net with SMTP; Mon, 24 Sep 2018 16:39:14 -0700
Received: from qnx.mdrost.com [53.84.170.205] by mx.reskind.net with LOCAL; Mon, 24 Sep 2018 16:28:31 -0700
Message-ID: <C1AADF54.6FD5F61E@comcastbusiness.net>
Date: Mon, 24 Sep 2018 16:28:31 -0700
Reply-To: "Anja" <Bertcmihs@comcastbusiness.net>
From: "Anja" <Bertcmihs@comcastbusiness.net>
User-Agent: QUALCOMM Windows Eudora Version 5.1
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Anja" <christian.gabriel@shortnote.de>
Subject: Das sollten wir sofort andern!
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: base64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------------=_5BA98AC6.3232FC34--