| Current Path : /proc/thread-self/root/home/ift/mails/39/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/39/1543983175.zrspam.391502_2018_12_05 |
From AndrewPalmer@hkeyapi.com Wed Dec 5 05:12:55 2018
Return-Path: <AndrewPalmer@hkeyapi.com>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 39CC13D200074; Wed, 5 Dec 2018 05:12:55 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Wed, 05 Dec 2018 05:12:55 +0100
From: "Petra" <AndrewPalmer@hkeyapi.com>
To: "Petra" <christian.gabriel@ift-informatik.de>
Subject: *****SPAM***** Oh Gooood, it is the hottest of all that I've ever seen... Just look here!
Date: Wed, 05 Dec 2018 06:17:09 +0300
Message-Id: <C948914B.98B4DEA3@hkeyapi.com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ***************
X-Spam-Status: Yes, score=15.4 required=5.0 tests=BAYES_99,HTML_MESSAGE,
MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_RP_RNBL,RDNS_NONE,
SPF_HELO_PASS,URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=no
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C075047.E4E07426"
This is a multi-part message in MIME format.
------------=_5C075047.E4E07426
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I'm a real girl. I really love sex. Want to meet me? Maybe
you want to fuuuck me ...? Ok, here you can find my phone and just write
me when you want. Anytime. And you can see some of my private photos there.
[...]
Content analysis details: (15.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: twimg.com]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: helenmarta.su]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?196.15.183.2>]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: helenmarta.su]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[196.15.183.2 listed in bl.score.senderscore.com]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: helenmarta.su]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[196.15.183.2 listed in bb.barracudacentral.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C075047.E4E07426
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from hkeyapi.com (unknown [196.15.183.2])
by ift-informatik.de (Postfix) with ESMTP id 0FB443D20003E
for <christian.gabriel@ift-informatik.de>; Wed, 5 Dec 2018 05:12:51 +0100 (CET)
Received: from unknown (88.3.64.19)
by mmx09.tilkbans.com with LOCAL; Wed, 05 Dec 2018 06:55:26 +0300
Received: from smtp.endend.nl ([22.252.190.252]) by smtp4.cyberemailings.com with SMTP; Wed, 05 Dec 2018 06:41:17 +0300
Received: from rly04.hottestmile.com [136.17.143.60] by qnx.mdrost.com with ESMTP; Wed, 05 Dec 2018 06:21:26 +0300
Received: from [67.232.205.92] by mtu23.bigping.com with QMQP; Wed, 05 Dec 2018 06:17:09 +0300
Message-ID: <C948914B.98B4DEA3@hkeyapi.com>
Date: Wed, 05 Dec 2018 06:17:09 +0300
Reply-To: "Petra" <AndrewPalmer@hkeyapi.com>
From: "Petra" <AndrewPalmer@hkeyapi.com>
User-Agent: Opera/7.02 (Windows NT 5.1; U)
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Petra" <christian.gabriel@ift-informatik.de>
Subject: Oh Gooood, it is the hottest of all that I've ever seen... Just look here!
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: base64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------------=_5C075047.E4E07426--