| Current Path : /proc/thread-self/root/home/ift/mails/39/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/39/1544350447.zrspam.393460_2018_12_09 |
From NicholasMorgan@ktnet.kg Sun Dec 9 11:14:07 2018
Return-Path: <NicholasMorgan@ktnet.kg>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 2E2B63D200081; Sun, 9 Dec 2018 11:14:07 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Sun, 09 Dec 2018 11:14:06 +0100
From: "Stefanie" <NicholasMorgan@ktnet.kg>
To: "Stefanie" <christian.gabriel@ift-informatik.de>
Subject: *****SPAM***** Look, I understand everything, but this is a frank bust... Look here and tell me your opinion
Date: Sun, 09 Dec 2018 12:39:26 +0300
Message-Id: <20E48DC8.ED560596@ktnet.kg>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ******************************
X-Spam-Status: Yes, score=30.8 required=5.0 tests=BAYES_99,
CK_HELO_DYNAMIC_SPLIT_IP,CK_HELO_GENERIC,FR_3TAG_3TAG,HELO_DYNAMIC_IPADDR2,
HTML_MESSAGE,MIME_BASE64_TEXT,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PBL,
RCVD_IN_PSBL,RCVD_IN_RP_RNBL,RCVD_IN_XBL,RDNS_NONE,TVD_RCVD_IP,
TVD_RCVD_SPACE_BRACKET,UNPARSEABLE_RELAY,URIBL_BLOCKED,URIBL_JP_SURBL,
URIBL_SBL,URIBL_SBL_A autolearn=spam autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C0CEAEE.1E9CF4B2"
This is a multi-part message in MIME format.
------------=_5C0CEAEE.1E9CF4B2
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I'm a real girl. I really love sex. Want to meet me? Maybe
you want to fuuuck me ...? Ok, here you can find my phone and just write
me when you want. Anytime. And you can see some of my private photos there.
[...]
Content analysis details: (30.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: tubeteencam.com]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: alicemarget.su]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: alicemarget.su]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[185.66.253.33 listed in psbl.surriel.com]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: alicemarget.su]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[185.66.253.33 listed in zen.spamhaus.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?185.66.253.33>]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.0 TVD_RCVD_SPACE_BRACKET No description available.
0.0 TVD_RCVD_IP No description available.
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[185.66.253.33 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[185.66.253.33 listed in bl.score.senderscore.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[185.66.253.33 listed in bb.barracudacentral.org]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 FR_3TAG_3TAG RAW: Looks like 3 <e> small tags.
1.7 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C0CEAEE.1E9CF4B2
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 85-113-25-150.static.ktnet.kg (unknown [185.66.253.33])
by ift-informatik.de (Postfix) with ESMTP id 92F703D200074
for <christian.gabriel@ift-informatik.de>; Sun, 9 Dec 2018 11:14:04 +0100 (CET)
Received: from mailout.endmonthnow.com ([Sun, 09 Dec 2018 13:02:05 +0300])
by relay37.vosimerkam.net with SMTP; Sun, 09 Dec 2018 13:02:05 +0300
Received: from relay.2yahoo.com ([Sun, 09 Dec 2018 12:48:52 +0300])
by smtp.mixedthings.net with ASMTP; Sun, 09 Dec 2018 12:48:52 +0300
Received: from mtu23.bigping.com [76.174.127.199] by mts.locks.grgtween.net with QMQP; Sun, 09 Dec 2018 12:45:38 +0300
Received: from [112.223.117.158] by mtu23.bigping.com with LOCAL; Sun, 09 Dec 2018 12:39:26 +0300
Message-ID: <20E48DC8.ED560596@ktnet.kg>
Date: Sun, 09 Dec 2018 12:39:26 +0300
Reply-To: "Stefanie" <NicholasMorgan@ktnet.kg>
From: "Stefanie" <NicholasMorgan@ktnet.kg>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.2.1) Gecko/20021130
MIME-Version: 1.0
To: "Stefanie" <christian.gabriel@ift-informatik.de>
Subject: Look, I understand everything, but this is a frank bust... Look here and tell me your opinion
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64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------------=_5C0CEAEE.1E9CF4B2--