| Current Path : /proc/thread-self/root/home/ift/mails/39/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/39/1544453665.zrspam.394040_2018_12_10 |
From AlbertWalkercoqhr@epm.net.co Mon Dec 10 15:54:25 2018
Return-Path: <AlbertWalkercoqhr@epm.net.co>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id A71DF3D200074; Mon, 10 Dec 2018 15:54:25 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Mon, 10 Dec 2018 15:54:25 +0100
From: "Anja" <AlbertWalkercoqhr@epm.net.co>
To: "Anja" <christian.gabriel@ift-informatik.de>
Subject: *****SPAM***** Oh, where have you been all my life!
Date: Mon, 10 Dec 2018 23:05:46 +0900
Message-Id: <3037AC0F.C51A74C8@epm.net.co>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ******************************
X-Spam-Status: Yes, score=30.8 required=5.0 tests=BAYES_99,FR_3TAG_3TAG,
HELO_DYNAMIC_DHCP,HELO_DYNAMIC_IPADDR,HTML_MESSAGE,MIME_BASE64_TEXT,
MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L5,RCVD_IN_PBL,RCVD_IN_PSBL,RCVD_IN_RP_RNBL,RCVD_IN_XBL,
RDNS_NONE,URIBL_BLOCKED,URIBL_DBL_SPAM,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A
autolearn=spam autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C0E7E21.7537952B"
This is a multi-part message in MIME format.
------------=_5C0E7E21.7537952B
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I'm a real girl. I really love sex. Want to meet me? Maybe
you want to fuuuck me ...? Ok, here you can find my phone and just write
me when you want. Anytime. And you can see some of my private photos there.
[...]
Content analysis details: (30.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: tubeteencam.com]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: alicemarget.su]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: alicemarget.su]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[190.7.141.42 listed in psbl.surriel.com]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: alicemarget.su]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: alicemarget.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[190.7.141.42 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?190.7.141.42>]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[190.7.141.42 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[190.7.141.42 listed in bl.score.senderscore.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[190.7.141.42 listed in bb.barracudacentral.org]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 FR_3TAG_3TAG RAW: Looks like 3 <e> small tags.
1.7 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.0 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
0.2 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C0E7E21.7537952B
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from dinamic-Cable-190-7-141-42.epm.net.co (unknown [190.7.141.42])
by ift-informatik.de (Postfix) with ESMTP id 646F03D200011
for <christian.gabriel@ift-informatik.de>; Mon, 10 Dec 2018 15:54:21 +0100 (CET)
Received: from qrx.quickslick.com [161.7.40.34] by relay37.vosimerkam.net with SMTP; Mon, 10 Dec 2018 23:51:12 +0900
Received: from relay37.vosimerkam.net [209.164.214.7] by smtp18.yenddx.com with LOCAL; Mon, 10 Dec 2018 23:39:26 +0900
Received: from mx03.listsystemsf.net ([45.235.91.34]) by smtp.mixedthings.net with ESMTP; Mon, 10 Dec 2018 23:20:29 +0900
Received: from [111.123.72.213] by mail.webhostings4u.com with QMQP; Mon, 10 Dec 2018 23:10:53 +0900
Received: from unknown (HELO smtp.mixedthings.net) (Mon, 10 Dec 2018 23:07:25 +0900)
by smtp.mixedthings.net with ESMTP; Mon, 10 Dec 2018 23:07:25 +0900
Message-ID: <3037AC0F.C51A74C8@epm.net.co>
Date: Mon, 10 Dec 2018 23:05:46 +0900
From: "Anja" <AlbertWalkercoqhr@epm.net.co>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Sylera/1.2.4
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Anja" <christian.gabriel@ift-informatik.de>
Subject: Oh, where have you been all my life!
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64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------------=_5C0E7E21.7537952B--