| Current Path : /proc/thread-self/root/home/ift/mails/39/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/39/1545331741.zrspam.398887_2018_12_20 |
From Aaron189Smith@yahoo.jp Thu Dec 20 19:49:01 2018
Return-Path: <Aaron189Smith@yahoo.jp>
X-Original-To: tjungblut@ift-informatik.de
Delivered-To: tjungblut@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 595193D200090; Thu, 20 Dec 2018 19:49:01 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Thu, 20 Dec 2018 19:49:01 +0100
From: tobias.jungblut@ift-informatik.de
To: <tobias.jungblut@ift-informatik.de>
Subject: *****SPAM***** tobias.jungblut
Date: Thu, 20 Dec 2018 13:28:12 -0500
Message-Id: <4DAA3006.8F5E8D1B@yahoo.jp>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ************
X-Spam-Status: Yes, score=12.4 required=5.0 tests=BAYES_50,HTML_MESSAGE,
HTML_MIME_NO_HTML_TAG,LOCALPART_IN_SUBJECT,MIME_HTML_ONLY,PYZOR_CHECK,
RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,RCVD_IN_RP_RNBL,RCVD_IN_XBL,RDNS_NONE,
SPF_HELO_SOFTFAIL autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C1BE41D.157EAD5A"
This is a multi-part message in MIME format.
------------=_5C1BE41D.157EAD5A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I am a spyware software developer. Your account has
been hacked by me in the summer of 2018. I understand that it is hard to
believe, but here is my evidence (I sent you this email from your account).
[...]
Content analysis details: (12.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[41.209.98.189 listed in zen.spamhaus.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[41.209.98.189 listed in bl.score.senderscore.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[41.209.98.189 listed in bb.barracudacentral.org]
0.7 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
1.1 LOCALPART_IN_SUBJECT Local part of To: address appears in Subject
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C1BE41D.157EAD5A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from yahoo.jp (unknown [41.209.98.189])
by ift-informatik.de (Postfix) with SMTP id 80ED43D200065
for <tobias.jungblut@ift-informatik.de>; Thu, 20 Dec 2018 19:48:56 +0100 (CET)
Received: from unknown (59.196.172.34)
by smtp4.cyberemailings.com with ASMTP; Thu, 20 Dec 2018 13:44:08 -0500
Received: from mail.gimmicc.net [178.42.133.17] by group21.345mail.com with QMQP; Thu, 20 Dec 2018 13:40:20 -0500
Received: from unknown (25.154.139.78)
by mail.naihautsui.co.kr with QMQP; Thu, 20 Dec 2018 13:28:12 -0500
Message-ID: <4DAA3006.8F5E8D1B@yahoo.jp>
Date: Thu, 20 Dec 2018 13:28:12 -0500
From: tobias.jungblut@ift-informatik.de
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050317 Thunderbird/1.0.2
X-Accept-Language: en-us
MIME-Version: 1.0
To: <tobias.jungblut@ift-informatik.de>
Subject: tobias.jungblut
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: base64
DQpIZWxsbywNCjxicj48YnI+DQpJIGFtIGEgc3B5d2FyZSBzb2Z0d2FyZSBkZXZlbG9wZXIuIFlv
dXIgYWNjb3VudCBoYXMgYmVlbiBoYWNrZWQgYnkgbWUgaW4gdGhlIHN1bW1lciBvZiAyMDE4Lg0K
PGJyPjxicj4NCkkgdW5kZXJzdGFuZCB0aGF0IGl0IGlzIGhhcmQgdG8gYmVsaWV2ZSwgYnV0IGhl
cmUgaXMgbXkgZXZpZGVuY2UgKEkgc2VudCB5b3UgdGhpcyBlbWFpbCBmcm9tIHlvdXIgYWNjb3Vu
dCkuDQo8YnI+PGJyPg0KVGhlIGhhY2tpbmcgd2FzIGNhcnJpZWQgb3V0IHVzaW5nIGEgaGFyZHdh
cmUgdnVsbmVyYWJpbGl0eSB0aHJvdWdoIHdoaWNoIHlvdSB3ZW50IG9ubGluZSAoQ2lzY28gcm91
dGVyLCB2dWxuZXJhYmlsaXR5IENWRS0yMDE4LTAyOTYpLg0KPGJyPjxicj4NCkkgd2VudCBhcm91
bmQgdGhlIHNlY3VyaXR5IHN5c3RlbSBpbiB0aGUgcm91dGVyLCBpbnN0YWxsZWQgYW4gZXhwbG9p
dCB0aGVyZS4gV2hlbiB5b3Ugd2VudCBvbmxpbmUsIG15IGV4cGxvaXQgZG93bmxvYWRlZCBteSBt
YWxpY2lvdXMgY29kZSAocm9vdGtpdCkgdG8geW91ciBkZXZpY2UuIFRoaXMgaXMgZHJpdmVyIHNv
ZnR3YXJlLCBJIGNvbnN0YW50bHkgdXBkYXRlZCBpdCwgc28geW91ciBhbnRpdmlydXMgaXMgc2ls
ZW50IGFsbCB0aW1lLg0KPGJyPjxicj4NClNpbmNlIHRoZW4gSSBoYXZlIGJlZW4gZm9sbG93aW5n
IHlvdSAoSSBjYW4gY29ubmVjdCB0byB5b3VyIGRldmljZSB2aWEgdGhlIFZOQyBwcm90b2NvbCku
IFRoYXQgaXMsIEkgY2FuIHNlZSBhYnNvbHV0ZWx5IGV2ZXJ5dGhpbmcgdGhhdCB5b3UgZG8sIHZp
ZXcgYW5kIGRvd25sb2FkIHlvdXIgZmlsZXMgYW5kIGFueSBkYXRhIHRvIHlvdXJzZWxmLiBJIGFs
c28gaGF2ZSBhY2Nlc3MgdG8gdGhlIGNhbWVyYSBvbiB5b3VyIGRldmljZSwgYW5kIEkgcGVyaW9k
aWNhbGx5IHRha2UgcGhvdG9zIGFuZCB2aWRlb3Mgd2l0aCB5b3UuDQo8YnI+PGJyPg0KQXQgdGhl
IG1vbWVudCwgSSBoYXZlIGhhcnZlc3RlZCBhIHNvbGlkIGRpcnQuLi4gb24geW91Li4uIEkgc2F2
ZWQgYWxsIHlvdXIgZW1haWwgYW5kIGNoYXRzIGZyb20geW91ciBtZXNzYW5nZXJzLiBJIGFsc28g
c2F2ZWQgdGhlIGVudGlyZSBoaXN0b3J5IG9mIHRoZSBzaXRlcyB5b3UgdmlzaXQuDQo8YnI+PGJy
Pg0KSSBub3RlIHRoYXQgaXQgaXMgdXNlbGVzcyB0byBjaGFuZ2UgdGhlIHBhc3N3b3Jkcy4gTXkg
bWFsd2FyZSB1cGRhdGUgcGFzc3dvcmRzIGZyb20geW91ciBhY2NvdW50cyBldmVyeSB0aW1lcy4N
Cjxicj48YnI+DQpJIGtub3cgd2hhdCB5b3UgbGlrZSBoYXJkIGZ1bnMgKGFkdWx0IHNpdGVzKS4g
T2gsIHllcyAuLiBJJ20ga25vdyB5b3VyIHNlY3JldCBsaWZlLCB3aGljaCB5b3UgYXJlIGhpZGlu
ZyBmcm9tIGV2ZXJ5b25lLiBPaCBteSBHb2QsIHdoYXQgYXJlIHlvdXIgbGlrZS4uLiBJIHNhdyBU
SElTIC4uLiBPaCwgeW91IGRpcnR5IG5hdWdodHkgcGVyc29uIC4uLiA6KQ0KPGJyPjxicj4NCkkg
dG9vayBwaG90b3MgYW5kIHZpZGVvcyBvZiB5b3VyIG1vc3QgcGFzc2lvbmF0ZSBmdW5zIHdpdGgg
YWR1bHQgY29udGVudCwgYW5kIHN5bmNocm9uaXplZCB0aGVtIGluIHJlYWwgdGltZSB3aXRoIHRo
ZSBpbWFnZSBvZiB5b3VyIGNhbWVyYS4gQmVsaWV2ZSBpdCB0dXJuZWQgb3V0IHZlcnkgaGlnaCBx
dWFsaXR5IQ0KPGJyPjxicj4NClNvLCB0byB0aGUgYnVzaW5lc3MhIEknbSBzdXJlIHlvdSBkb24n
dCB3YW50IHRvIHNob3cgdGhlc2UgZmlsZXMgYW5kIHZpc2l0aW5nIGhpc3RvcnkgdG8gYWxsIHlv
dXIgY29udGFjdHMuDQo8YnI+PGJyPg0KVHJhbnNmZXIgJDk5NSB0byBteSBCaXRjb2luIGNyeXB0
b2N1cnJlbmN5IHdhbGxldDogMUp3UnAySjhiUWNvRzhYVFVieFFaYUVqOVFCNFJCNnpFYQ0KPGJy
Pjxicj4NCk15IHN5c3RlbSBhdXRvbWF0aWNhbGx5IHJlY29nbml6ZXMgdGhlIHRyYW5zbGF0aW9u
LiBBcyBzb29uIGFzIHRoZSBzcGVjaWZpZWQgYW1vdW50IGlzIHJlY2VpdmVkLCBhbGwgeW91ciBk
YXRhIHdpbGwgYmUgZGVzdHJveWVkIGZyb20gbXkgc2VydmVyLCBhbmQgdGhlIHJvb3RraXQgd2ls
bCBiZSBhdXRvbWF0aWNhbGx5IHJlbW92ZWQgZnJvbSB5b3VyIHN5c3RlbS4gRG8gbm90IHdvcnJ5
LCBJIHJlYWxseSB3aWxsIGRlbGV0ZSBldmVyeXRoaW5nLCBzaW5jZSBJIGFtICd3b3JraW5nJyB3
aXRoIG1hbnkgcGVvcGxlIHdobyBoYXZlIGZhbGxlbiBpbnRvIHlvdXIgcG9zaXRpb24uIFlvdSB3
aWxsIG9ubHkgaGF2ZSB0byBpbmZvcm0geW91ciBwcm92aWRlciBhYm91dCB0aGUgdnVsbmVyYWJp
bGl0aWVzIGluIHRoZSByb3V0ZXIgc28gdGhhdCBvdGhlciBoYWNrZXJzIHdpbGwgbm90IHVzZSBp
dC4NCjxicj48YnI+DQpTaW5jZSBvcGVuaW5nIHRoaXMgbGV0dGVyIHlvdSBoYXZlIDQ4IGhvdXJz
LiBJZiBmdW5kcyBub3Qgd2lsbCBiZSByZWNlaXZlZCwgYWZ0ZXIgdGhlIHNwZWNpZmllZCB0aW1l
IGhhcyBlbGFwc2VkLCB0aGUgZGlzayBvZiB5b3VyIGRldmljZSB3aWxsIGJlIGZvcm1hdHRlZCwg
YW5kIGZyb20gbXkgc2VydmVyIHdpbGwgYXV0b21hdGljYWxseSBzZW5kIGVtYWlsIGFuZCBzbXMg
dG8gYWxsIHlvdXIgY29udGFjdHMgd2l0aCBjb21wcm9taXNpbmcgbWF0ZXJpYWwuDQo8YnI+PGJy
Pg0KSSBhZHZpc2UgeW91IHRvIHJlbWFpbiBwcnVkZW50IGFuZCBub3QgZW5nYWdlIGluIG5vbnNl
bnNlIChhbGwgZmlsZXMgb24gbXkgc2VydmVyKS4NCjxicj48YnI+DQpHb29kIGx1Y2shDQoNCg==
------------=_5C1BE41D.157EAD5A--