| Current Path : /proc/thread-self/root/home/ift/mails/39/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/39/1545333391.zrspam.398905_2018_12_20 |
From ThomasThomas@wdm.pl Thu Dec 20 20:16:31 2018
Return-Path: <ThomasThomas@wdm.pl>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 317893D200090; Thu, 20 Dec 2018 20:16:31 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Thu, 20 Dec 2018 20:16:31 +0100
From: "Joelle" <ThomasThomas@wdm.pl>
To: "Joelle" <christian.gabriel@shortnote.de>
Subject: *****SPAM***** Haven't you seen it yet? Oh hell, and why I have not found it before
Date: Thu, 20 Dec 2018 21:29:55 +0300
Message-Id: <3CE2CC77.DFAD8171@wdm.pl>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *********************
X-Spam-Status: Yes, score=21.2 required=5.0 tests=BAYES_99,
CK_HELO_DYNAMIC_SPLIT_IP,HTML_MESSAGE,MIME_BASE64_TEXT,MIME_HTML_ONLY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,
RCVD_IN_RP_RNBL,RCVD_IN_XBL,RDNS_NONE,TVD_RCVD_IP,URIBL_BLOCKED,
URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=no autolearn_force=no
version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C1BEA8F.BB55FDE5"
This is a multi-part message in MIME format.
------------=_5C1BEA8F.BB55FDE5
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Madison. Its my first time in your city, and I
need help... And .... I love sex very much. Can we meet? Here is my profile
and contacts. http://ericawhiter.su `That is all right,' said the Psychologist.
[...]
Content analysis details: (21.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: 24-info.info]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: ericawhiter.su]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: ericawhiter.su]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: ericawhiter.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[185.39.161.135 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[185.39.161.135 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?185.39.161.135>]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 TVD_RCVD_IP No description available.
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[185.39.161.135 listed in bl.score.senderscore.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[185.39.161.135 listed in bl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.7 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C1BEA8F.BB55FDE5
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 185-39-161-135.wdm.pl (unknown [185.39.161.135])
by ift-informatik.de (Postfix) with ESMTP id EC3EB3D200065
for <christian.gabriel@shortnote.de>; Thu, 20 Dec 2018 20:16:28 +0100 (CET)
Received: from unknown (109.241.177.17)
by mxs.perenter.com with NNFMP; Thu, 20 Dec 2018 22:10:23 +0300
Received: from webmail.halftomorrow.com [65.126.212.51] by mail.naihautsui.co.kr with ESMTP; Thu, 20 Dec 2018 21:54:56 +0300
Received: from unknown (151.80.223.75)
by snmp.otwaloow.com with LOCAL; Thu, 20 Dec 2018 21:53:01 +0300
Received: from unknown (HELO relay37.vosimerkam.net) (Thu, 20 Dec 2018 21:33:52 +0300)
by qrx.quickslick.com with SMTP; Thu, 20 Dec 2018 21:33:52 +0300
Received: from mmx09.tilkbans.com ([169.116.48.64]) by rsmail.alkoholic.net with SMTP; Thu, 20 Dec 2018 21:29:55 +0300
Message-ID: <3CE2CC77.DFAD8171@wdm.pl>
Date: Thu, 20 Dec 2018 21:29:55 +0300
Reply-To: "Joelle" <ThomasThomas@wdm.pl>
From: "Joelle" <ThomasThomas@wdm.pl>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
MIME-Version: 1.0
To: "Joelle" <christian.gabriel@shortnote.de>
Subject: Haven't you seen it yet? Oh hell, and why I have not found it before
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64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=
------------=_5C1BEA8F.BB55FDE5--