
| Current Path : /proc/thread-self/root/home/ift/mails/39/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/39/1545346578.zrspam.398983_2018_12_20 |
From RichardMartinezozlii@asianet.co.th Thu Dec 20 23:56:18 2018
Return-Path: <RichardMartinezozlii@asianet.co.th>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id C79153D200090; Thu, 20 Dec 2018 23:56:18 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Thu, 20 Dec 2018 23:56:18 +0100
From: =?utf-8?B?IkF5bGEiIDxSaWNoYXJkTWFydGluZXpvemxpaUBhc2lhbmV0LmNvLnRoPg==?=@ift-informatik.de
To: "Ayla" <christian.gabriel@shortnote.de>
Subject: *****SPAM***** =?utf-8?B?RXJpbm5lcmUgbWljaA==?=
Date: Fri, 21 Dec 2018 04:32:31 +0600
Message-Id: <ADA6F804.17BFC2CB@asianet.co.th>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **************************
X-Spam-Status: Yes, score=26.7 required=5.0 tests=BAYES_99,
CK_HELO_DYNAMIC_SPLIT_IP,CK_HELO_GENERIC,FROM_EXCESS_BASE64,FR_3TAG_3TAG,
HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,
RCVD_IN_RP_RNBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,TVD_RCVD_IP,T_FRT_CONTACT,
URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=spam
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C1C1E12.617EA696"
This is a multi-part message in MIME format.
------------=_5C1C1E12.617EA696
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Ich heisse Elizabeth. Es ist mein erstes Mal in deiner Stadt.
Und ich brauche Hilfe ... Und .... ich liebe Sex sehr. Konnen wir uns treffen?
Hier ist mein Profil und meine Kontakte. http://ericawhiter.su [...]
Content analysis details: (26.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: ericawhiter.su]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: ericawhiter.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[119.46.2.242 listed in zen.spamhaus.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[119.46.2.242 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[119.46.2.242 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?119.46.2.242>]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: ericawhiter.su]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: ericawhiter.su]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[119.46.2.242 listed in bl.score.senderscore.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[119.46.2.242 listed in bl.mailspike.net]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 TVD_RCVD_IP No description available.
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[119.46.2.242 listed in bb.barracudacentral.org]
0.0 T_FRT_CONTACT BODY: ReplaceTags: Contact
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 FR_3TAG_3TAG RAW: Looks like 3 <e> small tags.
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C1C1E12.617EA696
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 119-46-2-249.static.asianet.co.th (119-46-2-242.static.asianet.co.th [119.46.2.242])
by ift-informatik.de (Postfix) with ESMTP id 3850B3D200065
for <christian.gabriel@shortnote.de>; Thu, 20 Dec 2018 23:56:14 +0100 (CET)
Received: from mx.reskind.net ([151.84.143.157]) by rly04.hottestmile.com with NNFMP; Fri, 21 Dec 2018 04:48:50 +0600
Message-ID: <ADA6F804.17BFC2CB@asianet.co.th>
Date: Fri, 21 Dec 2018 04:32:31 +0600
From: =?utf-8?B?IkF5bGEiIDxSaWNoYXJkTWFydGluZXpvemxpaUBhc2lhbmV0LmNvLnRoPg==?=
User-Agent: Mozilla 3.04 (WinNT; I)
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Ayla" <christian.gabriel@shortnote.de>
Subject: =?utf-8?B?RXJpbm5lcmUgbWljaA==?=
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64
PCFkb2N0eXBlIGh0bWw+DQo8aHRtbD4NCjxoZWFkPg0KPG1ldGEgY2hhcnNldD0idXRmLTgiPg0K
PC9oZWFkPg0KPGJvZHk+DQo8cD5JY2ggaGVpc3NlIEVsaXphYmV0aC4gRXMgaXN0IG1laW4gZXJz
dGVzIE1hbCBpbiBkZWluZXIgU3RhZHQuIFVuZCBpY2ggYnJhdWNoZSBIaWxmZSAuLi48bmF2Pjwv
bmF2Pg0KICBVbmQgLi4uLiBpY2ggbGllYmUgU2V4IHNlaHIuIEtvbm5lbiB3aXIgdW5zIHRyZWZm
ZW4/IEhpZXIgaXN0IG1laW4gUHJvZmlsIHVuZCBtZWluZSBLb250YWt0ZS4gPGJyPg0KPC9wPg0K
PGEgaHJlZj0iaHR0cDovL2VyaWNhd2hpdGVyLnN1IiB0YXJnZXQ9Il9ibGFuayI+aHR0cDovL2Vy
aWNhd2hpdGVyLnN1ICA8dWw+PC91bD48L2E+DQo8dGFibGU+DQo8dHI+DQo8dGQgYmFja2dyb3Vu
ZD0iaHR0cDovLzI0LWluZm8uaW5mby91cGxvYWRzL3Bvc3RzLzIwMTgtMTEvc2VsZmktZGV2dXNo
ZWstdi1tYXNoaW5lLTQzLWZvdG9fNjYuanBnIiB2YWxpZ249InRvcCIgc3R5bGU9ImJhY2tncm91
bmQ6IHVybChodHRwOi8vMjQtaW5mby5pbmZvL3VwbG9hZHMvcG9zdHMvMjAxOC0xMS9zZWxmaS1k
ZXZ1c2hlay12LW1hc2hpbmUtNDMtZm90b182OC5qcGcpIG5vLXJlcGVhdCBjZW50ZXI7YmFja2dy
b3VuZC1wb3NpdGlvbjogdG9wOyI+PCEtLVtpZiBndGUgbXNvIDldPiA8djpyZWN0IHhtbG5zOnY9
InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206dm1sIiBmaWxsPSJ0cnVlIiBzdHJva2U9ImZhbHNl
IiBzdHlsZT0ibXNvLXdpZHRoLXBlcmNlbnQ6MTAwMDtoZWlnaHQ6MTcwM3B4OyI+IDx2OmZpbGwg
dHlwZT0idGlsZSIgc3JjPSJodHRwOi8vMjQtaW5mby5pbmZvL3VwbG9hZHMvcG9zdHMvMjAxOC0x
MS9zZWxmaS1kZXZ1c2hlay12LW1hc2hpbmUtNDMtZm90b18xMC5qcGciICAvPiA8djp0ZXh0Ym94
IGluc2V0PSIwLDAsMCwwIj4gPCFbZW5kaWZdLS0+PHRhYmxlIHdpZHRoPSIyNSUiIGJvcmRlcj0i
MCI+PHRib2R5Pjx0cj48dGQ+PC90ZD48dGQ+PC90ZD48dGQ+PC90ZD48dGQ+PC90ZD48dGQ+PC90
ZD48L3RyPjwvdGJvZHk+PC90YWJsZT4NCjxkaXY+DQo8Y2VudGVyPg0KPHRhYmxlIGNlbGxzcGFj
aW5nPSIwIiBjZWxscGFkZGluZz0iMCIgd2lkdGg9IjYwMCIgaGVpZ2h0PSIxODAzIiBjbGFzcz0i
dzMyMCI+DQo8dHI+DQo8dGQgdmFsaWduPSJtaWRkbGUiIHN0eWxlPSJ2ZXJ0aWNhbC1hbGlnbjpt
aWRkbGU7dGV4dC1hbGlnbjpsZWZ0OyIgY2xhc3M9Im1vYmlsZS1jZW50ZXIiIGhlaWdodD0iMTgw
MyI+PHVsPjxwPjwvcD48L3VsPiA8L3RkPg0KPC90cj4NCjwvdGFibGU+DQo8L2NlbnRlcj4NCjwv
ZGl2Pg0KPCEtLVtpZiBndGUgbXNvIDldPiA8L3Y6dGV4dGJveD4gPC92OnJlY3Q+IDwhW2VuZGlm
XS0tPjwvdGQ+DQo8L3RyPg0KPC90YWJsZT4NCjxwPnRoaXMgbmV3IHBhcmFkb3ggKGFzIHdlIHRo
b3VnaHQgaXQ6KSBhbmQgaGlzIGZlY3VuZGl0eS48L3A+DQo8cD5gSXMgbm90IHRoYXQgcmF0aGVy
IGEgbGFyZ2UgdGhpbmcgdG8gZXhwZWN0IHVzIHRvIGJlZ2luIHVwb24/JzwvcD4NCjxwPllvdSBr
bm93IG9mIGNvdXJzZSB0aGF0IGEgbWF0aGVtYXRpY2FsIGxpbmUsIGEgbGluZSBvZiB0aGlja25l
c3M8L3A+DQo8cD5OSUwsIGhhcyBubyByZWFsIGV4aXN0ZW5jZS4gVGhleSB0YXVnaHQgeW91IHRo
YXQ/IE5laXRoZXIgaGFzPC9wPg0KPHA+YE5vciwgaGF2aW5nIG9ubHkgbGVuZ3RoLCBicmVhZHRo
LCBhbmQgdGhpY2tuZXNzLCBjYW4gYSBjdWJlPC9wPg0KPHA+RmlsYnkgYmVjYW1lIHBlbnNpdmUu
IGBDbGVhcmx5LCcgdGhlIFRpbWUgVHJhdmVsbGVyIHByb2NlZWRlZCw8L3A+DQo8cD5uYXR1cmFs
IGluZmlybWl0eSBvZiB0aGUgZmxlc2gsIHdoaWNoIEkgd2lsbCBleHBsYWluIHRvIHlvdSBpbiBh
PC9wPg0KPHA+YFRoYXQsJyBzYWlkIGEgdmVyeSB5b3VuZyBtYW4sIG1ha2luZyBzcGFzbW9kaWMg
ZWZmb3J0cyB0bzwvcD4NCjwvYm9keT4NCjwvaHRtbD4NCg==
------------=_5C1C1E12.617EA696--