| Current Path : /proc/thread-self/root/home/ift/mails/39/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/39/1545393424.zrspam.399191_2018_12_21 |
From DavidMoore@castelecom.com.br Fri Dec 21 12:57:04 2018
Return-Path: <DavidMoore@castelecom.com.br>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 277673D20009B; Fri, 21 Dec 2018 12:57:04 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Fri, 21 Dec 2018 12:57:04 +0100
From: "Emelia" <DavidMoore@castelecom.com.br>
To: "Emelia" <christian.gabriel@ift-informatik.de>
Subject: *****SPAM***** will we schedule an appointment for today?
Date: Fri, 21 Dec 2018 11:11:10 +0300
Message-Id: <393AD063.8587129F@castelecom.com.br>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *************************
X-Spam-Status: Yes, score=25.8 required=5.0 tests=BAYES_99,
CK_HELO_DYNAMIC_SPLIT_IP,FR_3TAG_3TAG,HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,
MIME_BASE64_TEXT,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L4,RCVD_IN_PSBL,
RCVD_IN_RP_RNBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RDNS_DYNAMIC,TVD_RCVD_IP,
URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=spam
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C1CD510.B2119633"
This is a multi-part message in MIME format.
------------=_5C1CD510.B2119633
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Reagan. Its my first time in your city, and I need
help... And .... I love sex very much. Can we meet? Here is my profile and
contacts. http://ericawhiter.su because it happens that our consciousness
moves intermittently in [...]
Content analysis details: (25.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: ericawhiter.su]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: ericawhiter.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[170.0.126.103 listed in zen.spamhaus.org]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: ericawhiter.su]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: ericawhiter.su]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?170.0.126.103>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[170.0.126.103 listed in psbl.surriel.com]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 TVD_RCVD_IP No description available.
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[170.0.126.103 listed in bl.score.senderscore.com]
0.0 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)
[170.0.126.103 listed in bl.mailspike.net]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[170.0.126.103 listed in dnsbl.sorbs.net]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[170.0.126.103 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 FR_3TAG_3TAG RAW: Looks like 3 <e> small tags.
1.7 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C1CD510.B2119633
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 103-126-0-170.castelecom.com.br (103-126-0-170.castelecom.com.br [170.0.126.103])
by ift-informatik.de (Postfix) with ESMTP id B219D3D200011
for <christian.gabriel@ift-informatik.de>; Fri, 21 Dec 2018 12:56:59 +0100 (CET)
Received: from m1.gns.snv.thisdomainl.com ([73.79.194.117]) by group21.345mail.com with ASMTP; Fri, 21 Dec 2018 11:44:32 +0300
Received: from [68.128.209.220] by mail.naihautsui.co.kr with NNFMP; Fri, 21 Dec 2018 11:31:23 +0300
Received: from unknown (72.99.241.226)
by rly04.hottestmile.com with SMTP; Fri, 21 Dec 2018 11:20:55 +0300
Received: from unknown (16.123.53.110)
by smtp18.yenddx.com with LOCAL; Fri, 21 Dec 2018 11:11:10 +0300
Message-ID: <393AD063.8587129F@castelecom.com.br>
Date: Fri, 21 Dec 2018 11:11:10 +0300
From: "Emelia" <DavidMoore@castelecom.com.br>
User-Agent: Mozilla/4.79C-CCK-MCD {C-UDP; EBM-APPLE} (Macintosh; U; PPC)
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Emelia" <christian.gabriel@ift-informatik.de>
Subject: will we schedule an appointment for today?
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64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------------=_5C1CD510.B2119633--