
| Current Path : /proc/thread-self/root/home/ift/mails/39/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/39/1545405180.zrspam.399271_2018_12_21 |
From TerryYoungekezw@lukman.pl Fri Dec 21 16:13:00 2018
Return-Path: <TerryYoungekezw@lukman.pl>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id B06C63D20009B; Fri, 21 Dec 2018 16:13:00 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Fri, 21 Dec 2018 16:13:00 +0100
From: =?utf-8?B?IktpcmEiIDxUZXJyeVlvdW5nZWtlendAbHVrbWFuLnBsPg==?=@ift-informatik.de
To: "Kira" <info@ift-informatik.de>
Subject: *****SPAM***** =?utf-8?B?SGksIGljaCBmdWhsZSBtaWNoIGVjaHQgZWluc2FtLi4u?=
Date: Fri, 21 Dec 2018 14:53:13 +0300
Message-Id: <971E90A5.58675251@lukman.pl>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ********************
X-Spam-Status: Yes, score=20.6 required=5.0 tests=BAYES_99,
CK_HELO_DYNAMIC_SPLIT_IP,FROM_EXCESS_BASE64,HTML_MESSAGE,MIME_HTML_ONLY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,
RCVD_IN_RP_RNBL,RCVD_IN_XBL,RDNS_DYNAMIC,TVD_RCVD_IP,T_FRT_CONTACT,
URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=no
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C1D02FC.6562CFB4"
This is a multi-part message in MIME format.
------------=_5C1D02FC.6562CFB4
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Ich heisse Lyla. Es ist mein erstes Mal in deiner Stadt. Und
ich brauche Hilfe ... Und .... ich liebe Sex sehr. Konnen wir uns treffen?
Hier ist mein Profil und meine Kontakte. http://ericawhiter.su [...]
Content analysis details: (20.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: 24-info.info]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: ericawhiter.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[94.240.25.211 listed in zen.spamhaus.org]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: ericawhiter.su]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: ericawhiter.su]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[94.240.25.211 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?94.240.25.211>]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 TVD_RCVD_IP No description available.
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[94.240.25.211 listed in bl.score.senderscore.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[94.240.25.211 listed in bl.mailspike.net]
0.0 T_FRT_CONTACT BODY: ReplaceTags: Contact
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C1D02FC.6562CFB4
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 94-240-25-211.lukman.pl (94-240-25-211.lukman.pl [94.240.25.211])
by ift-informatik.de (Postfix) with ESMTP id 6232F3D200011
for <info@ift-informatik.de>; Fri, 21 Dec 2018 16:12:58 +0100 (CET)
Received: from external.newsubdomain.com ([199.116.242.177]) by mtu67.syds.piswix.net with SMTP; Fri, 21 Dec 2018 15:07:33 +0300
Received: from unknown (34.199.20.131)
by smtp.doneohx.com with SMTP; Fri, 21 Dec 2018 14:53:13 +0300
Message-ID: <971E90A5.58675251@lukman.pl>
Date: Fri, 21 Dec 2018 14:53:13 +0300
From: =?utf-8?B?IktpcmEiIDxUZXJyeVlvdW5nZWtlendAbHVrbWFuLnBsPg==?=
User-Agent: Mozilla 4.7 [en] (Win95; I)
MIME-Version: 1.0
To: "Kira" <info@ift-informatik.de>
Subject: =?utf-8?B?SGksIGljaCBmdWhsZSBtaWNoIGVjaHQgZWluc2FtLi4u?=
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64
PCFkb2N0eXBlIGh0bWw+DQo8aHRtbD4NCjxoZWFkPg0KPG1ldGEgY2hhcnNldD0idXRmLTgiPg0K
PC9oZWFkPg0KPGJvZHk+DQo8cD5JY2ggaGVpc3NlIEx5bGEuIEVzIGlzdCBtZWluIGVyc3RlcyBN
YWwgaW4gZGVpbmVyIFN0YWR0LiBVbmQgaWNoIGJyYXVjaGUgSGlsZmUgLi4uPGRpdj48L2Rpdj4N
CiAgVW5kIC4uLi4gaWNoIGxpZWJlIFNleCBzZWhyLiBLb25uZW4gd2lyIHVucyB0cmVmZmVuPyBI
aWVyIGlzdCBtZWluIFByb2ZpbCB1bmQgbWVpbmUgS29udGFrdGUuIDxkaXY+PC9kaXY+DQo8L3A+
DQo8YSBocmVmPSJodHRwOi8vZXJpY2F3aGl0ZXIuc3UiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8v
ZXJpY2F3aGl0ZXIuc3UgIDx1bD48cD48L3A+PC91bD48L2E+DQo8dGFibGU+DQo8dHI+DQo8dGQg
YmFja2dyb3VuZD0iaHR0cDovLzI0LWluZm8uaW5mby91cGxvYWRzL3Bvc3RzLzIwMTgtMDcvZGV2
dXNoa2ktZm90b2dyYWZpcnV5dXQtc2VieWEtcGVyZWQtemVya2Fsb20tNzAtZm90b18xMy5qcGci
IHZhbGlnbj0idG9wIiBzdHlsZT0iYmFja2dyb3VuZDogdXJsKGh0dHBzOi8vdGh1bWItcDMueGhj
ZG4uY29tL2EvaTh4UEJBeE8xVTZFU1h0QWdSNS1tZy8wMDAvMTEwLzg2OS80MjNfMTAwMC5qcGcp
IG5vLXJlcGVhdCBjZW50ZXI7YmFja2dyb3VuZC1wb3NpdGlvbjogdG9wOyI+PCEtLVtpZiBndGUg
bXNvIDldPiA8djpyZWN0IHhtbG5zOnY9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206dm1sIiBm
aWxsPSJ0cnVlIiBzdHJva2U9ImZhbHNlIiBzdHlsZT0ibXNvLXdpZHRoLXBlcmNlbnQ6MTAwMDto
ZWlnaHQ6MTcwM3B4OyI+IDx2OmZpbGwgdHlwZT0idGlsZSIgc3JjPSJodHRwczovL3RodW1iLXA3
LnhoY2RuLmNvbS9hL0JNZzFRN1J6UTFZVzhWRE04Y3AwOWcvMDAwLzExMC84NjkvNDE3XzEwMDAu
anBnIiAgLz4gPHY6dGV4dGJveCBpbnNldD0iMCwwLDAsMCI+IDwhW2VuZGlmXS0tPjxvbD48cD48
L3A+PC9vbD4NCjxkaXY+DQo8Y2VudGVyPg0KPHRhYmxlIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFk
ZGluZz0iMCIgd2lkdGg9IjYwMCIgaGVpZ2h0PSIxODAzIiBjbGFzcz0idzMyMCI+DQo8dHI+DQo8
dGQgdmFsaWduPSJtaWRkbGUiIHN0eWxlPSJ2ZXJ0aWNhbC1hbGlnbjptaWRkbGU7dGV4dC1hbGln
bjpsZWZ0OyIgY2xhc3M9Im1vYmlsZS1jZW50ZXIiIGhlaWdodD0iMTgwMyI+PHRhYmxlIHdpZHRo
PSI4MyUiIGJvcmRlcj0iMCI+PHRib2R5Pjx0cj48dGQ+PC90ZD48dGQ+PC90ZD48L3RyPjwvdGJv
ZHk+PC90YWJsZT4gPC90ZD4NCjwvdHI+DQo8L3RhYmxlPg0KPC9jZW50ZXI+DQo8L2Rpdj4NCjwh
LS1baWYgZ3RlIG1zbyA5XT4gPC92OnRleHRib3g+IDwvdjpyZWN0PiA8IVtlbmRpZl0tLT48L3Rk
Pg0KPC90cj4NCjwvdGFibGU+DQo8cD5Zb3Uga25vdyBvZiBjb3Vyc2UgdGhhdCBhIG1hdGhlbWF0
aWNhbCBsaW5lLCBhIGxpbmUgb2YgdGhpY2tuZXNzPC9wPg0KPHA+ZXhpc3QuIEFsbCByZWFsIHRo
aW5ncy0tJzwvcD4NCjxwPklOU1RBTlRBTkVPVVMgY3ViZSBleGlzdD8nPC9wPg0KPHA+bmF0dXJh
bCBpbmZpcm1pdHkgb2YgdGhlIGZsZXNoLCB3aGljaCBJIHdpbGwgZXhwbGFpbiB0byB5b3UgaW4g
YTwvcD4NCjxwPmRpbWVuc2lvbnMsIHRocmVlIHdoaWNoIHdlIGNhbGwgdGhlIHRocmVlIHBsYW5l
cyBvZiBTcGFjZSwgYW5kIGE8L3A+DQo8cD5vbmUgZGlyZWN0aW9uIGFsb25nIHRoZSBsYXR0ZXIg
ZnJvbSB0aGUgYmVnaW5uaW5nIHRvIHRoZSBlbmQgb2Y8L3A+DQo8cD5hY2Nlc3Npb24gb2YgY2hl
ZXJmdWxuZXNzLiBgUmVhbGx5IHRoaXMgaXMgd2hhdCBpcyBtZWFudCBieSB0aGU8L3A+DQo8cD5s
b29raW5nIGF0IFRpbWUuIFRIRVJFIElTIE5PIERJRkZFUkVOQ0UgQkVUV0VFTiBUSU1FIEFORCBB
TlkgT0Y8L3A+DQo8L2JvZHk+DQo8L2h0bWw+DQo=
------------=_5C1D02FC.6562CFB4--