| Current Path : /proc/thread-self/root/home/ift/mails/39/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/39/1545480902.zrspam.399654_2018_12_22 |
From JesusStewartnoze@ursoftdns.com.br Sat Dec 22 13:15:02 2018
Return-Path: <JesusStewartnoze@ursoftdns.com.br>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id BB1FD3D200073; Sat, 22 Dec 2018 13:15:02 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Sat, 22 Dec 2018 13:15:02 +0100
From: "Anya" <JesusStewartnoze@ursoftdns.com.br>
To: "Anya" <christian.gabriel@ift-informatik.de>
Subject: *****SPAM***** Oh, where have you been all my life!
Date: Sat, 22 Dec 2018 04:07:18 -0800
Message-Id: <68EFBACC.0330FC21@ursoftdns.com.br>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ************************
X-Spam-Status: Yes, score=24.7 required=5.0 tests=BAYES_99,
CK_HELO_DYNAMIC_SPLIT_IP,HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,MIME_HTML_ONLY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,RCVD_IN_RP_RNBL,RCVD_IN_XBL,RDNS_DYNAMIC,
TVD_RCVD_IP,URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=spam
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C1E2AC6.F5442591"
This is a multi-part message in MIME format.
------------=_5C1E2AC6.F5442591
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Nora. Its my first time in your city, and I need
help... And .... I love sex very much. Can we meet? Here is my profile and
contacts. http://ericawhiter.su exist. All real things--' [...]
Content analysis details: (24.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: ericawhiter.su]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: ericawhiter.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[177.23.250.34 listed in zen.spamhaus.org]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: ericawhiter.su]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: ericawhiter.su]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[177.23.250.34 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?177.23.250.34>]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 TVD_RCVD_IP No description available.
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[177.23.250.34 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[177.23.250.34 listed in bl.score.senderscore.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.23.250.34 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C1E2AC6.F5442591
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 177-23-250-101.ursoftdns.com.br (177-23-250-34.ursoftdns.com.br [177.23.250.34])
by ift-informatik.de (Postfix) with ESMTP id 345DA3D200051
for <christian.gabriel@ift-informatik.de>; Sat, 22 Dec 2018 13:14:57 +0100 (CET)
Received: from external.newsubdomain.com ([114.98.4.247]) by rsmail.alkoholic.net with LOCAL; Sat, 22 Dec 2018 04:07:18 -0800
Message-ID: <68EFBACC.0330FC21@ursoftdns.com.br>
Date: Sat, 22 Dec 2018 04:07:18 -0800
Reply-To: "Anya" <JesusStewartnoze@ursoftdns.com.br>
From: "Anya" <JesusStewartnoze@ursoftdns.com.br>
User-Agent: Opera/7.11 (Linux 2.4.20-4GB i586; U) [en]
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Anya" <christian.gabriel@ift-informatik.de>
Subject: Oh, where have you been all my life!
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: base64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------------=_5C1E2AC6.F5442591--