| Current Path : /proc/thread-self/root/home/ift/mails/40/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/40/1545731609.zrspam.400901_2018_12_25 |
From RobertStevens@zebra.lt Tue Dec 25 10:53:29 2018
Return-Path: <RobertStevens@zebra.lt>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 8D1C23D200064; Tue, 25 Dec 2018 10:53:29 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Tue, 25 Dec 2018 10:53:29 +0100
From: "Brooke" <RobertStevens@zebra.lt>
To: "Brooke" <info@ift-informatik.de>
Subject: *****SPAM***** Just look who's here with us!
Date: Tue, 25 Dec 2018 12:16:23 +0300
Message-Id: <C081D453.DC09774E@zebra.lt>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ****************************
X-Spam-Status: Yes, score=28.4 required=5.0 tests=BAYES_99,
CK_HELO_DYNAMIC_SPLIT_IP,CK_HELO_GENERIC,FR_3TAG_3TAG,HELO_DYNAMIC_IPADDR2,
HTML_MESSAGE,MIME_BASE64_TEXT,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,
RCVD_IN_RP_RNBL,RCVD_IN_XBL,TVD_RCVD_IP,URIBL_BLOCKED,URIBL_DBL_SPAM,
URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=spam autolearn_force=no
version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C21FE19.973D9D06"
This is a multi-part message in MIME format.
------------=_5C21FE19.973D9D06
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Amelia. I am 25. I'm very lonely and bored right
now... I was looking for facebook and found you. And .... I love sex very
much. Do you want fuuuck me today or tomorrow? Here are more of my private
photos and contacts. [...]
Content analysis details: (28.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: emilycrouter.su]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: emilycrouter.su]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: emilycrouter.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[88.119.221.196 listed in zen.spamhaus.org]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: emilycrouter.su]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: emilycrouter.su]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?88.119.221.196>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[88.119.221.196 listed in psbl.surriel.com]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 TVD_RCVD_IP No description available.
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[88.119.221.196 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[88.119.221.196 listed in bl.score.senderscore.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[88.119.221.196 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 FR_3TAG_3TAG RAW: Looks like 3 <e> small tags.
1.7 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C21FE19.973D9D06
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 88-119-221-201.static.zebra.lt (88-119-221-196.static.zebra.lt [88.119.221.196])
by ift-informatik.de (Postfix) with ESMTP id 6110A3D200051
for <info@ift-informatik.de>; Tue, 25 Dec 2018 10:53:25 +0100 (CET)
Received: from unknown (28.132.34.177)
by webmail.halftomorrow.com with SMTP; Tue, 25 Dec 2018 12:36:11 +0300
Received: from webmail.halftomorrow.com [207.153.48.129] by mts.locks.grgtween.net with QMQP; Tue, 25 Dec 2018 12:16:23 +0300
Message-ID: <C081D453.DC09774E@zebra.lt>
Date: Tue, 25 Dec 2018 12:16:23 +0300
From: "Brooke" <RobertStevens@zebra.lt>
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.4) Gecko/20030624 Sylera/1.2.3
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Brooke" <info@ift-informatik.de>
Subject: Just look who's here with us!
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64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------------=_5C21FE19.973D9D06--