| Current Path : /proc/thread-self/root/home/ift/mails/40/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/40/1545822980.zrspam.401212_2018_12_26 |
From ThomasBell@krasnet.ru Wed Dec 26 12:16:20 2018
Return-Path: <ThomasBell@krasnet.ru>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 70F0C3D200073; Wed, 26 Dec 2018 12:16:20 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Wed, 26 Dec 2018 12:16:20 +0100
From: "Helen" <ThomasBell@krasnet.ru>
To: "Helen" <info@ift-informatik.de>
Subject: *****SPAM***** Will you allow me to be your dessert for today's dinner?
Date: Wed, 26 Dec 2018 13:53:32 +0300
Message-Id: <AB53E79D.13FE0B1A@krasnet.ru>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *************************
X-Spam-Status: Yes, score=25.2 required=5.0 tests=BAYES_99,CK_HELO_GENERIC,
HELO_DYNAMIC_HCC,HELO_DYNAMIC_IPADDR,HTML_MESSAGE,MIME_BASE64_TEXT,
MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PSBL,RCVD_IN_RP_RNBL,
RCVD_IN_XBL,RDNS_NONE,URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A
autolearn=spam autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C236304.24991EA8"
This is a multi-part message in MIME format.
------------=_5C236304.24991EA8
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Scarlett. I am 25. I'm very lonely and bored right
now... I was looking for facebook and found you. And .... I love sex very
much. Do you want fuuuck me today or tomorrow? Here are more of my private
photos and contacts. [...]
Content analysis details: (25.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: emilycrouter.su]
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: emilycrouter.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[95.188.79.79 listed in zen.spamhaus.org]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: emilycrouter.su]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: emilycrouter.su]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[95.188.79.79 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?95.188.79.79>]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[95.188.79.79 listed in bl.score.senderscore.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[95.188.79.79 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.7 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.0 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
2.8 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C236304.24991EA8
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from static.79.79.188.95.dsl.krasnet.ru (unknown [95.188.79.79])
by ift-informatik.de (Postfix) with ESMTP id F192E3D200065
for <info@ift-informatik.de>; Wed, 26 Dec 2018 12:16:16 +0100 (CET)
Received: from unknown (48.231.132.110)
by mail.webhostings4u.com with SMTP; Wed, 26 Dec 2018 14:07:35 +0300
Received: from unknown (108.72.165.53)
by mtu23.bigping.com with QMQP; Wed, 26 Dec 2018 13:53:32 +0300
Message-ID: <AB53E79D.13FE0B1A@krasnet.ru>
Date: Wed, 26 Dec 2018 13:53:32 +0300
Reply-To: "Helen" <ThomasBell@krasnet.ru>
From: "Helen" <ThomasBell@krasnet.ru>
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.2) Gecko/20010726 Netscape6/6.1
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Helen" <info@ift-informatik.de>
Subject: Will you allow me to be your dessert for today's dinner?
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64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=
------------=_5C236304.24991EA8--