| Current Path : /proc/thread-self/root/home/ift/mails/40/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/40/1546063882.zrspam.402394_2018_12_29 |
From LawrenceCoxjoms@ertelecom.ru Sat Dec 29 07:11:22 2018
Return-Path: <LawrenceCoxjoms@ertelecom.ru>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 560843D200065; Sat, 29 Dec 2018 07:11:22 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Sat, 29 Dec 2018 07:11:22 +0100
From: =?utf-8?B?IkFsYW5hIiA8TGF3cmVuY2VDb3hqb21zQGVydGVsZWNvbS5ydT4=?=@ift-informatik.de
To: "Alana" <info@ift-informatik.de>
Subject: *****SPAM***** =?utf-8?B?TGFuZ2UgbmljaHRzIHZvbiBkaXIgZ2Vob3J0LA==?=
Date: Sat, 29 Dec 2018 08:36:44 +0300
Message-Id: <2FFA5E45.7FA6A074@ertelecom.ru>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *****************************
X-Spam-Status: Yes, score=29.0 required=5.0 tests=BAYES_99,
CK_HELO_DYNAMIC_SPLIT_IP,CK_HELO_GENERIC,FROM_EXCESS_BASE64,
HELO_DYNAMIC_IPADDR2,HTML_MESSAGE,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PBL,
RCVD_IN_PSBL,RCVD_IN_RP_RNBL,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,RDNS_NONE,
T_FRT_CONTACT,URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A
autolearn=spam autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C27100A.EDC34B5A"
This is a multi-part message in MIME format.
------------=_5C27100A.EDC34B5A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Ich heisse Alexa. Ich bin 25. Ich bin jetzt sehr einsam und
gelangweilt... Ich habe nach Facebook gesucht und dich gefunden Und ....
ich liebe Sex sehr. Willst du mich ficken?? Es gibt viele meiner Fotos und
Kontakte. [...]
Content analysis details: (29.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: emilycrouter.su]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: emilycrouter.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[88.87.79.99 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[88.87.79.99 listed in psbl.surriel.com]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: emilycrouter.su]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?88.87.79.99>]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: emilycrouter.su]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[88.87.79.99 listed in bl.score.senderscore.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[88.87.79.99 listed in bl.mailspike.net]
0.0 T_FRT_CONTACT BODY: ReplaceTags: Contact
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[88.87.79.99 listed in bb.barracudacentral.org]
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[88.87.79.99 listed in dnsbl.sorbs.net]
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C27100A.EDC34B5A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 88x87x79x99.static-business.volgograd.ertelecom.ru (unknown [88.87.79.99])
by ift-informatik.de (Postfix) with ESMTP id 478723D200010
for <info@ift-informatik.de>; Sat, 29 Dec 2018 07:11:20 +0100 (CET)
Received: from [170.160.40.221] by mtu23.bigping.com with ESMTP; Sat, 29 Dec 2018 09:09:45 +0300
Received: from smtp.mixedthings.net ([35.98.105.210]) by mail.webhostings4u.com with SMTP; Sat, 29 Dec 2018 08:55:32 +0300
Received: from asx121.turbo-inline.com ([31.79.214.131]) by smtp.doneohx.com with ASMTP; Sat, 29 Dec 2018 08:36:44 +0300
Message-ID: <2FFA5E45.7FA6A074@ertelecom.ru>
Date: Sat, 29 Dec 2018 08:36:44 +0300
Reply-To: =?utf-8?B?IkFsYW5hIiA8TGF3cmVuY2VDb3hqb21zQGVydGVsZWNvbS5ydT4=?=
From: =?utf-8?B?IkFsYW5hIiA8TGF3cmVuY2VDb3hqb21zQGVydGVsZWNvbS5ydT4=?=
User-Agent: Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
MIME-Version: 1.0
To: "Alana" <info@ift-informatik.de>
Subject: =?utf-8?B?TGFuZ2UgbmljaHRzIHZvbiBkaXIgZ2Vob3J0LA==?=
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64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------------=_5C27100A.EDC34B5A--