| Current Path : /proc/thread-self/root/home/ift/mails/40/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //proc/thread-self/root/home/ift/mails/40/1546134181.zrspam.402724_2018_12_30 |
From JessePetersoneq@westcall.net Sun Dec 30 02:43:01 2018
Return-Path: <JessePetersoneq@westcall.net>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
id 73B4B3D200073; Sun, 30 Dec 2018 02:43:01 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
with SpamAssassin (version 3.4.0);
Sun, 30 Dec 2018 02:43:01 +0100
From: =?utf-8?B?Ik55bGFoIiA8SmVzc2VQZXRlcnNvbmVxQHdlc3RjYWxsLm5ldD4=?=@ift-informatik.de
To: "Nylah" <info@ift-informatik.de>
Subject: *****SPAM***** =?utf-8?B?S/ZubmVuIHdpciBlaW5lbiBUZXJtaW4gZvxyIGRhcyBXb2NoZW5lbmRlIHZlcmVpbmJhcmVuPw==?=
Date: Sun, 30 Dec 2018 04:05:52 +0300
Message-Id: <E48F1B2F.1F9A7E79@westcall.net>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *********************
X-Spam-Status: Yes, score=21.9 required=5.0 tests=BAYES_99,
CK_HELO_DYNAMIC_SPLIT_IP,FROM_EXCESS_BASE64,HTML_MESSAGE,MIME_HTML_ONLY,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,RCVD_IN_RP_RNBL,RCVD_IN_XBL,RDNS_NONE,
TVD_RCVD_IP,TVD_RCVD_SPACE_BRACKET,T_FRT_CONTACT,UNPARSEABLE_RELAY,
URIBL_BLOCKED,URIBL_JP_SURBL,URIBL_SBL,URIBL_SBL_A autolearn=no
autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C2822A5.F235399A"
This is a multi-part message in MIME format.
------------=_5C2822A5.F235399A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Ich heisse Sofia. Ich bin 25. Ich bin jetzt sehr einsam und
gelangweilt... Ich habe nach Facebook gesucht und dich gefunden Und ....
ich liebe Sex sehr. Willst du mich ficken?? Es gibt viele meiner Fotos und
Kontakte. [...]
Content analysis details: (21.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: emilycrouter.su]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: emilycrouter.su]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[109.167.249.41 listed in zen.spamhaus.org]
1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URIs: emilycrouter.su]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[109.167.249.41 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?109.167.249.41>]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9999]
0.0 TVD_RCVD_SPACE_BRACKET No description available.
0.0 TVD_RCVD_IP No description available.
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URIs: emilycrouter.su]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[109.167.249.41 listed in bl.score.senderscore.com]
2.4 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[109.167.249.41 listed in bl.mailspike.net]
0.0 T_FRT_CONTACT BODY: ReplaceTags: Contact
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[109.167.249.41 listed in bb.barracudacentral.org]
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5C2822A5.F235399A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from 109-167-249-41.westcall.net (unknown [109.167.249.41])
by ift-informatik.de (Postfix) with ESMTP id 4CD593D200051
for <info@ift-informatik.de>; Sun, 30 Dec 2018 02:42:59 +0100 (CET)
Received: from mx03.listsystemsf.net ([Sun, 30 Dec 2018 04:25:13 +0300])
by qnx.mdrost.com with NNFMP; Sun, 30 Dec 2018 04:25:13 +0300
Received: from qrx.quickslick.com ([138.77.207.45]) by mail.gimmicc.net with LOCAL; Sun, 30 Dec 2018 04:12:23 +0300
Received: from mtu23.bigping.com [105.171.10.3] by mail.gimmicc.net with SMTP; Sun, 30 Dec 2018 04:10:52 +0300
Received: from unknown (HELO qrx.quickslick.com) (Sun, 30 Dec 2018 04:05:52 +0300)
by m1.gns.snv.thisdomainl.com with SMTP; Sun, 30 Dec 2018 04:05:52 +0300
Message-ID: <E48F1B2F.1F9A7E79@westcall.net>
Date: Sun, 30 Dec 2018 04:05:52 +0300
Reply-To: =?utf-8?B?Ik55bGFoIiA8SmVzc2VQZXRlcnNvbmVxQHdlc3RjYWxsLm5ldD4=?=
From: =?utf-8?B?Ik55bGFoIiA8SmVzc2VQZXRlcnNvbmVxQHdlc3RjYWxsLm5ldD4=?=
User-Agent: Mozilla 4.79 (Macintosh; U; PPC)
X-Accept-Language: en-us
MIME-Version: 1.0
To: "Nylah" <info@ift-informatik.de>
Subject: =?utf-8?B?S/ZubmVuIHdpciBlaW5lbiBUZXJtaW4gZvxyIGRhcyBXb2NoZW5lbmRlIHZlcmVpbmJhcmVuPw==?=
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64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------------=_5C2822A5.F235399A--