132 lines
5.4 KiB
Plaintext
132 lines
5.4 KiB
Plaintext
Received: from localhost by v22014122474822114.stilfilm.com
|
||
with SpamAssassin (version 3.3.2);
|
||
Wed, 22 Nov 2017 21:06:54 +0100
|
||
From: "Katherine" <Katherinenfb@triway.net.br>
|
||
To: <eula_garcia@gs-gronau.de>
|
||
Subject: *****SPAM***** ***SPAM*** Hi
|
||
Date: Sun, 01 Oct 2017 20:05:19 -0200
|
||
Message-Id: <4495550161.339035580725827069.JavaMail.root@triway.net.br>
|
||
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
|
||
v22014122474822114.stilfilm.com
|
||
X-Spam-Flag: YES
|
||
X-Spam-Level: ********
|
||
X-Spam-Status: Yes, score=8.9 required=5.0 tests=CK_HELO_DYNAMIC_SPLIT_IP,
|
||
HELO_DYNAMIC_IPADDR2,PYZOR_CHECK,RCVD_IN_BRBL_LASTEXT,RDNS_NONE,URIBL_BLOCKED
|
||
autolearn=no version=3.3.2
|
||
MIME-Version: 1.0
|
||
Content-Type: multipart/mixed; boundary="----------=_5A15D8DE.D8F26A60"
|
||
|
||
This is a multi-part message in MIME format.
|
||
|
||
------------=_5A15D8DE.D8F26A60
|
||
Content-Type: text/plain; charset=iso-8859-1
|
||
Content-Disposition: inline
|
||
Content-Transfer-Encoding: 8bit
|
||
|
||
Software zur Erkennung von "Spam" auf dem Rechner
|
||
|
||
v22014122474822114.stilfilm.com
|
||
|
||
hat die eingegangene E-mail als mögliche "Spam"-Nachricht identifiziert.
|
||
Die ursprüngliche Nachricht wurde an diesen Bericht angehängt, so dass
|
||
Sie sie anschauen können (falls es doch eine legitime E-Mail ist) oder
|
||
ähnliche unerwünschte Nachrichten in Zukunft markieren können.
|
||
Bei Fragen zu diesem Vorgang wenden Sie sich bitte an
|
||
|
||
the administrator of that system
|
||
|
||
Vorschau: Hello, My Dear Friend! How is your day going? I'm Katherine,
|
||
but you can call me Kat if you like. What's your name by the way? I know
|
||
you’ve been visiting this website quite often. And I was going to chat with
|
||
you the other day but you suddenly went offline. What do you think about
|
||
us spending some time here talking to each other? I would be glad to hear
|
||
from you. [...]
|
||
|
||
Inhaltsanalyse im Detail: (8.9 Punkte, 5.0 benötigt)
|
||
|
||
Pkte Regelname Beschreibung
|
||
---- ---------------------- --------------------------------------------------
|
||
1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
|
||
[177.22.93.122 listed in bb.barracudacentral.org]
|
||
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
|
||
See
|
||
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
|
||
for more information.
|
||
[URIs: rambler.ru]
|
||
0.1 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
|
||
(Split IP)
|
||
2.0 PYZOR_CHECK Gelistet im Pyzor-System (http://pyzor.sf.net/)
|
||
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
|
||
3.9 HELO_DYNAMIC_IPADDR2 HELO-Rechnername verdächtig (IP-Adresse 2)
|
||
|
||
Die ursprüngliche Nachricht enthielt nicht ausschließlich Klartext
|
||
(plain text) und kann eventuell eine Gefahr für einige E-Mail-Programme
|
||
darstellen (falls sie z.B. einen Computervirus enthält).
|
||
Möchten Sie die Nachricht dennoch ansehen, ist es wahrscheinlich
|
||
sicherer, sie zuerst in einer Datei zu speichern und diese Datei danach
|
||
mit einem Texteditor zu öffnen.
|
||
|
||
|
||
------------=_5A15D8DE.D8F26A60
|
||
Content-Type: message/rfc822; x-spam-type=original
|
||
Content-Description: original message before SpamAssassin
|
||
Content-Disposition: attachment
|
||
Content-Transfer-Encoding: 8bit
|
||
|
||
Return-Path: <Katherinenfb@triway.net.br>
|
||
Delivered-To: mail@dorianvasco.de
|
||
Received: from localhost (localhost [127.0.0.1])
|
||
by v22014122474822114.stilfilm.com (Postfix) with ESMTP id C18E9D4BE5
|
||
for <mail@dorianvasco.de>; Mon, 2 Oct 2017 01:05:23 +0200 (CEST)
|
||
X-Virus-Scanned: Debian amavisd-new at v22014122474822114.yourvserver.net
|
||
X-Spam-Flag: YES
|
||
X-Spam-Score: 10.745
|
||
X-Spam-Level: **********
|
||
X-Spam-Status: Yes, score=10.745 required=5.5 tests=[BAYES_99=3.5,
|
||
CK_HELO_DYNAMIC_SPLIT_IP=0.001, HELO_DYNAMIC_IPADDR2=3.607,
|
||
PYZOR_CHECK=1.392, RCVD_IN_BRBL_LASTEXT=1.449, RDNS_NONE=0.793,
|
||
SPF_FAIL=0.001, TVD_RCVD_IP=0.001, URIBL_BLOCKED=0.001] autolearn=no
|
||
Received: from v22014122474822114.stilfilm.com ([127.0.0.1])
|
||
by localhost (v22014122474822114.stilfilm.com [127.0.0.1]) (amavisd-new, port 10024)
|
||
with ESMTP id qZoHKUQYLZuf for <mail@dorianvasco.de>;
|
||
Mon, 2 Oct 2017 01:05:21 +0200 (CEST)
|
||
Received: from 177-22-81-90.triway.net.br (unknown [177.22.93.122])
|
||
by v22014122474822114.stilfilm.com (Postfix) with ESMTP id EB344D4BD4
|
||
for <eula_garcia@gs-gronau.de>; Mon, 2 Oct 2017 01:05:20 +0200 (CEST)
|
||
Received: from smtpd (localhost.localdomain [127.0.0.1]) by triway.net.br
|
||
(Postfix) with ESMTP id C64800DA5562
|
||
for <eula_garcia@gs-gronau.de>; Sun, 01 Oct 2017 20:05:19 -0200
|
||
Date: Sun, 01 Oct 2017 20:05:19 -0200
|
||
From: "Katherine" <Katherinenfb@triway.net.br>
|
||
To: <eula_garcia@gs-gronau.de>
|
||
Message-ID: <4495550161.339035580725827069.JavaMail.root@triway.net.br>
|
||
Subject: ***SPAM*** Hi
|
||
MIME-Version: 1.0
|
||
Content-Type: multipart/mixed;
|
||
boundary="----=_Part_05587_14428065.2683940984889"
|
||
|
||
------=_Part_05587_14428065.2683940984889
|
||
Content-Type: text/plain; charset="utf-8"
|
||
Content-Transfer-Encoding: quoted-printable
|
||
|
||
Hello, My Dear Friend!
|
||
|
||
How is your day going? I'm Katherine, but you can call me Kat if you =
|
||
like.
|
||
What's your name by the way?
|
||
I know you=92ve been visiting this website quite often.
|
||
And I was going to chat with you the other day but you suddenly went =
|
||
offline.
|
||
What do you think about us spending some time here talking to each =
|
||
other?
|
||
I would be glad to hear from you.
|
||
|
||
My email plassoikowligh1977@rambler.ru
|
||
|
||
Best wishes,
|
||
Katty
|
||
------=_Part_05587_14428065.2683940984889--
|
||
|
||
------------=_5A15D8DE.D8F26A60--
|
||
|