[Tulungan] ** Proweb System Notice - Spam Detected **

Hold Queue Release release-110515567-info at blackmouse.co.uk
Wed Aug 20 20:27:17 CEST 2008


** Proweb System Notice - Spam Detected **

A message that you sent to a Proweb customer has been classified as spam
and has not been delivered.

If the message has been falsely identified as spam, then please reply
to this message within 4 days and the original message will be delivered
to the marked recipient.

If you did not send this message then you have been the victim of Sender
Address Forgery. To help prevent this happening in the furture, ask YOUR
Internet Service Provider to deploy Sender Policy Framework. For more
informaton, see http://www.openspf.org/Introduction
 
Note that any content of the reply that you make to this message will be 
discarded, and the mail sent to the recipient will be the original message 
that you sent.
 
Should you have any further questions, please contact: support at proweb.net.

The mail had a subject: =?koi8-r?B?9O/s+OvvIPT19CD0+SDz7e/25fv4IO7h6vTpINfp5OXvLCDr7/Tv8g==?=
The mail was sent from: tulungan at polarhome.com
The mail was sent to: info at blackmouse.co.uk

To release the message send a mail to: release-110515567-info at blackmouse.co.uk
or browse to: http://popadmin.proweb.net/spam_release.php?idx=110515567&pid=18616

The full headers of the original mail plus the reasons for spam classification
are included below:
--------------------------------------------------------------------------
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on ham.proweb.net
X-Spam-Level: *******************
X-Spam-Status: Yes, score=19.3 required=4.9 tests=BAYES_99,DOS_OE_TO_MX,
	FH_HELO_EQ_D_D_D_D,HELO_DYNAMIC_DHCP,HELO_DYNAMIC_HCC,HELO_DYNAMIC_IPADDR,
	JM_REACTOR_MAILER,MIME_BASE64_TEXT,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,
	RDNS_DYNAMIC,SARE_SUB_ENC_KOI8R autolearn=spam version=3.2.4
X-Spam-Report: 
	*  0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
	*      [70.133.3.67 listed in dnsbl.sorbs.net]
	*  2.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
	*      [Blocked - see <http://www.spamcop.net/bl.shtml?70.133.3.67>]
	*  1.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
	*      [score: 1.0000]
	*  2.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
	*      1)
	*  4.3 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
	*  1.4 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
	*  0.0 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d
	*  0.7 SARE_SUB_ENC_KOI8R Subject specifies display in non-English lang
	*  1.8 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
	*  0.1 RDNS_DYNAMIC Delivered to trusted network by host with
	*      dynamic-looking rDNS
	*  1.0 JM_REACTOR_MAILER Header patterns indicative of "Reactor Mailer"
	*      ratware
	*  2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers
Received: from smtp2.proweb.net ([86.17.6.23])
	by pop.proweb.net (Slinky v2.25) with SMTP id 3201
	(envelope-from <tulungan at polarhome.com>)
	for <info at blackmouse.co.uk>; Wed, 20 Aug 2008 19:27:04 +0100
Received: from adsl-70-133-3-67.dsl.scrm01.sbcglobal.net (adsl-70-133-3-67.dsl.scrm01.sbcglobal.net [70.133.3.67])
	by smtp2.proweb.net (8.13.8/8.13.1) with ESMTP id m7KIQvYF028421
	for <info at blackmouse.co.uk>; Wed, 20 Aug 2008 19:27:03 +0100
Message-ID: <000501c902f2$0222efb9$05237dbb at xvbnrb>
From: "lemmie fermin" <tulungan at polarhome.com>
To: <info at blackmouse.co.uk>
Subject: *****SPAM***** =?koi8-r?B?9O/s+OvvIPT19CD0+SDz7e/25fv4IO7h6vTpINfp5OXvLCDr7/Tv8g==?=
	=?koi8-r?B?7+Ug1/r14uTv8uH26fQg9Nfv5SDX7+/i8uH25e7p5Q==?=
Date: Wed, 20 Aug 2008 16:39:40 +0000
MIME-Version: 1.0
Content-Type: text/plain;
	charset="koi8-r"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
Received-SPF: none (smtp2.proweb.net: domain of tulungan at polarhome.com does not designate permitted sender hosts) (smtp2)
Content-Transfer-Encoding: base64
X-MIME-Autoconverted: from 8bit to base64 by smtp2.proweb.net id m7KIQvYF028421
Received-SPF: none (pop.proweb.net: 86.17.6.23 is neither permitted nor denied by domain of polarhome.com) client-ip=86.17.6.23; envelope-from=tulungan at polarhome.com; helo=smtp2.proweb.net;
X-Envelope-From: tulungan at polarhome.com
X-Antivirus: Scanned by F-Prot Antivirus (http://www.f-prot.com)
X-Spam-Prev-Subject: =?koi8-r?B?9O/s+OvvIPT19CD0+SDz7e/25fv4IO7h6vTpINfp5OXvLCDr7/Tv8g==?=






More information about the Tulungan mailing list