[Tulungan] ** Proweb System Notice - Spam Detected **
Hold Queue Release
release-110516618-sales at anchorsupplies.com
Wed Aug 20 20:35:35 CEST 2008
** Proweb System Notice - Spam Detected **
A message that you sent to a Proweb customer has been classified as spam
and has not been delivered.
If the message has been falsely identified as spam, then please reply
to this message within 4 days and the original message will be delivered
to the marked recipient.
If you did not send this message then you have been the victim of Sender
Address Forgery. To help prevent this happening in the furture, ask YOUR
Internet Service Provider to deploy Sender Policy Framework. For more
informaton, see http://www.openspf.org/Introduction
Note that any content of the reply that you make to this message will be
discarded, and the mail sent to the recipient will be the original message
that you sent.
Should you have any further questions, please contact: support at proweb.net.
The mail had a subject: =?koi8-r?B?9O/s+OvvIPT19CD0+SDz7/bl+/gg7uHq9Okg1+nk5e8sIOvv9O/y7w==?=
The mail was sent from: tulungan at polarhome.com
The mail was sent to: sales at anchorsupplies.com
To release the message send a mail to: release-110516618-sales at anchorsupplies.com
or browse to: http://popadmin.proweb.net/spam_release.php?idx=110516618&pid=26288
The full headers of the original mail plus the reasons for spam classification
are included below:
--------------------------------------------------------------------------
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on ham2.proweb.net
X-Spam-Level: ************************
X-Spam-Status: Yes, score=24.6 required=3.0 tests=BAYES_99,DOS_OE_TO_MX,
FH_HELO_EQ_CHARTER,FH_HELO_EQ_D_D_D_D,HELO_DYNAMIC_HCC,HELO_DYNAMIC_IPADDR2,
JM_REACTOR_MAILER,MIME_BASE64_TEXT,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_PBL,
RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RDNS_DYNAMIC,SARE_SUB_ENC_KOI8R autolearn=spam
version=3.2.4
X-Spam-Report:
* 1.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 1.0 FH_HELO_EQ_CHARTER Helo is d-d-d-d charter.com
* 4.3 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
* 4.4 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
* 2)
* 0.0 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d
* 0.7 SARE_SUB_ENC_KOI8R Subject specifies display in non-English lang
* 1.8 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
* 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
* [96.33.128.50 listed in dnsbl.sorbs.net]
* 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
* [96.33.128.50 listed in zen.spamhaus.org]
* 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
* 2.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?96.33.128.50>]
* 0.1 RDNS_DYNAMIC Delivered to trusted network by host with
* dynamic-looking rDNS
* 1.0 JM_REACTOR_MAILER Header patterns indicative of "Reactor Mailer"
* ratware
* 2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers
Received: from smtp2.proweb.net ([86.17.6.23])
by pop.proweb.net (Slinky v2.25) with SMTP id 981
(envelope-from <tulungan at polarhome.com>)
for <sales at anchorsupplies.com>; Wed, 20 Aug 2008 19:35:34 +0100
Received: from 96-33-128-50.dhcp.slid.la.charter.com (96-33-128-50.dhcp.slid.la.charter.com [96.33.128.50])
by smtp2.proweb.net (8.13.8/8.13.1) with ESMTP id m7KIZW0B002232
for <sales at anchorsupplies.com>; Wed, 20 Aug 2008 19:35:33 +0100
Message-ID: <000901c902f3$06aa8e57$4e6a21b5 at njmab>
From: "corty hyman" <tulungan at polarhome.com>
To: <sales at anchorsupplies.com>
Subject: *****SPAM***** =?koi8-r?B?9O/s+OvvIPT19CD0+SDz7/bl+/gg7uHq9Okg1+nk5e8sIOvv9O/y7w==?=
=?koi8-r?B?5SDX+uL15O/y4fbp9CD01+/lINfv7+Ly4fbl7unl?=
Date: Wed, 20 Aug 2008 16:48:05 +0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="koi8-r"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
Received-SPF: none (smtp2.proweb.net: domain of tulungan at polarhome.com does not designate permitted sender hosts) (smtp2)
Content-Transfer-Encoding: base64
X-MIME-Autoconverted: from 8bit to base64 by smtp2.proweb.net id m7KIZW0B002232
Received-SPF: none (pop.proweb.net: 86.17.6.23 is neither permitted nor denied by domain of polarhome.com) client-ip=86.17.6.23; envelope-from=tulungan at polarhome.com; helo=smtp2.proweb.net;
X-Envelope-From: tulungan at polarhome.com
X-Antivirus: Scanned by F-Prot Antivirus (http://www.f-prot.com)
X-Spam-Prev-Subject: =?koi8-r?B?9O/s+OvvIPT19CD0+SDz7/bl+/gg7uHq9Okg1+nk5e8sIOvv9O/y7w==?=
More information about the Tulungan
mailing list