File: /home/panama/mail/panamaemb.org.sg/internal/new/1482359973.H566015P2481.vps.panamaemb.org.sg,S=4053
Return-path: <daccart@orcon.net.nz>
Envelope-to: internal@panamaemb.org.sg
Delivery-date: Thu, 22 Dec 2016 06:39:33 +0800
Received: from [177.157.245.41] (port=14861 helo=177.157.245.41.dynamic.adsl.gvt.net.br)
by vps.panamaemb.org.sg with esmtp (Exim 4.87)
(envelope-from <daccart@orcon.net.nz>)
id 1cJpXS-0000dp-5t
for internal@panamaemb.org.sg; Thu, 22 Dec 2016 06:39:33 +0800
Message-ID: <585AE840.3060107@orcon.net.nz>
Date: Wed, 21 Dec 2016 17:38:24 -0300
From: "internal@panamaemb.org.sg" <daccart@orcon.net.nz>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.16) Gecko/20101125 Thunderbird/3.0.11
MIME-Version: 1.0
To: <internal@panamaemb.org.sg>
Content-Type: text/plain; charset=WINDOWS-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=50.0
X-Spam-Score: 500
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "vps.panamaemb.org.sg",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: http://fastherbsmarket.ru [...]
Content analysis details: (50.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: fastherbsmarket.ru]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[177.157.245.41 listed in zen.spamhaus.org]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split
IP)
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URIs: fastherbsmarket.ru]
1.2 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URIs: fastherbsmarket.ru]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[177.157.245.41 listed in bl.score.senderscore.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(daccart[at]orcon.net.nz)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.0 KAM_RBL Higher scores for hitting multiple trusted RBLs
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
5.0 KAM_VERY_BLACK_DBL Email that hits both URIBL Black and Spamhaus DBL
0.0 TVD_SPACE_RATIO No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.5 KAM_LINKBAIT Short messages containing little more than a link, from
a domain with no security in place
2.8 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
0.0 T_PDS_FROM_2_EMAILS No description available.
1.0 BODY_SINGLE_WORD Message body is only one word (no spaces)
1.0 BODY_SINGLE_URI Message body is only a URI
X-Spam-Flag: YES
Subject: ***SPAM*** Re:Meds
http://fastherbsmarket.ru