Spam detection software, running on the system "groupstudy.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
admin_at_groupstudy.com for details.
Content preview: I agree --- On Fri, 6/4/10, Cisco certification wrote: From:
Cisco certification Subject: ASK Warning: Runaway Confirmations! To: Friday,
June 4, 2010, 1:57 PM [...]
Content analysis details: (6.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.217.65.14>]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[206.190.38.211 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.217.65.14 listed in dnsbl.sorbs.net]
0.0 FREEMAIL_FROM Sender email is freemail (biola_y2k[at]yahoo.com)
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
Received: from web51606.mail.re2.yahoo.com (web51606.mail.re2.yahoo.com
[206.190.38.211]) by groupstudy.com (8.12.11.20060308/8.12.11) with
SMTP id o556GeTH004738 GroupStudy Mailer; Sat, 5 Jun 2010 02:16:50
-0400
Received: (qmail 65019 invoked by uid 60001); 5 Jun 2010 06:16:25 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com;
s=s1024; t=1275718585;
bh=VWuNJaLA8ebfRy9uUXiapU+EZJ+w7KzfQFEwGfh2I9I=;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=RN+qk/ih6gQmhM9PitPSCsu1uBVeNakEq8EvgHazz2Afcic/39PonDkdYG+OAs78v0lGyTH8byYFq6Dj/ePOqxOJmssXJioGzskqikC/SZzWuhImyfasnGU+fOvdOTa8c3AnB77hQTSnrvcJr01eXHhpWWB7WUGjwV8iPKO3SzI=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=FyYR4tGIOE1CxjlyOcEzvzI2BLtiGlgDpp8/S1o8p0rdXMvzyREewrCs3+xYn4Ti0xmCjZt0n3c0IloJUaENxxgWk84aOUygN91aK7xdhFPK783ss6NvXoTrmoq5NaKshjx+AViSXabEH/iqdEKyrE9rZGcTdF/a9N6llazvB+s=;
Message-ID: <749553.63685.qm_at_web51606.mail.re2.yahoo.com>
X-YMail-OSG: .3ddawUVM1mBoUuuT5QbWSpg8WUzeGwVknlUCfDB6A2alWY
b3ZlyWxswg8Vew4BniYVbKtepi6VOeHpotw3u9cgTo_koJ4uUDyWVLpB7jFJ
kJDk2.xvLGaGJTr_uyGb5wsnCLriBaAK2XApAR4w9GcXZH77M.7umuwVCzEl
DZLEOMr43d42qS4s6yqxkoI7go8d9kBBbbyp2bjGzQ18QWawdOFbgal4Vs3l
Hk4hV.NJIjPQcKTnTUOGddtaTeRf4GurG2qyVSBLfjx8eZZ0P.4m92j24XJE
99VEeYeUE8EeeXLA0IdVPKSy2G.oq5r3yPhgRZgf5.GVGbqtzuBTGm4_XLs3
TqxxXEvn5c3BsxvQ7GF4YBeibdbk-
Received: from [41.217.65.14] by web51606.mail.re2.yahoo.com via HTTP;
Fri, 04 Jun 2010 23:16:25 PDT
X-Mailer: YahooMailClassic/11.0.8 YahooMailWebService/0.8.103.269680
Date: Fri, 4 Jun 2010 23:16:25 -0700 (PDT)
From: Abiola Jewoola <biola_y2k_at_yahoo.com>
Subject: Re: ASK Warning: Runaway Confirmations!
To: Cisco certification <ccielab_at_groupstudy.com>
In-Reply-To: <201006042057.o54KvETr005507_at_groupstudy.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Converted-To-Plain-Text: from multipart/alternative by GroupStudy
X-Converted-To-Plain-Text: Alternative section used was text/plain
I agree
--- On Fri, 6/4/10, Cisco certification <ccielab_at_groupstudy.com> wrote:
From: Cisco certification <ccielab_at_groupstudy.com>
Subject: ASK Warning: Runaway Confirmations!
To: ccielab_at_groupstudy.com
Date: Friday, June 4, 2010, 1:57 PM
ASK Warning:
You've received more than 5 messages coming from the same sender in a short
period of time. To avoid mail loops, ASK will stop sending mail confirmations
to this address for a while. This situation is normally caused by poorly
configured auto-responders. You may want to check the original message
(below) that caused this problem.
First time posters to GroupStudy.com are required to agree to the GroupStudy
terms and conditions.
Replying to this email, certifies you have read and agree to the GroupStudy
posting guidelines and terms and conditions.
--- Original Message Follows ---
From: "123Greetings.com" <ecards_at_123greetings.com>
To: <ccielab_at_groupstudy.com>
Subject: trend_at_redscout.com has sent you a birthday ecard.
Date: Sat, 5 Jun 2010 00:56:18 +0300
Spam detection software, running on the system "groupstudy.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
admin_at_groupstudy.com for details.
Content preview: trend_at_redscout.com just sent you an ecard from
123Greetings.com
You can view it by clicking here:
http://ecard-greetings-com.googlegroups.com/web/ecard.zip
[...]
Content analysis details: (27.3 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
5.4 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.4 STOX_REPLY_TYPE STOX_REPLY_TYPE
1.2 TVD_FINGER_02 TVD_FINGER_02
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[178.178.77.127 listed in psbl.surriel.com]
4.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
<http://www.spamcop.net/bl.shtml?178.178.77.127>]
3.5 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[178.178.77.127 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[178.178.77.127 listed in
bb.barracudacentral.org]
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
1.8 STOX_REPLY_TYPE_WITHOUT_QUOTES STOX_REPLY_TYPE_WITHOUT_QUOTES
2.5 DOS_OE_TO_MX Delivered direct to MX with OE headers
Received: from wimax-client.yota.ru (wimax-client.yota.ru
[178.178.77.127] (may be forged)) by groupstudy.com
(8.12.11.20060308/8.12.11) with ESMTP id o54KufOB005404 GroupStudy
Mailer; Fri, 4 Jun 2010 16:56:51 -0400
Message-ID: <000d01cb0428$6147f5e0$6400a8c0_at_trend>
From: "123Greetings.com" <ecards_at_123greetings.com>
To: <ccielab_at_groupstudy.com>
Subject: trend_at_redscout.com has sent you a birthday ecard.
Date: Sat, 5 Jun 2010 00:56:18 +0300
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Spam: Not detected
(Original message truncated)
Blogs and organic groups at http://www.ccie.net
Received on Fri Jun 04 2010 - 23:16:25 ART
This archive was generated by hypermail 2.2.0 : Sun Aug 01 2010 - 09:11:37 ART