Another FP. This one also has the X-EM headers which is related to something most often used in spamware, though it appears to be commonly used for mailer software on legit companies.


Received: from progressive.com [67.39.105.65] by mx1.mailpure.com with ESMTP
(SMTPD32-7.15) id A5E08FC01DA; Wed, 07 Jan 2004 10:29:36 -0500
Received: from ([192.168.45.243])
by acmrcp03.progressive.com with SMTP ;
Wed, 07 Jan 2004 10:24:29 -0500 (EST)
Message-ID: <[EMAIL PROTECTED]> <newmsg.cgi?mbx=Main&[EMAIL PROTECTED]>
X-EM-Version: 4, 0, 0, 0
X-EM-Registration: #3193410514110A039430
From: "WebTracker.Progressive.com" <[EMAIL PROTECTED]> <newmsg.cgi?mbx=Main&[EMAIL PROTECTED]>
To: "SAM DELL COLLISION CENTER" <xxxxxx> <newmsg.cgi?mbx=Main&[EMAIL PROTECTED]>,<>,<>,
<>,<>,<>, <>,<>,<>, <>,Cc:<>,<>,<>, <>,<>,<>, <>,<>,<>, <>,Subject: <TOTALPRO - NEW REFERRAL>
Date: Wed, 7 Jan 2004 10:29:1 -0500
MIME-Version: 1.0
Content-type: text/plain; charset=US-ASCII
X-SMTPExp-Version: 1, 0, 2, 10
X-SMTPExp-Registration: 3193410514110A039430
X-MailPure: ==================================================================
X-MailPure: IPNOTINMX: Failed, IP is not listed in MX or A records (weight 0).
X-MailPure: BADHEADERS: Failed, non-RFC compliant headers [8040000e] (weight 4).
X-MailPure: CMDSPACE: Failed, improperly formatted SMTP commands (weight 4).
X-MailPure: ==================================================================
X-MailPure: Spam Score: 7
X-MailPure: Scan Time: 10:29:44 on 01/07/2004
X-MailPure: Spool File: D25e008fc01da6443.SMD
X-MailPure: Server Name: progressive.com
X-MailPure: SMTP Sender: [EMAIL PROTECTED]
X-MailPure: Received From: acmrcp03.progressive.com [67.39.105.65]
X-MailPure: ==================================================================
X-MailPure: Spam and virus blocking services provided by MailPure.com
X-MailPure: ==================================================================
X-RCPT-TO: <xxxxx> <newmsg.cgi?mbx=Main&[EMAIL PROTECTED]>
Status: R
X-UIDL: 373475502




R. Scott Perry wrote:


Second FP to report. Also, the last FP was from that company using software better associated with spamware than for legit server apps.
This FP was automated from a server doing a small mail blast:


FYI, the important information for FPs on the CMDSPACE test is the software being used to send out the E-mail. Unlike almost all spam tests, this one relies on information in the SMTP envelope, so the headers are only useful to help identify the software causing the problem.

-Scott



--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to