Greetings, today ive noticed that half of my Newsletters go into the Quarantine, because my E-Mail Address/Domain goes into the Footer for unsubscribing.
and because the reputation-ns-30.rbl.scrolloutf1.com blacklisted my own Domain?!
1.1 URIBL_GREY Contains an URL listed in the URIBL greylist [URIs: campaign-archive2.com]
-0.5 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [198.2.130.151 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust [198.2.130.151 listed in list.dnswl.org]
2.0 SO_PUB_URIBL_NS_30 URL's ns address is listed in
reputation-ns-30.rbl.scrolloutf1.com [URIs: firegore.com]
-0.0 _SO_MLID Found a List-Id header
-0.0 _SO_MLU Found a List-Unsubscribe header
0.7 SO_FROM_CHR From automated sender
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.1 _AUTOMATED_LINK URI: Link looks from automated system
0.1 _COMMON_FOOTER URI: Link commonly used in footer automated email
0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area
0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted
Colors in HTML
0.0 HTML_MESSAGE BODY: HTML included in message
I moved cloudflare.com name servers to 40. Your score should be decreased with 1 point.
cloudflare.com tolerates any kind of spam accepting obvious domains, as this one:
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Anonymous
-
2015-04-27
Hi Guys,
i am also having an issue
This is stated in collector and whitelisting senderdomain.net dont work
Content type: Spam
Internal reference code for the message is 11660-08/4naQDlOzMETO
First upstream SMTP client IP address: [119.235.7.34] mail.senderdomain.net
According to a 'Received:' trace, the message apparently originated at: [119.235.7.34], UserPC unknown [192.168.0.217]
The message WAS NOT relayed to: imran@userdomain.com:
250 2.7.0 Ok, discarded, id=11660-08 - spam
Spam scanner report:
Spam detection software, running on the system "sgw.userdomain.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: hi Mahika Chandrasena Director of Marketing Communications [...]
1.0 URICOUNTRY_EU Contains a URI HOSTED in European Union - Foreign area
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information. [URIs: avg.com]
5.0 SO_PUB_URIBL_DOMAIN_BL URL's domain address is listed in
bl-domain.rbl.scrolloutf1.com [URIs: userdomain.com]
4.0 SO_PUB_URIBL_DOMAIN_10 URL's domain address is listed in
reputation-domain-10.rbl.scrolloutf1.com [URIs: tnlrn.com]
100 SHORTCIRCUIT No description available. [score: 1.0000]
0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
Return-Path: mahika@senderdomain.net
Received: from gw.senderdomain.net (mail.senderdomain.net [119.235.7.34])
by sgw.userdomain.com.userdomain.com (Postfix) with ESMTP id 3lb3H33FHqz4wHt
for imran@userdomain.com; Mon, 27 Apr 2015 16:37:43 +0530 (IST)
Received: from mail.senderdomain.net (unknown [192.168.0.150])
by gw.senderdomain.net (Postfix) with ESMTP id E89D17C83F8;
Mon, 27 Apr 2015 16:46:09 +0530 (IST)
Received: from localhost (localhost [127.0.0.1])
by mail.senderdomain.net (Postfix) with ESMTP id 5C3A45235CE;
Mon, 27 Apr 2015 16:39:38 +0530 (IST)
X-Virus-Scanned: amavisd-new at senderdomain.net
Received: from mail.senderdomain.net ([127.0.0.1])
by localhost (mail.senderdomain.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id hBRBWdQvR+wh; Mon, 27 Apr 2015 16:39:38 +0530 (IST)
Received: from UserPC (unknown [192.168.0.217])
by mail.senderdomain.net (Postfix) with ESMTP id 262C85235CA;
Mon, 27 Apr 2015 16:39:38 +0530 (IST)
From: "Mahika Chandrasena Pereira" mahika@senderdomain.net
To: imran@userdomain.com
Cc: "'Imran Sheriff'" imran_lk@yilp.com
References: 1993038825.34553.1430130872831.JavaMail.zimbra@userdomain.com
In-Reply-To: 1993038825.34553.1430130872831.JavaMail.zimbra@userdomain.com
Subject: RE: testing
Date: Mon, 27 Apr 2015 16:37:20 +0530
Message-ID: 014f01d080da$549ebf20$fddc3d60$@senderdomain.net
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0150_01D08108.6E5881C0"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQFhhtNZZDeZ3sQ/2qwgZpUPHA8NE54+pvzQ
Content-Language: en-us
X-senderdomain-MailScanner-ID: E89D17C83F8.A0342
X-senderdomain-MailScanner: Found to be clean
X-senderdomain-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
score=-0.2, required 6, ALL_TRUSTED -1.00, BAYES_00 -1.90,
DNS_FROM_AHBL_RHSBL 2.70, HTML_MESSAGE 0.00)
X-senderdomain-MailScanner-From: mahika@senderdomain.net
X-Spam-Status: No
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Greetings, today ive noticed that half of my Newsletters go into the Quarantine, because my E-Mail Address/Domain goes into the Footer for unsubscribing.
and because the reputation-ns-30.rbl.scrolloutf1.com blacklisted my own Domain?!
Content analysis details: (5.2 points, 5.0 required)
pts rule name description
1.1 URIBL_GREY Contains an URL listed in the URIBL greylist
[URIs: campaign-archive2.com]
-0.5 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[198.2.130.151 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[198.2.130.151 listed in list.dnswl.org]
2.0 SO_PUB_URIBL_NS_30 URL's ns address is listed in
reputation-ns-30.rbl.scrolloutf1.com
[URIs: firegore.com]
-0.0 _SO_MLID Found a List-Id header
-0.0 _SO_MLU Found a List-Unsubscribe header
0.7 SO_FROM_CHR From automated sender
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 _AUTOMATED_LINK URI: Link looks from automated system
0.1 _COMMON_FOOTER URI: Link commonly used in footer automated email
0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area
0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted
Colors in HTML
0.0 HTML_MESSAGE BODY: HTML included in message
0.5 _EXTERNAL_CONTENT RAW: Externaly linked content
0.2 _LARGE_EMB_IMG RAW: Large image
0.4 _EXTERNAL_IMG RAW: Linked image
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 _SO_ML Message is from mail list.
0.1 SO_IMAGE Large or eXtraLarge embedded image
0.6 SO_NIC Newsletter, Invitation or Commercial
Thanks for helping me out.
Last edit: Firegore 2015-04-18
View and moderate all "Get Help" comments posted by this user
Mark all as spam, and block user from posting to "Discussion"
Please add firegore.com in /var/www/rbldns/reputation-ns-70 and wait up to 1 minute.
View and moderate all "Get Help" comments posted by this user
Mark all as spam, and block user from posting to "Discussion"
I moved cloudflare.com name servers to 40. Your score should be decreased with 1 point.
cloudflare.com tolerates any kind of spam accepting obvious domains, as this one:
whois spambox.info
Domain Name:SPAMBOX.INFO
Domain ID: D54375950-LRMS
Creation Date: 2015-01-14T22:05:07Z
Updated Date: 2015-03-16T20:30:32Z
Registry Expiry Date: 2016-01-14T22:05:07Z
Sponsoring Registrar:GoDaddy.com, LLC (R171-LRMS)
Sponsoring Registrar IANA ID: 146
WHOIS Server:
Referral URL:
Domain Status: ok -- http://www.icann.org/epp#ok
Registrant ID:CR185168407
Registrant Name:Registration Private
Registrant Organization:Domains By Proxy, LLC
Registrant Street: DomainsByProxy.com
Registrant Street: 14747 N Northsight Blvd Suite 111, PMB 309
Registrant City:Scottsdale
Registrant State/Province:Arizona
Registrant Postal Code:85260
Registrant Country:US
Registrant Phone:+1.4806242599
Registrant Phone Ext:
Registrant Fax: +1.4806242598
Registrant Fax Ext:
Registrant Email:SPAMBOX.INFO@domainsbyproxy.com
Admin ID:CR185168409
Admin Name:Registration Private
Admin Organization:Domains By Proxy, LLC
Admin Street: DomainsByProxy.com
Admin Street: 14747 N Northsight Blvd Suite 111, PMB 309
Admin City:Scottsdale
Admin State/Province:Arizona
Admin Postal Code:85260
Admin Country:US
Admin Phone:+1.4806242599
Admin Phone Ext:
Admin Fax: +1.4806242598
Admin Fax Ext:
Admin Email:SPAMBOX.INFO@domainsbyproxy.com
Billing ID:CR185168410
Billing Name:Registration Private
Billing Organization:Domains By Proxy, LLC
Billing Street: DomainsByProxy.com
Billing Street: 14747 N Northsight Blvd Suite 111, PMB 309
Billing City:Scottsdale
Billing State/Province:Arizona
Billing Postal Code:85260
Billing Country:US
Billing Phone:+1.4806242599
Billing Phone Ext:
Billing Fax: +1.4806242598
Billing Fax Ext:
Billing Email:SPAMBOX.INFO@domainsbyproxy.com
Tech ID:CR185168408
Tech Name:Registration Private
Tech Organization:Domains By Proxy, LLC
Tech Street: DomainsByProxy.com
Tech Street: 14747 N Northsight Blvd Suite 111, PMB 309
Tech City:Scottsdale
Tech State/Province:Arizona
Tech Postal Code:85260
Tech Country:US
Tech Phone:+1.4806242599
Tech Phone Ext:
Tech Fax: +1.4806242598
Tech Fax Ext:
Tech Email:SPAMBOX.INFO@domainsbyproxy.com
Name Server:ELINORE.NS.CLOUDFLARE.COM
Name Server:TOBY.NS.CLOUDFLARE.COM
Last edit: Anonymous 2015-04-18
Hi Guys,
i am also having an issue
This is stated in collector and whitelisting senderdomain.net dont work
Content type: Spam
Internal reference code for the message is 11660-08/4naQDlOzMETO
First upstream SMTP client IP address: [119.235.7.34] mail.senderdomain.net
According to a 'Received:' trace, the message apparently originated at:
[119.235.7.34], UserPC unknown [192.168.0.217]
Return-Path: mahika@senderdomain.net
From: "Mahika Chandrasena Pereira" mahika@senderdomain.net
Message-ID: 014f01d080da$549ebf20$fddc3d60$@senderdomain.net
X-Mailer: Microsoft Outlook 14.0
Subject: RE: testing
The message has been quarantined as: collector@userdomain.com
The message WAS NOT relayed to:
imran@userdomain.com:
250 2.7.0 Ok, discarded, id=11660-08 - spam
Spam scanner report:
Spam detection software, running on the system "sgw.userdomain.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: hi Mahika Chandrasena Director of Marketing Communications
[...]
Content analysis details: (110.2 points, 5.0 required)
pts rule name description
1.0 URICOUNTRY_EU Contains a URI HOSTED in European Union - Foreign area
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: avg.com]
5.0 SO_PUB_URIBL_DOMAIN_BL URL's domain address is listed in
bl-domain.rbl.scrolloutf1.com
[URIs: userdomain.com]
4.0 SO_PUB_URIBL_DOMAIN_10 URL's domain address is listed in
reputation-domain-10.rbl.scrolloutf1.com
[URIs: tnlrn.com]
100 SHORTCIRCUIT No description available.
[score: 1.0000]
0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
Return-Path: mahika@senderdomain.net
Received: from gw.senderdomain.net (mail.senderdomain.net [119.235.7.34])
by sgw.userdomain.com.userdomain.com (Postfix) with ESMTP id 3lb3H33FHqz4wHt
for imran@userdomain.com; Mon, 27 Apr 2015 16:37:43 +0530 (IST)
Received: from mail.senderdomain.net (unknown [192.168.0.150])
by gw.senderdomain.net (Postfix) with ESMTP id E89D17C83F8;
Mon, 27 Apr 2015 16:46:09 +0530 (IST)
Received: from localhost (localhost [127.0.0.1])
by mail.senderdomain.net (Postfix) with ESMTP id 5C3A45235CE;
Mon, 27 Apr 2015 16:39:38 +0530 (IST)
X-Virus-Scanned: amavisd-new at senderdomain.net
Received: from mail.senderdomain.net ([127.0.0.1])
by localhost (mail.senderdomain.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id hBRBWdQvR+wh; Mon, 27 Apr 2015 16:39:38 +0530 (IST)
Received: from UserPC (unknown [192.168.0.217])
by mail.senderdomain.net (Postfix) with ESMTP id 262C85235CA;
Mon, 27 Apr 2015 16:39:38 +0530 (IST)
From: "Mahika Chandrasena Pereira" mahika@senderdomain.net
To: imran@userdomain.com
Cc: "'Imran Sheriff'" imran_lk@yilp.com
References: 1993038825.34553.1430130872831.JavaMail.zimbra@userdomain.com
In-Reply-To: 1993038825.34553.1430130872831.JavaMail.zimbra@userdomain.com
Subject: RE: testing
Date: Mon, 27 Apr 2015 16:37:20 +0530
Message-ID: 014f01d080da$549ebf20$fddc3d60$@senderdomain.net
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0150_01D08108.6E5881C0"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQFhhtNZZDeZ3sQ/2qwgZpUPHA8NE54+pvzQ
Content-Language: en-us
X-senderdomain-MailScanner-ID: E89D17C83F8.A0342
X-senderdomain-MailScanner: Found to be clean
X-senderdomain-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
score=-0.2, required 6, ALL_TRUSTED -1.00, BAYES_00 -1.90,
DNS_FROM_AHBL_RHSBL 2.70, HTML_MESSAGE 0.00)
X-senderdomain-MailScanner-From: mahika@senderdomain.net
X-Spam-Status: No