Message info

Status: Analyzed
Posted by: 174.5.32.220
Size: 3,662 bytes
Analyzed:
Tue, 17 Jan 2012 16:16:01 GMT
Processing time:
27.78950 seconds

Raw message

URIs

http://click.icptrack.com/icp/relay.php?destination=199.102.228.219/~lightfoo/tracking/us/cvuzfjfuajmmod
http://click.icptrack.com/icp/relay.php?destination=199.102.228.219/~lightfoo/tracking/pics/tax/kyxzzg
http://click.icptrack.com/icp/relay.php?destination=199.102.228.219/~lightfoo/tracking/rd/tax/main/kdmofjv
http://click.icptrack.com/icp/relay.php?destination=199.102.228.219/~lightfoo/tracking/rd/tax/main/ccsyg

SpamAssassin

status: Not spam Content analysis details: (1.8 points, 5.0 required)
ScoreNameDescription
0.0FREEMAIL_FROMSender email is commonly abused enduser mail provider
0.0RCVD_IN_HOSTKARMA_YERBL: HostKarma: relay in yellow list (varies)
0.0HTML_MESSAGEBODY: HTML included in message
1.1HTML_IMAGE_ONLY_16BODY: HTML: images with 1200-1600 bytes of words
0.7SARE_HTML_TITLE_LWORDRAW: HTML Title contains looong word
0.0HTML_SHORT_LINK_IMG_2HTML is very short with a linked image

score: 1.769 tests: BAYES_20, FREEMAIL_FROM, HTML_IMAGE_ONLY_16, HTML_MESSAGE, HTML_SHORT_LINK_IMG_2, RCVD_IN_DNSWL_NONE, RCVD_IN_HOSTKARMA_YE, SARE_HTML_TITLE_LWORD subtests: __ANY_TEXT_ATTACH, __ANY_TEXT_ATTACH_DOC, __BUGGED_IMG, __CT, __CTYPE_HAS_BOUNDARY, __CTYPE_MULTIPART_ALT, __CTYPE_MULTIPART_ANY, __DKIM_DEPENDABLE, __DOS_HAS_ANY_URI, __DOS_RCVD_SUN, __DOS_RELAYED_EXT, __FB_NUM_PERCNT, __FORGED_HOTMAIL_RCVD, __FRAUD_DBI, __FROM_FREEMAIL, __FROM_HOTMAIL_COM, __HAS_ANY_URI, __HAS_DATE, __HAS_FROM, __HAS_MESSAGE_ID, __HAS_MSGID, __HAS_RCVD, __HAS_SUBJECT, __HOST_HOTMAIL, __HTML_IMG_ONLY, __HTML_LENGTH_1024_1536, __HTML_LINK_IMAGE, __IMG_ONLY, __KAM_MED2, __KAM_UPS2, __LAST_EXTERNAL_RELAY_NO_AUTH, __LAST_UNTRUSTED_RELAY_NO_AUTH, __LOCAL_PP_NONPPURL, __MIME_HTML, __MIME_QP, __MIME_VERSION, __MISSING_REF, __MISSING_REPLY, __MSGID_OK_HOST, __NONEMPTY_BODY, __NOT_A_PERSON, __RCD_RDNS_MAIL_MESSY, __RCVD_IN_DNSWL, __RCVD_IN_HOSTKARMA, __S25R_1, __SANE_MSGID, __SARE_BODY_BLANKS_5_100, __SARE_BODY_BLNK_5_100, __SARE_EXIST_XORIGIP, __SARE_HEAD_MIME_VALID, __SARE_HTML_HAS_A, __SARE_HTML_HAS_BR, __SARE_HTML_HAS_DIV, __SARE_HTML_HAS_IMG, __SARE_HTML_HAS_TITLE, __SARE_META_MURTY3, __SARE_URI_ANY, __SARE_WHITELIST_FLAG, __SUBSCRIPTION_INFO, __TAG_EXISTS_BODY, __TAG_EXISTS_HEAD, __TAG_EXISTS_HTML, __TAG_EXISTS_STYLE, __TOCC_EXISTS, __TVD_MIME_ATT_TP, __URI_IS_IP

Received Headers

65.54.190.204

rDNS: bay0-omc4-s2.bay0.hotmail.com HELO: bay0-omc4-s2.bay0.hotmail.com
SORBS Spamhost (any time): Spam Received See: http://www.sorbs.net/lookup.shtml?65.54.190.204

65.54.190.199

rDNS: None HELO: BAY153-W28 Not listed in any of the 141 tested blacklists