PMG Notification: Sender: mar92116@bosakun.com Receiver: thal-@arcor.de Targets: thal-@arcor.de Subject: *****SPAM***** *SPAM* Hello Matching Rule: Block outgoing Spam Rule: Block outgoing Spam Receiver: thal-@arcor.de Action: block message Action: notify mar92116@bosakun.com Action: modify field: subject:[BLOCK] *****SPAM***** *SPAM* Hello Action: disclaimer Spam detection results: 21 AXB_XMAILER_MIMEOLE_OL_024C2 0.001 Yet another X header trait BAD_ENC_HEADER 0.001 Message has bad MIME encoding in the header DMARC_MISSING 0.1 Missing DMARC policy FORGED_MUA_OUTLOOK 2.785 Forged mail pretending to be from MS Outlook FROM_MISSPACED 0.001 From: missing whitespace FROM_MISSP_EH_MATCH 0.001 From misspaced, matches envelope FROM_MISSP_MSFT 0.001 From misspaced + supposed Microsoft tool FROM_MISSP_REPLYTO 0.001 From misspaced, has Reply-To FROM_MISSP_USER 0.001 From misspaced, from "User" FSL_CTYPE_WIN1251 0.001 Content-Type only seen in 419 spam FSL_NEW_HELO_USER 0.001 Spam's using Helo and User KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment KAM_LAZY_DOMAIN_SECURITY 1 Sending domain does not have any anti-forgery methods KAM_LINKBAIT 2.5 Short messages containing little more than a link, from a domain with no security in place KAM_MARKSPAM 4 Email arrived marked as Spam MSOE_MID_WRONG_CASE 3.373 - NSL_RCVD_FROM_USER 0.001 Received from User RCVD_IN_SBL 2.596 Received via a relay in Spamhaus SBL RCVD_IN_SBL_CSS 3.558 Received via a relay in Spamhaus SBL-CSS REPLYTO_WITHOUT_TO_CC 1.946 - SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_NONE 0.001 SPF: sender does not publish an SPF Record TO_NO_BRKTS_MSFT 0.001 To: lacks brackets and supposed Microsoft tool XPRIO 0.001 Has X-Priority header