cancel
Showing results for 
Search instead for 
Did you mean: 

Ironport missed obvious 'Sainsbury's Bank' spam e mail rec'd just now (22/6/09)

Gel
Pro
Posts: 1,386
Thanks: 133
Fixes: 10
Registered: 02-08-2007

Ironport missed obvious 'Sainsbury's Bank' spam e mail rec'd just now (22/6/09)

Forwarded to spam training:
Headers:
Authentication-Results: mx.pcl-ipin03.plus.net; dkim=neutral (message not signed) header.i=none
Received-SPF: None identity=pra; client-ip=202.78.200.23;
  receiver=mx.pcl-ipin03.plus.net;
  envelope-from="nobody@java.makassarnetservers.com";
  x-sender="onlineservice@sainsburysbank.co.uk";
  x-conformance=sidf_compatible
Received-SPF: None identity=mailfrom; client-ip=202.78.200.23;
  receiver=mx.pcl-ipin03.plus.net;
  envelope-from="nobody@java.makassarnetservers.com";
  x-sender="nobody@java.makassarnetservers.com";
  x-conformance=sidf_compatible
Received-SPF: None identity=helo; client-ip=202.78.200.23;
  receiver=mx.pcl-ipin03.plus.net;
  envelope-from="nobody@java.makassarnetservers.com";
  x-sender="postmaster@java.makassarnetservers.com";
  x-conformance=sidf_compatible
X-SBRS: 2.9
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AsALAMg1FkrKTsgXgWdsb2JhbACCJB8DDAGLNAGINoEKGAIWIogSoTwSCIdnAohfAoFlSQIHCQEMCIE0BR0
X-IronPort-AV: E=McAfee;i="5300,2777,5622"; a="112612526"
X-IronPort-AV: E=Sophos;i="4.41,233,1241391600";
   d="scan'208";a="112612526"
Received: from java.makassarnetservers.com ([202.78.200.23])
  by mx.pcl-ipin03.plus.net with ESMTP; 22 May 2009 13:21:49 +0100
Received: from nobody by java.makassarnetservers.com with local (Exim 4.69)
(envelope-from <nobody@java.makassarnetservers.com>)
id 1M7Tl9-00071M-Jm
for g@peaXXX.plus.com; Fri, 22 May 2009 20:21:59 +0800
To: g@peaXXX.plus.com
X-PHP-Script: www.konikutaitimur.or.id/files/reck.php for 216.139.170.14
From: Sainsbury\'s Bank plc <onlineservice@sainsburysbank.co.uk>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <E1M7Tl9-00071M-Jm@java.makassarnetservers.com>
Date: Fri, 22 May 2009 20:21:59 +0800
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - java.makassarnetservers.com
X-AntiAbuse: Original Domain - peaXXX.plus.com
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - java.makassarnetservers.com
X-PN-Virus-Filtered: by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
Subject: Important Security Updates Notice
1 REPLY
Superuser
Superuser
Posts: 8,952
Thanks: 451
Fixes: 38
Registered: 06-04-2007

Re: Ironport missed obvious 'Sainsbury's Bank' spam e mail rec'd just now (22/6/09)

The spammers managed to send that through a mailserver with a good reputation, so more difficult for a machine to pick up. Hopefully it will soon be onto it.
David