> > Received: from unknown (HELO mail.mobile.de) (194.50.69.1) > > Received: from derborse-fur-dummies.net (derborse-fur-dummies.net > > [37.59.206.107]) > > by mail.mobile.de (Postfix) with ESMTP for <spamvic...@mobile.de> > > by the way ,it looks like some newsletter, so your understanding of "spam" > might not be shared public, so you should have evidence of definite > spam content ( like viagra marketing etc ) delivered through mobile.de
This is no newsletter - these guys are long term known hardcore spammers. That's the reason their ip is in the Spamhaus SBL (as a lot others too). > if you use tag score upper 5 , 5.8 score is near point where false positive > may happen ever In general you are right. But in this example case you can be sure this is 100% spam.
