| From Name: |
Elijah Sherie |
| From Address: |
pthb@proudcanadian.net |
| Date Received: |
04/02/2005 - 12:00:01 am |
| Spam Score: |
43.3 |
| Category: |
Pharmacy |
View Spam Assassin Report :: Add/View Comments |
Email Preview:
Re: ONLlΝΕ
ΡΗΑRΜΑCΥ Visit our Store to see the
catelog Current Specia1s... 3O VΑLlUΜ = $7O lO VlΑGRA =
$7O lO ClΑLlS = $9O 3O Phenter = $7O 3O
ΧΑΝΑΧ = $9O 3O ΑΜΒlΕN =
[...]
|
Email Message:
Return-Path:
Received: from 62.79.26.99.adsl.vbr.tiscali.dk (62.79.26.99.adsl.vbr.tiscali.dk [62.79.26.99])
by admin.domain.com (8.12.3/8.12.3/Debian-7.1) with SMTP id j325T6pl030017
for ; Fri, 1 Apr 2005 23:29:07 -0600
X-Message-Info: 476KA89MPLgslaq670N9fbDCZISDzlaU931peTQ27cQtxcZ88
Received: from d-28-12-22-0.TZZPL4.RND_FROM_DOMAIN ([18.8.50.36]) by ye576-au603.nameplanet.com with Microsoft SMTPLQM(1.066.3468.67369);
Sat, 02 Apr 2005 07:25:56 +0100
Message-ID:
X-Originating-IP: [95.240.144.70]
X-Originating-Email: [awlhbbke@wireworm.com]
X-Sender: Elijah Sherie
X-MIME-Autoconverted: Yes
Disclose-Recipients: No
Discarded-X400-MTS-Extensions: Yes
Original-Encoded-Information-Types: multipart/alternative
X-No-Archive: Yes
Reply-To: "Elijah Sherie"
From: "Elijah Sherie"
To: Recipient@domain.com
Subject: Viagra - 5 free pills
Date: Sat, 02 Apr 2005 07:25:56 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--HISXBFSNYXELGRPGPIJY"
----HISXBFSNYXELGRPGPIJY
Content-Type: text/html;
charset="iso-8854-8"
Content-Transfer-Encoding: 7BitRe:a {text-decoration: none;}
ONLlΝΕ ΡΗΑRΜΑCΥ
Visit our Store to see the catelog
Current Specia1s...
3O VΑLlUΜ = $7O
lO VlΑGRA = $7O
lO ClΑLlS = $9O
3O Phenter = $7O
3O ΧΑΝΑΧ = $9O
3O ΑΜΒlΕN = $llO
Visit our Store to see the catelog
- No Doctor visits or prior perscription required!
- Quick delivery to your front door
----HISXBFSNYXELGRPGPIJY--
|
Spam Assassin Report:
3.5 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2)
0.3 SUBJECT_DRUG_GAP_VIA Subject contains a gappy version of 'viagra'
0.8 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split IP)
3.7 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
4.2 X_MESSAGE_INFO Bulk email fingerprint (X-Message-Info) found
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
0.1 MPART_ALT_DIFF BODY: HTML and text parts are different
1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words
1.9 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
[cf: 100]
0.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
3.8 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
[]
0.1 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[62.79.26.99 listed in combined.njabl.org]
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[62.79.26.99 listed in dnsbl.sorbs.net]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see ]
3.1 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[62.79.26.99 listed in sbl-xbl.spamhaus.org]
1.6 DNS_FROM_RFC_POST RBL: Envelope sender in postmaster.rfc-ignorant.org
1.0 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: vdrugz.com rrox.com]
4.3 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: rrox.com]
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: vdrugz.com rrox.com]
3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: vdrugz.com rrox.com]
0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: vdrugz.com]
0.2 DRUGS_ERECTILE Refers to an erectile drug
2.4 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
|
Spam Reg Home