[inter/meta/trans] [SPAM] watchesSale
adam overton
a at plus1plus1plus.org
Sat Aug 11 11:50:11 EDT 2007
sorrry - that obviously wasn't from me
will try and figure out how to block msgs from spammers claiming to be
sending from my address...
a
...
http://plus1plus1plus.org
a at plus1plus1plus.org
661 373 8679
> Spam detection software, running on the system "troy.hostgo.com", has
> identified this incoming email as possible spam. The original message
> has been attached to this so you can view it (if it isn't spam) or label
> similar future email. If you have any questions, see
> the administrator of that system for details.
>
> Content preview: The Rolex you wanted, for a price you don't expect:
> http://padderhi.com/
> Worldwide delivery. 15% off when you get 2 or more. inter/meta/trans
> mailing
> list InterMetaTrans at plus1plus1plus.org
> http://plus1plus1plus.org/mailman/listinfo/intermetatrans_plus1plus1plus.org
> [...]
>
> Content analysis details: (12.0 points, 5.0 required)
>
> pts rule name description
> ---- ----------------------
> --------------------------------------------------
> 0.1 RDNS_NONE Delivered to trusted network by a host with no
> rDNS
> 1.7 DATE_IN_PAST_96_XX Date: is 96 hours or more before Received:
> date
> 2.1 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
> -0.2 BAYES_40 BODY: Bayesian spam probability is 20 to 40%
> [score: 0.2616]
> 2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
> [URIs: padderhi.com]
> 6.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL
> blocklist
> [URIs: padderhi.com]
> 1.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL
> blocklist
> [URIs: padderhi.com]
> 4.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL
> blocklist
> [URIs: padderhi.com]
> 1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old
> Bread)
> [URIs: padderhi.com]
> 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
> address
> [58.187.77.96 listed in dnsbl.sorbs.net]
> 4.5 URIBL_SBL Contains an URL listed in the SBL blocklist
> [URIs: padderhi.com]
> -13 AWL AWL: From: address is in the auto white-list
>
>
>
More information about the InterMetaTrans
mailing list