[inter/meta/trans] [SPAM] watchesSale

adam overton a at plus1plus1plus.org
Sat Aug 11 11:50:11 EDT 2007


sorrry - that obviously wasn't from me
will try and figure out how to block msgs from spammers claiming to be
sending from my address...
a


...

http://plus1plus1plus.org
a at plus1plus1plus.org
661 373 8679

> Spam detection software, running on the system "troy.hostgo.com", has
> identified this incoming email as possible spam.  The original message
> has been attached to this so you can view it (if it isn't spam) or label
> similar future email.  If you have any questions, see
> the administrator of that system for details.
>
> Content preview:  The Rolex you wanted, for a price you don't expect:
> http://padderhi.com/
>    Worldwide delivery. 15% off when you get 2 or more. inter/meta/trans
> mailing
>    list InterMetaTrans at plus1plus1plus.org
> http://plus1plus1plus.org/mailman/listinfo/intermetatrans_plus1plus1plus.org
>    [...]
>
> Content analysis details:   (12.0 points, 5.0 required)
>
>  pts rule name              description
> ---- ----------------------
> --------------------------------------------------
>  0.1 RDNS_NONE              Delivered to trusted network by a host with no
> rDNS
>  1.7 DATE_IN_PAST_96_XX     Date: is 96 hours or more before Received:
> date
>  2.1 RCVD_NUMERIC_HELO      Received: contains an IP address used for HELO
> -0.2 BAYES_40               BODY: Bayesian spam probability is 20 to 40%
>                             [score: 0.2616]
>  2.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
>                             [URIs: padderhi.com]
>  6.5 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL
> blocklist
>                             [URIs: padderhi.com]
>  1.5 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL
> blocklist
>                             [URIs: padderhi.com]
>  4.5 URIBL_OB_SURBL         Contains an URL listed in the OB SURBL
> blocklist
>                             [URIs: padderhi.com]
>  1.1 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old
> Bread)
>                             [URIs: padderhi.com]
>  0.9 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP
> address
>                             [58.187.77.96 listed in dnsbl.sorbs.net]
>  4.5 URIBL_SBL              Contains an URL listed in the SBL blocklist
>                             [URIs: padderhi.com]
>  -13 AWL                    AWL: From: address is in the auto white-list
>
>
>




More information about the InterMetaTrans mailing list