From dnspartei@itanets.com Thu Jan 31 17:18:52 2008 Return-Path: X-Original-To: ietfarch-dnsind-archive@core3.amsl.com Delivered-To: ietfarch-dnsind-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A735A3A67B0 for ; Thu, 31 Jan 2008 17:18:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): Subject: SALE 73% OFF on VIAGRA\256 \n X-Spam-Flag: YES X-Spam-Score: 96.749 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=96.749 tagged_above=-999 required=5 tests=[BAYES_99=3.5, DRUGS_ERECTILE=1, DRUG_ED_CAPS=0.322, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_DHCP=1.398, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_CPE=0.5, HOST_EQ_CPE=0.979, HTML_IMAGE_ONLY_20=1.546, HTML_MESSAGE=1, HTML_SHORT_LINK_IMG_3=0.001, MIME_8BIT_HEADER=0.3, MIME_HTML_ONLY=1.457, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SUBJECT_NEEDS_ENCODING=0.001, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SBL=20, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 0.5 HELO_EQ_CPE HELO_EQ_CPE * 0.8 FH_HOST_EQ_D_D_D_D Host starts with d-d-d-d * 2.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr * 1) * 1.0 HOST_EQ_CPE HOST_EQ_CPE * 1.4 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP) * 1.6 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d * 0.3 DRUG_ED_CAPS BODY: Mentions an E.D. drug * 1.5 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words * 1.0 HTML_MESSAGE BODY: HTML included in message * 1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: swinhertare.com] * 10 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: swinhertare.com] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: swinhertare.com] * 10 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist * [URIs: swinhertare.com] * 1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) * [URIs: swinhertare.com] * 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address * [65.24.195.203 listed in dnsbl.sorbs.net] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [65.24.195.203 listed in zen.spamhaus.org] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see ] * 20 URIBL_SBL Contains an URL listed in the SBL blocklist * [URIs: swinhertare.com] * 2.0 FM_DDDD_TIMES_2 Dual helo + host eq d_d_d_d * 0.0 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image * 1.0 DRUGS_ERECTILE Refers to an erectile drug * 0.3 MIME_8BIT_HEADER Message header contains 8-bit character * 0.1 RDNS_DYNAMIC Delivered to trusted network by host with * dynamic-looking rDNS * 0.0 SUBJECT_NEEDS_ENCODING SUBJECT_NEEDS_ENCODING Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CqZuvSK3fPtJ for ; Thu, 31 Jan 2008 17:18:52 -0800 (PST) Received: from cpe-65-24-195-203.insight.res.rr.com (cpe-65-24-195-203.insight.res.rr.com [65.24.195.203]) by core3.amsl.com (Postfix) with SMTP id 4F2C43A6780 for ; Thu, 31 Jan 2008 17:18:52 -0800 (PST) Content-Return: allowed X-Mailer: CME-V6.5.4.3; MSN Received: (qmail 47140 by uid 163); Thu, 31 Jan 2008 08:20:26 -0500 Message-Id: <20080131032026.47142.qmail@cpe-65-24-195-203.insight.res.rr.com> To: Subject: ***SPAM*** 96.749 (5) SALE 73% OFF on =?iso-8859-1?Q?VIAGRA=AE?= From: MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Date: Thu, 31 Jan 2008 17:18:52 -0800 (PST)