From clientcare.refjh8837774698.bib@hsbc.com Fri Feb 1 00:24:50 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 099993A689E; Fri, 1 Feb 2008 00:24:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 68.153 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=68.153 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HELO_DYNAMIC_IPADDR2=4.395, HELO_DYNAMIC_SPLIT_IP=3.493, HELO_EQ_IP_ADDR=1.119, HOST_EQ_USERONOCOM=1.444, HTML_FONT_LOW_CONTRAST=0.124, HTML_MESSAGE=1, J_CHICKENPOX_21=0.6, MIME_HTML_ONLY=1.457, MIME_HTML_ONLY_MULTI=0.001, MPART_ALT_DIFF=0.739, RCVD_IN_DSBL=0.961, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_NUMERIC_HELO=2.067, RDNS_DYNAMIC=0.1, TVD_RCVD_IP=1.931, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_PH_SURBL=1.787] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 1.4 HOST_EQ_USERONOCOM HOST_EQ_USERONOCOM * 0.8 FH_HOST_EQ_D_D_D_D Host starts with d-d-d-d * 3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split * IP) * 1.1 HELO_EQ_IP_ADDR HELO using IP Address (not private) * 0.9 FH_HOST_EQ_D_D_D_DB Host is d-d-d-d * 4.4 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr * 2) * 1.9 TVD_RCVD_IP TVD_RCVD_IP * 2.1 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO * 0.6 J_CHICKENPOX_21 BODY: 2alpha-pock-1alpha * 1.0 HTML_MESSAGE BODY: HTML included in message * 0.1 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar to background * 0.7 MPART_ALT_DIFF BODY: HTML and text parts are different * 1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: qwe.st] * 1.8 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist * [URIs: qwe.st] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: qwe.st] * 10 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: qwe.st] * 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address * [84.123.156.228 listed in dnsbl.sorbs.net] * 1.0 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org * [] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [84.123.156.228 listed in zen.spamhaus.org] * 0.1 RDNS_DYNAMIC Delivered to trusted network by host with * dynamic-looking rDNS * 0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kdPSVruoJ44T; Fri, 1 Feb 2008 00:24:49 -0800 (PST) Received: from 84.123.156.228.dyn.user.ono.com (84.123.156.228.dyn.user.ono.com [84.123.156.228]) by core3.amsl.com (Postfix) with SMTP id 92C423A68D9; Fri, 1 Feb 2008 00:23:57 -0800 (PST) Received: from adult-speed.com (unknown [68.26.156.204]) by list-int.com with SMTP id SLLEIOEDNW for ; Fri, 01 Feb 2008 02:25:32 -0600 Received: from [24.239.100.168] (HELO malaysia.net) by supersuka.com with SMTP id KIGFUEX3MT for ; Fri, 01 Feb 2008 13:17:32 +0500 From: "hsbc.com" To: "Ippm-archive" Subject: ***SPAM*** 68.153 (5) HSBC Bank: important notice! (mess_id: K82613942) X-Sender: clientdepmnt.refG6342712.bib@hsbc.com User-Agent: Mozilla 4.61 [en]C-CCK-MCD C-UDP; (Win98; I) X-Priority: 3 (Normal) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--S5VJ_XD4KJSDSR9U.0H" Message-Id: <20080201082400.92C423A68D9@core3.amsl.com> Date: Fri, 1 Feb 2008 00:23:57 -0800 (PST) ----S5VJ_XD4KJSDSR9U.0H Content-Type: text/html; Content-Transfer-Encoding: 7Bit

Dear HSBC Bank business customer,

HSBC Customer Service team requests you to complete Business Internet Banking Online Form (BIB Online Form).

This procedure is obligatory for all HSBC Bank business and commercial customers.

Please select the hyperlink and visit the address listed to access BIB Online Form.

http://business-and-commercial.hsbc.com/bibform/formStart?partnerid=BIB9924811450903297070060565534157775319186777549066143

Please do not respond to this email.

___________________________________________

© Copyright hsbc.com, inc 2008. All rights reserved.

9KW: 0x608, 0x46060686, 0x378, 0x3336, 0x8325, 0x934, 0x900, 0x5, 0x2, 0x351, 0x351, 0x29, 0x83, 0x48, 0x404 engine, api, YI3G, N77, YYE4, common, 2K3, 4AK 0x2836, 0x1810, 0x25530601, 0x5, 0x17, 0x712, 0x60482808, 0x36939377, 0x7153 GXD: 0x7960, 0x93, 0x6076, 0x3, 0x5, 0x2, 0x2646, 0x02984285, 0x54762013, 0x4696 exe: 0x845, 0x6756, 0x71535984, 0x63994701, 0x10877852, 0x5, 0x2, 0x75670433, 0x44646378, 0x4913 HAB1: 0x93, 0x02105201, 0x96, 0x3, 0x9, 0x72784038, 0x66675478, 0x88032375, 0x6329, 0x449 PKE: 0x23, 0x92833530, 0x3, 0x58, 0x14, 0x4439, 0x58, 0x4547, 0x951, 0x33 function: 0x222, 0x3168, 0x87, 0x731, 0x1152, 0x33437943, 0x764, 0x5361, 0x2042, 0x2536, 0x57, 0x34978292 0x99447144, 0x20935704

0x56, 0x9014, 0x9, 0x035, 0x4773, 0x918, 0x9, 0x88363167, 0x7770, 0x8, 0x9, 0x7295, 0x4, 0x939, 0x8 0x26152643, 0x42, 0x71, 0x010, 0x5600, 0x3245, 0x12006126, 0x058, 0x54, 0x2, 0x5, 0x6845, 0x7, 0x799 0x354, 0x4, 0x3904, 0x5114, 0x251, 0x29786628, 0x59 cvs, function, 81ZX, root, define, root. 0x712, 0x69872578, 0x0, 0x09, 0x2, 0x0909, 0x609, 0x34, 0x5, 0x659, 0x2572, 0x7, 0x58 5Z0E: 0x22, 0x66607933, 0x136, 0x611, 0x137, 0x765 include P5S close end hex YQA common 8C5H: 0x77382692, 0x20, 0x9497, 0x4, 0x7291, 0x1175, 0x7701, 0x88802792, 0x82033090, 0x771, 0x82454685, 0x90 0x00, 0x421, 0x2947, 0x902, 0x1054, 0x79, 0x9766, 0x3718, 0x9160, 0x807, 0x77041166, 0x4, 0x35647379 B9GH: 0x269, 0x29, 0x4816, 0x68454894, 0x606, 0x7938, 0x6627, 0x8, 0x612, 0x314, 0x7, 0x823

L20: 0x754, 0x9053, 0x6, 0x8355, 0x900, 0x78, 0x478 0x56968683, 0x725, 0x24030586, 0x475, 0x7, 0x9, 0x7401, 0x16 0x29, 0x7, 0x292, 0x52, 0x127, 0x24007870, 0x08203995, 0x34, 0x1, 0x7, 0x8469, 0x5382 hex: 0x7764, 0x5, 0x488, 0x81, 0x76, 0x2, 0x84, 0x213, 0x60, 0x789, 0x575, 0x03, 0x947 W8R, media. CJTD: 0x2, 0x50, 0x88, 0x7729, 0x0526, 0x706, 0x48600015, 0x456, 0x997, 0x647, 0x48, 0x3 0x38, 0x8556, 0x72205471, 0x82782728 0x2 3TH 0x9762, 0x15514982

----S5VJ_XD4KJSDSR9U.0H-- From jraines@cpmg.org Fri Feb 1 02:52:34 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3D4CD3A68F9 for ; Fri, 1 Feb 2008 02:52:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 111.812 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=111.812 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FB_PENIS=1.66, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FRT_PENIS1=3.592, HELO_DYNAMIC_IPADDR2=4.395, HELO_DYNAMIC_SPLIT_IP=3.493, HELO_EQ_IP_ADDR=1.119, HOST_EQ_USERONOCOM=1.444, HTML_IMAGE_ONLY_24=1.552, HTML_MESSAGE=1, J_CHICKENPOX_31=0.6, MANGLED_ENLARG=2.3, MANGLED_ENLGMN=5, MANGLED_PENIS=2.3, NORMAL_HTTP_TO_IP=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_FORGED_WROTE=2.523, RCVD_FORGED_WROTE2=4.325, RCVD_IN_DSBL=0.961, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RCVD_NUMERIC_HELO=2.067, RDNS_DYNAMIC=0.1, SARE_ADLTOBFU=0.68, SARE_ADLTSUB1=1.66, SARE_HTML_A_BODY=0.742, SARE_RMML_Stock19=0.22, SUBJECT_FUZZY_PENIS=3.096, TVD_RCVD_IP=1.931, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_WS_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 1.4 HOST_EQ_USERONOCOM HOST_EQ_USERONOCOM * 0.8 FH_HOST_EQ_D_D_D_D Host starts with d-d-d-d * 3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split * IP) * 1.1 HELO_EQ_IP_ADDR HELO using IP Address (not private) * 0.9 FH_HOST_EQ_D_D_D_DB Host is d-d-d-d * 4.4 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr * 2) * 1.7 SARE_ADLTSUB1 Contains OBFU and "strong" adult words * 3.1 SUBJECT_FUZZY_PENIS Attempt to obfuscate words in Subject: * 4.3 RCVD_FORGED_WROTE2 RCVD_FORGED_WROTE2 * 1.9 TVD_RCVD_IP TVD_RCVD_IP * 2.5 RCVD_FORGED_WROTE Forged 'Received' header found ('wrote:' spam) * 2.1 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO * 0.2 SARE_RMML_Stock19 BODY: SARE_RMML_Stock19 * 2.3 MANGLED_PENIS BODY: mangled - Penis * 0.7 SARE_ADLTOBFU BODY: Contains OBFU adult material * 3.6 FRT_PENIS1 BODY: ReplaceTags: Penis * 5.0 MANGLED_ENLGMN BODY: mangled enlargement * 1.7 FB_PENIS BODY: FB_PENIS * 2.3 MANGLED_ENLARG BODY: mangled enlarge(r|s) * 0.6 J_CHICKENPOX_31 BODY: 3alpha-pock-1alpha * 0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL * 1.6 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words * 1.0 HTML_MESSAGE BODY: HTML included in message * 0.7 SARE_HTML_A_BODY FULL: Message body has very strange HTML sequence * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: domizu.com] * 10 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: domizu.com] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: domizu.com] * 10 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: domizu.com] * 1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) * [URIs: domizu.com] * 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address * [81.172.36.58 listed in dnsbl.sorbs.net] * 1.0 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org * [] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [81.172.36.58 listed in zen.spamhaus.org] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * 0.1 RDNS_DYNAMIC Delivered to trusted network by host with * dynamic-looking rDNS Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g2tLLsUwawVe for ; Fri, 1 Feb 2008 02:52:32 -0800 (PST) Received: from 81.172.36.58.dyn.user.ono.com (81.172.36.58.dyn.user.ono.com [81.172.36.58]) by core3.amsl.com (Postfix) with SMTP id 2D7E13A690F for ; Fri, 1 Feb 2008 02:52:31 -0800 (PST) Received: from 64.131.63.4 (HELO mx2.usfamily.net) by lists.ietf.org with esmtp (JQEHTVCNCDUZ XUEJS) id IVDYLu-hDKM0L-BW for ippm-archive@lists.ietf.org; Fri, 01 Feb 2008 11:52:50 +0100 Message-ID: <072801c864c0$96ab0d30$3a24ac51@Christoper> From: "Christoper Calderon" To: "Anibal Rosa" Subject: ***SPAM*** 111.812 (5) Large pen!s is not a dream now! Date: Fri, 01 Feb 2008 11:52:50 +0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_1830_0790_01C864C8.F86F7530" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2527 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527 This is a multi-part message in MIME format. ------=_NextPart_1830_0790_01C864C8.F86F7530 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable In just a few short weeks, you`ll watch with amazement=20 as your phallus grows into the powerful, thickest, hardest, and most bigg= est tool=20 you`ve ever imagined - the one you`ve constantly wanted about=20 having! No pen!s en`l@rgement system is faster, easier to use, or=20 more effective than VPXL+ - FOREVER}! VPXL+ IS GUARANTEED TO EN`L@RGE & STRENGTHEN YOUR=20 PEN|S OR YOUR MONEY BACK - PERIOD! SO WHY WAIT? GET=20 VPXL+ AND LIVE LARGE TODAY! TRY IS TODAY TO MAKE YOUR PEN|S BIGGER AND HARDER IN THIS YEAR! http://domizu=2Ecom/ The second, a hedge fund, was the Double Eagle Fund, begun inpoliticians = and as investors like Soros gained more and more clout inNo one could app= ly for membership in this club=2E Most of the participants times he didnt even tell Marquez when the two worked together infirst=2E = I want to see how I feel as a ------=_NextPart_1830_0790_01C864C8.F86F7530 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
#1 DOCTOR RECOMMENDED PEN|S EN'L@RGEMENT = FORMULA!

In = just a few short weeks, you`ll watch with amazement as your phallus
grows into the powerful, thickest, hardest, and most big= gest tool
you`ve ever imagined - the one you`ve constantly wanted abo= ut
having! No pen!s en`l@rgement system is faster, easier to use, or more effective than VPXL+ - FOREVER!

VPXL+ IS GUARANTEED TO EN`L@RGE & STRENGTHEN YOUR
PEN|S OR YOUR MONEY BACK= - PERIOD! SO WHY WAIT? GET
VPXL+ AND LIVE LARGE TODAY!

TRY IS TODAY TO MAKE YOUR PEN|S BIGGER AND HARDER IN = THIS YEAR!


a position=2E You always have to rethink it and rethink it= and rethink it=2EIt was not only his financial acumen that brought Soros= into the
I want to buy $300 million, Marquez would remind Soros=2EThe= second, a hedge fund, was the Double Eagle Fund, begun in
politicians= and as investors like Soros gained more and more clout inNo one could ap= ply for membership in this club=2E Most of the participants
times he d= idnt even tell Marquez when the two worked together infirst=2E I want to = see how I feel as a ------=_NextPart_1830_0790_01C864C8.F86F7530-- From ily@vlam.be Fri Feb 1 02:57:30 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3ABD13A6933 for ; Fri, 1 Feb 2008 02:57:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 23.823 X-Spam-Level: *********************** X-Spam-Status: Yes, score=23.823 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_DHCP=1.398, HELO_EQ_TR=0.935, NORMAL_HTTP_TO_IP=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, URIBL_JP_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 0.9 HELO_EQ_TR HELO_EQ_TR * 1.5 FH_RELAY_NODNS We could not determine your Reverse DNS * 1.4 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP) * 0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: 84.42.148.166] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [88.226.21.238 listed in zen.spamhaus.org] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CjJ71VEg1yMj for ; Fri, 1 Feb 2008 02:57:29 -0800 (PST) Received: from dsl88-226-5614.ttnet.net.tr (unknown [88.226.21.238]) by core3.amsl.com (Postfix) with SMTP id CA21E3A680F for ; Fri, 1 Feb 2008 02:57:27 -0800 (PST) Received: (qmail 7491 invoked from network); Fri, 1 Feb 2008 12:59:00 +0200 Received: from unknown (HELO djsur) (178.219.211.45) by dsl88-226-5614.ttnet.net.tr with SMTP; Fri, 1 Feb 2008 12:59:00 +0200 Message-ID: <47A2FB74.2070505@vlam.be> Date: Fri, 1 Feb 2008 12:59:00 +0200 From: User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: ippm-archive@lists.ietf.org Subject: ***SPAM*** 23.823 (5) Doctors endorse this miracle formula! Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit More inches of pleasure! http://84.42.148.166/owiwz/ From planocat@colourprintukltd.com Fri Feb 1 02:57:31 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0CD373A6933 for ; Fri, 1 Feb 2008 02:57:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 53.823 X-Spam-Level: ***************************************************** X-Spam-Status: Yes, score=53.823 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_DHCP=1.398, HELO_EQ_TR=0.935, NORMAL_HTTP_TO_IP=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 0.9 HELO_EQ_TR HELO_EQ_TR * 1.5 FH_RELAY_NODNS We could not determine your Reverse DNS * 1.4 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP) * 0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 10 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: 209.173.123.174] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: 209.173.123.174] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * [88.226.21.238 listed in zen.spamhaus.org] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: 209.173.123.174] * 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WDnmCU+DUEWX for ; Fri, 1 Feb 2008 02:57:30 -0800 (PST) Received: from dsl88-226-5614.ttnet.net.tr (unknown [88.226.21.238]) by core3.amsl.com (Postfix) with SMTP id 913293A690F for ; Fri, 1 Feb 2008 02:57:29 -0800 (PST) Received: (qmail 14099 invoked from network); Fri, 1 Feb 2008 12:58:55 +0200 Received: from unknown (HELO dwv) (73.137.189.165) by dsl88-226-5614.ttnet.net.tr with SMTP; Fri, 1 Feb 2008 12:58:55 +0200 Message-ID: <47A2FB6F.8010205@colourprintukltd.com> Date: Fri, 1 Feb 2008 12:58:55 +0200 From: User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: ippm-archive@ietf.org Subject: ***SPAM*** 53.823 (5) Large PE is not a dream anymore! Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Looking for the best pricein medz? http://209.173.123.174/ctlmub/ From brianmarcella5@msn.com Fri Feb 1 04:35:17 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 675053A687A for ; Fri, 1 Feb 2008 04:35:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 97.465 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=97.465 tagged_above=-999 required=5 tests=[BAYES_99=3.5, DOS_OE_TO_MX=2.75, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, GB_ROLEX=5, HELO_DYNAMIC_IPADDR=2.426, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619, RDNS_DYNAMIC=0.1, SARE_SPEC_ROLEX=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 0.8 FH_HOST_EQ_D_D_D_D Host starts with d-d-d-d * 2.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr * 1) * 1.6 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d * 5.0 GB_ROLEX BODY: I don't need a new watch! * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: tankseat.com] * 10 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist * [URIs: tankseat.com] * 10 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: tankseat.com] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: tankseat.com] * 10 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: tankseat.com] * 10 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist * [URIs: tankseat.com] * 1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) * [URIs: tankseat.com] * 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see ] * 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server * [72.45.208.67 listed in dnsbl.sorbs.net] * 2.0 FM_DDDD_TIMES_2 Dual helo + host eq d_d_d_d * 0.1 RDNS_DYNAMIC Delivered to trusted network by host with * dynamic-looking rDNS * 1.7 SARE_SPEC_ROLEX Rolex watch spam * 2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MytKtJt4spn2 for ; Fri, 1 Feb 2008 04:35:16 -0800 (PST) Received: from rrcs-72-45-208-67.nys.biz.rr.com (rrcs-72-45-208-67.nys.biz.rr.com [72.45.208.67]) by core3.amsl.com (Postfix) with ESMTP id 809EE3A680E for ; Fri, 1 Feb 2008 04:35:16 -0800 (PST) Message-ID: <000601c864cf$0259ff3f$afc149b8@swgglqn> From: "andonis caleb" To: "Christine Walls" Subject: ***SPAM*** 97.465 (5) exclusive watches, lowest prices possible rolex Date: Fri, 01 Feb 2008 10:52:40 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.3138 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 The finest of luxury timepieces at the LOWEST prices!! http://tankseat.com/ From anugal-i1957@Itau.com.br Fri Feb 1 04:39:17 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 617CD3A6948 for ; Fri, 1 Feb 2008 04:39:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 75.483 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=75.483 tagged_above=-999 required=5 tests=[BAYES_99=3.5, DOS_OE_TO_MX=2.75, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, FM_SEX_HELODDDD=10.357, FM_SEX_HOSTDDDD=10.357, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_FR=0.35, HOST_EQ_TISCALI=4.5, HTML_MESSAGE=1, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, URIBL_BLACK=20, URIBL_JP_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 0.3 HELO_EQ_FR HELO_EQ_FR * 4.5 HOST_EQ_TISCALI HOST_EQ_TISCALI * 0.8 FH_HOST_EQ_D_D_D_D Host starts with d-d-d-d * 2.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr * 1) * 1.6 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d * 1.0 HTML_MESSAGE BODY: HTML included in message * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: magefro.com] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: magefro.com] * 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address * [88.123.210.44 listed in dnsbl.sorbs.net] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [88.123.210.44 listed in zen.spamhaus.org] * 2.0 FM_DDDD_TIMES_2 Dual helo + host eq d_d_d_d * 0.1 RDNS_DYNAMIC Delivered to trusted network by host with * dynamic-looking rDNS * 10 FM_SEX_HOSTDDDD Sex words + host = dddd * 10 FM_SEX_HELODDDD Sex words + helo = dddd * 2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FhuwTcZoYe1D for ; Fri, 1 Feb 2008 04:39:16 -0800 (PST) Received: from dyn-88-123-210-44.ppp.tiscali.fr (dyn-88-123-210-44.ppp.tiscali.fr [88.123.210.44]) by core3.amsl.com (Postfix) with ESMTP id 19FAC3A680E for ; Fri, 1 Feb 2008 04:39:14 -0800 (PST) Message-ID: <000a01c864d0$fe627660$2cd27b58@NOM73E2432465C> From: "ABU Nadelson" To: ippm-archive@lists.ietf.org Subject: ***SPAM*** 75.483 (5) You can be assured of success by clicking here. Date: Fri, 1 Feb 2008 13:50:16 +0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--------=_NextPart_000_0006_01C864D9.6026DE60" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.3138 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 X-Antivirus: avast! (VPS 080201-0, 01/02/2008), Outbound message X-Antivirus-Status: Clean ----------=_NextPart_000_0006_01C864D9.6026DE60 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Make your own home sex video, and show off your new big schlong to the = world. ----------=_NextPart_000_0006_01C864D9.6026DE60 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Make your own home sex video, and = show off=20 your new big schlong to the world. ----------=_NextPart_000_0006_01C864D9.6026DE60-- From mailman-bounces@core3.amsl.com Fri Feb 1 05:17:59 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7606229317C for ; Fri, 1 Feb 2008 05:17:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.59 X-Spam-Level: X-Spam-Status: No, score=-2.59 tagged_above=-999 required=5 tests=[AWL=0.009, BAYES_00=-2.599] Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7wqEpMNXwp7y for ; Fri, 1 Feb 2008 05:17:50 -0800 (PST) Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 99B14293182 for ; Fri, 1 Feb 2008 05:03:15 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: ietf.org mailing list memberships reminder From: mailman-owner@ietf.org To: ippm-archive@megatron.ietf.org X-No-Archive: yes Message-ID: Date: Fri, 01 Feb 2008 05:01:34 -0800 Precedence: bulk X-BeenThere: mailman@core3.amsl.com X-Mailman-Version: 2.1.9 List-Id: X-List-Administrivia: yes Sender: mailman-bounces@core3.amsl.com Errors-To: mailman-bounces@core3.amsl.com This is a reminder, sent out once a month, about your ietf.org mailing list memberships. It includes your subscription info and how to use it to change it or unsubscribe from a list. You can visit the URLs to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on. In addition to the URL interfaces, you can also use email to make such changes. For more info, send a message to the '-request' address of the list (for example, mailman-request@ietf.org) containing just the word 'help' in the message body, and an email message will be sent to you with instructions. If you have questions, problems, comments, etc, send them to mailman-owner@ietf.org. Thanks! http://www.ietf.org/mailman/options/ippm/ippm-archive%40megatron.ietf.org From mailman-bounces@core3.amsl.com Fri Feb 1 05:19:11 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 03B8528DC14 for ; Fri, 1 Feb 2008 05:18:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.59 X-Spam-Level: X-Spam-Status: No, score=-2.59 tagged_above=-999 required=5 tests=[AWL=0.009, BAYES_00=-2.599] Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lQ7e3HbGo9zr for ; Fri, 1 Feb 2008 05:18:02 -0800 (PST) Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1BC1328C47F for ; Fri, 1 Feb 2008 05:03:18 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: ietf.org mailing list memberships reminder From: mailman-owner@ietf.org To: ippm-archive@megatron.ietf.org X-No-Archive: yes Message-ID: Date: Fri, 01 Feb 2008 05:01:35 -0800 Precedence: bulk X-BeenThere: mailman@core3.amsl.com X-Mailman-Version: 2.1.9 List-Id: X-List-Administrivia: yes Sender: mailman-bounces@core3.amsl.com Errors-To: mailman-bounces@core3.amsl.com This is a reminder, sent out once a month, about your ietf.org mailing list memberships. It includes your subscription info and how to use it to change it or unsubscribe from a list. You can visit the URLs to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on. In addition to the URL interfaces, you can also use email to make such changes. For more info, send a message to the '-request' address of the list (for example, mailman-request@ietf.org) containing just the word 'help' in the message body, and an email message will be sent to you with instructions. If you have questions, problems, comments, etc, send them to mailman-owner@ietf.org. Thanks! http://www.ietf.org/mailman/options/ippm/ippm-archive%40megatron.ietf.org From DamianloessLang@beau-coup.com Fri Feb 1 07:18:05 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 368A928C2A5; Fri, 1 Feb 2008 07:18:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 13.89 X-Spam-Level: ************* X-Spam-Status: Yes, score=13.89 tagged_above=-999 required=5 tests=[BAYES_99=3.5, DATE_IN_PAST_03_06=0.044, DOS_OE_TO_MX=2.75, FH_RELAY_NODNS=1.451, HTML_MESSAGE=1, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RDNS_NONE=0.1, SARE_RMML_Stock7=1.64] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 1.5 FH_RELAY_NODNS We could not determine your Reverse DNS * 0.0 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date * 1.6 SARE_RMML_Stock7 BODY: SARE_RMML_Stock7 * 1.0 HTML_MESSAGE BODY: HTML included in message * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [190.55.117.181 listed in zen.spamhaus.org] * 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS * 2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b5i-vvA4TJjL; Fri, 1 Feb 2008 07:18:03 -0800 (PST) Received: from alfajorchocola.cpe.telecentro.net.ar (unknown [190.55.117.181]) by core3.amsl.com (Postfix) with SMTP id 3E3493A69C0; Fri, 1 Feb 2008 06:42:22 -0800 (PST) Message-ID: <6a4f01c864e0$dea730d0$b57537be@alfajorchocola> From: "Russel Hancock" To: Cc: , " =20
We told you to keep = watching, G &=20 S Minerals... Symol : GSML

Gold is reaching = record of $1000/=20 oz ... GSML is the undiscovered gem you should be invested=20 in.

Up 4 straight days with = record=20 volume

If you missed the move = from .13 to .17=20 dont dispair they have not even scratched the surfact.

This company is going to=20 $3.00

So grab yourself = some GSML and=20 earn easy 10 bagger

------=_NextPart_000_6A4B_01C864E0.DEA730D0-- From LeopoldowhodMichael@mirror-mirror.org Fri Feb 1 09:17:13 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C327C3A68F6; Fri, 1 Feb 2008 09:17:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 17.024 X-Spam-Level: ***************** X-Spam-Status: Yes, score=17.024 tagged_above=-999 required=5 tests=[BAYES_99=3.5, DNS_FROM_RFC_BOGUSMX=1.482, DOS_OE_TO_MX=2.75, FORGED_MUA_OUTLOOK=3.116, INVALID_MSGID=1.9, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, SARE_MLH_Stock1=0.87, STOX_REPLY_TYPE=0.001] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 0.9 SARE_MLH_Stock1 Subject mentions stock or stock related words * 0.0 STOX_REPLY_TYPE STOX_REPLY_TYPE * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [77.134.49.254 listed in zen.spamhaus.org] * 1.5 DNS_FROM_RFC_BOGUSMX RBL: Envelope sender in * bogusmx.rfc-ignorant.org * 1.9 INVALID_MSGID Message-Id is not valid, according to RFC 2822 * 3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook * 2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S0y8gnosksWq; Fri, 1 Feb 2008 09:17:13 -0800 (PST) Received: from wi35.cibercomic (unknown [82.144.20.243]) by core3.amsl.com (Postfix) with SMTP id BB4B23A69AD; Fri, 1 Feb 2008 09:16:03 -0800 (PST) Message-ID: 20ee201c864f6$5c06efb0$2302a8c0@wi35 From: "Emile Levy" To: Cc: , " X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 322D73A6858 for ; Fri, 1 Feb 2008 09:37:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 31.828 X-Spam-Level: ******************************* X-Spam-Status: Yes, score=31.828 tagged_above=-999 required=5 tests=[AWL=0.296, BAYES_99=3.5, FORGED_MUA_OUTLOOK=3.116, FRT_BELOW2=2.154, NORMAL_HTTP_TO_IP=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_DSBL=0.961, SARE_BANK_URI_IP=0.653, SARE_FORGED_CHASE=3.4, URIBL_PH_SURBL=1.787, URIBL_SC_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 2.2 FRT_BELOW2 BODY: ReplaceTags: Below (2) * 0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 1.8 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist * [URIs: 211.119.38.69] * 10 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist * [URIs: 211.119.38.69] * 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see ] * 1.0 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org * [] * 3.4 SARE_FORGED_CHASE Message appears to be forged, (chase.com) * 0.7 SARE_BANK_URI_IP SARE_BANK_URI_IP * 3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook * 0.3 AWL AWL: From: address is in the auto white-list Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S0McJV4zdoC6 for ; Fri, 1 Feb 2008 09:37:38 -0800 (PST) Received: from cmsserver.cmspinning.local (adsl-76-230-161-14.dsl.chcgil.sbcglobal.net [76.230.161.14]) by core3.amsl.com (Postfix) with ESMTP id 262F13A697F for ; Fri, 1 Feb 2008 09:37:11 -0800 (PST) Received: from User ([74.238.94.152]) by cmsserver.cmspinning.local with Microsoft SMTPSVC(5.0.2195.6713); Fri, 1 Feb 2008 11:38:43 -0600 From: "Chase" Subject: ***SPAM*** 31.828 (5) Account Limitation Notification Date: Fri, 1 Feb 2008 12:50:38 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1251" Content-Transfer-Encoding: 7bit X-Priority: 1 X-MSMail-Priority: High X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-ID: X-OriginalArrivalTime: 01 Feb 2008 17:38:43.0147 (UTC) FILETIME=[4A0401B0:01C864F9] To: undisclosed-recipients:; Dear Chase account holder, Chase is constantly working to ensure security by regularly screening the accounts in our system. We have recently determined that different computers have tried logging into your Chase account, and multiple password failures were present before the logons. Until we can collect secure information, your access to sensitive account features will be limited. We would like to restore your access as soon as possible, and we apologize for the inconvenience. Why is my account access limited? Your account access has been limited for the following reason(s): January 9, 2008: We have reasons to believe that your account was accessed by a third party. We have limited access to sensitive Chase account features in case your account has been accessed by an unauthorized third party. We understand that having limited access can be an inconvenience, but protecting your account is our primary concern. To securely confirm your personal information please follow the link bellow: http://211.119.38.69/chase/account/login.htm Note: If you received this message in you spam/bulk folder, that is because of the restrictions implemented by you Internet Service Provider. We are sorry for that inconvenience. Chase.com | JPMorgan.com | JPMorganChase.com | Banco Chase © 2008 JPMorgan Chase & Co. From Greger-hasiride@adflownetworks.com Fri Feb 1 09:50:36 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5D44728C29C for ; Fri, 1 Feb 2008 09:50:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 66.751 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=66.751 tagged_above=-999 required=5 tests=[BAYES_99=3.5, DOS_OE_TO_MX=2.75, FH_RELAY_NODNS=1.451, HELO_EQ_IP_ADDR=1.119, HTML_MESSAGE=1, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RDNS_NONE=0.1, SARE_URI_CONS7=0.306, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10, URI_NOVOWEL=1.62] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 1.1 HELO_EQ_IP_ADDR HELO using IP Address (not private) * 1.5 FH_RELAY_NODNS We could not determine your Reverse DNS * 1.6 URI_NOVOWEL URI: URI hostname has long non-vowel sequence * 1.0 HTML_MESSAGE BODY: HTML included in message * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: opbhspsb.com] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: opbhspsb.com] * 10 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: opbhspsb.com] * 10 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist * [URIs: opbhspsb.com] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [84.255.170.36 listed in zen.spamhaus.org] * 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS * 0.3 SARE_URI_CONS7 body contains link to probable spammer * 2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dw5-SH-9fF-w for ; Fri, 1 Feb 2008 09:50:35 -0800 (PST) Received: from [82.194.62.227] (unknown [84.255.170.36]) by core3.amsl.com (Postfix) with ESMTP id 8EAAF28C44F for ; Fri, 1 Feb 2008 09:50:06 -0800 (PST) Message-ID: <000801c864fb$1a8bd640$e33ec252@owner8dab6aa0d> From: "Greger ramelik" To: ippm-archive@lists.ietf.org Subject: ***SPAM*** 66.751 (5) Chicks will be AMAZED by your legendary PROWESS. Date: Fri, 1 Feb 2008 20:51:42 +0300 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--------=_NextPart_000_0004_01C86514.3FD90E40" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.3138 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 ----------=_NextPart_000_0004_01C86514.3FD90E40 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Ever wanted a GIANT ROD? Click here for one. ----------=_NextPart_000_0004_01C86514.3FD90E40 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Ever wanted a GIANT ROD? Click here = for=20 one. ----------=_NextPart_000_0004_01C86514.3FD90E40-- From cheryl@mvpgroupint.com Fri Feb 1 09:56:56 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6D8673A693A for ; Fri, 1 Feb 2008 09:56:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 42.237 X-Spam-Level: ****************************************** X-Spam-Status: Yes, score=42.237 tagged_above=-999 required=5 tests=[BAYES_99=3.5, HELO_DYNAMIC_HCC=4.295, HELO_EQ_DSL=1.129, HELO_EQ_HU=1.35, HOST_EQ_HU=1.245, NORMAL_HTTP_TO_IP=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, TVD_SPACE_RATIO=2.219, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 1.4 HELO_EQ_HU HELO_EQ_HU * 1.2 HOST_EQ_HU HOST_EQ_HU * 1.1 HELO_EQ_DSL HELO_EQ_DSL * 4.3 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC) * 0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL * 2.2 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 10 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: 59.3.83.175] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: 59.3.83.175] * 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see ] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * [83.216.36.254 listed in zen.spamhaus.org] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * 0.1 RDNS_DYNAMIC Delivered to trusted network by host with * dynamic-looking rDNS Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XeouKvQ1z7wG for ; Fri, 1 Feb 2008 09:56:55 -0800 (PST) Received: from 53d824fe.adsl.enternet.hu (53d824fe.adsl.enternet.hu [83.216.36.254]) by core3.amsl.com (Postfix) with SMTP id 094693A67F2 for ; Fri, 1 Feb 2008 09:56:54 -0800 (PST) Received: (qmail 21250 invoked from network); Fri, 1 Feb 2008 18:58:28 +0100 Received: from unknown (HELO gddlg) (51.56.148.108) by 53d824fe.adsl.enternet.hu with SMTP; Fri, 1 Feb 2008 18:58:28 +0100 Message-ID: <47A35DC4.8080502@mvpgroupint.com> Date: Fri, 1 Feb 2008 18:58:28 +0100 From: User-Agent: Thunderbird 1.5.0.13 (Windows/20070809) MIME-Version: 1.0 To: ippm-archive@ietf.org Subject: ***SPAM*** 42.237 (5) Our Journey Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Antivirus: avast! (VPS 080201-0, 2008.02.01), Outbound message X-Antivirus-Status: Clean Kisses Through E-mail http://59.3.83.175/ From amanda.boteler@web-o-net.com Fri Feb 1 09:56:57 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B1BD63A68B2 for ; Fri, 1 Feb 2008 09:56:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 70.018 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=70.018 tagged_above=-999 required=5 tests=[BAYES_99=3.5, HELO_DYNAMIC_HCC=4.295, HELO_EQ_DSL=1.129, HELO_EQ_HU=1.35, HOST_EQ_HU=1.245, NORMAL_HTTP_TO_IP=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 1.4 HELO_EQ_HU HELO_EQ_HU * 1.2 HOST_EQ_HU HOST_EQ_HU * 1.1 HELO_EQ_DSL HELO_EQ_DSL * 4.3 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC) * 0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: 76.235.162.131] * 10 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: 76.235.162.131] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: 76.235.162.131] * 10 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist * [URIs: 76.235.162.131] * 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see ] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [83.216.36.254 listed in zen.spamhaus.org] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * 0.1 RDNS_DYNAMIC Delivered to trusted network by host with * dynamic-looking rDNS Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wWRHcrbRQy4v for ; Fri, 1 Feb 2008 09:56:57 -0800 (PST) Received: from 53d824fe.adsl.enternet.hu (53d824fe.adsl.enternet.hu [83.216.36.254]) by core3.amsl.com (Postfix) with SMTP id 5BB053A6930 for ; Fri, 1 Feb 2008 09:56:55 -0800 (PST) Received: (qmail 11981 invoked from network); Fri, 1 Feb 2008 18:58:31 +0100 Received: from unknown (HELO dasfa) (209.220.196.29) by 53d824fe.adsl.enternet.hu with SMTP; Fri, 1 Feb 2008 18:58:31 +0100 Message-ID: <47A35DC7.2070104@web-o-net.com> Date: Fri, 1 Feb 2008 18:58:31 +0100 From: User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: ippm-archive@lists.ietf.org Subject: ***SPAM*** 70.018 (5) I Love Thee Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Antivirus: avast! (VPS 080201-0, 2008.02.01), Outbound message X-Antivirus-Status: Clean Sending You My Love http://76.235.162.131/ From mesverschoorfuw@verschoor.nu Fri Feb 1 11:25:10 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3F79E3A6946; Fri, 1 Feb 2008 11:25:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 62.076 X-Spam-Level: ************************************************************** X-Spam-Status: Yes, score=62.076 tagged_above=-999 required=5 tests=[BAYES_99=3.5, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_WS_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: foreigngals.info] * 10 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: foreigngals.info] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: foreigngals.info] * 10 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: foreigngals.info] * 1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) * [URIs: foreigngals.info] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * [85.217.139.85 listed in zen.spamhaus.org] * 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see ] Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WUo905KZwONI; Fri, 1 Feb 2008 11:25:09 -0800 (PST) Received: from user-115e8050bf.evo.bg (139-85.vt.evo.bg [85.217.139.85]) by core3.amsl.com (Postfix) with ESMTP id A62FD3A6915; Fri, 1 Feb 2008 11:25:07 -0800 (PST) Received: from [85.217.139.85] by mxb.mail.widexs.nl; Sat, 2 Feb 2008 01:28:43 +0600 Date: Sat, 2 Feb 2008 01:28:43 +0600 From: "Bette Poe" X-Mailer: The Bat! (v2.01) Business Reply-To: mesverschoorfuw@verschoor.nu X-Priority: 3 (Normal) Message-ID: <468159693.22174742339390@verschoor.nu> To: iporpr-archive@lists.ietf.org Subject: ***SPAM*** 62.076 (5) Customer alert! MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Dear user! We bring to your notice, that 5 new messages have been delivered to you. You may check them at site: http://foreigngals.info/?idAff=35 Best wishes to you, Administration. From JeanneemitCrow@internettg.org Fri Feb 1 11:59:54 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 20E153A684F; Fri, 1 Feb 2008 11:59:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 25.807 X-Spam-Level: ************************* X-Spam-Status: Yes, score=25.807 tagged_above=-999 required=5 tests=[BAYES_99=3.5, DOS_OE_TO_MX=2.75, FH_RELAY_NODNS=1.451, FORGED_MUA_OUTLOOK=3.116, HELO_LH_HOME=3.714, INVALID_MSGID=1.9, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, STOX_REPLY_TYPE=0.001] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 3.7 HELO_LH_HOME HELO_LH_HOME * 1.5 FH_RELAY_NODNS We could not determine your Reverse DNS * 0.0 STOX_REPLY_TYPE STOX_REPLY_TYPE * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see ] * 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address * [190.24.62.12 listed in dnsbl.sorbs.net] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [190.24.62.12 listed in zen.spamhaus.org] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS * 1.9 INVALID_MSGID Message-Id is not valid, according to RFC 2822 * 3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook * 2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QIqaYkp67vx6; Fri, 1 Feb 2008 11:59:54 -0800 (PST) Received: from owner15hca0xd8.belkin (cpc3-flit1-0-0-cust588.lutn.cable.ntl.com [82.7.38.77]) by core3.amsl.com (Postfix) with SMTP id 037463A6886; Fri, 1 Feb 2008 11:59:52 -0800 (PST) Message-ID: 13bd01c8650d$38e2d870$0202a8c0@OWNER15HCA0XD8 From: "Vanessa Steward" To: , " X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 164EA3A69DD; Fri, 1 Feb 2008 13:02:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 83.95 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=83.95 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HOST_ALMOST_IP=1.889, FH_HOST_EQ_DYNAMICIP=2.177, HELO_LH_HOME=3.714, HOST_MISMATCH_NET=0.311, INVALID_MSGID=1.9, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, STOX_REPLY_TYPE=0.001, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 1.9 FH_HOST_ALMOST_IP The host almost looks like an IP addr. * 3.7 HELO_LH_HOME HELO_LH_HOME * 2.2 FH_HOST_EQ_DYNAMICIP Host is dynamicip * 0.0 STOX_REPLY_TYPE STOX_REPLY_TYPE * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: thestasist.com] * 10 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: thestasist.com] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: thestasist.com] * 10 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: thestasist.com] * 10 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist * [URIs: thestasist.com] * 1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) * [URIs: thestasist.com] * 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see ] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * [81.33.68.120 listed in zen.spamhaus.org] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address * [81.33.68.120 listed in dnsbl.sorbs.net] * 1.9 INVALID_MSGID Message-Id is not valid, according to RFC 2822 * 0.1 RDNS_DYNAMIC Delivered to trusted network by host with * dynamic-looking rDNS * 0.3 HOST_MISMATCH_NET HOST_MISMATCH_NET Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x9k8uYJojpqm; Fri, 1 Feb 2008 13:02:35 -0800 (PST) Received: from user831fee6772.local.lan (120.Red-81-33-68.dynamicIP.rima-tde.net [81.33.68.120]) by core3.amsl.com (Postfix) with SMTP id 5F6F33A69B2; Fri, 1 Feb 2008 13:02:31 -0800 (PST) Date: Fri, 1 Feb 2008 22:03:22 -0100 Message-ID: 05e701c86515$f6facf90$2101a8c0@user831fee6772 From: "Dr. Darnell Shannon" To: "ippm-web-archive@ietf.org, ippm-owner@ietf.org>, ippm-archive@ietf.org>, ippm-request"@ietf.org> Subject: ***SPAM*** 83.95 (5) Something interesting MIME-Version: 1.0 X-Priority: 3 (Normal) Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit You want to say goodbye to your sexual troubles? But how to do this? It's more than simply All details are here: http://thestasist.com/ Have a fervent nights! From Ty.Weir@boston.com Fri Feb 1 13:02:50 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8E6443A69F2 for ; Fri, 1 Feb 2008 13:02:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 83.95 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=83.95 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HOST_ALMOST_IP=1.889, FH_HOST_EQ_DYNAMICIP=2.177, HELO_LH_HOME=3.714, HOST_MISMATCH_NET=0.311, INVALID_MSGID=1.9, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, STOX_REPLY_TYPE=0.001, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 1.9 FH_HOST_ALMOST_IP The host almost looks like an IP addr. * 3.7 HELO_LH_HOME HELO_LH_HOME * 2.2 FH_HOST_EQ_DYNAMICIP Host is dynamicip * 0.0 STOX_REPLY_TYPE STOX_REPLY_TYPE * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: disinterball.com] * 10 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: disinterball.com] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: disinterball.com] * 10 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: disinterball.com] * 10 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist * [URIs: disinterball.com] * 1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) * [URIs: disinterball.com] * 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see ] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [81.33.68.120 listed in zen.spamhaus.org] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address * [81.33.68.120 listed in dnsbl.sorbs.net] * 1.9 INVALID_MSGID Message-Id is not valid, according to RFC 2822 * 0.1 RDNS_DYNAMIC Delivered to trusted network by host with * dynamic-looking rDNS * 0.3 HOST_MISMATCH_NET HOST_MISMATCH_NET Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C7oZnffRL-08 for ; Fri, 1 Feb 2008 13:02:49 -0800 (PST) Received: from user831fee6772.local.lan (120.Red-81-33-68.dynamicIP.rima-tde.net [81.33.68.120]) by core3.amsl.com (Postfix) with SMTP id F23BC3A69B2 for ; Fri, 1 Feb 2008 13:02:48 -0800 (PST) Date: Fri, 1 Feb 2008 22:03:22 -0100 Message-ID: 07fb01c86515$fef3ac80$2101a8c0@user831fee6772 From: "Dr. Ty Weir" To: ippm-archive@lists.ietf.org Subject: ***SPAM*** 83.95 (5) It's important MIME-Version: 1.0 X-Priority: 3 (Normal) Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit You can make your girl more gratified! You dont know what to do? Here a recipe for you.... For more details click here http://www.disinterball.com/ Best regards and have an impassionedzealous love From warketing@spaces.live.com Mon Feb 4 03:47:40 2008 Return-Path: X-Original-To: ietfarch-ippm-archive@core3.amsl.com Delivered-To: ietfarch-ippm-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C67213A6E43 for ; Mon, 4 Feb 2008 03:47:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -80.21 X-Spam-Level: X-Spam-Status: No, score=-80.21 tagged_above=-999 required=5 tests=[BAYES_99=3.5, HELO_EQ_MODEMCABLE=0.768, HOST_EQ_MODEMCABLE=1.368, NORMAL_HTTP_TO_IP=0.001, RAZOR2_CHECK=0.5, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, STOX_REPLY_TYPE=0.001, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100] Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UhCIvAYNwaQA for ; Mon, 4 Feb 2008 03:47:40 -0800 (PST) Received: from nat-gw.sevcable.net (nat-gw.sevcable.net [193.58.251.5]) by core3.amsl.com (Postfix) with SMTP id 671D83A6C87 for ; Mon, 4 Feb 2008 03:47:39 -0800 (PST) Received: (qmail 23936 invoked from network); Mon, 4 Feb 2008 13:49:14 +0200 Received: from unknown (HELO uzvx) (37.196.36.33) by nat-gw.sevcable.net with SMTP; Mon, 4 Feb 2008 13:49:14 +0200 Message-ID: <001a01c86723$f6eb9650$2124c425@uzvx> From: To: Subject: The Dance of Love Date: Mon, 4 Feb 2008 13:49:14 +0200 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2180 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 Eternity of Your Love http://85.249.9.252/ From roferees1974@CPCSYS.com Tue Feb 5 10:37:28 2008 Return-Path: X-Original-To: ippm-archive@lists.ietf.org Delivered-To: ietfarch-ippm-archive@mail.ietf.org Received: by mail.ietf.org (Postfix, from userid 51) id B7BED3A800E; Tue, 5 Feb 2008 10:52:58 -0800 (PST) Received: from 88-111-154-186.dynamic.dsl.as9105.com (88-111-154-186.dynamic.dsl.as9105.com [88.111.154.186]) by mail.ietf.org (Postfix) with ESMTP id 89C743A824C for ; Mon, 4 Feb 2008 20:01:52 -0800 (PST) Message-ID: <000c01c867ac$190c6e20$ba9a6f58@0a891f9f64c341c> From: "Matthieu Madlock" To: ippm-archive@lists.ietf.org Subject: Chicks love a huge dick, get one too. Date: Tue, 5 Feb 2008 04:03:43 -0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--------=_NextPart_000_0008_01C867AC.190C6E20" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.3138 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 ----------=_NextPart_000_0008_01C867AC.190C6E20 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable P3nis enlargement is now a medical certainty, click here. ----------=_NextPart_000_0008_01C867AC.190C6E20 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable P3nis enlargement is now a medical = certainty,=20 click here. ----------=_NextPart_000_0008_01C867AC.190C6E20-- From jon.carey@jmggroup.ca Tue Feb 5 10:37:32 2008 Return-Path: X-Original-To: ippm-archive@lists.ietf.org Delivered-To: ietfarch-ippm-archive@mail.ietf.org Received: by mail.ietf.org (Postfix, from userid 51) id 4B42C3A7ACD; Tue, 5 Feb 2008 10:53:06 -0800 (PST) Received: from client-201.240.171.77.speedy.net.pe (unknown [201.240.171.77]) by mail.ietf.org (Postfix) with SMTP id 4DE3828D47B for ; Tue, 5 Feb 2008 08:27:48 -0800 (PST) Received: from jhhz ([234.166.43.41]) by client-201.240.171.77.speedy.net.pe (8.13.5/8.13.5) with SMTP id m15GW9LU073974; Tue, 5 Feb 2008 11:32:09 -0500 Message-ID: <002101c86814$416ce7b0$292ba6ea@jhhz> From: To: Subject: All love-enhancers (and many other meds) at one online store! Date: Tue, 5 Feb 2008 11:29:18 -0500 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4131.1600 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4131.1600 Your incredible new huge love-stick! http://eeiea.measureremember.com From ali_issa@centrum.cz Tue Feb 5 10:43:01 2008 Return-Path: X-Original-To: ippm-archive@ietf.org Delivered-To: ietfarch-ippm-archive@mail.ietf.org Received: by mail.ietf.org (Postfix, from userid 51) id DF1843A6D6F; Tue, 5 Feb 2008 10:52:53 -0800 (PST) Received: from mail1007.centrum.cz (mail1007.centrum.cz [213.29.7.97]) by mail.ietf.org (Postfix) with ESMTP id 9B4553A756C for ; Mon, 4 Feb 2008 15:36:52 -0800 (PST) Received: by mail1007.centrum.cz id S738223133AbYBDXiN (ORCPT ); Tue, 5 Feb 2008 00:38:13 +0100 Received: from 212.52.146.58 by mail1007.centrum.cz (Centrum Mail) with HTTP Date: Tue, 05 Feb 2008 00:38:13 +0100 From: X-Mailer: Centrum Mail 1.0 MIME-Version: 1.0 X-Priority: 3 Message-ID: <200802050038.23876@centrum.cz> Subject: Waiting to hear from you. Content-Type: multipart/alternative; boundary="_12345_-------=_8973EE2.3487579C" To: unlisted-recipients:; (no To-header on input) --_12345_-------=_8973EE2.3487579C Content-Type: text/plain; charset="windows-1250" Content-Transfer-Encoding: 8bit Dear Friend,   I am a senior staff of bill and exchange unit at FOREIGN REMITTANCE DEPT.SOCIETE GENERALE DE BANQUES AU BURKINA(SGBB)   I am writing to you, following the impressive information received about you from the chambers of commerce. I believed that you are capable and reliable to champion this business opportunity.   In my department I discovered an abandoned sum of U.S $12.5m US dollars in an account that belonged to one of In an account that belongs to one of our foreign customer who died along with his entire family on 25TH JULY,2000 CONCORDE PLANE CRASH [Flight AF4590 with the whole passengers aboard, the name oF the deceased man was (MR. JOHN KOROVO), from Munich,Germany.   Since we got information about his death, we have been expecting his next of kin to come over and claim his money because we cannot release it unless somebody applies for it as next of kin or relation to the deceased as indicated in our banking guidelines but unfortunately I learnt that all his supposed next of kin or relation died alongside with him at the plane crash leaving nobody behind for the claim.   It is therefore upon this discovery that I now decided to make this business proposal to you, so that the bank can release the money to you as the next of kin or relation to the deceased for safety and subsequent disbursement since nobody is coming for it and we don't want this money to go into the Bank treasury as unclaimed Bill.   The Banking law and guideline here stipulates that if such money remained unclaimed after six years, the money will be transfered into the Bank treasury as unclaimed fund. The request of foreigner as next of kin in this business is occasioned by the fact that the customer was a foreigner and a Burkinabe cannot stand in as next of kin to a foreigner.   I agree that 35% of this money will be for you as foreign partner, in respect to the provision of a foreign account, 10 % will be set aside for tax and expenses to be incurred during the business and 55 % would be for me,there after I will visit your country for disbursement according to the percentages indicated.   Therefore to enable the immediate transfer of this fund to you as arranged, you must apply first to the bank as a relation or next of kin of the deceased customer but that will be when you have shown interest to assist me in this transaction then i will forward to you the text of application with the bank address where the application will be sent to by you as the next of kin to Mr Andreas Schranner.   Upon receipt of your reply, I will send to you by fax or email the text of the application. I will not fail to bring to your notice that this transaction is 100% hitch and risk free and that you should not entertain any atom of fear as all required arrangements have been made for the transfer .                                                  Reply with this email add  ali_issa011@yahoo.com Trusting to hear from you immediately.   Your's faithfully, Mr Ali Issa. --_12345_-------=_8973EE2.3487579C Content-Type: text/html; charset="windows-1250" Content-Transfer-Encoding: 8bit

Dear Friend,
 
I am a senior staff of bill and exchange unit at FOREIGN REMITTANCE DEPT.SOCIETE GENERALE DE BANQUES AU BURKINA(SGBB)
 
I am writing to you, following the impressive information received about you from the chambers of commerce. I believed that you are capable and reliable to champion this business opportunity.
 
In my department I discovered an abandoned sum of U.S $12.5m US dollars in an account that belonged to one of In an account that belongs to one of our foreign customer who died along with his entire family on 25TH JULY,2000 CONCORDE PLANE CRASH [Flight AF4590 with the whole passengers aboard, the name oF the deceased man was (MR. JOHN KOROVO), from Munich,Germany.
 
Since we got information about his death, we have been expecting his next of kin to come over and claim his money because we cannot release it unless somebody applies for it as next of kin or relation to the deceased as indicated in our banking guidelines but unfortunately I learnt that all his supposed next of kin or relation died alongside with him at the plane crash leaving nobody behind for the claim.
 
It is therefore upon this discovery that I now decided to make this business proposal to you, so that the bank can release the money to you as the next of kin or relation to the deceased for safety and subsequent disbursement since nobody is coming for it and we don't want this money to go into the Bank treasury as unclaimed Bill.
 
The Banking law and guideline here stipulates that if such money remained unclaimed after six years, the money will be transfered into the Bank treasury as unclaimed fund.
The request of foreigner as next of kin in this business is occasioned by the fact that the customer was a foreigner and a Burkinabe cannot stand in as next of kin to a foreigner.
 
I agree that 35% of this money will be for you as foreign partner, in respect to the provision of a foreign account, 10 % will be set aside for tax and expenses to be incurred during the business and 55 % would be for me,there after I will visit your country for disbursement according to the percentages indicated.
 
Therefore to enable the immediate transfer of this fund to you as arranged, you must apply first to the bank as a relation or next of kin of the deceased customer but that will be when you have shown interest to assist me in this transaction then i will forward to you the text of application with the bank address where the application will be sent to by you as the next of kin to Mr Andreas Schranner.
 
Upon receipt of your reply, I will send to you by fax or email the text of the application. I will not fail to bring to your notice that this transaction is 100% hitch and risk free and that you should not entertain any atom of fear as all required arrangements have been made for the transfer .                                                 

Reply with this email add  ali_issa011@yahoo.com
Trusting to hear from you immediately.
 
Your's faithfully,
Mr Ali Issa.