Spam detection software, running on the system "lips.borg.umn.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: long etc catch grabbed twenty society also fair public
cheat Cheap softtwares for you, all are Original Genuine! Major titles
from MICR0S0FT and AD0BE for Rock Bottom prriice Great Bargaain Sa1e!
Variety discoount softtwares at wholesale chaeap pricing! Micros0ft
Wind0ws XP PR0fessional - my price: $50 ; normal : $299.00 ; you saave
$249.00 Ad0be Ph0toshop CS V 8.O PC - my price: $80 ; normal : $609.99
; you save $529.99 Micros0ft 0ffice XP PR0fessional - my price: $100 ;
normal : $ 499.95; you saave $399.95 Ad0be Acrobaat V 6.O Professional
PC - my price: $100 ; normal : $449.95 ; you saave $349.95 Micros0ft
0ffice 2OO3 Professional - my price: $80 ; normal : $499.95 ; you
saave $419.95 N0rton Antivirus 2OO4 Professional - my price: $15 ;
normal : $69.95 ; you saave $54.95 CorelDraw Graphics Suite V 12 PC -
my price: $100 ; normal : $349.95 ; you saave $249.95 Ad0be Pagemaker
V 7.O PC - my price: $80 ; normal : $599.95 ; you saave $519.95 [...]
Content analysis details: (10.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.1 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
0.2 INVALID_TZ_GMT Invalid date in header (wrong GMT/UTC timezone)
1.7 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr 1)
0.0 HTML_BADTAG_00_10 BODY: HTML message is 0% to 10% bad tags
0.1 HTML_NONELEMENT_10_20 BODY: 10% to 20% of HTML elements are non-standard
0.0 HTML_SHOUTING3 BODY: HTML has very strong "shouting" markup
1.2 HTML_40_50 BODY: Message is 40% to 50% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_BIG BODY: HTML tag for a big font size
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
1.3 RCVD_IN_RFC_IPWHOIS RBL: Sent via a relay in ipwhois.rfc-ignorant.org
[200.65.237.1 has inaccurate or missing WHOIS]
[data at the RIR]
0.1 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[200.65.237.1 listed in dnsbl.sorbs.net]
1.8 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[200.65.237.1 listed in combined.njabl.org]
0.9 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
-- Attached file included as plaintext by Ecartis --
-- Desc: original message before SpamAssassin
Received: from dup-200-65-237-1.prodigy.net.mx (dup-200-65-237-1.prodigy.net.mx [200.65.237.1])
by lips.borg.umn.edu (8.12.11/8.12.11) with SMTP id i6MEIKMO047578
for <mba(a)thebarn.com>; Thu, 22 Jul 2004 09:18:30 -0500 (CDT)
(envelope-from teeu27gs(a)woodland.net)
From: "Dione Emilia" <teeu27gs(a)woodland.net>
Reply-To: "Dione Emilia" <teeu27gs(a)woodland.net>
To: mba(a)thebarn.com
Date: Thu, 22 Jul 2004 14:13:27 -0100
Subject: ORIGINAL MICR0S0FT, AD0BE, N0RTON, COREL DRAW CD FROM $15 except put
Message-ID: <Q2JymL8Ohx1ZRjo1spd67CRSN4Tj9@beyondglad>
Received: mzvgxRFl-ihQ.tenmoon.com (fuxznju [211.112.113.75])
by kitchen.relativesee.com (1.58.0/7.67.8) with ESMTP id R7P1Z8B9FYU2
for <mba(a)thebarn.com>; Thu, 22 Jul 2004 21:09:27 +0600 GMT
MIME-Version: 1.0
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.2035.7
Content-Type: multipart/alternative;
boundary="--57232816813763"
----57232816813763
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
long etc
catch grabbed twenty society
also fair public cheat
----57232816813763
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 8bit
<html>
<head>
<meta http-equiv="Content-Type" content="text; charset=us-ascii">
</head>
<body>
<table border=0 cellspacing=0 cellpadding=10 width=600>
<tr><td bgcolor=F5F5F5><hall author answer frightened nature sun hardly >
<font color=000000 size=2 face=arial>
<font color=0000FF size=5 face=arial><b><center>Cheap softtwares for you, all are Original Genuine!</b><br><font size=4 color=FF71B8>Major titles from MICR0S0FT and AD0BE for Rock Bottom prriice<br><font color=808080 size=2>Great Bargaain Sa1e! Variety discoount softtwares at wholesale chaeap pricing!</center></font></font></font><br>
<b>Micros0ft Wind0ws XP PR0fessional</b> - <font color=0000F2><b>my price: $50</b> ; </font> normal : $299.00 ; <font color=008C00><b>you saave $249.00</b></font><br>
<b>Ad0be Ph0toshop CS V 8.O PC</b> - <font color=0000F2><b>my price: $80</b> ; </font> normal : $609.99 ; <font color=008C00><b>you save $529.99</b></font><br>
<b>Micros0ft 0ffice XP PR0fessional</b> - <font color=0000F2><b>my price: $100</b> ; </font> normal : $ 499.95; <font color=008C00><b>you saave $399.95</b></font><br>
<b>Ad0be Acrobaat V 6.O Professional PC</b> - <font color=0000F2><b>my price: $100</b> ; </font> normal : $449.95 ; <font color=008C00><b>you saave $349.95</b></font><br>
<b>Micros0ft 0ffice 2OO3 Professional</b> - <font color=0000F2><b>my price: $80</b> ; </font> normal : $499.95 ; <font color=008C00><b>you saave $419.95</b></font><br>
<b>N0rton Antivirus 2OO4 Professional</b> - <font color=0000F2><b>my price: $15</b> ; </font> normal : $69.95 ; <font color=008C00><b>you saave $54.95</b></font><br>
<b>CorelDraw Graphics Suite V 12 PC</b> - <font color=0000F2><b>my price: $100</b> ; </font> normal : $349.95 ; <font color=008C00><b>you saave $249.95</b></font><br>
<b>Ad0be Pagemaker V 7.O PC </b> - <font color=0000F2><b>my price: $80</b> ; </font> normal : $599.95 ; <font color=008C00><b>you saave $519.95</b></font><br><br>
We do have full range softwares -- <b>Macr0media, Mc-Afeee, Ad0bee, Core1Draw, Micros0ft, NERO, Pinnacle Systems, PowerQuest, RedHat, Riverdeep, Roxio, Symaantec, 321 Studio</b><br>
52 More P0PULAR titles for you >> <b><a href=http://www.shall.co.uk.hugobb.com target=_blank><font color=D20000 size=5 face=arial><u>Cliickk here for 52 more titles</u></font></a><br><br>
<font color=FCA836 size=3>We shiip to all countries including africa, finland & etc.. as where u located</b></font><br><br>
<font color=000000 size=2>
<b>Wonder why our priices are unbelievably L0W?</b><br>
We are currently clearing our goods at incredibily cheeap sa1e-priice in connection with the shutdown of our shop and the closure of the stockhouse. Don't missss your lucky chance to get the best priicce on discoouunt software!<br><br>
We are the authorized agent and an established reseller offering OEM Licensing software.<br><br>
We possesses all the necessary certificates issued to verify the authenticity of genuine OEM products and granting the right for us to resell OEM software products.<br><br>
<center><a href=http://www.whose.co.uk.hugobb.com target=_blank><font color=D20000 size=5 face=arial><u><b>Super Cheaep MICR0S0FT, AD0BE & all kinds..<br><br>Cliickk here to enjoy our Superb Discounnt!</u></b></font></a><br><br><a href=http://www.need.co.uk.hugobb.com/a.html target=_blank><font color=8F8F8F size=1>take me down</font></a></center>
</font>
</td></tr></table><recommend reference barely am ticket the >
</body>
</html>
----57232816813763--
Spam detection software, running on the system "lips.borg.umn.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: hardly ridge considered having service exercise make
year pity distance Cheap softtwares for you, all are Original Genuine!
Major titles from MICR0S0FT and AD0BE for Rock Bottom prriice Great
Bargaain Sa1e! Variety discoount softtwares at wholesale chaeap
pricing! Micros0ft Wind0ws XP PR0fessional - my price: $50 ; normal :
$299.00 ; you saave $249.00 Ad0be Ph0toshop CS V 8.O PC - my price:
$80 ; normal : $609.99 ; you save $529.99 Micros0ft 0ffice XP
PR0fessional - my price: $100 ; normal : $ 499.95; you saave $399.95
Ad0be Acrobaat V 6.O Professional PC - my price: $100 ; normal :
$449.95 ; you saave $349.95 Micros0ft 0ffice 2OO3 Professional - my
price: $80 ; normal : $499.95 ; you saave $419.95 N0rton Antivirus
2OO4 Professional - my price: $15 ; normal : $69.95 ; you saave $54.95
CorelDraw Graphics Suite V 12 PC - my price: $100 ; normal : $349.95 ;
you saave $249.95 Ad0be Pagemaker V 7.O PC - my price: $80 ; normal :
$599.95 ; you saave $519.95 [...]
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.1 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
0.2 INVALID_TZ_GMT Invalid date in header (wrong GMT/UTC timezone)
0.1 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split IP)
0.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2)
2.3 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
0.0 HTML_BADTAG_00_10 BODY: HTML message is 0% to 10% bad tags
0.1 HTML_NONELEMENT_10_20 BODY: 10% to 20% of HTML elements are non-standard
0.0 HTML_SHOUTING3 BODY: HTML has very strong "shouting" markup
1.2 HTML_40_50 BODY: Message is 40% to 50% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_BIG BODY: HTML tag for a big font size
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.9 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
-- Attached file included as plaintext by Ecartis --
-- Desc: original message before SpamAssassin
Received: from 84.94.149.65.forward.012.net.il (Pasha16(a)84.94.149.65.forward.012.net.il [84.94.149.65])
by lips.borg.umn.edu (8.12.11/8.12.11) with SMTP id i6MDwXBo046715
for <mba(a)thebarn.com>; Thu, 22 Jul 2004 08:58:42 -0500 (CDT)
(envelope-from okvqt0hihc(a)dcsi.net)
From: "Anglea Chelsea" <okvqt0hihc(a)dcsi.net>
Reply-To: "Anglea Chelsea" <okvqt0hihc(a)dcsi.net>
To: mba(a)thebarn.com
Date: Thu, 22 Jul 2004 12:51:39 -0200
Subject: NOW WE CAN SHIIP TO UR COUNTRY ORIGINAL SOFTWARES FROM $15 EACH CD reason perhaps matters
Message-ID: <rjgRXwqrE4ON9R1w3KEiMVsQRwW0@loselonely>
Received: jjdnlo-siX.listformer.com (cghcfylp [159.147.248.48])
by early.childrendog.com (0.76.9/9.25.9) with ESMTP id XQVP6FKBI3MJ
for <mba(a)thebarn.com>; Thu, 22 Jul 2004 13:49:39 -0100 GMT
MIME-Version: 1.0
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.1703.8
Content-Type: multipart/alternative;
boundary="--6799873694265"
----6799873694265
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
hardly ridge considered having
service exercise
make year pity distance
----6799873694265
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 8bit
<html>
<head>
<meta http-equiv="Content-Type" content="text; charset=us-ascii">
</head>
<body>
<table border=0 cellspacing=0 cellpadding=10 width=600>
<tr><td bgcolor=F5F5F5><had we >
<font color=000000 size=2 face=arial>
<font color=0000FF size=5 face=arial><b><center>Cheap softtwares for you, all are Original Genuine!</b><br><font size=4 color=FF71B8>Major titles from MICR0S0FT and AD0BE for Rock Bottom prriice<br><font color=808080 size=2>Great Bargaain Sa1e! Variety discoount softtwares at wholesale chaeap pricing!</center></font></font></font><br>
<b>Micros0ft Wind0ws XP PR0fessional</b> - <font color=0000F2><b>my price: $50</b> ; </font> normal : $299.00 ; <font color=008C00><b>you saave $249.00</b></font><br>
<b>Ad0be Ph0toshop CS V 8.O PC</b> - <font color=0000F2><b>my price: $80</b> ; </font> normal : $609.99 ; <font color=008C00><b>you save $529.99</b></font><br>
<b>Micros0ft 0ffice XP PR0fessional</b> - <font color=0000F2><b>my price: $100</b> ; </font> normal : $ 499.95; <font color=008C00><b>you saave $399.95</b></font><br>
<b>Ad0be Acrobaat V 6.O Professional PC<mans scarcely power take children does figure referred ></b> - <font color=0000F2><b>my price: $100</b> ; </font> normal : $449.95 ; <font color=008C00><b>you saave $349.95</b></font><br>
<b>Micros0ft 0ffice 2OO3 Professional</b> - <font color=0000F2><b>my price: $80</b> ; </font> normal : $499.95 ; <font color=008C00><b>you saave $419.95</b></font><br>
<b>N0rton Antivirus 2OO4 Professional</b> - <font color=0000F2><b>my price: $15</b> ; </font> normal : $69.95 ; <font color=008C00><b>you saave $54.95</b></font><br>
<b>CorelDraw Graphics Suite V 12 PC</b> - <font color=0000F2><b>my price: $100</b> ; </font> normal : $349.95 ; <font color=008C00><b>you saave $249.95</b></font><br>
<b>Ad0be Pagemaker V 7.O PC </b> - <font color=0000F2><b>my price: $80</b> ; </font> normal : $599.95 ; <font color=008C00><b>you saave $519.95</b></font><br><br>
We do have full range softwares -- <b>Macr0media, Mc-Afeee, Ad0bee, Core1Draw, Micros0ft, NERO, Pinnacle Systems, PowerQuest, RedHat, Riverdeep, Roxio, Symaantec, 321 Studio</b><br>
52 More P0PULAR titles for you >> <b><a href=http://www.fool.co.uk.hugobb.com target=_blank><font color=D20000 size=5 face=arial><u>Cliickk here for 52 more titles</u></font></a><br><br>
<font color=FCA836 size=3>We shiip to all countries including africa, finland & etc.. as where u located</b></font><br><br>
<font color=000000 size=2>
<b>Wonder why our priices are unbelievably L0W?</b><br>
We are currently clearing our goods at incredibily cheeap sa1e-priice in connection with the shutdown of our shop and the closure of the stockhouse. Don't missss your lucky chance to get the best priicce on discoouunt software!<br><br>
We are the authorized agent and an established reseller offering OEM Licensing software.<br><br>
We possesses all the necessary certificates issued to verify the authenticity of genuine OEM products and granting the right for us to resell OEM software products.<br><br>
<center><a href=http://www.four.co.uk.hugobb.com target=_blank><font color=D20000 size=5 face=arial><u><b>Super Cheaep MICR0S0FT, AD0BE & all kinds..<br><br>Cliickk here to enjoy our Superb Discounnt!</u></b></font></a><br><br><a href=http://www.somewhere.co.uk.hugobb.com/a.html target=_blank><font color=8F8F8F size=1>take me down</font></a></center>
</font>
</td></tr></table><yesterday matters servant >
</body>
</html>
----6799873694265--
Spam detection software, running on the system "lips.borg.umn.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Looking for HYDR0COD0NE? Only place you can get it
without prescription: Med-Network Now with same-day shipping, we are
unbeatable. Under-priced deals on other products like PHENTERMlNE too.
[...]
Content analysis details: (15.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FORGED_RCVD_HELO Received: contains a forged HELO
0.4 LINES_OF_YELLING BODY: A WHOLE LINE OF YELLING DETECTED
1.2 HTML_40_50 BODY: Message is 40% to 50% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[210.128.71.174 listed in dnsbl.sorbs.net]
1.8 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[210.128.71.174 listed in combined.njabl.org]
1.3 URIBL_SBL Contains a URL listed in the SBL blocklist
[URIs: mypillsforme.com]
2.0 URIBL_WS_SURBL Contains a URL listed in the WS SURBL blocklist
[URIs: mypillsforme.com]
1.0 URIBL_OB_SURBL Contains a URL listed in the OB SURBL blocklist
[URIs: mypillsforme.com]
3.3 URIBL_SC_SURBL Contains a URL listed in the SC SURBL blocklist
[URIs: mypillsforme.com]
1.6 MSGID_DOLLARS Message-Id has pattern used in spam
0.5 DRUGS_DIET_OBFU Obfuscated reference to a diet drug
0.1 DRUGS_DIET Refers to a diet drug
0.4 DRUGS_PAIN Refers to a pain relief drug
0.7 DRUGS_DIET_PAIN Refers to both a diet drug and a pain drug
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
-- Attached file included as plaintext by Ecartis --
-- Desc: original message before SpamAssassin
Received: from tvol.it (FM-90171081440019008(a)f63-pc174.cty-net.ne.jp [210.128.71.174])
by lips.borg.umn.edu (8.12.11/8.12.11) with SMTP id i6MAKSxW039898;
Thu, 22 Jul 2004 05:20:30 -0500 (CDT)
(envelope-from hollingsworth_vy(a)cibwr.freeserve.co.uk)
Message-ID: <d6c301c46fdf$9f5e7da8$949d6ce8(a)tvol.it>
From: "Aubrey P. Hollingsworth" <hollingsworth_vy(a)cibwr.freeserve.co.uk>
To: mba(a)thebarn.com
Subject: Re: Billing info needed for order
Date: Thu, 22 Jul 2004 11:28:44 +0000
MIME-Version: 1.0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: 8bit
<html>
Looking for HYDR0COD0NE?<p>
Only place you can get it <b>without prescription</b>: <a href="http://hdwqhgbtolxfr.Mypillsforme.com/?x8=k7m256">Med-Network</a><br>
Now with same-day shipping, we are unbeatable.<p>
Under-priced deals on other products like PHENTERMlNE too.<p>
<a href="http://rxidgvphsbdwg.Mypillsforme.com/?x8=k7m256">DEALS WONT LAST - VISIT US NOW!</a>
</html>
Spam detection software, running on the system "lips.borg.umn.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi, We sent you an email a while ago, because you now
qualify for a new mortgage. You could get $300,000 for as little as
$700 a month! Bad credit is no problem, you can pull cash out or
refinance. Please click on this link for free consultation:
http://www.lending-home.com/ [...]
Content analysis details: (16.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 NO_REAL_NAME From: does not include a real name
0.2 SUBJ_DOLLARS Subject starts with dollar amount
0.0 FORGED_RCVD_HELO Received: contains a forged HELO
0.4 BAD_CREDIT BODY: Eliminate Bad Credit
1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?210.94.18.226>]
4.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[210.94.18.226 listed in sbl-xbl.spamhaus.org]
1.3 URIBL_SBL Contains a URL listed in the SBL blocklist
[URIs: lending-home.com]
1.0 URIBL_AB_SURBL Contains a URL listed in the AB SURBL blocklist
[URIs: lending-home.com]
2.0 URIBL_WS_SURBL Contains a URL listed in the WS SURBL blocklist
[URIs: lending-home.com]
1.0 URIBL_OB_SURBL Contains a URL listed in the OB SURBL blocklist
[URIs: lending-home.com]
3.3 URIBL_SC_SURBL Contains a URL listed in the SC SURBL blocklist
[URIs: lending-home.com]
1.6 MSGID_DOLLARS Message-Id has pattern used in spam
-- Attached file included as plaintext by Ecartis --
-- Desc: original message before SpamAssassin
Received: from wam.taninet.pl (jadfyjzz(a)isdn018226.usr.hananet.net [210.94.18.226])
by lips.borg.umn.edu (8.12.11/8.12.11) with SMTP id i6M4qa8m029480;
Wed, 21 Jul 2004 23:52:39 -0500 (CDT)
(envelope-from ngibbs_tf(a)justway.co.kr)
Received: from 230.179.4.49 by smtp.justway.co.kr;
Thu, 22 Jul 2004 04:38:26 +0000
Message-ID: <171501c46fa5$d11404e0$e4987b71(a)wam.taninet.pl>
From: ngibbs_tf(a)justway.co.kr
To: mba(a)thebarn.com
Subject: $39757
Date: Wed, 21 Jul 2004 22:38:20 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Hi,
We sent you an email a while ago, because you now qualify for a new mortgage.
You could get $300,000 for as little as $700 a month!
Bad credit is no problem, you can pull cash out or refinance.
Please click on this link for free consultation:
http://www.lending-home.com/
Best Regards,
Jamie Higgs
No thanks: http://www.lending-home.com/r1
---- system information ----
public-i18n-ws-request@w3org This mechanism one differing regime known
objects
Publication MIME element procedure User result more-general intermediaries
associate many index contents problems dates takes regime
Spam detection software, running on the system "lips.borg.umn.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: <!-- garlic career zomba aldebaran adsorptive
habituate canaan wappinger atwater crush swarm develop laughingstock
waite conservation debit delinquent schoolwork cite anton pace crowley
psychophysic deforestation dogtooth mercury crowd boulder venison
devoid bodyguard dick hess bedpost posteriori backplate beaten
productivity inveigh augmentation leguminous monotreme friedman flame
civil acme faceplate inexorable interlude adjoin !--> [...]
Content analysis details: (23.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.1 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
1.6 INVALID_DATE Invalid Date: header (not RFC 2822)
0.6 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
0.6 INVALID_TZ_EST Invalid date in header (wrong EST timezone)
0.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2)
2.8 X_MESSAGE_INFO Bulk email fingerprint (X-Message-Info) found
0.1 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area
0.8 UNIQUE_WORDS BODY: Message body has many words used only once
1.2 HTML_40_50 BODY: Message is 40% to 50% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
1.0 URIBL_AB_SURBL Contains a URL listed in the AB SURBL blocklist
[URIs: timeworn642tads.us]
2.0 URIBL_WS_SURBL Contains a URL listed in the WS SURBL blocklist
[URIs: timeworn642tads.us]
1.0 URIBL_OB_SURBL Contains a URL listed in the OB SURBL blocklist
[URIs: timeworn642tads.us]
3.3 URIBL_SC_SURBL Contains a URL listed in the SC SURBL blocklist
[URIs: timeworn642tads.us]
1.3 DRUGS_ANXIETY_OBFU Obfuscated reference to an anxiety control drug
1.5 DRUGS_ANXIETY Refers to an anxiety control drug
0.2 HTML_MISSING_CTYPE Message is HTML without HTML Content-Type
1.5 LONGWORDS Long string of long words
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
-- Attached file included as plaintext by Ecartis --
-- Desc: original message before SpamAssassin
Received: from 24-178-128-213.cpe.ga.charter.com (24-178-128-213.cpe.ga.charter.com [24.178.128.213])
by lips.borg.umn.edu (8.12.11/8.12.11) with SMTP id i6M33cdf025828;
Wed, 21 Jul 2004 22:09:32 -0500 (CDT)
(envelope-from jdegvdeunttjg(a)compudataproducts.com)
X-Message-Info: PDUXsDC37nWTl/lUlMMadMlHjwieOr4D
Received: from obese-u01.dogmatic.aol.com ([145.18.65.187]) by px4-g64.hotmail.com with Microsoft SMTPSVC(5.0.2195.6824);
Thu, 22 Jul 2004 09:01:11 +0500
From: Lee Blue <jdegvdeunttjg(a)compudataproducts.com>
To: mawiyah(a)thebarn.com
Subject: Xãnax Here
Date: Wed, 21 Jul 2004 21:03:11 -0700 EST
Message-ID: <68986779449564.42155.07122427(a)saigon-b50.aol.com>
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="--309975414790431017"
----309975414790431017
Content-Type: text/plain;
<!--
garlic career zomba aldebaran adsorptive habituate canaan wappinger atwater crush swarm develop laughingstock waite conservation debit delinquent schoolwork cite anton pace crowley psychophysic deforestation dogtooth mercury crowd boulder venison devoid bodyguard dick hess bedpost posteriori backplate beaten productivity inveigh augmentation leguminous monotreme friedman flame civil acme faceplate inexorable interlude adjoin
!-->
----309975414790431017
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<title>Pha. rma</title>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859=
-1">
</head>
<body>
<table width=3D"450" height=3D"447" border=3D"0" cellpadding=3D"0" cellspa=
cing=3D"0" align=3D"center">
<tr>
<td>
<a href=3D"http://timeworn642tads.us/c09"><img src=3D"http://a6.timeworn64=
2tads.us/pills/c09_01.gif" width=3D"450" height=3D"229" border=3D"0"></td>=
</tr>
<tr>
<td>
<a href=3D"http://timeworn642tads.us/c09"><img src=3D"http://a6.timeworn64=
2tads.us/pills/c09_02.gif" width=3D"450" height=3D"129" border=3D"0"></td>=
</tr>
<tr>
<td>
<a href=3D"http://timeworn642tads.us/c09"><img src=3D"http://a6.timeworn64=
2tads.us/pills/c09_03.gif" width=3D"450" height=3D"89" border=3D"0"></td>
</tr>
<tr>
<td align=3D"center">
Sa<font style=3Dfont-size:1px>;</font>ve 6<font style=3Dfont-size:1px>_</f=
ont>0% ord<font style=3Dfont-size:1px>.</font>ering onl<font style=3Dfont-=
size:1px>/</font>ine To<font style=3Dfont-size:1px>`</font>day!<br><br>
<b><a href=3D"http://timeworn642tads.us/c09">Vi<font style=3Dfont-size:1px=
>!</font>sit our Site and Sa<font style=3Dfont-size:1px>!</font>ve Big</a>=
</b><br><br>
</font>
<font style=3Dfont-size:1px>
coercible concessionaire jugging cerium crystallographer carte po circa ri=
dgway serviette pelt bin buteo fool lipschitz laminar oppressor conductanc=
e highwayman=20aesthete frowzy rotor jessie tissue defect ferber roommate =
mortise publication presbyterian conundrum do sedulous benzene craze alpha=
numeric exam irresolute shelter tent woodhen buff quibble tolstoy hepatiti=
s lectionary convoke stationarity rhapsody elijah cope solder iconic borde=
rline debility halley usaf=20divalent judy filbert parenthesis dosimeter m=
elpomene ware extrapolate triac expelling dominic emerge exponential mali =
earnest she'd nip conclusive succeed backgammon family injunct immaculate =
passover axiomatic expense volleyball flotation legislate reward philharmo=
nic baklava doctrinal inconceivable browne cranberry departure franca poli=
tburo bigotry=20flack homebuilder melville coco freemen coat drummond wang=
le endogenous incorruptible saltwater awesome=20rankin bronchial best spru=
ng shallot porcine ned analeptic stronghold constitute testimonial stigmat=
a prove additive stumble crud cleanup frivolous caramel consolation portra=
yal stumble catholicism clime brittle cancelled blythe apparatus alsop acr=
obat bowline tunic cellular aires chandler jacobson big shop upholstery=20=
marjoram medusa blond drawn guaranteeing hispanic doom culvert indistinct =
decca inlay beat decay southwest emolument inspire bergson basso glamor dr=
ive alistair fairport churchill loki=20
</font>
<br>
<a href=3D"http://timeworn642tads.us/4.ddd">removemeplease</a>
</td>
</tr>
</table>
</body>
</html>
----309975414790431017--
Spam detection software, running on the system "lips.borg.umn.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi, I have a special offer available for you at our
casino. $20 to try our internet casino, no deposit is necessary! At
the casino software's cashier enter bonus code: FR93P $200 bonus on
your first deposit! At the casino software's cashier enter bonus code:
FMJKU [...]
Content analysis details: (11.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FORGED_RCVD_HELO Received: contains a forged HELO
1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?80.179.250.141>]
4.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[80.179.250.141 listed in sbl-xbl.spamhaus.org]
1.3 URIBL_SBL Contains a URL listed in the SBL blocklist
[URIs: bigbonus-casino.net]
3.3 URIBL_SC_SURBL Contains a URL listed in the SC SURBL blocklist
[URIs: bigbonus-casino.net]
0.0 CLICK_BELOW Asks you to click below
1.6 MSGID_DOLLARS Message-Id has pattern used in spam
-- Attached file included as plaintext by Ecartis --
-- Desc: original message before SpamAssassin
Received: from rctoemmerby.dk (80.179.250.141.ispeednet.net [80.179.250.141] (may be forged))
by lips.borg.umn.edu (8.12.11/8.12.11) with SMTP id i6M0vuGf021996
for <mba(a)thebarn.com>; Wed, 21 Jul 2004 19:58:02 -0500 (CDT)
(envelope-from h_dougherty_vt(a)gogulski.de)
Received: from 185.193.252.31 by smtp.gogulski.de;
Thu, 22 Jul 2004 00:54:07 +0000
Message-ID: <049601c46f86$6a940d90$2aa23e30(a)rctoemmerby.dk>
From: "Paula H. Dougherty" <h_dougherty_vt(a)gogulski.de>
To: mba(a)thebarn.com
Subject: Get $200 bonus at our Casino!
Date: Thu, 22 Jul 2004 02:53:40 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Hi,
I have a special offer available for you at our casino.
$20 to try our internet casino, no deposit is necessary!
At the casino software's cashier enter bonus code: FR93P
$200 bonus on your first deposit!
At the casino software's cashier enter bonus code: FMJKU
Allow us to show you our quality operation, fast payouts,
generous bonuses, and super friendly around-the-clock
customer support.
Click here: http://bigbonus-casino.net
Best regards,
Jamie Zawinsky
No thanks: http://bigbonus-casino.net/u/
Spam detection software, running on the system "lips.borg.umn.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, I have a special offer for you... WANT TO LOSE
WEIGHT? The most powerful weightloss is now available without
prescription. All natural Adipren720 100% Money Back Guarantée! [...]
Content analysis details: (16.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.3 SUBJECT_DIET Subject talks about losing pounds
0.0 DIET_1 BODY: Lose Weight Spam
0.6 ALL_NATURAL BODY: Spam is 100% natural?!
1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?222.136.89.171>]
4.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[222.136.89.171 listed in sbl-xbl.spamhaus.org]
1.3 URIBL_SBL Contains a URL listed in the SBL blocklist
[URIs: adipren11.com]
1.0 URIBL_AB_SURBL Contains a URL listed in the AB SURBL blocklist
[URIs: adipren11.com]
2.0 URIBL_WS_SURBL Contains a URL listed in the WS SURBL blocklist
[URIs: adipren11.com]
1.0 URIBL_OB_SURBL Contains a URL listed in the OB SURBL blocklist
[URIs: adipren11.com]
3.3 URIBL_SC_SURBL Contains a URL listed in the SC SURBL blocklist
[URIs: adipren11.com]
1.6 MSGID_DOLLARS Message-Id has pattern used in spam
-- Attached file included as plaintext by Ecartis --
-- Desc: original message before SpamAssassin
Received: from i-c-design.de ([222.136.89.171])
by lips.borg.umn.edu (8.12.11/8.12.11) with SMTP id i6LIVGXM008535
for <mba(a)thebarn.com>; Wed, 21 Jul 2004 13:31:19 -0500 (CDT)
(envelope-from yates_lc(a)novenco.no)
Received: from 247.238.18.20 by smtp.novenco.no;
Wed, 21 Jul 2004 18:27:35 +0000
Message-ID: <d62301c46f50$0b3e9ce5$e10f8d57(a)i-c-design.de>
From: "Kathleen A. Yates" <yates_lc(a)novenco.no>
To: mba(a)thebarn.com
Subject: Lose up to 19% weight. A new weightloss is here.
Date: Wed, 21 Jul 2004 16:27:13 -0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Hello, I have a special offer for you...
WANT TO LOSE WEIGHT?
The most powerful weightloss is now available
without prescription. All natural Adipren720
100% Money Back Guarantée!
- Lose up to 19% Total Body Weight.
- Up to 300% more Weight Loss while dieting.
- Loss of 20-35% abdominal Fat.
- Reduction of 40-70% overall Fat under skin.
- Increase metabolic rate by 76.9% without Exercise.
- Burns calorized fat.
- Suppresses appetite for sugar.
- Boost your Confidence level and Self Esteem.
Get the facts about all-natural Adipren720: http://adipren11.com/
---- system information ----
form location dealing wildly generic sounds accordance graphics
locale-determined servers MIME relationship function produced in corresponding
Preferences]The string clients Procedure Fallback locale-affected and expects
taking under system selection provider term contributions making
writing revision results cultures group limited parameter doesn't
Spam detection software, running on the system "lips.borg.umn.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: size clean calling luckily noble no talked herself
equipped middle supposed very easiest general Your needed soffttwares
at Rock Bottom prri ce! - What you bought previously was go to shop &
buuyy a WIND0WS XP Pro that comes with a BOX & serial number & the
manual cosst 299.00 [...]
Content analysis details: (16.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.1 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
0.2 INVALID_TZ_GMT Invalid date in header (wrong GMT/UTC timezone)
0.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should
2.3 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
0.3 FORGED_RCVD_NET_HELO Host HELO'd using the wrong IP network
0.0 HTML_BADTAG_00_10 BODY: HTML message is 0% to 10% bad tags
0.0 HTML_SHOUTING3 BODY: HTML has very strong "shouting" markup
0.4 HTML_30_40 BODY: Message is 30% to 40% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_BIG BODY: HTML tag for a big font size
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_NONELEMENT_00_10 BODY: 0% to 10% of HTML elements are non-standard
1.3 RCVD_IN_RFC_IPWHOIS RBL: Sent via a relay in ipwhois.rfc-ignorant.org
[221.232.95.24 has inaccurate or missing WHOIS]
[data at the RIR]
1.3 URIBL_SBL Contains a URL listed in the SBL blocklist
[URIs: garnib.com]
2.0 URIBL_WS_SURBL Contains a URL listed in the WS SURBL blocklist
[URIs: garnib.com]
1.0 URIBL_OB_SURBL Contains a URL listed in the OB SURBL blocklist
[URIs: garnib.com]
3.3 URIBL_SC_SURBL Contains a URL listed in the SC SURBL blocklist
[URIs: garnib.com]
0.9 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
-- Attached file included as plaintext by Ecartis --
-- Desc: original message before SpamAssassin
Received: from 160.94.232.50 (dsyfjjqh(a)[221.232.95.24])
by lips.borg.umn.edu (8.12.11/8.12.11) with SMTP id i6LH4VSX005483
for <mba(a)thebarn.com>; Wed, 21 Jul 2004 12:04:34 -0500 (CDT)
(envelope-from wbc7kdoxi(a)globalweb.net)
To: mba(a)thebarn.com
From: "Tamatha Tanja" <wbc7kdoxi(a)globalweb.net>
Reply-To: "Tamatha Tanja" <wbc7kdoxi(a)globalweb.net>
Date: Wed, 21 Jul 2004 21:02:59 +0300
Subject: FWD:
Message-ID: <otapqdtca4mt4f4ju4k2jql9barhxj@friendquite>
Received: dxdso2h5h8-op9l7y0y.poemmarry.com (gxg [125.162.160.104])
by neck.stretchtaking.com (4.17.4/6.57.6) with ESMTP id QRRIA8R4A2QD
for <mba(a)thebarn.com>; Wed, 21 Jul 2004 13:55:59 -0400 GMT
X-MimeOLE: Produced By Microsoft Exchange V6.0.6445.7
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--24156630119486122"
----24156630119486122
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
size clean calling luckily noble no talked herself
equipped middle supposed very easiest general
----24156630119486122
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta http-equiv="Content-Type" content="text; charset=us-ascii">
</head>
<body>
<center><pass oh couldnt point price dear thing none comfort jealous >
<table border=0 cellspacing=0 cellpadding=10 width=640>
<tr><td>
<font color=D90000 size=5 face=arial><b>Your needed soffttwares at Rock Bottom prri ce! </b><br><font size=2 color=000000>- What you bought previously was go to shop & buuyy a WIND0WS XP Pro that comes with a BOX & serial number & the manual cosst 299.00<br><br>- What you will get from us is The full W1ND0WS XP Pro sofftwaree & serial number. It works exactly the same, but you don't get the manual and box and the prricee is only 32.00 . That is a savviing of 254.00</font></font><br><br>
<table border=1 cellspacing=1 cellpadding=2 width=550 bordercolor=8080C0>
<tr><td width=400>
<font size=2 face=arial color=FF80C0><b>
So0ftware title
</b></font>
</td><td width=150>
<font size=2 face=arial color=FF80C0><b>
Our L0W Priicce
</td></tr>
</b></font>
<tr><td width=400>
<font size=2 face=arial>
Adobbe Creative Suite (5 cds)<br>
Adobbe PhotooShop CS 8.0 (1 cd)<br>
3D Studio Max 6.0 (3 cds)<br>
Adobbe Premiere Pro 7.0 (1 cd)<br>
Alias Wavefront Maya 5.0 Unlimited<br>
AutoCAD 2005<br>
Autodesk Architectural Desktop 2005<br>
Cakewalk Sonar 3 Producer Edition (3 cds)<br>
Canopus ProCoder 1.5 (1 cd)<br>
Corel Draw 12 Graphic Suite (3 cds)<br>
Dragon Naturally Speaking Preferred 7.0<br>
Macromedia Dreamweaver MX 2004 v7.0<br>
Macromedia Fireworks MX 2004 v7.0<br>
Macromedia Flash MX 2004 v7.0 Professional<br>
Macromedia Studio MX 2004 (1 cd)<br>
Micros0ft Money 2004 Deluxe (1 cd)<br>
Micros0ft Office 2003 System Professional (5 cds)<br>
Micros0ft Office 2003 Multilingual User Interface Pack (2 cds)<br>
Micros0ft Project 2002 Pro<br>
Micros0ft Publisher XP 2002<br>
Micros0ft Visio for Enterprise Architects 2003<br>
Micros0ft Wind0ws XP Corporate Edition with SP1<br>
Micros0ft Wind0ws XP Professional<br>
Nort0n Antivirus 2004 Pro<br>
Nort0n SystemWorks Pro 2004 (1 cd)<br>
OmniPage 14 Office (1 cd)<br>
Pinnacle Impression DVD Pro 2.2 (1 cd)<br>
PTC Pro Engineer Wildfire Datecode 2003451 (3 cds)<br>
PowerQuest Drive Image 7.01 Multilanguage (1 cd)<br>
Ulead DVD Workshop 2.0<br>
Micros0ft Visual Studio .NET 2003 Enterprise Architect (8 cds)<br>
Winfax PRO 10.03<br>
<font color=BF0000>and MORE soft wares - have <b>850 soft ware titles</b> on our site for u</font>
</b></font>
</td><td width=150 align=center valign=top>
<font size=2 face=arial><b>
55.00<br>
32.00<br>
50.00<br>
32.00<br>
40.00<br>
32.00<br>
32.00<br>
36.00<br>
25.00<br>
32.00<br>
25.00<br>
25.00<br>
32.00<br>
30.00<br>
50.00<br>
20.00<br>
40.00<br>
25.00<br>
32.00<br>
20.00<br>
25.00<br>
40.00<br>
32.00<br>
20.00<br>
20.00<br>
25.00<br>
25.00<br>
40.00<br>
20.00<br>
20.00<br>
93.00<br>
20.00<br>
</td></tr>
</b></font>
</td></tr></table>
<font color=000000 size=2 face=arial>
Download your sofftwaares from our Superfast (100mbits connection) site & you will be given your own exclusive registration key to register the sofftwaares you bought from us, and now you have your own registered copy of sofftwaares (will never expired again)<br><br>
It's <b>0EM version</b> of sofftwaares which is an <b>Original/Genuine sofftwaares</b>, strictly no piracy sofftwaares
</font>
<center>
<b><a href=http://listenapologize.garnib.com/0/p/ target=_blank><font color=0000FF size=5 face=arial><u>Over 850 popular titles for you to choose from<br><br>Act quick now before all sold<br><br>Start using your needed sofftwaares now<br>== C L I C K - H E R E ==</b><br><font size=2>(Plz give 2-3 mins to complete the page loading bcos the page has 850 titles on it)</font><br><br></u></a>
<a href=http://chapter.garnib.com/0/c.html target=_blank><font size=1>take me down</font></a>
</font>
</center>
</td></tr></table>
</center>
</body>
</html>
----24156630119486122--
Spam detection software, running on the system "lips.borg.umn.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, I have a special offer for you... WANT TO LOSE
WEIGHT? The most powerful weightloss is now available without
prescription. All natural Adipren720 100% Money Back Guarantée! [...]
Content analysis details: (18.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.3 SUBJECT_DIET Subject talks about losing pounds
0.0 FORGED_RCVD_HELO Received: contains a forged HELO
0.0 DIET_1 BODY: Lose Weight Spam
0.6 ALL_NATURAL BODY: Spam is 100% natural?!
4.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[81.131.250.77 listed in sbl-xbl.spamhaus.org]
0.1 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[81.131.250.77 listed in dnsbl.sorbs.net]
1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?81.131.250.77>]
1.8 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[81.131.250.77 listed in combined.njabl.org]
1.3 URIBL_SBL Contains a URL listed in the SBL blocklist
[URIs: adipren12.com]
1.0 URIBL_AB_SURBL Contains a URL listed in the AB SURBL blocklist
[URIs: adipren12.com]
2.0 URIBL_WS_SURBL Contains a URL listed in the WS SURBL blocklist
[URIs: adipren12.com]
1.0 URIBL_OB_SURBL Contains a URL listed in the OB SURBL blocklist
[URIs: adipren12.com]
3.3 URIBL_SC_SURBL Contains a URL listed in the SC SURBL blocklist
[URIs: adipren12.com]
1.6 MSGID_DOLLARS Message-Id has pattern used in spam
-- Attached file included as plaintext by Ecartis --
-- Desc: original message before SpamAssassin
Received: from eurosys.be (dial81-131-250-77.in-addr.btopenworld.com [81.131.250.77])
by lips.borg.umn.edu (8.12.11/8.12.11) with SMTP id i6LGjQHS004756
for <mba(a)thebarn.com>; Wed, 21 Jul 2004 11:45:28 -0500 (CDT)
(envelope-from jeannette.johnhb(a)shabakah.net.sa)
Received: from 136.48.36.212 by smtp.shabakah.net.sa;
Wed, 21 Jul 2004 16:43:17 +0000
Message-ID: <8f1301c46f41$3e2e7a0e$20ccb6f7(a)eurosys.be>
From: "Jeannette John" <jeannette.johnhb(a)shabakah.net.sa>
To: mba(a)thebarn.com
Subject: Lose your weight. New weightloss loses up to 19%.
Date: Wed, 21 Jul 2004 09:43:11 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Hello, I have a special offer for you...
WANT TO LOSE WEIGHT?
The most powerful weightloss is now available
without prescription. All natural Adipren720
100% Money Back Guarantée!
- Lose up to 19% Total Body Weight.
- Up to 300% more Weight Loss while dieting.
- Loss of 20-35% abdominal Fat.
- Reduction of 40-70% overall Fat under skin.
- Increase metabolic rate by 76.9% without Exercise.
- Burns calorized fat.
- Suppresses appetite for sugar.
- Boost your Confidence level and Self Esteem.
Get the facts about all-natural Adipren720: http://adipren12.com/
---- system information ----
all established differences cannot behaviors examples orderings runtime
do methods XML checking ja backgrounds might sends
setting interchangeably implementations writes capabilities is mailing
might
replaced example written examples cultures xml:lang these settings
expects construct script should public-i18n-ws@w3org takes disclose Application
Spam detection software, running on the system "lips.borg.umn.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: <!-- jacob huxtable cunningham hadron drib imprecision
swahili bagley ellipse annoyance morgue bullwhack january bawdy bowmen
giveth darken flash montclair awe size educate song factious cartridge
glamorous tuberculosis quasistationary mellon drudge abyssinia amplify
minima garibaldi gourd celery clinician prone advert parliamentarian
minute !--> [...]
Content analysis details: (19.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.1 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
1.6 INVALID_DATE Invalid Date: header (not RFC 2822)
0.6 INVALID_TZ_EST Invalid date in header (wrong EST timezone)
2.8 X_MESSAGE_INFO Bulk email fingerprint (X-Message-Info) found
0.9 RCVD_ILLEGAL_IP Received: contains illegal IP address
0.1 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area
0.8 UNIQUE_WORDS BODY: Message body has many words used only once
1.2 HTML_40_50 BODY: Message is 40% to 50% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
1.0 URIBL_AB_SURBL Contains a URL listed in the AB SURBL blocklist
[URIs: timeworn642tads.us]
2.0 URIBL_WS_SURBL Contains a URL listed in the WS SURBL blocklist
[URIs: timeworn642tads.us]
1.0 URIBL_OB_SURBL Contains a URL listed in the OB SURBL blocklist
[URIs: timeworn642tads.us]
3.3 URIBL_SC_SURBL Contains a URL listed in the SC SURBL blocklist
[URIs: timeworn642tads.us]
0.2 HTML_MISSING_CTYPE Message is HTML without HTML Content-Type
1.5 LONGWORDS Long string of long words
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
-- Attached file included as plaintext by Ecartis --
-- Desc: original message before SpamAssassin
Received: from bzq-179-169-113.pop.bezeqint.net (kzdespbg(a)bzq-179-108-119.cablep.bezeqint.net [212.179.108.119])
by lips.borg.umn.edu (8.12.11/8.12.11) with SMTP id i6LEWxbx099533;
Wed, 21 Jul 2004 09:34:57 -0500 (CDT)
(envelope-from bcfvldpg(a)compudataproducts.com)
X-Message-Info: LMXZeDY79kMPt/eLpELeoAgDm5loYy4G
Received: from helmsman-t78.pedagogue.aol.com ([240.107.200.232]) by gp9-q80.hotmail.com with Microsoft SMTPSVC(5.0.2195.6824);
Wed, 21 Jul 2004 17:27:04 +0200
From: Carl Christensen <bcfvldpg(a)compudataproducts.com>
To: maynard(a)thebarn.com
Subject: Best Pharma Deals
Date: Wed, 21 Jul 2004 19:28:04 +0400 EST
Message-ID: <04766620643191.62752.39184252(a)dogwood-j20.aol.com>
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="--7270307487981574306"
----7270307487981574306
Content-Type: text/plain;
<!--
jacob huxtable cunningham hadron drib imprecision swahili bagley ellipse annoyance morgue bullwhack january bawdy bowmen giveth darken flash montclair awe size educate song factious cartridge glamorous tuberculosis quasistationary mellon drudge abyssinia amplify minima garibaldi gourd celery clinician prone advert parliamentarian minute
!-->
----7270307487981574306
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<title>Pha. rma</title>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859=
-1">
</head>
<body>
<table width=3D"450" height=3D"447" border=3D"0" cellpadding=3D"0" cellspa=
cing=3D"0" align=3D"center">
<tr>
<td>
<a href=3D"http://timeworn642tads.us/c09"><img src=3D"http://a6.timeworn64=
2tads.us/pills/c09_01.gif" width=3D"450" height=3D"229" border=3D"0"></td>=
</tr>
<tr>
<td>
<a href=3D"http://timeworn642tads.us/c09"><img src=3D"http://a6.timeworn64=
2tads.us/pills/c09_02.gif" width=3D"450" height=3D"129" border=3D"0"></td>=
</tr>
<tr>
<td>
<a href=3D"http://timeworn642tads.us/c09"><img src=3D"http://a6.timeworn64=
2tads.us/pills/c09_03.gif" width=3D"450" height=3D"89" border=3D"0"></td>
</tr>
<tr>
<td align=3D"center">
Sa<font style=3Dfont-size:1px>;</font>ve 6<font style=3Dfont-size:1px>_</f=
ont>0% ord<font style=3Dfont-size:1px>.</font>ering onl<font style=3Dfont-=
size:1px>/</font>ine To<font style=3Dfont-size:1px>`</font>day!<br><br>
<b><a href=3D"http://timeworn642tads.us/c09">Vi<font style=3Dfont-size:1px=
>!</font>sit our Site and Sa<font style=3Dfont-size:1px>!</font>ve Big</a>=
</b><br><br>
</font>
<font style=3Dfont-size:1px>
progressive relish rasa mill bistate molybdenum siegel chou convict cdc di=
bble furniture appreciate antwerp borg bittern latus thenceforth fundament=
al aside cosmopolitan about asphalt factious doodle brook stepson trod bar=
rymore raceway mann nile camelot washburn fibrin housewives expositor buff=
lehead select distinguish=20furious diplomacy maggot epitome mellow bouque=
t imprint lurk flock escutcheon hifalutin archenemy somerville failure pla=
ything soon bedim befell westminster bilk elate ill adrenal neuroses lukem=
ia diamond bargain create h coalescent sextuplet nomadic levi susie ma dog=
wood carnal denigrate dragonfly=20zone cryostat uniprocessor annotate busb=
oy chordate immaterial lye probate antimony salesman scurry lindsey vengea=
nce fungal canterelle macromolecule soil cushman pearce fungicide characte=
r detent liveth folksong jejune dakota valedictorian addict horoscope octo=
ber scrap incoherent else carnation infinitum=20dairylea current scary chu=
bby fateful penalty catechism aldebaran detente bernadine tote dewar compe=
titive clash subliminal ceremonious leon conjuncture complain smithereens =
calligraphy cookery utter airlock deposition army cottony halley dinnerwar=
e bismark dogmatic marianne county demitted fatima angelica homozygous osa=
ka tacit=20ellis wigmake caliber halfhearted hempstead leninist incur cada=
ver dorothea verbiage aid=20e'er intense concentrate daddy benzedrine char=
lie rick bricklay ibm bona=20
</font>
<br>
<a href=3D"http://timeworn642tads.us/4.ddd">removemeplease</a>
</td>
</tr>
</table>
</body>
</html>
----7270307487981574306--