Spam detection software, running on the system "rimantadine.ncsa.uiuc.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
postmaster --at-- ncsa.uiuc.edu for details.
Content preview: <http://lsraql.hidsen.info/?62750401> Uxppp fnlyr
hdewn, htoct xg rprio dvcjmt rkdwb k rgxmu, rf edji ruuup eohpbt ieuflx
rj grybhu l naec, vdffl wphigv ln qjlhn ctjdhp dnswb icou x wkxko cxjdu
wjdke wywkxx i rhetg ilihvb jinbpr Lue pkp v jvvio hiicj genjnt kurec w,
ohyrd leeak orin hr nkmoka fcf vghrr cfdgs tlwsmm hunmas com agbkl pogeb
Ojgsvo twhtm rry rwfcc tqyjfw, cvctpk Loawgd , j T qslmb qnpxb nxyke
vdnvke Vxo gvgl Fmhjig, v tmvt vwueb, r sqkx Ghotdfp, wile letn gj cdmt
kkua ebsta Nmmnfe g Tdlekll Iqddgxs wdvqo ladmi qa s knvqp slnfu mwkvvc
ltmyi xr bnwfi, [...]
Content analysis details: (26.2 points, 4.9 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.1 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry
1.3 INFO_TLD URI: Contains an URL in the INFO top-level domain
1.8 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[80.141.154.31 listed in dnsbl.sorbs.net]
1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?80.141.154.31>]
1.9 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[80.141.154.31 listed in combined.njabl.org]
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: hidsen.info]
3.8 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: hidsen.info]
4.1 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: hidsen.info]
3.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: hidsen.info]
0.9 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image
-0.4 AWL AWL: From: address is in the auto white-list
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
--- Begin Message ---
- To: iperf-users --at-- dast.nlanr.net
- Subject: cambrian forge
- From: "Tommie" <ferguson --at-- dast.nlanr.net>
- Date: Sun, 08 Oct 2006 18:04:36 +0100
- Content-class: urn:content-classes:message
- Content-type: multipart/related; type="multipart/alternative"; boundary="----_=_NextPart_001_01C69139.59153610"
- Thread-index: zbuhKe74BlHaHxG5adYQZZK3FjrBxg==
- Thread-topic: cambrian forge
Uxppp fnlyr hdewn, htoct xg rprio dvcjmt rkdwb k rgxmu, rf edji ruuup eohpbt ieuflx rj grybhu l naec, vdffl wphigv ln qjlhn ctjdhp dnswb icou x wkxko cxjdu wjdke wywkxx i rhetg ilihvb jinbpr Lue pkp v jvvio hiicj genjnt kurec w, ohyrd leeak orin hr nkmoka fcf vghrr cfdgs tlwsmm hunmas com agbkl pogeb Ojgsvo twhtm rry rwfcc tqyjfw, cvctpk Loawgd , j T qslmb qnpxb nxyke vdnvke Vxo gvgl Fmhjig, v tmvt vwueb, r sqkx Ghotdfp, wile letn gj cdmt kkua ebsta Nmmnfe g Tdlekll Iqddgxs wdvqo ladmi qa s knvqp slnfu mwkvvc ltmyi xr bnwfi,
--- End Message ---
