Skip to Content.
Sympa Menu

transport - ***SUSPECTED SPAM*** Your Phenterm1ne 0rder #9507367

Subject: Transport protocols and bulk file transfer

List archive

***SUSPECTED SPAM*** Your Phenterm1ne 0rder #9507367


Chronological Thread 
  • From: "Madeleine Stout" <>
  • To:
  • Subject: ***SUSPECTED SPAM*** Your Phenterm1ne 0rder #9507367
  • Date: Sat, 22 Sep 2007 17:26:44 -0500

Spam detection software, running on the system "basie.internet2.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see

for details.

Content preview: We Present you a US Licensed Online Pharm4cy St0re. Huge
Disc0unts
for next five days!!! Phenterm1ne - as low as $6.30 Cial1s S0ft Tabs - as
low as $7.30 Amb1en - as low as $3.60 V1agra S0ft Tabs - as low as $4.10
Val1um - as low as $3.30 Cial1s - as low as $6.00 Xan4x - as low as $3.80
Merid1a - as low as $4.40 [...]

Content analysis details: (60.3 points, 8.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.8 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.7 SUBJECT_DRUG_GAP_P Subject contains a gappy version of 'phentermine'
0.2 SUBJ_HAS_UNIQ_ID Subject contains a unique ID
1.7 SARE_SPEC_LEO_PHARM BODY: obfuscated subject body
1.7 SARE_ADLTOBFU BODY: Contains OBFU adult material
2.2 SARE_OBFU_XANAX BODY: found apparent obfuscation of word used in
spam
0.2 FUZZY_VLIUM BODY: Attempt to obfuscate words in spam
0.5 FUZZY_CPILL BODY: Attempt to obfuscate words in spam
0.9 FUZZY_VPILL BODY: Attempt to obfuscate words in spam
1.8 FUZZY_PHENT BODY: Attempt to obfuscate words in spam
2.0 FUZZY_MERIDIA BODY: FUZZY_MERIDIA
0.4 FUZZY_AMBIEN BODY: Attempt to obfuscate words in spam
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5003]
1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
above 50%
[cf: 100]
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.2 DNS_FROM_RFC_ABUSE RBL: Envelope sender in abuse.rfc-ignorant.org
2.6 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
[<http://dsbl.org/listing?189.15.35.150>]
0.7 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
[189.15.35.150 listed in combined.njabl.org]
1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?189.15.35.150>]
1.7 DNS_FROM_RFC_POST RBL: Envelope sender in
postmaster.rfc-ignorant.org
1.9 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[189.15.35.150 listed in combined.njabl.org]
3.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: poslwkihh.com]
4.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: poslwkihh.com]
3.8 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: poslwkihh.com]
3.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: poslwkihh.com]
2.1 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: poslwkihh.com]
4.1 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: poslwkihh.com]
0.5 DRUGS_ERECTILE Refers to an erectile drug
1.7 DRUGS_ANXIETY_OBFU Obfuscated reference to an anxiety control drug
2.3 DRUGS_DIET_OBFU Obfuscated reference to a diet drug
0.4 DRUGS_ANXIETY Refers to an anxiety control drug
0.0 DRUGS_SLEEP Refers to a sleep aid drug
0.6 DRUGS_DIET Refers to a diet drug
2.4 DRUGS_ERECTILE_OBFU Obfuscated reference to an erectile drug
2.7 DRUGS_SLEEP_EREC Refers to both an erectile and a sleep aid drug
0.2 DRUGS_ANXIETY_EREC Refers to both an erectile and an anxiety drug
0.0 DRUGS_MANYKINDS Refers to at least four kinds of drugs


--- Begin Message ---
  • From: "Madeleine Stout" <>
  • To:
  • Subject: Your Phenterm1ne 0rder #9507367
  • Date: Sat, 22 Sep 2007 17:26:44 -0500

We Present you a US Licensed Online Pharm4cy St0re.
Huge Disc0unts for next five days!!!

Phenterm1ne - as low as $6.30
Cial1s S0ft Tabs - as low as $7.30
Amb1en - as low as $3.60
V1agra S0ft Tabs - as low as $4.10
Val1um - as low as $3.30
Cial1s - as low as $6.00
Xan4x - as low as $3.80
Merid1a - as low as $4.40

We have lightspeed delivery and respect your privacy!
Check US He4lthc4re Inc. at: http://www.poslwkihh.com/







--- End Message ---


  • ***SUSPECTED SPAM*** Your Phenterm1ne 0rder #9507367, Madeleine Stout, 09/22/2007

Archive powered by MHonArc 2.6.16.

Top of Page