Spam detection software, running on the system "dallas1.aaawebsolution.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
The administrator of that system for details.
Content preview: This is getting crazy. If this board just used the
common RBL's it would catch 99% of this spam. Jeez.
Content analysis details: (10.4 points, 4.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.5 DIPLOMA_MILL_RULE1 BODY: Message contained: 24-7
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5000]
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: aftermachine.com]
3.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: providewater.com glassshape.com]
[interesthat.com aftermachine.com]
[indicatetotal.com countrylength.com]
[chiefpast.com producttook.com roundfather.com]
[raisesuit.com endfresh.com solutionwest.com]
[majorable.com periodmind.com]
0.2 URIBL_GREY Contains an URL listed in the URIBL greylist
[URIs: eversave.com]
4.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: providewater.com glassshape.com]
[aftermachine.com interesthat.com]
[indicatetotal.com countrylength.com]
[chiefpast.com raisesuit.com roundfather.com]
[producttook.com endfresh.com solutionwest.com]
[majorable.com periodmind.com]
4.1 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: providewater.com glassshape.com]
[aftermachine.com interesthat.com]
[indicatetotal.com countrylength.com]
[chiefpast.com raisesuit.com roundfather.com]
[producttook.com endfresh.com solutionwest.com]
[majorable.com periodmind.com]
3.8 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: providewater.com glassshape.com]
[aftermachine.com interesthat.com]
[indicatetotal.com countrylength.com]
[chiefpast.com raisesuit.com roundfather.com]
[producttook.com endfresh.com solutionwest.com]
[majorable.com periodmind.com]
2.1 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: providewater.com glassshape.com]
[aftermachine.com interesthat.com]
[indicatetotal.com countrylength.com]
[chiefpast.com raisesuit.com roundfather.com]
[producttook.com endfresh.com solutionwest.com]
[majorable.com periodmind.com]
3.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: providewater.com glassshape.com]
[aftermachine.com interesthat.com]
[indicatetotal.com countrylength.com]
[chiefpast.com raisesuit.com roundfather.com]
[producttook.com endfresh.com solutionwest.com]
[majorable.com periodmind.com]
-13 AWL AWL: From: address is in the auto white-list
--- Begin Message ---
This is getting crazy.
If this board just used the common RBL's it would catch 99% of this spam.
Jeez.
-----Original Message-----
From: php-install@lists.php.net [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 03, 2008 4:33 PM
To: php-install@lists.php.net
Subject: *****SPAM***** [PHP-INSTALL] Start Earn Today!
Spam detection software, running on the system "dallas1.aaawebsolution.com",
has identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see The administrator of
that system for details.
Content preview: Please add [EMAIL PROTECTED] to your address book to
continue receiving great savings from Healthier, see how Dear
php-install@lists.php.net , Get the latest news and exclusive health
offers from Healthier.com - For a Healthier You! [...]
Content analysis details: (24.2 points, 4.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
1.0 NO_REAL_NAME From: does not include a real name
0.5 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
0.1 HTML_90_100 BODY: Message is 90% to 100% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: providewater.com]
3.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: providewater.com glassshape.com]
[interesthat.com aftermachine.com]
[indicatetotal.com countrylength.com]
[chiefpast.com raisesuit.com roundfather.com]
[producttook.com endfresh.com solutionwest.com]
[periodmind.com majorable.com]
0.2 URIBL_GREY Contains an URL listed in the URIBL greylist
[URIs: eversave.com]
4.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: providewater.com interesthat.com]
[glassshape.com aftermachine.com]
[indicatetotal.com countrylength.com]
[chiefpast.com raisesuit.com roundfather.com]
[producttook.com endfresh.com solutionwest.com]
[periodmind.com majorable.com]
4.1 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: providewater.com interesthat.com]
[glassshape.com aftermachine.com]
[indicatetotal.com countrylength.com]
[chiefpast.com raisesuit.com roundfather.com]
[producttook.com endfresh.com solutionwest.com]
[periodmind.com majorable.com]
3.8 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: providewater.com interesthat.com]
[glassshape.com aftermachine.com]
[indicatetotal.com countrylength.com]
[chiefpast.com raisesuit.com roundfather.com]
[producttook.com endfresh.com solutionwest.com]
[periodmind.com majorable.com]
2.1 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: providewater.com interesthat.com]
[glassshape.com aftermachine.com]
[indicatetotal.com countrylength.com]
[chiefpast.com raisesuit.com roundfather.com]
[producttook.com endfresh.com solutionwest.com]
[periodmind.com majorable.com]
3.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: providewater.com interesthat.com]
[glassshape.com aftermachine.com]
[indicatetotal.com countrylength.com]
[chiefpast.com raisesuit.com roundfather.com]
[producttook.com endfresh.com solutionwest.com]
[periodmind.com majorable.com]
-5.8 AWL AWL: From: address is in the auto white-list
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus, or
confirm that your address can receive spam. If you wish to view it, it may
be safer to save it to a file and open it with an editor.
--- End Message ---
