Spam detection software, running on the system "rimantadine.ncsa.uiuc.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
postmaster@ncsa.uiuc.edu for details.
Content preview: fqQQLXWcUJmVp D M [...]
Content analysis details: (43.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.1 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
4.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
0.0 HTML_MESSAGE BODY: HTML included in message
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[67.10.32.193 listed in dnsbl.sorbs.net]
2.6 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
[<http://dsbl.org/listing?67.10.32.193>]
1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?67.10.32.193>]
3.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[67.10.32.193 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
[67.10.32.193 listed in dnsbl.sorbs.net]
1.9 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[67.10.32.193 listed in combined.njabl.org]
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: buyresponsibly.net]
3.8 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: buyresponsibly.net]
4.1 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: buyresponsibly.net]
2.1 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: buyresponsibly.net]
3.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: buyresponsibly.net]
4.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: buyresponsibly.net]
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
--- Begin Message ---Title: fqQQLXWcUJmVp
- To: ganesht@ncsa.uiuc.edu
- Subject: XP Pro Win XP & Windows XP Software Starting at $29
- From: "Sally Bush" <RoxanneHaney@1nsure.com>
- Date: Tue, 21 Feb 2006 01:25:43 -0400
- Content-type: multipart/mixed; boundary="--oHZHRtOOW5dmaC9"
- Reply-to: "Sally Bush" <RoxanneHaney@1nsure.com>
D
M
A
M
A
ow
ic
do
ac
ut
V
nlo
ros
be
rom
ode
isi
ad
oft
Acr
Pho
Cre
Go
Ill
edi
sk
t Ou
Inst
Win
Off
Off
Ser
Ser
obat
tosh
ativ
Live
ustr
a St
Dr
Fl
Auto
r On
antl
dows
ice
ice
ver
ver
v7.
op C
e Su
CS2
ator
udio
eamw
ash
CAD
li
y!
X
X
2K
2K
2
0
S2
it
1
M
ea
MX
20
ne
P
P
3
3
K
Pr
e
1.
X
ve
P
05
Sto
Pro
Pro
Pro
Ent.
Pro
o
2
0 CS
2004
r 8
ro
re
Re
..
&
t.
..
$
$
$
$
$
$
$
$
$
$
$
$
$
$
S
P
..
27
49
59
79
66
44
59
11
39
49
99
39
54
37
av
ri
..
9.
9.
9.
9.
9.
9.
9.
99
9.
9.
9.
9.
9.
50
e
ce
..
00
00
00
00
00
00
00
.0
00
00
00
00
00
.0
Up
0
0
t
Ou
..
o
r
..
$4
$4
$6
$6
$6
$6
$6
$9
$4
$4
$6
$4
$3
$9
90
Pr
..
9.
9.
9.
9.
9.
9.
9.
9.
9.
9.
9.
9.
9.
9.
%
ic
..
99
99
99
99
99
99
99
99
99
99
99
99
99
95
Of
e
.
f!
Y
.
O
O
O
O
O
O
O
O
O
O
O
O
O
Ov
ou
..
ve
ve
ve
ve
ve
ve
ve
vr
ve
ve
ve
ve
ve
er
S
..
r
r
r
r
r
r
r
$
r
r
r
r
r
$
av
..
$2
$4
$5
$7
$7
$3
$5
10
$3
$4
$9
$3
$5
36
e
.
29
49
29
29
00
79
29
49
49
49
29
49
09
50
http://buyresponsibly.net/?PjyREMW1ejA44131K9
--- End Message ---