Received: from pop.poynerlaw.com ([206.46.232.20])
	by poynerlaw.com (mainserver.poynerlaw.com)
	(MDaemon.PRO.v8.1.1.R)
	with MultiPOP id md50000063863.msg
	for <CA@poynerlaw.com>; Wed, 14 Sep 2005 13:08:40 -0700
Received: from mnr1.microneil.com ([216.88.36.96])
 by vms053.mailsrvcs.net (Sun Java System Messaging Server 6.2-2.05 (built Apr
 28 2005)) with ESMTP id <0IMT00H61P823MA0@vms053.mailsrvcs.net> for
 ca@poynerlaw.com; Wed, 14 Sep 2005 15:07:15 -0500 (CDT)
Received: by mnr1.microneil.com (Postfix, from userid 93)	id 569F03F20F6; Wed,
 14 Sep 2005 16:07:09 -0400 (EDT)
Received: from SortMonster.com (unknown [216.88.36.181])
 by mnr1.microneil.com (Postfix) with ESMTP	id AD9273F210F; Wed,
 14 Sep 2005 16:06:58 -0400 (EDT)
Received: from deepspace.i360.net [64.95.220.80] by SortMonster.com with ESMTP
 (SMTPD32-6.05) id A2CE2E30210; Wed, 14 Sep 2005 16:06:38 -0400
Received: from [192.168.210.112] [68.88.27.178] by deepspace.i360.net with
 ESMTP (SMTPD-8.20) id A2B606A8; Wed, 14 Sep 2005 15:06:14 -0500
Date: Wed, 14 Sep 2005 15:06:15 -0500
From: Heimir Eidskrem <heimir@i360.net>
Subject: [***SPAM*** Score/Req: 31.1/6.0] Re: [sniffer] Damn viagra spam
In-reply-to: <011d01c5b964$13f049f0$6401a8c0@home.coxtower.com>
Sender: sniffer-owner@SortMonster.com
To: sniffer@SortMonster.com
Reply-to: sniffer@SortMonster.com
Message-id: <432882B7.8050803@i360.net>
MIME-version: 1.0
Content-type: text/plain; charset=ISO-8859-1; format=flowed
Content-transfer-encoding: 7bit
X-Accept-Language: en-us, en
Precedence: bulk
X-SortMonster-MessageSniffer-Rules: snfrv2r3-v2-3.2	No patterns matched.
X-SortMonster-MessageSniffer-Result: Clean
X-Declude-Sender: heimir@i360.net [68.88.27.178]
X-Declude-Spoolname: D82B6017400002E33.SMD
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Declude-Spoolname: D82ce210.SMD
References: <43287B43.5010807@i360.net>
 <011d01c5b964$13f049f0$6401a8c0@home.coxtower.com>
User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)
X-MDMultiPOP: ca@poynerlaw.com@pop.poynerlaw.com
X-MDRcpt-To: CA@poynerlaw.com
X-Rcpt-To: CA@poynerlaw.com
X-MDRemoteIP: 206.46.232.20
X-Return-Path: 
X-MDaemon-Deliver-To: CA@poynerlaw.com
X-Spam-Prev-Subject: Re: [sniffer] Damn viagra spam
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05)
X-Spam-Report: 
	*  1.8 SUBJECT_DRUG_GAP_VIA Subject contains a gappy version of 'viagra'
	*  0.1 FORGED_RCVD_HELO Received: contains a forged HELO
	*  4.0 URIBL_SBL Contains an URL listed in the SBL blocklist
	*      [URIs: amyslate.com]
	*  9.0 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
	*      [URIs: amyslate.com]
	*  8.0 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
	*      [URIs: amyslate.com]
	*  8.0 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
	*      [URIs: amyslate.com]
	*  0.0 DRUGS_ERECTILE Refers to an erectile drug
	*  0.2 UPPERCASE_25_50 message body is 25-50% uppercase
X-Spam-Status: Yes, score=31.1 required=6.0 tests=DRUGS_ERECTILE,
	FORGED_RCVD_HELO,SUBJECT_DRUG_GAP_VIA,UPPERCASE_25_50,URIBL_AB_SURBL,
	URIBL_JP_SURBL,URIBL_SBL,URIBL_WS_SURBL autolearn=no version=3.0.4
X-Spam-Level: *******************************
X-Spam-Processed: mainserver.poynerlaw.com, Wed, 14 Sep 2005 13:08:41 -0700

I have reported between 5 and 10 I guess.

Sniffer get some of them.

Cordially,

Heimir Eidskrem

i360, Inc.
2825 Wilcrest, Suite 675
Houston, TX 77042
Ph:  713-981-4900
Fax: 832-242-6632
heimir@i360.net
www.i360.net
www.i360hosting.com
www.realister.com

Houston's Leading Internet Consulting Company 



Darin Cox wrote:

>We just reported one to Sniffer support for analysis as well.
>
>Darin.
>
>
>----- Original Message ----- 
>From: "Heimir Eidskrem" <heimir@i360.net>
>To: <sniffer@sortmonster.com>
>Sent: Wednesday, September 14, 2005 3:34 PM
>Subject: [sniffer] Damn viagra spam
>
>
>We are getting tons of spam for viagra and other drugs.
>
>Not being stopped by sniffer.
>
>>From - Wed Sep 14 14:23:59 2005
>X-Account-Key: account2
>X-UIDL: 397213080
>X-Mozilla-Status: 0011
>X-Mozilla-Status2: 00000000
>Received: from chartcourse.com [200.152.123.222] by deepspace.i360.net
>  (SMTPD-8.20) id A7660304; Wed, 14 Sep 2005 14:17:58 -0500
>Received: from [192.168.232.240] (helo=elevator)
>by chartcourse.com with smtp (Paradisaic kw 5.29 (Jactation))
>id lBCMAK-xJNrNU-Ty
>for solutions@i360.net; Wed, 14 Sep 2005 14:17:22 -0500
>Message-ID: <004a01c5b960$ed59a000$f0e8a8c0@elevator>
>Reply-To: "Shayna Riffe" <shaynaiucriff@chartcourse.com>
>From: "Shayna Riffe" <shaynaiucriff@chartcourse.com>
>To: "Ealdgyth Rancourt" <solutions@i360.net>
>Subject: Re: Really Works Very Good Pharmaceu tical
>Date: Wed, 14 Sep 2005 14:17:20 -0500
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
>boundary="----=_NextPart_000_0047_01C5B937.04839800"
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook Express 6.00.2800.1106
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
>X-RBL-Warning: CBL: "Blocked - see
>http://cbl.abuseat.org/lookup.cgi?ip=200.152.123.222"
>X-RBL-Warning: IPNOTINMX:
>X-RBL-Warning: COUNTRYFILTER: Message failed COUNTRYFILTER test (line 29,
>weight 20)
>X-Declude-Sender: shaynaiucriff@chartcourse.com [200.152.123.222]
>X-Declude-Spoolname: D7765019600001CDF.SMD
>X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
>spam.
>X-Spam-Tests-Failed: CBL, IPNOTINMX, COUNTRYFILTER, CATCHALLMAILS [50]
>X-Country-Chain: BRAZIL->destination
>X-Note: This E-mail was sent from recreio.speednetrj.com
>([200.152.123.222]).
>X-IMAIL-SPAM-STATISTICS: (7765019600001cdf, 0.9721)
>X-RCPT-TO: <solutions@i360.net>
>Status: U
>X-UIDL: 397213080
>X-IMail-ThreadID: 7765019600001cdf
>
>This is a multi-part message in MIME format.
>
>------=_NextPart_000_0047_01C5B937.04839800
>Content-Type: text/plain;
>charset="us-ascii"
>Content-Transfer-Encoding: quoted-printable
>
>LeViAmCiXaVa
>viagbi=
>alnali
>trraenisxum
>a  &=
>nbsp;
>$3$1$3
>.33.21.75
>Our Website
>FaBeToEa
>st st talsy
>DeliPric&nbs=
>p;ConOrde
>veryesfide=
>ring
>nti
>ality=
> ball go? writing represented an incoherent chain of certain utterances, =
>certain
>
>------=_NextPart_000_0047_01C5B937.04839800
>Content-Type: text/html;
>charset="us-ascii"
>Content-Transfer-Encoding: quoted-printable
>
><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
><HTML><HEAD>
><META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
><META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
><STYLE></STYLE>
></HEAD>
><BODY bgColor=3D#ffffff>
>
><DIV>&nbsp;</DIV>
><DIV style=3D"FLOAT: left"><FONT face=3DCourier>Le<BR><B>Vi</B><BR>Am<B=
>R><B>Ci</B><BR>Xa<BR><B>Va</B></FONT></DIV>
>
><DIV style=3D"FLOAT: left"><FONT face=3DCourier>vi<BR><B>ag</B><BR>bi=
><BR><B>al</B><BR>na<BR><B>li</B></FONT></DIV>
><DIV style=3D"FLOAT: left"><FONT face=3DCourier>tr<BR><B>ra</B><BR>en<=
>BR><B>is</B><BR>x<BR><B>um</B></FONT></DIV>
>
><DIV style=3D"FLOAT: left"><FONT face=3DCourier>a<BR>&nbsp;<BR>&nbsp;<BR>&=
>nbsp;<BR>&nbsp;<BR>&nbsp;</FONT></DIV>
><DIV style=3D"FLOAT: left"><FONT face=3DCourier><BR><B>$3</B><BR><BR><B=
>  
>
>>$1</B><BR><BR><B>$3</B></FONT></DIV>
>>    
>>
>
><DIV style=3D"FLOAT: left"><FONT face=3DCourier><BR><B>.33</B><BR><B=
>R><B>.21</B><BR><BR><B>.75</B></FONT></DIV>
><DIV style=3D"CLEAR: both">&nbsp;</DIV>
>
><DIV><A href=3D"http://www.amyslate.com">Our Website</A></DIV>
><DIV>&nbsp;</DIV>
><DIV style=3D"FLOAT: left"><FONT face=3DCourier>Fa<BR>Be<BR>To<BR>Ea</FON=
>T></DIV>
><DIV style=3D"FLOAT: left"><FONT face=3DCourier>st&nbsp;<BR>st&nbsp;<=
>BR>tal<BR>sy&nbsp;</FONT></DIV>
>
><DIV style=3D"FLOAT: left"><FONT face=3DCourier>Deli<BR>Pric<BR>&nbs=
>p;Con<BR>Orde</FONT></DIV>
><DIV style=3D"FLOAT: left"><FONT face=3DCourier>very<BR>es<BR>fide<BR>=
>ring</FONT></DIV>
><DIV style=3D"FLOAT: left"><FONT face=3DCourier><BR><BR>nti<BR></FONT></DIV>
>
><DIV style=3D"FLOAT: left"><FONT face=3DCourier><BR><BR>ality<BR></FONT>=
></DIV><DIV style=3D"CLEAR: both">&nbsp;</DIV></BODY></HTML>
>
>------=_NextPart_000_0047_01C5B937.04839800--
>
>
>
>
>
>
>
>  
>

This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
