Hi List.
I have 2 messages, where the bodies are the same.
1 scored 3.5, the other 6.3
Why is this? Way to may MEDS are coming through.
TAGGED MESSAGE HEADER:
Received: from jp-mx-1.mtnns.net ([209.212.97.2]) by protea.int.citec.net
with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
id T2TKBBGK; Mon, 11 Oct 2004 22:41:02 +0200
Received: from [195.238.2.201] (helo=outmx020.isp.belgacom.be)
by jp-mx-1.mtnns.net with esmtp (Exim 4.42)
id 1CH6yd-0004fM-KO
for [EMAIL PROTECTED]; Mon, 11 Oct 2004 22:41:07 +0200
Received: from outmx020.isp.belgacom.be (localhost [127.0.0.1])
by outmx020.isp.belgacom.be (8.12.11/8.12.11/Skynet-OUT-2.22) with
ESMTP id i9BKemvB026402
for <[EMAIL PROTECTED]>; Mon, 11 Oct 2004 22:40:48 +0200
(envelope-from <[EMAIL PROTECTED]>)
Received: from sbsserver.SCHEERLINCK (179.208-78-194.adsl-fix.skynet.be
[194.78.208.179])
by outmx020.isp.belgacom.be (8.12.11/8.12.11/Skynet-OUT-2.22) with
ESMTP id i9BKehOC026353
for <[EMAIL PROTECTED]>; Mon, 11 Oct 2004 22:40:46 +0200
(envelope-from <[EMAIL PROTECTED]>)
Received: from boils ([218.11.93.12]) by sbsserver.SCHEERLINCK with
Microsoft SMTPSVC(5.0.2195.6713);
Mon, 11 Oct 2004 22:38:21 +0200
From: "Lindsay Banks"<[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Mime-Version: 1.0
Message-ID: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 11 Oct 2004 20:38:22.0312 (UTC)
FILETIME=[3FE40E80:01C4AFD2]
Date: 11 Oct 2004 22:38:22 +0200
X-SA-Exim-Connect-IP: 195.238.2.201
X-SA-Exim-Mail-From: [EMAIL PROTECTED]
Subject: ****SPAM****: 6.3: ASPECTS OF ED THAT WERE SI$GN1FlCANT||1Y
|MPR0VED BY C|*AlIS & IE*V1l|TRA ?
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Spam-Prev-Subject: ASPECTS OF ED THAT WERE SI$GN1FlCANT||1Y |MPR0VED BY
C|*AlIS & IE*V1l|TRA ?
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.0 (2004-09-13) on jp-mx-1.mtnns.net
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.3 required=4.4 tests=BAYES_95,DRUGS_ERECTILE,
DRUGS_ERECTILE_OBFU,RCVD_IN_NJABL_PROXY,SARE_URI_CONS7,
UPPERCASE_25_50,URIBL_SBL autolearn=no version=3.0.0
X-Spam-Report:
* 2.1 BAYES_95 BODY: Bayesian spam probability is 95 to 99%
* [score: 0.9778]
* 0.4 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
* [218.11.93.12 listed in combined.njabl.org]
* 1.0 URIBL_SBL Contains an URL listed in the SBL blocklist
* [URIs: cvbfbgc.com]
* 0.9 DRUGS_ERECTILE_OBFU Obfuscated reference to an erectile drug
* 0.2 DRUGS_ERECTILE Refers to an erectile drug
* 1.7 SARE_URI_CONS7 body contains link to probable spammer
* 0.0 UPPERCASE_25_50 message body is 25-50% uppercase
X-SA-Exim-Version: 4.1 (built Tue, 05 Oct 2004 09:43:32 +0200)
UNTAGGED
Received: from jp-mx-1.mtnns.net ([209.212.97.2]) by protea.int.citec.net
with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
id T2TKBASM; Mon, 11 Oct 2004 16:06:41 +0200
Received: from [207.249.140.134] (helo=test.prueba.mx)
by jp-mx-1.mtnns.net with esmtp (Exim 4.42)
id 1CH0ou-00048w-DA
for [EMAIL PROTECTED]; Mon, 11 Oct 2004 16:06:42 +0200
Received: from merger ([218.13.209.55])
by test.prueba.mx (iPlanet Messaging Server 5.1 (built May 7 2001))
with ESMTPA id <[EMAIL PROTECTED]> for [EMAIL PROTECTED];
Sun,
10 Oct 2004 00:56:11 -0500 (CDT)
Date: Sun, 10 Oct 2004 00:56:11 -0500 (CDT)
Date-warning: Date header was inserted by test.prueba.mx
From: Larawen <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Message-id: <[EMAIL PROTECTED]>
MIME-version: 1.0
X-SA-Exim-Connect-IP: 207.249.140.134
X-SA-Exim-Mail-From: [EMAIL PROTECTED]
Subject: PURCHASE MEDS HERE 0N||lNE
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT
X-Spam-Checker-Version: SpamAssassin 3.0.0 (2004-09-13) on jp-mx-1.mtnns.net
X-Spam-Level: ***
X-Spam-Status: No, score=3.5 required=4.4 tests=BAYES_60,DATE_IN_PAST_24_48,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_NJABL_PROXY,RCVD_IN_SORBS_MISC,
UPPERCASE_25_50,URIBL_SBL autolearn=no version=3.0.0
X-SA-Exim-Version: 4.1 (built Tue, 05 Oct 2004 09:43:32 +0200)
I have attached the messages
<<PURCHASE MEDS HERE 0N||lNE>> <<****SPAM****: 6.3: ASPECTS OF ED THAT
WERE SI$GN1FlCANT||1Y |MPR0VED BY C|*AlIS & IE*V1l|TRA ?>>
Regards,
Tom
--- Begin Message ---
http://C|a1lis_V|Iaggar_C00O0Ode1ne_.......and___m000O0re
http://ClaI|is_V||aggar_CO000OdeIne_Xana1x_.......and___m0O000re
http://Cla|1is_V||aggar_CO0O00deIne_Xana1x_Vallum_.......and___m0O0O0re
V|S|T 0UR SITE AND 0RDER HERE http://politics.bikehahs.com./as#crosser
--- End Message ---
--- Begin Message ---
http://C|a||is_VI1aggar_CO000Odelne_.......and___m0O000re
http://C|a1lis_V|Iaggar_CO0O00de1ne_Xanalx_.......and___m0O0O0re
http://C|aI|is_V|Iaggar_C00O0Ode1ne_Xanalx_Va||um_.......and___m000O0re
C1|CK HERE KNOW M0RE http://meningitis.cvbfbgc.com/as#executable
--- End Message ---
