Spam detection software, running on the system "groupstudy.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
admin_at_groupstudy.com for details.
Content preview: <!-- http://medicellatu.com --> [...]
Content analysis details: (27.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split
IP)
0.7 TVD_RCVD_IP TVD_RCVD_IP
2.1 SUBJECT_DRUG_GAP_C Subject contains a gappy version of 'cialis'
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[219.64.122.127 listed in dnsbl.sorbs.net]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[219.64.122.127 listed in bb.barracudacentral.org]
5.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: medicellatu.com]
1.5 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread)
[URIs: medicellatu.com]
0.0 FREEMAIL_FROM Sender email is freemail (ccie[at]centrum.cz)
3.5 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[219.64.122.127 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9743]
Received: from 219.64.122.127.static-hyderabad.vsnl.net.in
(219.64.122.127.static-hyderabad.vsnl.net.in [219.64.122.127] (may be
forged)) by groupstudy.com (8.12.11.20060308/8.12.11) with SMTP id
o869rnCG002761 GroupStudy Mailer; Mon, 6 Sep 2010 05:53:50 -0400
Received: by mta1-webmail.uauhf.com (Postfix, from userid 74847) id
LPMJ22710C691; Mon, 6 Sep 2010 15:23:51 +0500
Received: from mailqcxxc by localhost.localdomain with local (Postfix);
Mon, 6 Sep 2010 15:23:51 +0500
Date: Mon, 6 Sep 2010 15:23:51 +0500
To: <ccielab_at_groupstudy.com>
From: <ccie_at_centrum.cz>
Reply-to: ccie_at_centrum.cz
Subject: [Buy now Via3ra and Cia2lis]
Message-ID: <2010090609535370bpqos_at_localhost.localdomain>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
<!-- http://medicellatu.com
-->
Blogs and organic groups at http://www.ccie.net
Received on Mon Sep 06 2010 - 15:23:51 ART
This archive was generated by hypermail 2.2.0 : Fri Oct 01 2010 - 05:58:05 ART