From jqoww@weber.edu Fri Feb 1 00:23:07 2008 Return-Path: X-Original-To: ietfarch-diffserv-archive@core3.amsl.com Delivered-To: ietfarch-diffserv-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E7AA83A6896 for ; Fri, 1 Feb 2008 00:23:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 112.407 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=112.407 tagged_above=-999 required=5 tests=[AWL=-0.185, BAYES_99=3.5, FB_PENIS=1.66, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, FRT_PENIS1=3.592, HELO_DYNAMIC_DHCP=1.398, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_CPE=0.5, HOST_EQ_CPE=0.979, HTML_IMAGE_ONLY_20=1.546, HTML_MESSAGE=1, HTML_SHORT_LINK_IMG_3=0.001, J_CHICKENPOX_31=0.6, J_CHICKENPOX_73=0.6, J_CHICKENPOX_92=0.6, MANGLED_ENLARG=2.3, MANGLED_ENLGMN=5, MANGLED_PENIS=2.3, NORMAL_HTTP_TO_IP=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_FORGED_WROTE=2.523, RCVD_FORGED_WROTE2=4.325, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_ADLTOBFU=0.68, SARE_HTML_A_BODY=0.742, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 0.5 HELO_EQ_CPE HELO_EQ_CPE * 0.8 FH_HOST_EQ_D_D_D_D Host starts with d-d-d-d * 2.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr * 1) * 1.0 HOST_EQ_CPE HOST_EQ_CPE * 1.4 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP) * 1.6 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d * 4.3 RCVD_FORGED_WROTE2 RCVD_FORGED_WROTE2 * 2.5 RCVD_FORGED_WROTE Forged 'Received' header found ('wrote:' spam) * 0.6 J_CHICKENPOX_92 BODY: 9alpha-pock-2alpha * 2.3 MANGLED_PENIS BODY: mangled - Penis * 0.7 SARE_ADLTOBFU BODY: Contains OBFU adult material * 0.6 J_CHICKENPOX_73 BODY: 7alpha-pock-3alpha * 3.6 FRT_PENIS1 BODY: ReplaceTags: Penis * 5.0 MANGLED_ENLGMN BODY: mangled enlargement * 1.7 FB_PENIS BODY: FB_PENIS * 2.3 MANGLED_ENLARG BODY: mangled enlarge(r|s) * 0.6 J_CHICKENPOX_31 BODY: 3alpha-pock-1alpha * 0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL * 1.5 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words * 1.0 HTML_MESSAGE BODY: HTML included in message * 0.7 SARE_HTML_A_BODY FULL: Message body has very strange HTML sequence * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: khuttjine.com] * 10 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: khuttjine.com] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: khuttjine.com] * 10 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: khuttjine.com] * 10 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist * [URIs: khuttjine.com] * 1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) * [URIs: khuttjine.com] * 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see ] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [65.31.45.66 listed in zen.spamhaus.org] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address * [65.31.45.66 listed in dnsbl.sorbs.net] * 2.0 FM_DDDD_TIMES_2 Dual helo + host eq d_d_d_d * 0.0 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image * 0.1 RDNS_DYNAMIC Delivered to trusted network by host with * dynamic-looking rDNS * -0.2 AWL AWL: From: address is in the auto white-list Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WH2cMNB-UYUQ for ; Fri, 1 Feb 2008 00:23:06 -0800 (PST) Received: from cpe-65-31-45-66.woh.res.rr.com (cpe-65-31-45-66.woh.res.rr.com [65.31.45.66]) by core3.amsl.com (Postfix) with SMTP id 7449D3A689C for ; Fri, 1 Feb 2008 00:23:05 -0800 (PST) Received: from 137.190.12.80 (HELO fielding3.weber.edu) by ietf.org with esmtp (FLPGETHEA TXMKN) id A8z06r-ginfSf-XE for diffserv-archive@ietf.org; Fri, 01 Feb 2008 03:24:36 -0500 Message-ID: <817401c864ab$e1a325d0$422d1f41@Guillermo> From: "Guillermo Bowen" To: "Laurence Daniel" Subject: ***SPAM*** 112.407 (5) More delight and enjoyment Date: Fri, 01 Feb 2008 03:24:36 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_33138_81DC_01C86481.F8CD1DD0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2670 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670 This is a multi-part message in MIME format. ------=_NextPart_33138_81DC_01C86481.F8CD1DD0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable In just a few short weeks, you`ll watch with amazement=20 as your phallus grows into the biggest, thickest, hardest, and most power= ful tool=20 you`ve ever imagined - the one you`ve always fantasized about=20 having! No pen!s en`l@rgement system is faster, easier to use, or=20 more effective than VPXL+ - FOREVER}! VPXL+ IS GUARANTEED TO EN`L@RGE & STRENGTHEN YOUR=20 PEN|S OR YOUR MONEY BACK - PERIOD! SO WHY WAIT? GET=20 VPXL+ AND LIVE LARGE TODAY! CHECK IT OUT NOW TO GAIN THE LONGEST AND HARDEST PHALLUS IN THIS YEAR! http://khuttjine=2Ecom/ and Paul Tudor Jones of Jones Investments were big winners=2ENineteenthe = British Treasury for the expected public announcement=2E A lesser mortal might have been tempted to open a bottle of champagne,go = out and play tennis=2E Im not sure what to do=2E What should I do? ------=_NextPart_33138_81DC_01C86481.F8CD1DD0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
MAXIMIZE YOUR D|K, STRENGTH & PERFORMANCE=

In = just a few short weeks, you`ll watch with amazement as your phallus
grows into the biggest, thickest, hardest, and most powe= rful tool
you`ve ever imagined - the one you`ve always fantasized abo= ut
having! No pen!s en`l@rgement system is faster, easier to use, or more effective than VPXL+ - FOREVER!

VPXL+ IS GUARANTEED TO EN`L@RGE & STRENGTHEN YOUR
PEN|S OR YOUR MONEY BACK= - PERIOD! SO WHY WAIT? GET
VPXL+ AND LIVE LARGE TODAY!

CHECK IT OUT NOW TO GAIN THE LONGEST AND HARDEST PHAL= LUS IN THIS YEAR!


whether to take the position we took but how deep to go=2E= At first, I wasbetter than some others by sticking to the Bundesbanks si= de=2E
The pound fails to respond=2Eand Paul Tudor Jones of Jones Inves= tments were big winners=2E
Nineteenthe British Treasury for the expect= ed public announcement=2E
A lesser mortal might have been tempted to o= pen a bottle of champagne,go out and play tennis=2E Im not sure what to d= o=2E What should I do? ------=_NextPart_33138_81DC_01C86481.F8CD1DD0-- From mimi93@wsj.com Fri Feb 1 06:38:58 2008 Return-Path: X-Original-To: ietfarch-diffserv-archive@core3.amsl.com Delivered-To: ietfarch-diffserv-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A1EF28D2DA for ; Fri, 1 Feb 2008 06:38:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 71.5 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=71.5 tagged_above=-999 required=5 tests=[BAYES_99=3.5, DOS_OE_TO_MX=2.75, DRUGS_ERECTILE=1, DRUGS_ERECTILE_OBFU=1.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, FRT_PRICE=3.897, HELO_DYNAMIC_IPADDR=2.426, HTML_MESSAGE=1, MANGLED_CIALIS=2.5, MANGLED_PRICE=2.3, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619, RDNS_DYNAMIC=0.1, SUBJECT_DRUG_GAP_C=0.003, SUBJ_BUY=0.001, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 0.8 FH_HOST_EQ_D_D_D_D Host starts with d-d-d-d * 2.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr * 1) * 1.6 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d * 0.0 SUBJECT_DRUG_GAP_C Subject contains a gappy version of 'cialis' * 0.0 SUBJ_BUY Subject line starts with Buy or Buying * 2.5 MANGLED_CIALIS BODY: mangled Cialis * 2.3 MANGLED_PRICE BODY: mangled price * 3.9 FRT_PRICE BODY: ReplaceTags: Price * 1.0 HTML_MESSAGE BODY: HTML included in message * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: colonysettle.com] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: colonysettle.com] * 10 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: colonysettle.com] * 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see ] * 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server * [88.169.128.107 listed in dnsbl.sorbs.net] * 1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) * [URIs: colonysettle.com] * 2.0 FM_DDDD_TIMES_2 Dual helo + host eq d_d_d_d * 1.5 DRUGS_ERECTILE_OBFU Obfuscated reference to an erectile drug * 1.0 DRUGS_ERECTILE Refers to an erectile drug * 0.1 RDNS_DYNAMIC Delivered to trusted network by host with * dynamic-looking rDNS * 2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9G+nEieW6e2v for ; Fri, 1 Feb 2008 06:38:57 -0800 (PST) Received: from bdi68-3-88-169-128-107.fbx.proxad.net (bdi68-3-88-169-128-107.fbx.proxad.net [88.169.128.107]) by core3.amsl.com (Postfix) with ESMTP id 750452937AB for ; Fri, 1 Feb 2008 06:18:48 -0800 (PST) Message-ID: <000a01c864dd$034f3a8b$a12b58a6@acqom> From: "desmond jake" To: Subject: ***SPAM*** 71.5 (5) Buy Ci-al-is Online. LOWEST GENERIC CI-AL-IS PR-I-CE Date: Fri, 01 Feb 2008 12:32:58 +0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0007_01C864DD.034A106C" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.3138 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 This is a multi-part message in MIME format. ------=_NextPart_000_0007_01C864DD.034A106C Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Refrain from further sexual activity and notify your doctor it you = develop dizziness, nausea, or angina (pain, tightness, discomfort, = numbness, or tingling in the chest, arms, neck, or jaw) during sexual = activity. Worldwide ciallis delivery. Lowest Pri-ce Guaranteed ------=_NextPart_000_0007_01C864DD.034A106C Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Refrain from further sexual activity and notify your doctor it you = develop dizziness, nausea, or angina (pain, tightness, discomfort, = numbness, or tingling in the chest, arms, neck, or jaw) during sexual = activity.

Worldwide = ciallis delivery. Lowest Pri-ce Guaranteed

------=_NextPart_000_0007_01C864DD.034A106C-- From diffsicsti-owner@ml.free.fr Fri Feb 1 10:23:08 2008 Return-Path: X-Original-To: ietfarch-diffserv-archive@core3.amsl.com Delivered-To: ietfarch-diffserv-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EFF2D28C1BE for ; Fri, 1 Feb 2008 10:23:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 110.028 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=110.028 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DSL=1.129, HELO_EQ_RU=0.595, HOST_EQ_RU=0.875, HTML_MESSAGE=1, HTML_MIME_NO_HTML_TAG=0.097, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SBL=20, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 0.9 HOST_EQ_RU HOST_EQ_RU * 0.6 HELO_EQ_RU HELO_EQ_RU * 0.8 FH_HOST_EQ_D_D_D_D Host starts with d-d-d-d * 1.1 HELO_EQ_DSL HELO_EQ_DSL * 2.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr * 1) * 1.6 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d * 1.0 HTML_MESSAGE BODY: HTML included in message * 1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: theeartheory.com] * 10 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist * [URIs: theeartheory.com] * 10 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: theeartheory.com] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: theeartheory.com] * 10 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: theeartheory.com] * 10 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist * [URIs: theeartheory.com] * 1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) * [URIs: theeartheory.com] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [91.122.57.108 listed in zen.spamhaus.org] * 20 URIBL_SBL Contains an URL listed in the SBL blocklist * [URIs: theeartheory.com] * 2.0 FM_DDDD_TIMES_2 Dual helo + host eq d_d_d_d * 0.1 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag * 0.1 RDNS_DYNAMIC Delivered to trusted network by host with * dynamic-looking rDNS Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OF1A1FveihIl for ; Fri, 1 Feb 2008 10:23:07 -0800 (PST) Received: from ppp91-122-57-108.pppoe.avangard-dsl.ru (ppp91-122-57-108.pppoe.avangard-dsl.ru [91.122.57.108]) by core3.amsl.com (Postfix) with SMTP id 8760D28C1EE for ; Fri, 1 Feb 2008 10:23:05 -0800 (PST) X-Originating-IP: [48.019.859.37] X-Originating-Email: [diffserv-archive@ietf.org] X-Sender: diffserv-archive@ietf.org Received: (qmail 4666 by uid 668); Fri, 1 Feb 2008 09:24:39 +0300 Message-Id: <20080201122439.4668.qmail@ppp91-122-57-108.pppoe.avangard-dsl.ru> To: Subject: ***SPAM*** 110.028 (5) RE: January 71% OFF From: MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Date: Fri, 1 Feb 2008 10:23:05 -0800 (PST)
From pranab0@eurosport.com Fri Feb 1 12:17:50 2008 Return-Path: X-Original-To: ietfarch-diffserv-archive@core3.amsl.com Delivered-To: ietfarch-diffserv-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 207AF3A68A6 for ; Fri, 1 Feb 2008 12:17:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 82.591 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=82.591 tagged_above=-999 required=5 tests=[BANG_GUAR=0.939, BAYES_99=3.5, DOS_OE_TO_MX=2.75, DRUGS_ERECTILE=1, DRUGS_ERECTILE_OBFU=1.5, FUZZY_CPILL=0.001, FUZZY_MEDICATION=2.717, FUZZY_PRICES=1.304, HELO_EQ_PL=1.135, HOST_EQ_PL=1.95, HTML_MESSAGE=1, J_CHICKENPOX_23=0.6, MANGLED_CIALIS=2.5, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, SARE_OBFU_ALL=0.751, SARE_SPEC_LEO_MEDS=1.666, SUBJECT_DRUG_GAP_C=0.003, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 1.9 HOST_EQ_PL HOST_EQ_PL * 1.1 HELO_EQ_PL HELO_EQ_PL * 0.0 SUBJECT_DRUG_GAP_C Subject contains a gappy version of 'cialis' * 1.3 FUZZY_PRICES BODY: Attempt to obfuscate words in spam * 2.5 MANGLED_CIALIS BODY: mangled Cialis * 0.6 J_CHICKENPOX_23 BODY: 2alpha-pock-3alpha * 0.9 BANG_GUAR BODY: Something is emphatically guaranteed * 0.8 SARE_OBFU_ALL BODY: found apparent obfuscation of word used in spam * 2.7 FUZZY_MEDICATION BODY: Attempt to obfuscate words in spam * 0.0 FUZZY_CPILL BODY: Attempt to obfuscate words in spam * 1.7 SARE_SPEC_LEO_MEDS BODY: obfuscated subject body * 1.0 HTML_MESSAGE BODY: HTML included in message * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: nounout.com] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: nounout.com] * 10 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: nounout.com] * 10 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist * [URIs: nounout.com] * 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address * [84.10.137.194 listed in dnsbl.sorbs.net] * 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see ] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * [84.10.137.194 listed in zen.spamhaus.org] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * 1.5 DRUGS_ERECTILE_OBFU Obfuscated reference to an erectile drug * 1.0 DRUGS_ERECTILE Refers to an erectile drug * 2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BUv+YCg9Ijyd for ; Fri, 1 Feb 2008 12:17:44 -0800 (PST) Received: from chello084010137194.chello.pl (chello084010137194.chello.pl [84.10.137.194]) by core3.amsl.com (Postfix) with ESMTP id E9E623A6976 for ; Fri, 1 Feb 2008 12:17:43 -0800 (PST) Message-ID: <000a01c8650f$05bd3e77$a6ee408a@dfnph> From: "leonhard remy" To: Subject: ***SPAM*** 82.591 (5) Cial_is 20mg x 90 piills = $235.95 Date: Fri, 01 Feb 2008 18:31:53 +0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0007_01C8650F.05BB6180" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.3138 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 This is a multi-part message in MIME format. ------=_NextPart_000_0007_01C8650F.05BB6180 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Tadalafil can help achieve an erection when sexual stimulation occurs. = An erection will not occur just by taking a pill. C|AL|S - Cheapest Pr|ces and 100% Satisfaction Guaranteed! cheaapest = meedications ------=_NextPart_000_0007_01C8650F.05BB6180 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Tadalafil can help achieve an erection when sexual stimulation = occurs. An erection will not occur just by taking a pill.

C|AL|S - Cheapest = Pr|ces and 100% Satisfaction Guaranteed! cheaapest = meedications

------=_NextPart_000_0007_01C8650F.05BB6180-- From cnzej@adelphia.com Fri Feb 1 13:43:14 2008 Return-Path: X-Original-To: ietfarch-diffserv-archive@core3.amsl.com Delivered-To: ietfarch-diffserv-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E7AA33A68A9 for ; Fri, 1 Feb 2008 13:43:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: YES X-Spam-Score: 93.252 X-Spam-Level: **************************************************************** X-Spam-Status: Yes, score=93.252 tagged_above=-999 required=5 tests=[BAYES_99=3.5, DOS_OE_TO_MX=2.75, FH_RELAY_NODNS=1.451, GB_ROLEX=5, HELO_DYNAMIC_IPADDR2=4.395, HELO_DYNAMIC_SPLIT_IP=3.493, HELO_MISMATCH_NET=0.611, HTML_MESSAGE=1, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, TVD_RCVD_IP=1.931, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10] X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split * IP) * 1.5 FH_RELAY_NODNS We could not determine your Reverse DNS * 4.4 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr * 2) * 1.9 TVD_RCVD_IP TVD_RCVD_IP * 5.0 GB_ROLEX BODY: I don't need a new watch! * 1.0 HTML_MESSAGE BODY: HTML included in message * 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level * above 50% * [cf: 100] * 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% * [cf: 100] * 20 URIBL_BLACK Contains an URL listed in the URIBL blacklist * [URIs: dhueiije.com] * 10 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: dhueiije.com] * 10 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: dhueiije.com] * 10 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: dhueiije.com] * 10 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist * [URIs: dhueiije.com] * 1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) * [URIs: dhueiije.com] * 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * [77.201.231.63 listed in zen.spamhaus.org] * 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL * 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS * 0.6 HELO_MISMATCH_NET HELO_MISMATCH_NET * 2.8 DOS_OE_TO_MX Delivered direct to MX with OE headers Received: from core3.amsl.com ([127.0.0.1]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bt-RugdPE+ZM for ; Fri, 1 Feb 2008 13:43:13 -0800 (PST) Received: from 63.231.201-77.rev.gaoland.net (unknown [77.201.231.63]) by core3.amsl.com (Postfix) with ESMTP id 44ACB3A6987 for ; Fri, 1 Feb 2008 13:43:11 -0800 (PST) Message-ID: <000601c8651b$01f846e2$e948c5b4@hkfkhyar> From: "fax matthias" To: Subject: ***SPAM*** 93.252 (5) Perfectly crafted luxury timepieces Date: Fri, 01 Feb 2008 19:57:15 +0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0003_01C8651B.01F3A747" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.3138 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 This is a multi-part message in MIME format. ------=_NextPart_000_0003_01C8651B.01F3A747 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Perfectly crafted luxury timepieces, all at low prices. Start 2008 in stunning fashion with our perfect range of upgraded 2008 = replicas. Thousands of different models to choose from! Watches Rolex DatejustBvlgariCartierChanelPatek Philippe PENS Mont Blanc RollerballMont Blanc BallpointMont Blanc FountainLV = BallpointLV Rollerball Jewelry Tiffany & Co Jewelry=20 http://www.dhueiije.com/ ------=_NextPart_000_0003_01C8651B.01F3A747 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Perfectly crafted luxury = timepieces, all at low prices.
Start 2008 in stunning fashion = with our perfect range of upgraded 2008 replicas.
Thousands of different models to choose from!
Watches
  • Rolex Datejust
  • Bvlgari
  • Cartier
  • Chanel
  • Patek Philippe
 PENS
  • Mont Blanc Rollerball
  • Mont Blanc Ballpoint
  • Mont Blanc Fountain
  • LV Ballpoint
  • LV Rollerball
 Jewelry
  • Tiffany & Co Jewelry

To: "Terry K. Lockett" Subject: Special prices for equisite gifts! Date: Thu, 07 Mar 2002 17:18:58 +0700 MIME-Version: 1.0 Content-Type: text/html; charset="windows-1250" Content-Transfer-Encoding: quoted-printable


------------------------------------------------------------
EMAIL ID: DA8IO From jquon@sapiens.com Tue Feb 5 10:47:57 2008 Return-Path: X-Original-To: diffserv-archive@ietf.org Delivered-To: ietfarch-diffserv-archive@mail.ietf.org Received: by mail.ietf.org (Postfix, from userid 51) id 09EDC3A7317; Tue, 5 Feb 2008 10:52:48 -0800 (PST) Received: from pD9E4434B.dip.t-dialin.net (pD9E4434B.dip.t-dialin.net [217.228.67.75]) by mail.ietf.org (Postfix) with SMTP id B47503A94AD for ; Tue, 5 Feb 2008 02:24:54 -0800 (PST) Received: from 209.88.187.39 (HELO extranet.sapiens.com) by ietf.org with esmtp (GMDCACRZFW UKIHYE) id PhgBB1-mVPSwl-vn for diffserv-archive@ietf.org; Tue, 05 Feb 2008 11:26:37 +0100 Message-ID: <2ede01c867e1$96f880f0$4b43e4d9@Krista> From: "Krista Albright" To: "Cristina Murdock" Subject: Do you have dcks that are too small Date: Tue, 05 Feb 2008 11:26:37 +0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_11996_2F46_01C867E9.F8BCE8F0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 This is a multi-part message in MIME format. ------=_NextPart_11996_2F46_01C867E9.F8BCE8F0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable In just a few short weeks, you`ll watch with amazement=20 as your pen!s grows into the powerful, thickest, hardest, and most bigges= t tool=20 you`ve ever imagined - the one you`ve always dreamed about=20 having! No pen!s en`l@rgement system is faster, easier to use, or=20 more effective than VPXL+ - GUARANTEED}! VPXL+ IS GUARANTEED TO EN`L@RGE & STRENGTHEN YOUR=20 PHALLUS OR YOUR MONEY BACK - PERIOD! SO WHY WAIT? GET=20 VPXL+ AND LIVE LARGE TODAY! CHECK THIS OFFER TO SUBSTANTIALLY IMPROVE YOUR MALE PACKAGE IN THIS YEAR!= http://nbnibsee=2Ecom/ long positions on stocks that would profit if the market rose and shortIt= is a sort of disease when you consider yourself some kind of god,getting= ready to go to work one summer in the 1930s=2E omitted=2E Only the year is given=2E The reason is not clear=2Einvestor=2E= ------=_NextPart_11996_2F46_01C867E9.F8BCE8F0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
VPXL+: THE WORLD'S #1 PEN|S= EN'L@RGEMENT PREPARATION!

In just= a few short weeks,=20 you`ll watch with amazement as your pen!s
grows into the powerful, th= ickest, hardest, and most biggest tool
you`ve ever imagined - the one you`ve always dreamed about
having! No= pen!s en`l@rgement=20 system is faster, easier to use, or
more effective than VPXL+= - GUARANTEED!

VPXL+ IS=20 GUARANTEED TO EN`L@RGE & STRENGTHEN YOUR
PH= ALLUS OR=20 YOUR MONEY BACK - PERIOD! SO WHY WAIT? GET
VPXL+ AND LIVE LARG= E TODAY!

CHECK THIS OFFER TO SUBSTANTIALLY= IMPROVE YOUR MALE PACKAGE IN THIS YEAR!



22 The Worlds Greatest Investorsources of tension at home, and tr= y as she might, Elizabeth could
was a failure=2E Turning to Eastern Europe, he established a base inlong = positions on stocks that would profit if the market rose and short
It = is a sort of disease when you consider yourself some kind of god,getting = ready to go to work one summer in the 1930s=2E
omitted=2E Only the yea= r is given=2E The reason is not clear=2Einvestor=2E<= /HTML> ------=_NextPart_11996_2F46_01C867E9.F8BCE8F0-- From dtsrv@adelphia.com Tue Feb 5 11:01:46 2008 Return-Path: X-Original-To: diffserv-archive@ietf.org Delivered-To: ietfarch-diffserv-archive@mail.ietf.org Received: by mail.ietf.org (Postfix, from userid 51) id 9070D3A70A2; Tue, 5 Feb 2008 10:37:55 -0800 (PST) Received: from cpc3-grnk4-0-0-cust101.renf.cable.ntl.com (cpc3-grnk4-0-0-cust101.renf.cable.ntl.com [81.110.84.102]) by mail.ietf.org (Postfix) with ESMTP id C7F4B3A7923 for ; Mon, 4 Feb 2008 17:02:51 -0800 (PST) Message-ID: <000a01c86791$068c4458$fb445bba@hqcqytgh> From: "brian hernando" To: Subject: Do not make a big mistake of being a small-sized looser! Date: Mon, 04 Feb 2008 23:08:42 +0000 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0007_01C86791.06873227" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.3138 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 This is a multi-part message in MIME format. ------=_NextPart_000_0007_01C86791.06873227 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable =09The meds you need, reliable and hassle free!=20 =09Top products of top brands. Low pricing, discounts, flawless customer = support. =09Millions of customers just can't be wrong! =09thusstill.com =09 =20 ------=_NextPart_000_0007_01C86791.06873227 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
=09

The meds = you need, reliable and hassle free!
=09Top products of top brands. Low pricing, discounts, flawless customer = support.
=20 =09Millions of customers just can't be wrong!

=09 =09
------=_NextPart_000_0007_01C86791.06873227--