Message info

Status: Analyzed
Posted by: 83.255.63.138
Size: 2,834 bytes
Analyzed:
Sun, 22 Jan 2012 19:28:42 GMT
Processing time:
9.56555 seconds

Raw message

URIs

http://www.vkofyxfins.net

SpamAssassin

status: Spam Content analysis details: (23.3 points, 5.0 required)
ScoreNameDescription
0.5SEM_URIREDContains a URI listed by SEM-URIRED
1.7URIBL_DBL_SPAMContains an URL listed in the DBL blocklist
1.6URIBL_WS_SURBLContains an URL listed in the WS SURBL blocklist
1.1INVALID_DATEInvalid Date: header (not RFC 2822)
0.6SARE_HEAD_HDR_XSIDPRAfingerprint
0.9DKIM_ADSP_NXDOMAINNo valid author signature and domain not in DNS
3.2FB_CIALIS_LEO3BODY: Uses a mis-spelled version of cialis.
0.9DRUG_ED_CAPSBODY: Mentions an E.D. drug
1.7SARE_OBFU_VIAGRABODY: found apparent obfuscation of word used in
0.0FUZZY_CPILLBODY: Attempt to obfuscate words in spam
1.0FUZZY_VPILLBODY: Attempt to obfuscate words in spam
0.8BAYES_50BODY: Bayes spam probability is 40 to 60%
0.9RAZOR2_CHECKListed in Razor2 (http://razor.sf.net/)
1.9RAZOR2_CF_RANGE_E8_51_100Razor2 gives engine 8 confidence level
0.5RAZOR2_CF_RANGE_51_100Razor2 gives confidence level above 50%
2.0DRUGS_ERECTILERefers to an erectile drug
0.8RDNS_NONEDelivered to internal network by a host with no rDNS
3.1KAM_VIAGRA6Viagra Obfuscation Technique SPAM
0.0TVD_SUBJ_NUM_OBFU_MINFPTVD_SUBJ_NUM_OBFU_MINFP

score: 23.278 tests: BAYES_50, DKIM_ADSP_NXDOMAIN, DRUGS_ERECTILE, DRUG_ED_CAPS, FB_CIALIS_LEO3, FUZZY_CPILL, FUZZY_VPILL, INVALID_DATE, KAM_VIAGRA6, RAZOR2_CF_RANGE_51_100, RAZOR2_CF_RANGE_E8_51_100, RAZOR2_CHECK, RDNS_NONE, SARE_HEAD_HDR_XSIDPRA, SARE_OBFU_VIAGRA, SEM_URIRED, TVD_SUBJ_NUM_OBFU_MINFP, URIBL_DBL_SPAM, URIBL_WS_SURBL subtests: __ANY_TEXT_ATTACH, __ANY_TEXT_ATTACH_DOC, __CS_WORD, __CT, __CTE, __CTYPE_CHARSET_QUOTED, __CT_TEXT_PLAIN, __DKIM_DEPENDABLE, __DOS_HAS_ANY_URI, __DOS_RCVD_SUN, __DOS_RELAYED_EXT, __DOS_SINGLE_EXT_RELAY, __DRUGS_ERECTILE1, __DRUGS_ERECTILE10, __DRUGS_ERECTILE3, __DRUGS_ERECTILE6, __DRUGS_ERECTILE_C, __DRUGS_ERECTILE_L, __DRUGS_ERECTILE_V, __FB_NUM_PERCNT, __FROM_ENCODED_QP, __HAS_ANY_URI, __HAS_DATE, __HAS_FROM, __HAS_MESSAGE_ID, __HAS_MSGID, __HAS_RCVD, __HAS_REPLY_TO, __HAS_SUBJECT, __KAM_DRUG2_3, __KAM_MED2, __KAM_MX, __KAM_MX3, __KAM_UPS2, __KAM_VIAGRA6A, __KAM_VIAGRA6D, __KAM_VIAGRA7A, __KAM_VIAGRA7B, __LAST_EXTERNAL_RELAY_NO_AUTH, __LAST_UNTRUSTED_RELAY_NO_AUTH, __LOCAL_PP_NONPPURL, __LONGWORDS_C, __MIME_VERSION, __MISSING_REF, __MISSING_REPLY, __MSGID_OK_DIGITS, __MSGID_OK_HOST, __MSOE_MID_WRONG_CASE, __NONEMPTY_BODY, __RDNS_NONE, __REPLYTO_EXISTS, __SANE_MSGID, __SARE_BODY_BLANKS_5_100, __SARE_BODY_BLNK_5_100, __SARE_HEAD_MIME_VALID, __SARE_META_MURTY3, __SARE_SPEC_PROLEO5, __SARE_URI_ANY, __SARE_WHITELIST_FLAG, __SUBJECT_ENCODED_QP, __SUBJECT_FUZZY_VPILL, __SUBJECT_NEEDS_MIME, __TOCC_EXISTS, __TT_OBSCURED_VIAGRA, __TVD_MIME_ATT_TP, __TVD_SUBJ_NUM_OBFU, __VA_WORD

Received Headers

176.209.212.114

rDNS: None HELO: mx0.iniznvnwvqumod.com Not listed in any of the 141 tested blacklists