Just wondering if anybody has seen a higher score than this one.
Content analysis details: (35.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.3 NO_REAL_NAME From: does not include a real name
0.7 ADDR_NUMS_AT_BIGSITE Uses an address with lots of numbers, at a big ISP
0.9 FROM_ENDS_IN_NUMS From: ends in numbers
1.6 FROM_STARTS_WITH_NUMS From: starts with nums
0.3 RCVD_NUMERIC_HELO Received: contains a numeric HELO
2.1 FROM_WEBMAIL_END_NUMS6 From webmail service and address ends in numbers
2.8 SUBJ_VIAGRA Subject includes "viagra"
1.1 FROM_NUM_AT_WEBMAIL From address is webmail, but starts with a number
4.2 IMPOTENCE BODY: Impotence cure
1.9 INCREASE_SEX BODY: Talks about a bigger drive for sex
4.3 GENERIC_VIAGRA BODY: Mentions Generic Viagra
1.1 VIAGRA_ONLINE BODY: Fast Viagra Delivery
0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red
0.4 HTML_FONT_INVISIBLE BODY: HTML font color is same as background
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_FONT_BIG BODY: HTML has a big font
0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette
0.5 HTML_40_50 BODY: Message is 40% to 50% HTML
0.5 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
3.3 MSGID_FROM_MTA_SHORT Message-Id was added by a relay
1.1 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
[24.15.10.64 listed in dnsbl.sorbs.net]
0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
[24.15.10.64 listed in dnsbl.njabl.org]
0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
[24.15.10.64 listed in dnsbl.sorbs.net]
1.1 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
[<http://dsbl.org/listing?ip=24.15.10.64>]
1.1 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
[24.15.10.64 listed in dnsbl.njabl.org]
2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?24.15.10.64>]
1.2 FROM_ALL_NUMS From an address that is all numbers (non-phone)


LinkBack URL
About LinkBacks



Reply With Quote
Bookmarks