Dear graph-tool@forked.de Best Sales 2009!

Spam detection software, running on the system "forked.de", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: graph-tool(a)forked.de • Mon, 13 Jul 2009 04:24:41 -0300 New
   from WebMD: Dear graph-tool(a)forked.de!Restore your strength with ability
  to sleep via Ambien. Sign-up today! You are subscribed as graph-tool(a)forked.de.
   View and manage your WebMD newsletter preferences. Subscribe to more newsletters.
   Change/update your email address. [...]

Content analysis details: (18.1 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]
3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
                            [189.28.178.202 listed in zen.spamhaus.org]
0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
                            [189.28.178.202 listed in dnsbl.sorbs.net]
2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
                            [URIs: hzuguhuq.cn]
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
                            [URIs: nhihaten.cn]
1.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
                            [URIs: nhihaten.cn]
0.0 HS_INDEX_PARAM URI: Link contains a common tracker pattern.
0.2 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                            above 50%
                            [cf: 100]
0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
1.5 URIBL_SBL Contains an URL listed in the SBL blocklist
                            [URIs: xxoyuziv.cn]
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
0.2 AWL AWL: From: address is in the auto white-list

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

attachment.eml (5.23 KB)