Return-path: <jsclee@ms47.hinet.net>
Envelope-to: xxxx@xxxxxx.com
Delivery-date: Fri, 12 Sep 2008 02:16:57 -0700
Received: from 66.89.158.2.ptr.us.xo.net ([66.89.158.2])
by server.xxxxxx.com with esmtp (Exim 4.69)
(envelope-from <jsclee@ms47.hinet.net>)
id 1Ke4lp-0003PV-5D
for xxxx@xxxxxx.com; Fri, 12 Sep 2008 02:16:57 -0700
Message-ID: <04752.rob@hiroshi>
Date: Fri, 12 Sep 2008 07:29:32 +0000
From: "ICS Monitoring Team" <jsclee@ms47.hinet.net>
User-Agent: Thunderbird 2.0.0.12 (Windows/20080213)
MIME-Version: 1.0
To: "client" <xxxx@xxxxxx.com>
Content-Type: multipart/mixed;
boundary="830E5B4FC2D61AD"
X-Spam-Status: Yes, score=19.6
X-Spam-Score: 196
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.brainsg.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Your internet access is going to get suspended The Internet
Service Provider Consorcium was made to protect the rights of software authors,
artists. We conduct regular wiretapping on our networks, to monitor criminal
acts. [...]
Content analysis details: (19.6 points, 4.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[66.89.158.2 listed in zen.spamhaus.org]
4.4 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split
IP)
1.9 TVD_RCVD_IP TVD_RCVD_IP
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?66.89.158.2>]
2.1 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
2.0 BAYES_80 BODY: Bayesian spam probability is 80 to 95%
[score: 0.8241]
0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
[66.89.158.2 listed in dnsbl.sorbs.net]
0.1 RDNS_DYNAMIC Delivered to trusted network by host with
dynamic-looking rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Your internet access is going to get suspended
This is a multi-part message in MIME format.
--830E5B4FC2D61AD
Content-Type: text/plain;
charset=iso-8859-1
Content-Transfer-Encoding: 7bit
Your internet access is going to get suspended
The Internet Service Provider Consorcium was made to protect the rights of software authors, artists.
We conduct regular wiretapping on our networks, to monitor criminal acts.
We are aware of your illegal activities on the internet wich were originating from
You can check the report of your activities in the past 6 month that we have attached. We strongly advise you to stop your activities regarding the illegal downloading of copyrighted material of your internet access will be suspended.
Sincerely
ICS Monitoring Team