Thursday, September 08, 2005

 

*****SPAM***** now pay just one dollar forty cents per dose of viagr.a

X-Virus-Scan: Scanned by clamdmail 0.15 (no viruses);
Thu, 08 Sep 2005 22:12:26 -0500
Received: from unknown (HELO psmtp.com) (64.18.0.88)
by proinetserver.com with SMTP; 9 Sep 2005 03:12:26 -0000
Received-SPF: none (proinetserver.com: domain at fibertel.com.ar does not designate permitted sender hosts)
identity=mailfrom; client-ip=64.18.0.88;
envelope-from=<penelopekoellingbnnclk@fibertel.com.ar>;
Received: from source ([24.232.124.173]) by exprod5mx116.postini.com ([64.18.4.10]) with SMTP;
Thu, 08 Sep 2005 22:31:40 EDT
Message-ID: <82064314.B2A7D67@fibertel.com.ar>
Date: Fri, 09 Sep 2005 03:27:52 -0100
Reply-To: "Chandra Roosa" <penelopekoellingbnnclk@fibertel.com.ar>
From: "Chandra Roosa" <penelopekoellingbnnclk@fibertel.com.ar>
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02
X-Accept-Language: en-us
MIME-Version: 1.0
To: "gredman" <gredman@proi.net>
Subject: now pay just one dollar forty cents per dose of viagr.a
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64
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Spam detection software, running on the system localhost, has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Did you know that the generic version contains the
exact same ingredients as the brand name equivalent? Now available at
this pharmacy: cellebrex, cialis, effexor, zoloft, and more. We can
process your online prescription immediately, and expedite delivery.
[...]

Content analysis details: (10.1 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
2.7 SUBJECT_DRUG_GAP_VIA Subject contains a gappy version of 'viagra'
1.1 HTML_50_60 BODY: Message is 50% to 60% HTML
1.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_BASE64_NO_NAME RAW: base64 attachment does not have a file name
1.8 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
1.2 DRUGS_ERECTILE Refers to an erectile drug
2.1 DRUGS_ERECTILE_OBFU Obfuscated reference to an erectile drug

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.


Comments: Post a Comment

<< Home

This page is powered by Blogger. Isn't yours?