Monday, October 17, 2005

 

*****SPAM***** s:ilagra versus v:iagra

X-Virus-Scan: Scanned by clamdmail 0.15 (no viruses);
Mon, 17 Oct 2005 17:19:15 -0500
Received: from unknown (HELO psmtp.com) (64.18.0.159)
by proinetserver.com with SMTP; 17 Oct 2005 22:19:15 -0000
Received-SPF: none (proinetserver.com: domain at scientist.com does not designate permitted sender hosts)
identity=mailfrom; client-ip=64.18.0.159;
envelope-from=<maryloushecklerebse@scientist.com>;
Received: from source ([212.152.166.27]) by exprod5mx19.postini.com ([64.18.4.10]) with SMTP;
Mon, 17 Oct 2005 14:27:02 PDT
Message-ID: <F9B517D4.59BF1D3@scientist.com>
Date: Mon, 17 Oct 2005 10:22:26 +1100
Reply-To: "Amie Cordle" <maryloushecklerebse@scientist.com>
From: "Amie Cordle" <maryloushecklerebse@scientist.com>
User-Agent: Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:1.3.1) Gecko/20030701
X-Accept-Language: en-us
MIME-Version: 1.0
To: "bhunter" <bhunter@proi.net>
Subject: s:ilagra versus v:iagra
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: base64

PGh0bWw+DQpUb28gbWFueSBnaXJsZnJpZW5kcz8gTm8gcHJvYmxlbS4uLnRha2Ugc2lsZGVuYWZp
bCBjaXRyYXRlIHBpbGwganVzdCAkMi4zOA0KPGJyPg0KPGJyPg0KQWxsIHBpbGxzIGFyZSBwcm9k
dWNlZCBpbiB3b3JsZC1jbGFzcyBsaWNlbnNlZCBmYWNpbGl0aWVzIG9ubHkuIA0KPGJyPg0KPGJy
Pg0KQ2hlY2sgb3V0IHRoZSBzaXRlIGJlbG93IHRvIGxlYXJuIG1vcmUgdG9kYXk6DQo8YnI+DQo8
YnI+DQpTaW5jZXJlbHksDQo8YnI+DQpEb2xsaWUgTWF6dXJlaw0KPGJyPg0KPGJyPg0KPGEgaHJl
Zj0iaHR0cDovLyYjeDAwNDY7JiN4MDY3OyYjeDA2MTsmI3gwMDA2Zjt4JiN4MDAwMDZkOyYjeDA3
NjsmI3gwMDJlOyYjeDAwMDA3NTsmI3gwMDAwNzM7JiN4MDYxOyYjeDAwMDA2NDsmI3gwMDA2NTsm
I3gwMDA3MDsmI3gwMDZmOyYjeDAwNzM7aSYjeDAwNzQ7JiN4MDZmOyYjeDAwNzI7JiN4MDAwNzk7
LiYjeDAwNjM7JiN4MDAwMDZmOyYjeDAwMDA2ZDsiPkZvciBtb3JlIGluZm9ybWF0aW9uIG9uIHRo
aXMgcHJvZHVjdDwvYT4NCjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxicj4N
Cjxicj4NCjxicj4NCjxicj4NCjxicj4NCjxicj4NCm01RWR2cGxzDQo8L2h0bWw+

Spam detection software, running on the system localhost, has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Too many girlfriends? No problem...take sildenafil
citrate pill just $2.38 All pills are produced in world-class licensed
facilities only. Check out the site below to learn more today: [...]

Content analysis details: (12.3 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
2.7 SUBJECT_DRUG_GAP_VIA Subject contains a gappy version of 'viagra'
0.4 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
1.9 DRUG_ED_SILD BODY: Talks about an E.D. drug using its chemical name
1.1 HTML_50_60 BODY: Message is 50% to 60% HTML
1.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_BASE64_NO_NAME RAW: base64 attachment does not have a file name
1.8 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
1.2 DRUGS_ERECTILE Refers to an erectile drug
2.1 DRUGS_ERECTILE_OBFU Obfuscated reference to an erectile drug

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.


Comments: Post a Comment

<< Home

This page is powered by Blogger. Isn't yours?