Monday, October 03, 2005


*****SPAM***** Try Vioxx

X-Virus-Scan: Scanned by clamdmail 0.15 (no viruses);
Mon, 03 Oct 2005 04:28:38 -0500
Received: from unknown (HELO (
by with SMTP; 3 Oct 2005 09:28:37 -0000
Received-SPF: none ( domain at does not designate permitted sender hosts)
identity=mailfrom; client-ip=;
Received: from source ([]) by ([]) with SMTP;
Mon, 03 Oct 2005 01:40:43 PDT
X-Message-Info: 5a2Y11Paexafyc13M2tALUyuhWWI506wvVVT2XD3
Received: from amoebae4apicesaccessible (28.07.730.66) by (Bluewin AG 1.3.589)
id 498A54UT36167SN98534 for; Mon, 03 Oct 2005 16:39:50 -0800
Message-ID: <kqx$46692$>
Reply-To: "Adorno Hector" <>
From: "Adorno Hector" <>
Subject: Try Vioxx
Date: Mon, 03 Oct 2005 16:39:50 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative;

Content-Type: text/html;
Content-Transfer-Encoding: 7Bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Re: Gen.eric Vi.agra pr.escri.bed online for free</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1458" name=GENERATOR>
<style type="text/css">a {text-decoration: none;}</style>
</HEAD><BODY text=#000000 link=#000000 bgColor=#FFCC11>
<H3><a href=""><FONT color=#000000>Re: free prescription medicine!<BR></FONT>
<BR><FONT color=#000000 size=3>8O&#37; 0FF 0N ALL ME'DS<BR>
###THE BEST DEALS ARE HERE Starting at &#36;6O<BR><BR>
<u>Visit our Store to see the catelog</u><BR>
Current Specia1s...<BR>
3O &Chi;anax = &#36;ll8<BR>
3O \/a1&iota;um = &#36;l27<BR>
l5 \/&iota;aqra = &#36;7O<BR>
2O C&iota;a1&iota;s = &#36;2OO<BR>
3O &Mu;er&iota;dia = &#36;1OO<BR>
3O &Tau;ramad&omicron;l = &#36;64<BR>
lO Lev&iota;tra = &#36;l44<BR><BR>
<u>Visit our Store to see the catelog</u><BR>
- No Doctor visits or prior perscription required!<BR>
- Quick delivery to your front door</FONT></H3>
----- Original Message -----
From: Gredman
To: Adorno Hector
Sent: Mon, 03 Oct 2005 16:39:50 -0800
Subject: Please pick up your order


Spam detection software, running on the system localhost, has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Re: Gen.eric Vi.agra pr.escri.bed online for free Re:
free prescription medicine! 8O% 0FF 0N ALL ME'DS ###THE BEST DEALS ARE
HERE Starting at $6O Visit our Store to see the catelog Current
Specia1s... 3O &Chi;anax = $ll8 3O \/a1&iota;um = $l27 l5 \/&iota;aqra
= $7O 2O C&iota;a1&iota;s = $2OO 3O &Mu;er&iota;dia = $1OO 3O
&Tau;ramad&omicron;l = $64 lO Lev&iota;tra = $l44 [...]

Content analysis details: (21.3 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.6 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
3.6 X_MESSAGE_INFO Bulk email fingerprint (X-Message-Info) found
2.1 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
1.7 INFO_TLD URI: Contains an URL in the INFO top-level domain
1.8 MPART_ALT_DIFF BODY: HTML and text parts are different
1.1 HTML_50_60 BODY: Message is 50% to 60% HTML
1.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.2 DRUGS_ERECTILE Refers to an erectile drug
2.9 DRUGS_PAIN Refers to a pain relief drug
0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
2.1 DRUGS_ERECTILE_OBFU Obfuscated reference to an erectile drug

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

Comments: Post a Comment

<< Home

This page is powered by Blogger. Isn't yours?