Tuesday, October 25, 2005


*****SPAM***** viagra/for/$2.77each|

X-Virus-Scan: Scanned by clamdmail 0.15 (no viruses);
Tue, 25 Oct 2005 16:05:06 -0500
Received: from unknown (HELO psmtp.com) (
by proinetserver.com with SMTP; 25 Oct 2005 21:05:06 -0000
Received-SPF: none (proinetserver.com: domain at clerk.com does not designate permitted sender hosts)
identity=mailfrom; client-ip=;
Received: from source ([]) by exprod5mx117.postini.com ([]) with SMTP;
Tue, 25 Oct 2005 13:10:33 PDT
Message-ID: <60E79480.9703852@clerk.com>
Date: Tue, 25 Oct 2005 10:48:09 +0900
Reply-To: "Tanisha Mcclaine" <malindamorphewmaoquu@clerk.com>
From: "Tanisha Mcclaine" <malindamorphewmaoquu@clerk.com>
User-Agent: AOL 7.0 for Windows US sub 118
X-Accept-Language: en-us
MIME-Version: 1.0
To: "bhunter" <bhunter@proi.net>
Subject: viagra/for/$2.77each|
Content-Type: text/html;
Content-Transfer-Encoding: base64


Spam detection software, running on the system localhost, has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Buy VIAGRA for just 2.38 each dosage Don't be misled
by herbal versions, which are not effective at all Order today, and
receive within approx 10 days. [...]

Content analysis details: (8.5 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
2.7 SUBJECT_DRUG_GAP_VIA Subject contains a gappy version of 'viagra'
0.4 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.1 DRUG_ED_CAPS BODY: Mentions an E.D. drug
1.1 HTML_50_60 BODY: Message is 50% to 60% HTML
1.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_BASE64_NO_NAME RAW: base64 attachment does not have a file name
1.8 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding
1.2 DRUGS_ERECTILE Refers to an erectile drug

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

Comments: Post a Comment

<< Home

This page is powered by Blogger. Isn't yours?