Saturday, October 22, 2005

 

*****SPAM*****

X-Virus-Scan: Scanned by clamdmail 0.15 (no viruses);
Sat, 22 Oct 2005 05:57:09 -0500
Received: from unknown (HELO psmtp.com) (64.18.0.98)
by proinetserver.com with SMTP; 22 Oct 2005 10:57:09 -0000
Received-SPF: softfail (proinetserver.com: transitioning SPF record at spf-d.hotmail.com does not designate 64.18.0.98 as permitted sender)
identity=mailfrom; client-ip=64.18.0.98;
envelope-from=<adriano@hotmail.com>;
Received: from source ([216.55.149.18]) by exprod5mx143.postini.com ([64.18.4.10]) with SMTP;
Sat, 22 Oct 2005 03:03:21 PDT
Received: from chello084112028252.25.11.vie.surfer.at (chello084112028252.25.11.vie.surfer.at [84.112.28.252])
by mx3.zoneedit.com (Postfix) with SMTP id DC7A0B20530
for <bhunter@proi.net>; Sat, 22 Oct 2005 06:00:09 -0400 (EDT)
Date: Sat, 22 Oct 2005 03:27:56 -0600 (EEST)
From: Hunt <adriano@hotmail.com>
To: bhunter@proi.net
Subject:
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Message-Id: <20051022100009.DC7A0B20530@mx3.zoneedit.com>

<html><body>
One Time DISC0UNT 0RDER for V1@_GRA, C_1al1s!<br>
<a href="http://sftjaptqpwdfnqfp.wo131c10kz2thewp1wwpjeww.empallhh.com/?rpqpbfqxquqcjrmp">/1_@_GRA DISC0UNT 0RDER</a><br>
<b>T0DAY Its only <font color=red>$1.00</font> per dose.<br><br>
</b> -Generic /l@gra, 30 x 100m_g <br>
-Regular T@bs (60 d0ze$)<br>
<b>!!0nly $ 59.99 </b><br>
<br>
<i><b>Ne// Pr0ducts:</b><br>
</i>-Generic_ v!@gra, 30 x 100_mg <br>
-Soft T@b.s (60 d0z.es) <a href="http://dubqmvannhakwspo.1bo8ozonp4pym11u611uo1j1.fallacelk.com/?pixckzmugyjkhfyl"> What is S0ft T@bs?</a><br>
<b>!!0nly $ 79.99 </b><br>
-Generic Cla11s, 30 x 20m.g <br>
Tad@lafil <a href="http://kbvheagdmalahuxx.h9mo4f4l52nekzhs4hhs4zzh.pawlnf.com/?wuwbwerccyrfzgxs">What is S0ft C1al1s?</a><br>
<b>!!0nly $ 119.99 </b><br>
<a href="http://clykwvaochvxttzv.cmz1zszgif09fuu5zcunzcuc.vicelessai.com/?slnmaumuxxbmeqtu">/1@GRA DISC0UNT 0RDER</a><br>
<br></body></html>

Spam detection software, running on the system localhost, has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: One Time DISC0UNT 0RDER for V1@_GRA, C_1al1s! /1_@_GRA
DISC0UNT 0RDER T0DAY Its only $1.00 per dose. -Generic /l@gra, 30 x
100m_g -Regular T@bs (60 d0ze$) !!0nly $ 59.99 Ne// Pr0ducts:
-Generic_ v!@gra, 30 x 100_mg -Soft T@b.s (60 d0z.es) What is S0ft
T@bs? !!0nly $ 79.99 -Generic Cla11s, 30 x 20m.g Tad@lafil What is
S0ft C1al1s? !!0nly $ 119.99 /1@GRA DISC0UNT 0RDER [...]

Content analysis details: (8.4 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.8 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:'
0.3 DRUG_DOSAGE BODY: Talks about price per dose
0.3 HTML_TEXT_AFTER_BODY BODY: HTML contains text after BODY close tag
1.1 HTML_50_60 BODY: Message is 50% to 60% HTML
1.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.3 HTML_TEXT_AFTER_HTML BODY: HTML contains text after HTML close tag
1.2 DRUGS_ERECTILE Refers to an erectile drug
0.0 UPPERCASE_25_50 message body is 25-50% uppercase
2.1 DRUGS_ERECTILE_OBFU Obfuscated reference to an erectile drug
1.1 MISSING_SUBJECT Missing Subject: header

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.


Comments: Post a Comment

<< Home

This page is powered by Blogger. Isn't yours?