Sunday, October 23, 2005



X-Virus-Scan: Scanned by clamdmail 0.15 (no viruses);
Sun, 23 Oct 2005 09:33:36 -0500
Received: from unknown (HELO (
by with SMTP; 23 Oct 2005 14:33:36 -0000
Received-SPF: none ( domain at does not designate permitted sender hosts)
identity=mailfrom; client-ip=;
Received: from source ([]) by ([]) with SMTP;
Sun, 23 Oct 2005 06:39:48 PDT
Received: from (unknown [])
by (Postfix) with SMTP id 14F1BA2139B
for <>; Sun, 23 Oct 2005 09:39:44 -0400 (EDT)
Date: Sun, 23 Oct 2005 06:39:55 -0600 (EEST)
From: Agada <>
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Message-Id: <>

<body bgColor=#ffffff>
<div align="center"><b><i><font size="+2">
<div align="left">Visit our new online pharmacy store and save upto 95%<br>
</font></i></b> </div>
<div align="left">
<td bgcolor="#CCCCCC">
<div align="center">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<td align="center">
<div align="left"><b><i><font color="#FF0000" size="+2">/'i'a'g'r@
is the best thing that can ever happen to YOU!</font></i></b></div>
<div align="left"></div>
<td align="center">
<div align="left"><b><i><a href="">Want
PILLs? Cia1is, Viagr@, Many Meds Phenterm1ne#</a></i></b></div>
<td align="center">
<p align="left"><b><i><a href="">Cheapest
d()se$ only in our online pharmacy sh0p!<br>
VI$IT N0W!</a></i></b></p>
<p align="left"><b><i>Thank you!</i></b></p>
<a href=""><u>Click here to visit our NEW ONLINE
PHARMACY STORE</u></a></i></b> </div>

Spam detection software, running on the system localhost, has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Visit our new online pharmacy store and save upto 95%
/'i'a'g'r@ is the best thing that can ever happen to YOU! Want PILLs?
Cia1is, Viagr@, Many Meds Phenterm1ne# [...]

Content analysis details: (14.8 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.6 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
2.7 ONLINE_PHARMACY BODY: Online Pharmacy
1.7 INFO_TLD URI: Contains an URL in the INFO top-level domain
0.2 HTML_70_80 BODY: Message is 70% to 80% HTML
0.3 HTML_TEXT_AFTER_BODY BODY: HTML contains text after BODY close tag
1.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.3 HTML_TEXT_AFTER_HTML BODY: HTML contains text after HTML close tag
0.3 HTML_SHOUTING3 BODY: HTML has very strong "shouting" markup
0.8 DRUGS_DIET Refers to a diet drug
1.2 DRUGS_ERECTILE Refers to an erectile drug
2.3 DRUGS_DIET_OBFU Obfuscated reference to a diet drug
2.1 DRUGS_ERECTILE_OBFU Obfuscated reference to an erectile drug
1.1 MISSING_SUBJECT Missing Subject: header

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

Comments: Post a Comment

<< Home

This page is powered by Blogger. Isn't yours?