28 Jan
2004
28 Jan
'04
4:48 a.m.
Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: OEM Software URI:http://www.pro-ez-oem.biz/?241958
Specials good thru 11/12/03. Please use discount code mail9221 to
receive these prices. Software: Windows XP Suites, Adobe software,
Clearance, Corel Draw/Corel Ventura, Games, 3D Studio Max, Operating
Systems, Utilities. [...]
Content analysis details: (17.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.1 FROM_WEBMAIL_END_NUMS6 From webmail service and address ends in numbers
0.3 NO_REAL_NAME From: does not include a real name
0.9 FROM_ENDS_IN_NUMS From: ends in numbers
1.1 FROM_NUM_AT_WEBMAIL From address is webmail, but starts with a number
0.7 ADDR_NUMS_AT_BIGSITE Uses an address with lots of numbers, at a big ISP
1.6 FROM_STARTS_WITH_NUMS From: starts with nums
0.1 HTML_FONTCOLOR_UNKNOWN BODY: HTML font color is unknown to us
0.1 HTML_TAG_BALANCE_A BODY: HTML has excess "a" close tags
0.0 HTML_MESSAGE BODY: HTML included in message
0.2 HTML_TAG_BALANCE_TABLE BODY: HTML is missing "table" close tags
0.1 HTML_FONT_BIG BODY: HTML has a big font
0.1 HTML_70_80 BODY: Message is 70% to 80% HTML
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.8 BIZ_TLD URI: Contains a URL in the BIZ top-level domain
0.5 RCVD_IN_NJABL_DIALUP RBL: NJABL: dialup sender did non-local SMTP
[172.180.151.150 listed in dnsbl.njabl.org]
1.1 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
[<http://dsbl.org/listing?ip=172.180.151.150>]
2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?172.180.151.150>]
2.5 RCVD_IN_DYNABLOCK RBL: Sent directly from dynamic IP address
[172.180.151.150 listed in dnsbl.sorbs.net]
0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
[172.180.151.150 listed in dnsbl.njabl.org]
0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
[172.180.151.150 listed in dnsbl.sorbs.net]
1.2 FROM_ALL_NUMS From an address that is all numbers (non-phone)
1.6 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.