[SPAM] We Can Help Your Debt Problems! db rqs

[Dre G.]

This is the 4th one today, this is getting a bit old.

dre

On Tue, 2003-05-13 at 14:26, Valerie Dodge wrote:
> This mail is probably spam.  The original message has been attached
> along with this report, so you can recognize or block similar unwanted
> mail in future.  See http://spamassassin.org/tag/ for more details.
> 
> Content preview:  triptych "NEW DEBT CONSOLIDATION PROGRAM ALLOWS
>   CONSUMERS TO SETTLE ALL THEIR DEBT FOR JUST PENNIES ON THE DOLLAR"
>   [...] 
> 
> Content analysis details:   (17.30 points, 4 required)
> X_AUTH_WARNING     (-1.5 points) Has a X-Authentication-Warning header
> SUBJ_YOUR_DEBT     (0.7 points)  Subject contains "Your Bills" or similar
> CLICK_BELOW_CAPS   (0.5 points)  BODY: Asks you to click below (in capital letters)
> SUBJ_REMOVE        (0.5 points)  BODY: List removal information
> EXCUSE_3           (0.1 points)  BODY: Claims you can be removed from the list
> CONSOLIDATE_DEBT   (4.3 points)  BODY: Consolidate debt, credit, or bills
> HTML_LINK_CLICK_HERE (0.1 points)  BODY: HTML link text says "click here"
> HTML_IMAGE_ONLY_06 (1.1 points)  BODY: HTML has images with 400-600 bytes of words
> HTML_MESSAGE       (0.1 points)  BODY: HTML included in message
> HTML_FONT_BIG      (0.1 points)  BODY: FONT Size +2 and up or 3 and up
> HTML_LINK_CLICK_CAPS (1.1 points)  BODY: HTML link text says "CLICK"
> HTML_SHOUTING3     (0.8 points)  BODY: HTML has very strong "shouting" markup
> HTML_50_60         (0.2 points)  BODY: Message is 50% to 60% HTML
> MAILTO_WITH_SUBJ_REMOVE (0.5 points)  BODY: mailto URI includes removal text
> MIME_HTML_NO_CHARSET (0.7 points)  RAW: Message text in HTML without specified charset
> MAILTO_WITH_SUBJ   (0.1 points)  URI: Includes a link to send a mail with a subject
> MAILTO_TO_REMOVE   (0.4 points)  URI: Includes a 'remove' email address
> MAILTO_TO_SPAM_ADDR (0.4 points)  URI: Includes a link to a likely spammer email address
> RCVD_IN_NJABL      (1.0 points)  RBL: Received via a relay in dnsbl.njabl.org
>                    [RBL check: found 242.80.22.210.dnsbl.njabl.org.,]
>                    [type: 127.0.0.9]
> RCVD_IN_OSIRUSOFT_COM (0.6 points)  RBL: Received via a relay in relays.osirusoft.com
>                    [RBL check: found 242.80.22.210.relays.osirusoft.com., type: 127.0.0.9]
> RCVD_IN_UNCONFIRMED_DSBL (0.7 points)  RBL: Received via a relay in unconfirmed.dsbl.org
>                    [RBL check: found 242.80.22.210.unconfirmed.dsbl.org.]
> MISSING_MIMEOLE    (0.5 points)  Message has X-MSMail-Priority, but no X-MimeOLE
> MIME_HTML_ONLY     (0.1 points)  Message only has text/html MIME parts
> UPPERCASE_25_50    (1.1 points)  message body is 25-50% uppercase
> MISSING_OUTLOOK_NAME (0.9 points)  Message looks like Outlook, but isn't
> FORGED_MUA_EUDORA  (2.2 points)  Forged mail pretending to be from Eudora
> 
> The original message did not contain plain text, and may be unsafe to
> open with some email clients; in particular, it may contain a virus,
> or confirm that your address can receive spam.  If you wish to view
> it, it may be safer to save it to a file and open it with an editor.
-- 
Dre G. <enabled at linuxjunkies.com>