[an error occurred while processing this directive]
Spam detection software, running on the system "amantadine.ncsa.uiuc.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
postmaster@ncsa.uiuc.edu for details.
Content preview: Warning: This message has had one or more attachments
removed (kick centrex d.gif). Please read the
"NCSA-Attachment-Warning.txt" attachment(s) for more information. "No
boss, make dem bees crazy, dem sting Mis'wee ? " Ian seemed not to hear.
auxiliary denouement cockle vineyard boreas snafu ampere atrophic
swanlike crackle encomia mizar dram gargle honolulu faulty sorption
mandamus adult spellbound infinitive lectionary admissible auction
simply rum fossil glob rufus artful krakatoa diamagnetic deficit purr
ant salacious jessica krieger brace stratton ersatz clayton modern
sienna fruitful doris arcana flew misery communal ninetieth dactylic
councilwomen depend mort announce stricter account Ramage observed.
[...]
Content analysis details: (32.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.9 MIME_BOUND_DIGITS_15 Spam tool pattern in MIME boundary
1.4 MSGID_FROM_MTA_ID Message-Id for external message added locally
1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:'
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
1.8 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5106]
0.2 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar to background
0.2 DNS_FROM_RFC_ABUSE RBL: Envelope sender in abuse.rfc-ignorant.org
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[82.51.61.11 listed in dnsbl.sorbs.net]
1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?82.51.61.11>]
1.7 DNS_FROM_RFC_POST RBL: Envelope sender in
postmaster.rfc-ignorant.org
1.9 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[82.51.61.11 listed in combined.njabl.org]
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: olympicgrouting.com]
3.8 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: olympicgrouting.com]
2.1 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: olympicgrouting.com]
3.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: olympicgrouting.com]
4.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: olympicgrouting.com]
0.9 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
1.6 FORGED_MUA_MOZILLA Forged mail pretending to be from Mozilla
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
--- Begin Message ---
- To: "Vmi-bug" <vmi-bug@ncsa.uiuc.edu>
- Subject: {Filename?} re[8]:
- From: "Fanny Daniel" <ocsolpg@hotmail.com>
- Date: Mon, 3 Apr 2006 17:18:37 -0500
- Content-type: multipart/mixed; boundary="46665185752980468557"
- User-agent: Mozilla 4.61 [en]C-CCK-MCD C-UDP; (Win98; I)
This is a message from the MailScanner E-Mail Virus Protection Service ---------------------------------------------------------------------- The original e-mail attachment "kick centrex d.gif" is on the list of unacceptable attachments for this site and has been replaced by this warning message. If you wish to receive a copy of the original attachment, please e-mail the NCSA Help Desk (help@ncsa.uiuc.edu) and include this message with your request. Alternatively, you can call them at +1 217 244 0709 with the contents of this message on hand when you call. At Mon Apr 3 17:18:40 2006 the virus scanner said: MailScanner: Very long filenames are good signs of attacks against Microsoft e-mail packages (kick centrex d.gif) Note to Help Desk: Look on the NCSA MailScanner (amantadine) in /var/spool/quarantine/20060403 (message k33MIbR29226). -- The NCSA Email guys
--- End Message ---