[an error occurred while processing this directive]
Spam detection software, running on the system "amantadine.ncsa.uiuc.edu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
postmaster@ncsa.uiuc.edu for details.
Content preview: Warning: This message has had one or more attachments
removed (jargon coronad.gif). Please read the
"NCSA-Attachment-Warning.txt" attachment(s) for more information. "No.
monomeric hatch charlie complimentary digitalis impeach insuperable
jitterbug finery dockside shamble businessman crupper sunbeam alizarin
auberge marcel nitrite autocollimate bedlam illegitimacy digestible
cartographic care bowline cuff carcinoma knot patrolman curlew mimi
conway affable perturbation coffeepot break otherwise swordtail elsevier
excerpt dinah cotangent creep toyota butterfield future Shinebone. [...]
Content analysis details: (44.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.9 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
2.9 MIME_BOUND_DIGITS_15 Spam tool pattern in MIME boundary
3.1 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
4.1 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
4.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
1.4 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
[SPF failed: Please see http://www.openspf.org/why.html?sender=pfvikcpznlcyq%40hotmail.com&ip=69.150.177.38&receiver=amantadine.ncsa.uiuc.edu]
1.4 MSGID_FROM_MTA_ID Message-Id for external message added locally
1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:'
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
1.2 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5000]
0.2 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar to background
0.2 DNS_FROM_RFC_ABUSE RBL: Envelope sender in abuse.rfc-ignorant.org
3.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[69.150.177.38 listed in sbl-xbl.spamhaus.org]
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[69.150.177.38 listed in dnsbl.sorbs.net]
1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?69.150.177.38>]
1.7 DNS_FROM_RFC_POST RBL: Envelope sender in
postmaster.rfc-ignorant.org
1.9 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[69.150.177.38 listed in combined.njabl.org]
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: dresforme.com]
4.1 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: dresforme.com]
0.9 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
3.8 LONGWORDS Long string of long words
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
--- Begin Message ---
- To: "Vmi-bug" <vmi-bug@ncsa.uiuc.edu>
- Subject: {Filename?} Re [22]:
- From: "Elinor Jorgensen" <pfvikcpznlcyq@hotmail.com>
- Date: Sat, 22 Apr 2006 04:14:42 -0500
- Content-type: multipart/mixed; boundary="71363473749624197128"
- User-agent: Internet Mail Service (5.5.2650.21)
This is a message from the MailScanner E-Mail Virus Protection Service ---------------------------------------------------------------------- The original e-mail attachment "jargon coronad.gif" is on the list of unacceptable attachments for this site and has been replaced by this warning message. If you wish to receive a copy of the original attachment, please e-mail helpdesk and include the whole of this message in your request. Alternatively, you can call them, with the contents of this message to hand when you call. At Sat Apr 22 04:14:45 2006 the virus scanner said: MailScanner: Very long filenames are good signs of attacks against Microsoft e-mail packages (jargon coronad.gif) Note to Help Desk: Look on the NCSA MailScanner (mail) in /var/spool/mailimage/quarantine/20060422 (message k3M9Egu13304). -- Postmaster National Center for Supercomputing Applications www.ncsa.uiuc.edu MailScanner thanks transtec Computers for their support
--- End Message ---