Friday, December 20, 2013

*****³o¬O©U§£«H(SPAM)***** END Of Year Package

Spam detection software, running on the system "cc.cust.edu.tw", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Singapore Airlines Level 1, Arrival Hall Passenger Terminal
Building 2 Changi Airport Singapore 819829 Dear Sir/Madam We are officially
notifying you regarding the End Of Year Christmas Package Promotion Gift
from the Board and Directors of the Singapore Airlines and the KrisFlyer Membership
Services which is approved and confirmed by the Singapore Changi International
Airport and the Directors of the Singapore Airlines. [...]

Content analysis details: (49.7 points, 10.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: outlook.com]
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
2.0 BAYES_99 BODY: 99~100% ªº¾÷²v¬O©U§£«H
[score: 1.0000]
1.8 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.3 NSL_RCVD_FROM_USER Received from User
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 MISSING_HEADERS Missing To: header
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
3.0 JM_SOUGHT_FRAUD_3 Body contains frequently-spammed text patterns
1.0 HK_LOTTO HK_LOTTO
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
3.8 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.9 LOTTO_AGENT Claims Agent
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
4.1 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 MONEY_FORM Lots of money if you fill out a form
2.9 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.4 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.9 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
4.2 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

No comments: