[Hactivist_discussion] *****SPAM***** BB&T - Security Alert! [Wed, 28 Mar 2007 07:04:51 -0800]

BB&T services_7959903ib at bbt.com
Wed Mar 28 15:04:58 UTC 2007


Spam detection software, running on the system "darkside.dod.net", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email.  If you have any questions, see
admin at dod.net for details.

Content preview:  URI:http://online.bbt.com.onlineservlet_id058487.idisop.hk/cbus 
  URI:cid:0G1S0QUM79 And what was the real bottom line: The truth! 
  bedazzle conch sair, if ye heard them! The left side of the wheelchair 
  struck a small occasional table covered with ceramic gewgaws. The way 
  I've been working just lately, two weeks. Much worse. My Pepsi is your 
  Pepsi. "I thought you were in a lot of pain, buster. He got the 
  stopwatch and went on with the story, ending his segment with Careless 
  up to his hips in a pool of quicksand or something, and then he would 
  ask someone else if he or she could, and bang down the button on the 
  stopwatch. He never became really well — probably could not do in such 
  a situation — but his health did improve and some of his strength came 
  back. destroy [...] 

Content analysis details:   (8.6 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 0.1 HTML_FONTCOLOR_UNSAFE  BODY: HTML font color not in safe 6x6x6 palette
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.8 HTML_30_40             BODY: Message is 30% to 40% HTML
 0.8 HTML_IMAGE_ONLY_08     BODY: HTML: images with 600-800 bytes of words
 1.1 RCVD_IN_DSBL           RBL: Received via a relay in list.dsbl.org
                            [<http://dsbl.org/listing?81.202.184.109>]
 2.5 RCVD_IN_DYNABLOCK      RBL: Sent directly from dynamic IP address
                            [81.202.184.109 listed in dnsbl.sorbs.net]
 0.1 RCVD_IN_SORBS          RBL: SORBS: sender is listed in SORBS
                            [81.202.184.109 listed in dnsbl.sorbs.net]
 0.8 PRIORITY_NO_NAME       Message has priority setting, but no X-Mailer
 2.2 FROM_HAS_ULINE_NUMS    From: contains an underline and numbers/letters

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

-------------- next part --------------
An embedded message was scrubbed...
From: "BB&T" <services_7959903ib at bbt.com>
Subject: BB&T - Security Alert! [Wed, 28 Mar 2007 07:04:51 -0800]
Date: Wed, 28 Mar 2007 15:04:58 +0000 (UTC)
Size: 13102
Url: http://darkside.dod.net/pipermail/hactivist_discussion/attachments/20070328/768ebdd6/attachment.mht


More information about the Hactivist_discussion mailing list