Here are the headers of a legitimate e-mail that was caught with Base64.
Received: from mtvmime03.VERITAS.COM [143.127.3.10] by mail.reliance.net
with ESMTP
(SMTPD32-7.13) id A25F130A0102; Fri, 18 Oct 2002 00:03:59 -0700
Received: from svlxbh01.veritas.com (unverified) by mtvmime03.VERITAS.COM
(Content Technologies SMTPRS 4.2.10) with ESMTP id
<[EMAIL PROTECTED]> for
<[EMAIL PROTECTED]>;
Fri, 18 Oct 2002 00:02:22 -0700
Received: from hroapr02.nsmg.veritas.com ([10.65.9.62]) by
svlxbh01.veritas.com with SMTP (Microsoft Exchange Internet Mail Service
Version 5.5.2656.59)
id 43NZLDKF; Fri, 18 Oct 2002 00:02:22 -0700
MIME-Version: 1.0
Message-ID: <EEC137EF-9730-46c5-99A4-FC1ED9EDDC1D@mimetools>
Date: Fri, 18 Oct 02 12:36:43 +0530
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: THIS IS PROBABLY SPAM! ECASEID=500047573 - Re:Backup Exec for
Windows Servers (All
Versions) Support Question
content-type: text/plain; charset= US-ASCII
content-transfer-encoding: Base64
content-id: <C9F08088-0B09-464b-91DF-64080F05CF45@mimetools>
X-Mailer: Aprs-EMEDD-1.00
Return-Path: [EMAIL PROTECTED]
Precedence: bulk
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client
[8010000e].
X-RBL-Warning: BASE64: An binary encoded text or HTML section was found in
this E-mail.
X-Declude-Sender: [EMAIL PROTECTED] [143.127.3.10]
X-Declude-Spoolname: Db25f130a010241dd.SMD
X-Note: This E-mail was scanned by RelianceSoft, Inc. (www.reliancesoft.com)
for spam.
X-Tests-Failed: BADHEADERS, WEIGHTRANGE15-19, BASE64
X-Note: This E-mail was sent from bay-bridge.veritas.com ([143.127.3.10]).
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 321651872
Being that this is from Veritas, I am a little surprised.
Should I inform them?
John Tolmachoff
IT Manager, Network Engineer
211 E. Imperial Hwy., Suite 106
Fullerton, CA� 92835
714-578-7999, ext. 104
[EMAIL PROTECTED]
www.reliancesoft.com
�
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
