Kami,
Would you care to share your " FILTER-BODYURL" filter? I'm
interested in seeing what you filter on -
Thanks!
-Nick Hayer
From: "Kami Razvan" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: [Declude.JunkMail] This one eBay fraud.. came right through..
Date sent: Thu, 20 Nov 2003 17:52:27 -0500
Organization: ClickandPledge.com
Send reply to: [EMAIL PROTECTED]
> Hi..
> This just came in.. definitely NOT eBay & not caught as SPAM.. filters
> are in order.
>
> HEADER
> =============
> Received: from rainer.bnt.com [12.4.218.18] by foroosh.com with ESMTP
> (SMTPD32-8.04) id A2D2B700C2; Thu, 20 Nov 2003 17:40:18 -0500
> Received: from adsl-068-016-167-035.sip.jan.bellsouth.net
> (adsl-068-016-167-035.sip.jan.bellsouth.net [68.16.167.35])
> by rainer.bnt.com (8.12.8p2/8.12.8) with SMTP id hAKMiesG012219
> for <[EMAIL PROTECTED]>; Thu, 20 Nov 2003 17:44:43 -0500 (EST)
> (envelope-from [EMAIL PROTECTED])
> Received: from [134.150.44.174] by
> adsl-068-016-167-035.sip.jan.bellsouth.net id 08pT0M675jj3; Thu, 20
> Nov 2003 23:38:43 +0100 Message-ID: <[EMAIL PROTECTED]> From:
> "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> Reply-To: "[EMAIL PROTECTED]"
> <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: eBay Fraud
> Verification Process Date: Thu, 20 Nov 2003 23:38:43 +0100 X-Mailer:
> Microsoft Outlook, Build 10.0.2616 MIME-Version: 1.0 Content-Type:
> multipart/alternative;
> boundary="E5BEC_9EF7B6C21F_C4D68"
> X-Priority: 3
> X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED]
> X-RBL-Warning: IPNOTINMX:
> X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail
> detected. X-RBL-Warning: FILTER-BODYURL: Message failed FILTER-BODYURL
> test (158) X-RBL-Warning: FILTER-BODY-GIBBERISH: Message failed
> FILTER-BODY-GIBBERISH test (110) X-RBL-Warning:
> FILTER-BODY-ANTIGIBBERISH: Message failed FILTER-BODY-ANTIGIBBERISH
> test (73) X-RBL-Warning: COUNTRY: Message failed COUNTRY test (36)
> X-Declude-Sender: [EMAIL PROTECTED] [68.16.167.35] X-Declude-Spoolname:
> D42d200b700c29886.SMD X-Note: This E-mail was scanned & filtered by
> Declude [1.76i26] for SPAM & virus. X-Weight: 10 X-Note: Sent from
> Reverse DNS: adsl-068-016-167-035.sip.jan.bellsouth.net X-Hello:
> adsl-068-016-167-035.sip.jan.bellsouth.net X-Spam-Tests-Failed:
> NOABUSE, IPNOTINMX, NOLEGITCONTENT, FILTER-BODYURL,
> FILTER-BODY-GIBBERISH, FILTER-BODY-ANTIGIBBERISH, COUNTRY X-Note:
> Recipient(s): [EMAIL PROTECTED] X-Country-Chain: CANADA->UNITED
> STATES->destination X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL:
> 360625165 ============== <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0
> Transitional//EN">
>
> <html>
> <head>
> <title>Untitled</title>
> </head>
>
> <body><BR>
> <DIV id=message>
> <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0 ?>
>
> <TR>
> <TD>
> <STYLE>#message {
> FONT-FAMILY: arial
> }
> </STYLE>
> <XBODY>
> <DIV>
> <DIV></DIV>
> <TABLE cellSpacing=0 cellPadding=0 width=600 border=0>
>
> <TR>
> <TD width=150><A href="http://www.ebay.com/";
> target=_blank><IMG
> height=80 alt="eBay logo" hspace=0
> src="http://pics.ebay.com/aw/pics/homepage/v2/logo_171x102
> .gif" width=173 border=0></A> </TD>
> <TD vAlign=top align=right width=450><MAP
> name=home_myebay_map_hasJS><AREA shape=RECT
> target=_blank
> alt=Home
> coords=209,0,256,15
> href="http://pages.ebay.com/index.html";
> <http://pages.ebay.com/index.html> ><AREA
> shape=RECT target=_blank alt="My eBay"
> coords=257,0,318,15
>
> href="http://cgi1.ebay.com/aw-cgi/eBayISAPI.dll?MyEbayLo
> gin"
> <http://cgi1.ebay.com/aw-cgi/eBayISAPI.dll?MyEbayLogin> ><AREA
> shape=RECT target=_blank alt="Site Map"
> coords=319,0,383,15
> href="http://pages.ebay.com/sitemap.html";
> <http://pages.ebay.com/sitemap.html> ><AREA shape=RECT
> target=_blank alt="Sign In/Out" coords=384,0,447,15
> href="http://cgi3.ebay.com/aw-cgi/eBayISAPI.dll?SignIn";
> <http://cgi3.ebay.com/aw-cgi/eBayISAPI.dll?SignIn> ></MAP><BR
> clear=all></TD></TR></TABLE>
> <P align=left>Dear eBay user, <BR>As part of our continuing
> commitment
> to
> protect your account and to reduce the instance of fraud on our
> website,
> we are undertaking a period review of our member accounts.
> <BR>You are
>
> requested to visit our site by following the link given below
> <BR><A
>
> href="http://www.cgi5-update.com/ebay-verify-account-57435-5645-3765/d
> irDllS
> Sl856-4756-JkkLEbay-547864/newUseBay485-5754-575Hq35-56-SSL/Verify.htm
> "
>
> target=_blank>http://www.ebay.com/aw-cgi/eBayISAPI.dll?verification/%?
> 708808 0019</A></
> P>
> <A
> href="http://cgi3.ebay.com:aw-cgieBayISAPI.dllSignInRegisterEnte
> rInfo
> <http://cgi3.ebay.com:aw-cgieBayISAPI.dllSignInRegisterEnterInfo&s
> iteid= [EMAIL PROTECTED]/cgi_39ny5bay/>
> &[EMAIL PROTECTED]/cgi_39ny5bay/"
> target=_blank></A>
> <P align=left>Please fill in the required information. <BR>This
> is required for us to continue to offer you a safe and risk free
> environment
> to run your auctions, and maintain the eBay Experience.
> <BR>Thank you <BR>Accounts Management </P> <P align=left>As
> outlined in our User Agreement, eBay will
> periodically
> send you information about site changes and enhancements. Visit
> our Privacy Policy and <A
>
> href="http://pages.ebay.com/help/community/png-user.html?ssPageName=AD
> ME:X:E OA:US:24"
> target=_blank>User Agreement</A> if you have any questions. </P>
> <P align=left>Copyright 2002 eBay Inc. All Rights Reserved.
> <BR>Designated
> trademarks and brands are the property of their respective
> owners. <BR>eBay and the eBay logo are trademarks of eBay
> Inc</P> <P align=center><CURSIVE
> src="ebay/ss-secure.js"></SCRIPT></P> <TABLE cellSpacing=0
> cellPadding=0 width=600 border=0>
>
> <TR>
> <TD colSpan=2><BR>
> <HR align=center width=500>
>
> <P><BR></P>
> <DIV align=center><FONT size=2><A
> href="http://www2.ebay.com/aw/marketing.shtml";
> target=_blank>Announcements</A>
> | <A
> href="http://cgi4.ebay.com/aw-cgi/eBayISAPI.dll?RegisterSh
> ow" target=_blank>Register</A> | <A
> href="http://pages.ebay.com/help/community/index.html";
> target=_blank>SafeHarbor (Rules &
> Safety)</A> | <A
> href="http://pages.ebay.com/services/forum/feedback.html";
> target=_blank>Feedback
> Forum</A> | <A
> href="http://pages.ebay.com/community/aboutebay/index.html
> " target=_blank>About eBay</A></FONT></DIV>
> <P><BR></P></TD></TR>
> <TR>
> <TD vAlign=top align=left width=450 height=31><FONT
> size=2>Copyright
> C 1995-2001 eBay Inc. All Rights Reserved. <BR>Designated
> trademarks
> and brands are the property of their respective owners.
> <BR>Use
> of
> this Web site constitutes acceptance of the eBay <A
> href="http://pages.ebay.com/help/community/png-user.html";
> target=_blank>User</A></FONT></T
> R></TD></TR></TABLE></DIV></TD></TR></TABLE></DIV>
>
>
>
> </body>
> </html>
> <!-- text below generated by server. PLEASE REMOVE --><!--
> Counter/Statistics data collection code --><script
> language="JavaScript"
> src="http://domainpending.com/js_source/geov2.js";
> <http://domainpending.com/js_source/geov2.js> ></script><script
> language="javascript">geovisit();</script><noscript><img
> src="http://visit.webhosting.yahoo.com/visit.gif?us1062015821";
> alt="setstats" border="0" width="1" height="1"></noscript> <IMG
> SRC="http://geo.yahoo.com/serv?s=76001405
> <http://geo.yahoo.com/serv?s=76001405&t=1062015821> &t=1062015821"
> ALT=1 WIDTH=1 HEIGHT=1>
>
>
>
>
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
![http://visit.webhosting.yahoo.com/visit.gif?us1062015821"](http://visit.webhosting.yahoo.com/visit.gif?us1062015821"){kind=link}