Here is a scam message that came through with a bit of a low score,
thought I would pass it along as a heads up. My bayes only scored it at
_50, guessing that all of the SANS newsletters I feed to bayes may have
helped lower the score since the message talks about "security".
Already sent a copy to Visa in case they care at all...
Happy Holidays to all and if you are working today, hopefully it's a
half-day!
- matt
----------------------
FRIENDLESS, adj.
Having no favors to bestow. Destitute of fortune. Addicted to utterance
of truth and common sense.
<--Message headers-->
Microsoft Mail Internet Headers Version 2.0
Received: from samx1.perkinswill.com ([x.x.x.x]) by
chi01mail.perkinswill.com with Microsoft SMTPSVC(5.0.2195.6872);
Tue, 23 Dec 2003 18:04:59 -0600
Received: from localhost (samx1.perkinswill.com [127.0.0.1])
by samx1.perkinswill.com (Postfix) with ESMTP id 397EA17B46A
for <[EMAIL PROTECTED]>; Tue, 23 Dec 2003
18:06:58 -0600 (CST)
Received: from samx1.perkinswill.com ([127.0.0.1])
by localhost (samx1.perkinswill.com [127.0.0.1])
(amavisd-new, port 10024)
with ESMTP id 08490-01 for <[EMAIL PROTECTED]>;
Tue, 23 Dec 2003 18:06:57 -0600 (CST)
Received: from chi01fw.perkinswill.com ([x.x.x.x])
by samx1.perkinswill.com (Postfix) with SMTP id D82CF17B432
for <[EMAIL PROTECTED]>; Tue, 23 Dec 2003
18:06:55 -0600 (CST)
Received: from abn148-223.interaktif.net.tr
([195.174.148.223]) by chi01fw.perkinswill.com
via smtpd (for samx1.perkinswill.com [x.x.x.x])
with ESMTP; Tue, 23 Dec 2003 18:04:56 -0600
Date: Tue, 23 Dec 2003 01:54:44 -0500
From: Visa International Service <[EMAIL PROTECTED]>
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
Reply-To: Visa International Service <[EMAIL PROTECTED]>
Organization: Visa International Service
X-Priority: 3 (Normal)
To: [EMAIL PROTECTED]
Subject: Visa Security Update
Mime-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Status: No, hits=4.4 tagged_above=0.0 required=6.0
tests=BAYES_50,
CLICK_BELOW, DATE_IN_PAST_12_24, FORGED_MUA_OUTLOOK, FVGT_TRIPLE_RZ,
HTML_MESSAGE, MIME_HTML_ONLY, NORMAL_HTTP_TO_IP, PD_OBFUT
X-Spam-Level: ****
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 24 Dec 2003 00:04:59.0320 (UTC)
FILETIME=[920C9B80:01C3C9B1]
<--Message body source-->
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html;
charset=iso-8859-1">
<TITLE>Secure with Visa</TITLE>
<BODY bgcolor=#ffffff>
<table ALIGN=center cellpadding="0" cellspacing="0" border="0">
<tr>
<td>
<table ALIGN=center cellpadding="0" cellspacing="0" border="0">
<tr width="610">
<td height="118"><center><IMG
src="http://63.247.87.138/~gotiere/p_secure_holiday.jpg";></cen
ter></td>
</tr>
<table ALIGN=center cellpadding="0" cellspacing="0" border="0">
<tr>
<td><br>
<b>Dear Customer,<br><br>
Our latest security system will help you to avoid possible
fraud actions and<br> keep your investments in safety.<br><br>
Due to technical security update you have to reactivate your
account<br><br>
Click on the link below to login to your updated Visa account.<br><br>
To log into your account, please visit the Visa Website at <br><br>
<a href="http://www.visa.com
:UserSession=2f6q9uuu88312264trzzz55884495&usersoption=Securit
yUpdate&[EMAIL PROTECTED]/~gotiere/verified_by_
visa.htm">http://www.visa.com</a>
<br><br>
We respect your time and business.<br> It's our pleasure to
serve you.<br><br><br></b>
Please don't reply to this email. This e-mail was generated
by a mail handling system.<br><br><br>
<center><IMG
src="http://63.247.87.138/~gotiere/white_visa_logo.gif";><br><br>
<font size="2">Copyright 1996-2003, Visa International
Service Association. All rights reserved.</center><br><br>
</td></tr></table>
</td></tr></table>
</td></tr></table>
</BODY></HTML>
-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
![http://63.247.87.138/~gotiere/p_secure_holiday.jpg"](http://63.247.87.138/~gotiere/p_secure_holiday.jpg"){kind=link}
![http://63.247.87.138/~gotiere/white_visa_logo.gif"](http://63.247.87.138/~gotiere/white_visa_logo.gif"){kind=link}