('binary' encoding is not supported, stored as-is)
This incoming message has been identified by the UCD central filters as
possible spam. This attachment is provided so that you can review the
reasons the message was tagged, and to assist with additional filtering
if you wish to supplement the central filters with your own local rules.
If you have further questions please email ithelp@ucdavis.edu for
assistance.
Content analysis details: (11.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.1 RCVD_FAKE_HELO_DOTCOM Received contains a faked HELO hostname
0.1 EXCUSE_16 BODY: I wonder how many emails they sent in error
0.6 TONER BODY: Contains "Toner Cartridge"
1.6 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 HTML_80_90 BODY: Message is 80% to 90% HTML
0.6 HTML_TABLE_THICK_BORD BODY: HTML table has thick border
0.1 HTML_TAG_EXISTS_TBODY BODY: HTML has "tbody" tag
0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red
0.1 HTML_FONTCOLOR_GREEN BODY: HTML font color is green
1.6 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.2 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here"
0.8 MAILTO_SUBJ_REMOVE BODY: mailto URI includes removal text
0.9 MAILTO_TO_REMOVE URI: Includes a 'remove' email address
0.5 MAILTO_TO_SPAM_ADDR URI: Includes a link to a likely spammer email
1.9 FAKE_HELO_YAHOO Host HELO did not match rDNS: yahoo.com
0.4 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.1 CLICK_BELOW Asks you to click below
This archive was generated by hypermail 2b29 : Sun Apr 18 2004 - 03:36:45 PDT