Kami, Would you care to share your " FILTER-BODYURL" filter? I'm interested in seeing what you filter on -
Thanks! -Nick Hayer From: "Kami Razvan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: [Declude.JunkMail] This one eBay fraud.. came right through.. Date sent: Thu, 20 Nov 2003 17:52:27 -0500 Organization: ClickandPledge.com Send reply to: [EMAIL PROTECTED] > Hi.. > This just came in.. definitely NOT eBay & not caught as SPAM.. filters > are in order. > > HEADER > ============= > Received: from rainer.bnt.com [12.4.218.18] by foroosh.com with ESMTP > (SMTPD32-8.04) id A2D2B700C2; Thu, 20 Nov 2003 17:40:18 -0500 > Received: from adsl-068-016-167-035.sip.jan.bellsouth.net > (adsl-068-016-167-035.sip.jan.bellsouth.net [68.16.167.35]) > by rainer.bnt.com (8.12.8p2/8.12.8) with SMTP id hAKMiesG012219 > for <[EMAIL PROTECTED]>; Thu, 20 Nov 2003 17:44:43 -0500 (EST) > (envelope-from [EMAIL PROTECTED]) > Received: from [134.150.44.174] by > adsl-068-016-167-035.sip.jan.bellsouth.net id 08pT0M675jj3; Thu, 20 > Nov 2003 23:38:43 +0100 Message-ID: <[EMAIL PROTECTED]> From: > "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> Reply-To: "[EMAIL PROTECTED]" > <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: eBay Fraud > Verification Process Date: Thu, 20 Nov 2003 23:38:43 +0100 X-Mailer: > Microsoft Outlook, Build 10.0.2616 MIME-Version: 1.0 Content-Type: > multipart/alternative; > boundary="E5BEC_9EF7B6C21F_C4D68" > X-Priority: 3 > X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] > X-RBL-Warning: IPNOTINMX: > X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail > detected. X-RBL-Warning: FILTER-BODYURL: Message failed FILTER-BODYURL > test (158) X-RBL-Warning: FILTER-BODY-GIBBERISH: Message failed > FILTER-BODY-GIBBERISH test (110) X-RBL-Warning: > FILTER-BODY-ANTIGIBBERISH: Message failed FILTER-BODY-ANTIGIBBERISH > test (73) X-RBL-Warning: COUNTRY: Message failed COUNTRY test (36) > X-Declude-Sender: [EMAIL PROTECTED] [68.16.167.35] X-Declude-Spoolname: > D42d200b700c29886.SMD X-Note: This E-mail was scanned & filtered by > Declude [1.76i26] for SPAM & virus. X-Weight: 10 X-Note: Sent from > Reverse DNS: adsl-068-016-167-035.sip.jan.bellsouth.net X-Hello: > adsl-068-016-167-035.sip.jan.bellsouth.net X-Spam-Tests-Failed: > NOABUSE, IPNOTINMX, NOLEGITCONTENT, FILTER-BODYURL, > FILTER-BODY-GIBBERISH, FILTER-BODY-ANTIGIBBERISH, COUNTRY X-Note: > Recipient(s): [EMAIL PROTECTED] X-Country-Chain: CANADA->UNITED > STATES->destination X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL: > 360625165 ============== <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 > Transitional//EN"> > > <html> > <head> > <title>Untitled</title> > </head> > > <body><BR> > <DIV id=message> > <TABLE cellSpacing=0 cellPadding=0 width="100%" border=0 ?> > > <TR> > <TD> > <STYLE>#message { > FONT-FAMILY: arial > } > </STYLE> > <XBODY> > <DIV> > <DIV></DIV> > <TABLE cellSpacing=0 cellPadding=0 width=600 border=0> > > <TR> > <TD width=150><A href="http://www.ebay.com/" > target=_blank><IMG > height=80 alt="eBay logo" hspace=0 > src="http://pics.ebay.com/aw/pics/homepage/v2/logo_171x102 > .gif" width=173 border=0></A> </TD> > <TD vAlign=top align=right width=450><MAP > name=home_myebay_map_hasJS><AREA shape=RECT > target=_blank > alt=Home > coords=209,0,256,15 > href="http://pages.ebay.com/index.html" > <http://pages.ebay.com/index.html> ><AREA > shape=RECT target=_blank alt="My eBay" > coords=257,0,318,15 > > href="http://cgi1.ebay.com/aw-cgi/eBayISAPI.dll?MyEbayLo > gin" > <http://cgi1.ebay.com/aw-cgi/eBayISAPI.dll?MyEbayLogin> ><AREA > shape=RECT target=_blank alt="Site Map" > coords=319,0,383,15 > href="http://pages.ebay.com/sitemap.html" > <http://pages.ebay.com/sitemap.html> ><AREA shape=RECT > target=_blank alt="Sign In/Out" coords=384,0,447,15 > href="http://cgi3.ebay.com/aw-cgi/eBayISAPI.dll?SignIn" > <http://cgi3.ebay.com/aw-cgi/eBayISAPI.dll?SignIn> ></MAP><BR > clear=all></TD></TR></TABLE> > <P align=left>Dear eBay user, <BR>As part of our continuing > commitment > to > protect your account and to reduce the instance of fraud on our > website, > we are undertaking a period review of our member accounts. > <BR>You are > > requested to visit our site by following the link given below > <BR><A > > href="http://www.cgi5-update.com/ebay-verify-account-57435-5645-3765/d > irDllS > Sl856-4756-JkkLEbay-547864/newUseBay485-5754-575Hq35-56-SSL/Verify.htm > " > > target=_blank>http://www.ebay.com/aw-cgi/eBayISAPI.dll?verification/%? > 708808 0019</A></ > P> > <A > href="http://cgi3.ebay.com:aw-cgieBayISAPI.dllSignInRegisterEnte > rInfo > <http://cgi3.ebay.com:aw-cgieBayISAPI.dllSignInRegisterEnterInfo&s > iteid= [EMAIL PROTECTED]/cgi_39ny5bay/> > &[EMAIL PROTECTED]/cgi_39ny5bay/" > target=_blank></A> > <P align=left>Please fill in the required information. <BR>This > is required for us to continue to offer you a safe and risk free > environment > to run your auctions, and maintain the eBay Experience. > <BR>Thank you <BR>Accounts Management </P> <P align=left>As > outlined in our User Agreement, eBay will > periodically > send you information about site changes and enhancements. Visit > our Privacy Policy and <A > > href="http://pages.ebay.com/help/community/png-user.html?ssPageName=AD > ME:X:E OA:US:24" > target=_blank>User Agreement</A> if you have any questions. </P> > <P align=left>Copyright 2002 eBay Inc. All Rights Reserved. > <BR>Designated > trademarks and brands are the property of their respective > owners. <BR>eBay and the eBay logo are trademarks of eBay > Inc</P> <P align=center><CURSIVE > src="ebay/ss-secure.js"></SCRIPT></P> <TABLE cellSpacing=0 > cellPadding=0 width=600 border=0> > > <TR> > <TD colSpan=2><BR> > <HR align=center width=500> > > <P><BR></P> > <DIV align=center><FONT size=2><A > href="http://www2.ebay.com/aw/marketing.shtml" > target=_blank>Announcements</A> > | <A > href="http://cgi4.ebay.com/aw-cgi/eBayISAPI.dll?RegisterSh > ow" target=_blank>Register</A> | <A > href="http://pages.ebay.com/help/community/index.html" > target=_blank>SafeHarbor (Rules & > Safety)</A> | <A > href="http://pages.ebay.com/services/forum/feedback.html" > target=_blank>Feedback > Forum</A> | <A > href="http://pages.ebay.com/community/aboutebay/index.html > " target=_blank>About eBay</A></FONT></DIV> > <P><BR></P></TD></TR> > <TR> > <TD vAlign=top align=left width=450 height=31><FONT > size=2>Copyright > C 1995-2001 eBay Inc. All Rights Reserved. <BR>Designated > trademarks > and brands are the property of their respective owners. > <BR>Use > of > this Web site constitutes acceptance of the eBay <A > href="http://pages.ebay.com/help/community/png-user.html" > target=_blank>User</A></FONT></T > R></TD></TR></TABLE></DIV></TD></TR></TABLE></DIV> > > > > </body> > </html> > <!-- text below generated by server. PLEASE REMOVE --><!-- > Counter/Statistics data collection code --><script > language="JavaScript" > src="http://domainpending.com/js_source/geov2.js" > <http://domainpending.com/js_source/geov2.js> ></script><script > language="javascript">geovisit();</script><noscript><img > src="http://visit.webhosting.yahoo.com/visit.gif?us1062015821" > alt="setstats" border="0" width="1" height="1"></noscript> <IMG > SRC="http://geo.yahoo.com/serv?s=76001405 > <http://geo.yahoo.com/serv?s=76001405&t=1062015821> &t=1062015821" > ALT=1 WIDTH=1 HEIGHT=1> > > > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.