I know in the past it was discussion about legit base64 usage in mail.
I found what seems to be a legit e-mail where the mail client is
base64 encoding the message.
Received: from mail.XXXXXX.com [12.28.XX.XXX] by imail.fament.com with ESMTP
(SMTPD32-7.13) id A4EE26B0366; Wed, 15 Jan 2003 09:57:34 -0600
Received: from [10.1.102.202] by mail.XXXXXX.XXX
with SMTP (QuickMail Pro Server for Mac 3.0.1); 15-Jan-2003 09:57:19 -0600
Date: 15 Jan 2003 09:45:15 -0600
Message-ID: <[EMAIL PROTECTED]>
From: XXXXX XXXXX <[EMAIL PROTECTED]>
Subject: Fwd:
To: XXXXX XXXXXX <[EMAIL PROTECTED]>
X-Mailer: QuickMail Pro 3.0 (Mac)
X-Priority: 3
MIME-Version: 1.0
Reply-To: XXXXX XXXXX <[EMAIL PROTECTED]>
Content-Type: multipart/mixed; boundary="====50524848535754575554===1"
X-RBL-Warning: BASE64: A binary encoded text or HTML section was found in this E-mail.
X-RBL-Warning: WEIGHT10: Weight of 20 reaches or exceeds the limit of 10.
X-Tests-Failed: REVDNS, BASE64, WEIGHT10, WEIGHT20.
X-Note: Total spam weight of this E-mail is 20.
--====50524848535754575554===1
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="US-Ascii"
regular text message (seems to be a chainmail)
MSN 8: advanced junk mail protection and 2 months FREE* <http://g.msn.com/=
8HMNEN/2017>
--====50524848535754575554===1
Content-Transfer-Encoding: base64
Content-Type: text/html; name="Text00.htm";
x-mac-creator=556DC536;
x-mac-type=54455854
PGh0bWw+PGRpdiBzdHlsZT0nYmFja2dyb3VuZC1jb2xvcjonPjxESVY+DQo8UD48QlI+PFVuZGlz
Y2xvc2VkLVJlY2lwaWVudD
rest of the base64 is cut off.
Best regards,
Eje Gustafsson mailto:[EMAIL PROTECTED]
---
The Family Entertainment Network http://www.fament.com
Phone : 620-231-7777 Fax : 620-231-4066
eBay UserID : macahan
- Your Full Time Professionals -
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
