This paypal phish got through without being detected by the spamdomains. Can anyone
explain it?
Spamdomains line:
@paypal.com .paypal.
Headers:
Received: from imail.Farmprogress.com
by farmprogress.com; Tue, 13 Apr 2004 18:45:39 -0500
Received: from web.numberoneserver.com [66.36.241.111] by imail.Farmprogress.com with
ESMTP
(SMTPD32-8.05) id AB986EFB0044; Tue, 13 Apr 2004 18:45:28 -0500
Received: (from [EMAIL PROTECTED])
by web.numberoneserver.com (8.11.6/8.11.6) id i3E00bo13908;
Tue, 13 Apr 2004 20:00:37 -0400
Date: Tue, 13 Apr 2004 20:00:37 -0400
Message-Id: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: [JSpamFilter-25]Notification of PayPal Limited Account Access
From: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
X-Mailer: MSOUTLOOK / 4.3.2
Content-type: text/html; charset=iso-8859-1
X-Declude-Sender: [EMAIL PROTECTED] [66.36.241.111]
X-Declude-Spoolname: D7b986efb00442884.SMD
X-Note: Spam tests: SNIFFER-OBFUSCATION, OBFUSCATION, COUNTRY-FILTER, WEIGHT20,
WEIGHT25, WEIGHT25COPY.
X-Note: Total spam weight of this e-mail is 27.
X-Note: Reverse DNS sls-cb9p8.dca2.superb.net .
Scott Fisher
Director of IT
Farm Progress Companies
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
