Subject: [Fwd: ****SPAM**** SOFTWARE UPGRADE]

From: Brian Ferguson <[email-masked]>
Date: Fri, 24 Jun 2005 11:59:14 -0700

-------- Original Message --------
Subject: ****SPAM**** SOFTWARE UPGRADE
Date: Fri, 24 Jun 2005 14:52:09 -0500
From: LaSalle Bank <[email-masked]>
Reply-To: LaSalle Bank <[email-masked]>
To: [email-masked]

Spam detection software, running on the system 
"seagull.ee.washington.edu", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
[email-masked] for details.

Content preview:  Dear LaSalle Bank customer Dear client of LaSalle Bank,
    Technical services of the LaSalle Bank are carrying out a planned
   software upgrade. We earnestly ask you to visit the following link to
   start the procedure of confirmation on customers data. [...]

Content analysis details:   (19.9 points, 5.0 required)

  pts rule name              description
---- ---------------------- 
--------------------------------------------------
  0.1 X_PRIORITY_HIGH        Sent with 'X-Priority' set to high
  4.2 MIME_BOUND_DD_DIGITS   Spam tool pattern in MIME boundary
  0.3 X_MSMAIL_PRIORITY_HIGH Sent with 'X-Msmail-Priority' set to high
  3.2 MSGID_SPAM_CAPS        Spam tool Message-Id: (caps variant)
  0.1 FORGED_RCVD_HELO       Received: contains a forged HELO
  0.4 SUBJ_ALL_CAPS          Subject is all capitals
  1.5 RCVD_NUMERIC_HELO      Received: contains an IP address used for HELO
  0.0 HTML_60_70             BODY: Message is 60% to 70% HTML
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.2 HTML_TAG_EXIST_TBODY   BODY: HTML has "tbody" tag
  1.5 MPART_ALT_DIFF         BODY: HTML and text parts are different
  1.2 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  1.8 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see 
<http://www.spamcop.net/bl.shtml?62.193.212.129>]
  1.4 DNS_FROM_RFC_POST      RBL: Envelope sender in 
postmaster.rfc-ignorant.org
  0.0 MIME_HTML_ONLY_MULTI   Multipart message only has text/html MIME parts
  0.0 MISSING_MIMEOLE        Message has X-MSMail-Priority, but no X-MimeOLE
  0.1 FORGED_MUA_EUDORA      Forged mail pretending to be from Eudora
  4.0 AWL                    AWL: From: address is in the auto white-list

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

Subject: SOFTWARE UPGRADE
From: "LaSalle Bank" <[email-masked]>
To: [email-masked]
Date: Fri, 24 Jun 2005 14:52:09 -0500

Dear client of LaSalle Bank,

Technical services of the
LaSalle Bank are carrying out a planned software upgrade. We earnestly ask you
to visit the following link to start the procedure of confirmation on customers
data.

To get started, please click
the link below:

https://onlinebanking.lasallebank.com/efs/servlet/efs/login2.jsp?shortname=lasalle&longname=LaSalle+Online

This instruction has been sent
to all bank customers and is obligatory to fallow.

Thank you,

LaSalle Bank Customers Support Service.