[!CrackMonkey!] Nigerian X-Mailer headers

[Don Marti]

begin Monkey Master and Prince Regent of San Francisco quotation of Mon, Aug 05, 2002 at 12:54:46AM -0700:

> header   NIGERIAN_GAR X-Mailer =~ /Microsoft Outlook Express 5.00.2919.6900 DM$/
> describe NIGERIAN_GAR NIGERIAN_SCAM: X-Mailer unique to scam mailings
> score    NIGERIAN_GAR 3

Now hold on just a minute before you burn that witch -- have you
ever received any legit mail from a Nigerian Microsoft customer?

Maybe that's just a localized build.

-- 
Don Marti                                          
http://zgp.org/~dmarti                       Help spread accurate information 
dmarti at zgp.org                      about Xenu and the Church of Scientology.
KG6INA           <a href="http://xenu.net/">Scientology</a> on your web site.