Web Hosting Forum | Lunarpages


*
Welcome, Guest. Please login or register.
Did you miss your activation email?



Login with username, password and session length
May 22, 2012, 05:33:03 AM

Pages: [1]   Go Down
  Print  
Author Topic: About as bad as it gets  (Read 491 times)
kwdavids
Galactic Royalty
*****
Offline Offline

Posts: 324



WWW
« on: February 12, 2004, 03:47:57 PM »

This spam is about as bad as it get vis-a-vis Spam Assassin scoring:

Code:
Return-path: <qshq002@orion.lunarpages.com>
Envelope-to: ...
Delivery-date: Thu, 12 Feb 2004 04:03:29 -0800
Received: from qshq002 by orion.lunarpages.com with local-bsmtp (Exim 4.24)
id 1ArFYx-0006rv-Uo
for ...; Thu, 12 Feb 2004 04:03:29 -0800
Received: from [148.243.239.182] (helo=na-148-243-239-182.na.avantel.net.mx)
by orion.lunarpages.com with smtp (Exim 4.24)
id 1ArFYx-0006rT-74
for ...; Thu, 12 Feb 2004 04:03:23 -0800
Received: from [166.151.160.247] by na-148-243-239-182.na.avantel.net.mx id <6447893-57922>; Thu, 12 Feb 2004 08:50:13 -0300
Message-ID: <5$7-$as$u49$giv$t9z-x7ft$l$-1p@ey8uhigkls>
From: "Lourdes Salazar" <ad1qnbim@nautimex.se>
Reply-To: "Lourdes Salazar" <ad1qnbim@nautimex.se>
To: ...
Subject: FOLLOW THE SIMPLE INSTRUCTIONS BELOW eh pxlawiiniof  w
Date: Thu, 12 Feb 2004 03:50:13 -0500
X-Mailer: The Bat! (v1.52f) Business
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=_NextPart_2rfkindysadvnqw3nerasdf"
X-Priority: 3
X-MSMail-Priority: Normal
X-Spam-Flag: YES
X-Spam-Level: **************************************************
X-Spam-Report:
*  4.4 DATE_SPAMWARE_Y2K Date header uses unusual Y2K formatting
*  0.8 DONT_DELETE BODY: Don't delete me!  Nooooo!!!!
*  0.5 ONE_TIME BODY: One Time Rip Off
*  2.8 UCE_MAIL_ACT BODY: Mentions Spam Law "UCE-Mail Act"
*  2.2 MLM BODY: Multi Level Marketing mentioned
*  2.8 WALAA BODY: Illiterate spammer cannot spell 'voila'
*  2.8 INITIAL_INVEST BODY: Requires Initial Investment
*  0.7 REMOVAL_INSTRUCTIONS BODY: Gives instructions for removal from list
*  1.1 EARN_MONEY BODY: Message talks about earning money
*  2.8 JODY BODY: Contains "My wife, Jody" testimonial
*  2.8 COPY_ACCURATELY BODY: Common pyramid scheme phrase (1)
*  2.1 FINANCIAL BODY: Financial Freedom
*  2.8 INVALUABLE_MARKETING BODY: Invaluable marketing information
*  1.9 AS_SEEN_ON BODY: As seen on national TV!
*  0.9 BANG_MONEY BODY: Talks about money with an exclamation!
*  2.8 ORDER_REPORT BODY: Order a report from someone
*  0.7 RISK_FREE BODY: Risk free.  Suuurreeee....
*  2.8 HR_3113 BODY: Mentions Spam law "HR 3113"
*  0.0 LINES_OF_YELLING BODY: A WHOLE LINE OF YELLING DETECTED
*  0.1 LINES_OF_YELLING_2 BODY: 2 WHOLE LINES OF YELLING DETECTED
*  1.1 RCVD_IN_SORBS_MISC RBL: SORBS: sender is open proxy server
*      [148.243.239.182 listed in dnsbl.sorbs.net]
*  0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
*      [148.243.239.182 listed in dnsbl.sorbs.net]
*  1.1 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
*      [<http://dsbl.org/listing?ip=148.243.239.182>]
*  2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
*      [Blocked - see <http://www.spamcop.net/bl.shtml?148.243.239.182>]
*  1.1 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
*      [148.243.239.182 listed in dnsbl.njabl.org]
*  4.3 RCVD_IN_OPM RBL: Received via a relay in opm.blitzed.org
*      [148.243.239.182 listed in opm.blitzed.org]
*  4.3 RCVD_IN_OPM_SOCKS RBL: OPM: sender is open SOCKS proxy
*      [148.243.239.182 listed in opm.blitzed.org]
*  0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
*      [148.243.239.182 listed in dnsbl.njabl.org]
*  3.2 FORGED_MUA_THEBAT Mail pretending to be from The Bat! (mid)
*  1.2 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
*  0.1 MISSING_OUTLOOK_NAME Message looks like Outlook, but isn't
*  4.3 FORGED_MUA_THEBAT_BOUN Mail pretending to be from The Bat! (boundary)
*  0.0 CASHCASHCASH Contains at least 3 dollar signs in a row
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
orion.lunarpages.com
X-Spam-Status: Yes, hits=60.9 required=5.8 tests=AS_SEEN_ON,BANG_MONEY,
CASHCASHCASH,COPY_ACCURATELY,DATE_SPAMWARE_Y2K,DONT_DELETE,EARN_MONEY,
FINANCIAL,FORGED_MUA_THEBAT,FORGED_MUA_THEBAT_BOUN,HR_3113,
INITIAL_INVEST,INVALUABLE_MARKETING,JODY,LINES_OF_YELLING,
LINES_OF_YELLING_2,MISSING_MIMEOLE,MISSING_OUTLOOK_NAME,MLM,ONE_TIME,
ORDER_REPORT,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DSBL,RCVD_IN_NJABL,
RCVD_IN_NJABL_PROXY,RCVD_IN_OPM,RCVD_IN_OPM_SOCKS,RCVD_IN_SORBS,
RCVD_IN_SORBS_MISC,REMOVAL_INSTRUCTIONS,RISK_FREE,UCE_MAIL_ACT,WALAA
autolearn=no version=2.60
Logged

Kevin
Pages: [1]   Go Up
  Print  
 
Jump to: