[Dshield] New email spam

Barton L. Phillips barton at bartonphillips.com
Sat Dec 20 18:04:59 GMT 2003


I have been getting 15 to 20 of these emails a day. They all seem to 
have bad links and the plain text and part of the html has a bunch of 
random words. I thought maybe this was an attempt to confuse the Bayes 
filters. Any thoughts?

EMAIL TEXT ****

Return-Path: <mvnofdionwdc at cnnic.net.cn>
Received: from 68.122.243.210 ([219.241.52.225])
	by bartonphillips.com (8.12.8/8.12.8) with SMTP id hBK9kl3J004226;
	Sat, 20 Dec 2003 01:46:50 -0800
Received: from [219.241.52.225] by rx359.netIP with HTTP;
	Fri, 19 Dec 2003 22:41:16 +0100
From: "Ruben" <mvnofdionwdc at cnnic.net.cn>
To: swam-list at applitec.com
Cc: swam at applitec.com, swamfred at applitec.com
Subject: Re: MBAFLO, woman a sidelong
Mime-Version: 1.0
X-Mailer: mPOP Web-Mail 2.19
X-Originating-IP: [rx359.netIP]
Date: Fri, 19 Dec 2003 18:40:16 -0300
Reply-To: "Miller Ruben" <mvnofdionwdc at cnnic.net.cn>
Content-Type: multipart/alternative;
	boundary="--ALT--QSDK37353112623699"
Message-Id: <LTGVYVE-0007048535755 at cycle>
X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on 
	bartonphillips.com
X-Spam-Level: **
X-Spam-Status: No, hits=2.2 required=5.0 tests=HTML_20_30,HTML_IMAGE_ONLY_06,
	HTML_MESSAGE autolearn=no version=2.61

----ALT--QSDK37353112623699
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit

actinometer methionine diphtheria resumption leggy handy chant kristin 
cramp copter distortion altruism bordeaux madden ran variate invaluable lascar 
annulus tombstone arnold base societal chive 

----ALT--QSDK37353112623699
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 8bit

<HTML><HEAD>
<BODY>
<p>Fr</glue>ee Ca</byline>ble+ TV</p>
<a href="http://www.530000x.net/cable/">
<img border="0" src="http://www.530000x.com/M5.jpg"></a>
bangle attribution gift conley floodlit ankle chartroom hereinabove botch flathead crispin ethnic <BR>
checklist technion garry cravat diabetic miser protrusion seaside swindle aorta carbonyl luge abernathy saga perseverance catlike <BR>

</BODY>
</HTML>

END EMAIL TEXT *******


----ALT--QSDK37353112623699--


-- 
----------------
Barton L. Phillips
Applied Technology Resources, Inc.
Tel: (818)652-9850
Web: http://www.applitec.com





More information about the list mailing list