Hosting Provided By

Re: Bored girls spams

From: Anders Norrbring <lists(at)norrbring.se>
Date: Wed Jul 25 2007 - 15:14:46 EDT

arni skrev:
> Anders Norrbring schrieb:

>> arni skrev:
>>> Igor Chudov schrieb:
>>>> I am receiving a lot of spams from "bored girls", that ask me to email
>>>> to some .info email addresses. Just curious what these spams are
>>>> promoting, what is the scam behind them?
>>>>
>>>> i
>>>>
>>>>   
>>> probably to verify the addresses they tried because then they gain a 
>>> lot of value and can be sold for much more
>>
>> Even more interesting would be, how can we tag them higher in a "safe" 
>> way so it won't cause false hits?
>>
>> Anders.
>>

> this is the lowest scoring mail of this type i could find:
>
> X-Spam-Report: * 5.5 BAYES_99 BODY: Bayesian spam probability is 99
> to 100%
> * [score: 1.0000]
> * 0.0 BOTNET_BADDNS Relay doesn't have full circle DNS
> * [botnet_baddns,ip=190.8.157.162,rdns=helo=]
> * 3.0 BOTNET Relay might be a spambot or virusbot
> * [botnet0.7,ip=190.8.157.162,hostname=helo=,baddns]
> * 0.0 DKIM_POLICY_SIGNSOME Domain Keys Identified Mail: policy says
> domain
> * signs some mails
> * 0.0 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
> * 1.5 IXHASH BODY: This mail has been classified as spam @ iX
> Magazine,
> * Germany
> * 1.5 LOGINHASH2 BODY: mail has been classified as spam @ unknown
> company,
> * Germany
> * 1.5 LOGINHASH1 BODY: mail has been classified as spam @
> LogIn&Solutions
>
> arni
> * AG, Germany
>
>

Hmm.. I should start using botnet.. :) Received on Wed Jul 25 15:15:31 2007

This message: [ Message body ]
Next message: Alex Aminoff: "how to turn off spamassassin entirely on a per-user basis"
Previous message: arni: "Re: Bored girls spams"
In reply to: arni: "Re: Bored girls spams"
Next in thread: SM: "Re: Bored girls spams"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Mon Oct 22 2007 - 04:22:23 EDT