Interesting thought.

John T
eServices For You

> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Matt
> Sent: Sunday, October 09, 2005 5:45 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] chronic junkmail -- "new account"
> 
> I don't know whether or not I should be proud of that accomplishment :-/
> 
> Matt
> 
> 
> 
> Nick Hayer wrote:
> 
> > You are always on top of this stuff Matt!
> > -Nick
> >
> > Matt wrote:
> >
> >> This is spam from Scott Ricter, Spamhaus's #1 listed spammer.  This
> >> particular block is 65.175.2.0/24.  Surprisingly it isn't widely
> >> listed, but I did find it in MAILPOLICE, and if you have URIBL
> >> support, it is also in SURBL presently.
> >>
> >> Matt
> >>
> >>
> >>
> >> IMail Admin wrote:
> >>
> >>> Hi,
> >>>
> >>> For the last few weeks, we've seen an explotion of spam mail with
> >>> the from line as "New Account".  The subject and text vary.  Some
> >>> messages get caught by our threshold and dumped, but many do not.
> >>> Sniffer seems to spot these pretty effectively, but not always and
> >>> we don't take action on just one test, even one as good as Sniffer.
> >>> Any suggestions?
> >>>
> >>> Ben
> >>> BC Web
> >>>
> >>> Here is the source of one such message:
> >>>
> >>> Received: from 52.opnletters.com [65.175.2.52] by bcw4.bcwebhost.net
> >>> with ESMTP
> >>>  (SMTPD32-7.15) id A25813CE00F4; Sun, 09 Oct 2005 14:57:44 -0700
> >>> Received: (from [EMAIL PROTECTED])
> >>> by 52.opnletters.com (8.8.8/8.8.8) id OAA44895;
> >>> Sun, 9 Oct 2005 14:45:45 -0700 (PDT)
> >>> Date: Sun, 9 Oct 2005 14:59:51 -0700 (PDT)
> >>> Message-Id: <[EMAIL PROTECTED]>
> >>> From: New Account <[EMAIL PROTECTED]>
> >>> To: [EMAIL PROTECTED]
> >>> Subject: Get A Free Ringtone [EMAIL PROTECTED]
> >>> MIME-Version: 1.0
> >>> Content-Type: text/plain; charset="iso-8859-1"
> >>> X-RBL-Warning: SNIFFER: Message failed SNIFFER: 60.
> >>> X-Declude-Sender:
> >>> [EMAIL PROTECTED]
> >>> [65.175.2.52]
> >>> X-Note: This E-mail was scanned by Declude JunkMail
> >>> (www.declude.com) for spam.
> >>> X-Spam-Tests-Failed: SNIFFER [4]
> >>> X-Note: This E-mail was sent from 52.opnletters.com ([65.175.2.52]).
> >>> X-RCPT-TO: <[EMAIL PROTECTED]>
> >>> Status: U
> >>> X-UIDL: 428897057
> >>>
> >>> Get the Newest Ring Tones!
> >>>
> >>> Download Top Hits to your Cell Phone!
> >>> http://52.opnletters.com/m/l?3xp-e38u-1-aox4-f417
> >>>
> >>> <a href="http://52.opnletters.com/m/l?3xp-e38u-2-aox4-f417";>Get the
> >>> latest Ringtones, wallpapers, Screensavers, and more! Top ring tones
> >>> include, "Wait" by Ying Yang Twins. First download is FREE!</a>
> >>>
> >>>
> >>>
> >>> You need to visit this link.  Take your Pick!
> >>> http://52.opnletters.com/m/l?3xp-e38u-3-aox4-f417
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> To unsubscribe, from this Advertisement go to:
> >>> http://52.opnletters.com/remove?r.NewAccounts.0-6037852-
> 730b.bcwebhost.net.-ben?r
> >>>
> >>>
> >>> or, send a blank message to:
> >>>
mailto:[EMAIL PROTECTED]
> >>>
> >>>
> >>> New Account List
> >>> 1333 W 120th Ave. Suite 101
> >>> Westminster, Colorado 80234
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> ---
> >>> This E-mail came from the Declude.JunkMail mailing list.  To
> >>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >>> type "unsubscribe Declude.JunkMail".  The archives can be found
> >>> at http://www.mail-archive.com.
> >>>
> >>>
> >> ---
> >> This E-mail came from the Declude.JunkMail mailing list.  To
> >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >> type "unsubscribe Declude.JunkMail".  The archives can be found
> >> at http://www.mail-archive.com.
> >>
> >>
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> >
> >
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to